last executing test programs:

4m46.726607772s ago: executing program 0 (id=7192):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000140)=0x36)

4m46.652355902s ago: executing program 0 (id=7194):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)

4m46.533585519s ago: executing program 0 (id=7197):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffe}, {0x7d}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d6, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@dev}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@multicast1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x10}, 0x0, 0x5}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

4m46.454060877s ago: executing program 0 (id=7201):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)

4m46.320767047s ago: executing program 0 (id=7206):
unshare(0x8040480)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x490}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0}, 0x38)

4m46.219336273s ago: executing program 0 (id=7211):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x1499b1475813f997)

4m46.114477917s ago: executing program 32 (id=7211):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x1499b1475813f997)

2m20.669960817s ago: executing program 2 (id=12228):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f00000005c0), 0x7, &(0x7f0000000500)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x4, 0x0, '\b-\x00'}, 0x10}}, 0x0)

2m20.592186657s ago: executing program 2 (id=12230):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)

2m20.591642802s ago: executing program 2 (id=12233):
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)

2m20.532270645s ago: executing program 2 (id=12235):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfbc, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "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"}}, 0xfca)

2m20.407599589s ago: executing program 2 (id=12244):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtfilter={0x44, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}]}}]}, 0x44}}, 0x4000)

2m20.297931271s ago: executing program 2 (id=12249):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x11, 0x6, @broadcast}, 0x10)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='veth0_to_bond\x00')
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x22020600)
unshare(0x2a020400)
sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRESOCT=r2, @ANYRESDEC=r3], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0xe8, 0x320, 0x440, 0x440, 0xe8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000000), {[{{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xff000000, 0xa348fa5a8cffd889], 'vcan0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x3, 0x6a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x644, 0x7f, @ipv6=@mcast2, 0x4e22}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x101, 0xffffffff, 0xffffffff, 0xffffffff], [0xffff7f, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', '\x00', {}, {0xff}, 0x3a, 0xf7, 0x4, 0x18}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, 0x1, 0x7fff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xa02529c283c5d53b, 0xff000000, 0xffffffff], [0xffffffff, 0xff0000ff, 0xffffff00], 'vlan0\x00', 'veth1\x00', {}, {0xff}, 0x84, 0x4, 0x1, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x5, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @private0, [0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 'nicvf0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x2c, 0xfb, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0x0, 0x1fffffffe], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {0xff}, 0x87, 0x9, 0x3, 0x44}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x2c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0xf)

2m5.301790005s ago: executing program 33 (id=12249):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x11, 0x6, @broadcast}, 0x10)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='veth0_to_bond\x00')
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x22020600)
unshare(0x2a020400)
sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRESOCT=r2, @ANYRESDEC=r3], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0xe8, 0x320, 0x440, 0x440, 0xe8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000000), {[{{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xff000000, 0xa348fa5a8cffd889], 'vcan0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x3, 0x6a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x644, 0x7f, @ipv6=@mcast2, 0x4e22}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x101, 0xffffffff, 0xffffffff, 0xffffffff], [0xffff7f, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', '\x00', {}, {0xff}, 0x3a, 0xf7, 0x4, 0x18}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, 0x1, 0x7fff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xa02529c283c5d53b, 0xff000000, 0xffffffff], [0xffffffff, 0xff0000ff, 0xffffff00], 'vlan0\x00', 'veth1\x00', {}, {0xff}, 0x84, 0x4, 0x1, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x5, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @private0, [0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 'nicvf0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x2c, 0xfb, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0x0, 0x1fffffffe], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {0xff}, 0x87, 0x9, 0x3, 0x44}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x2c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0xf)

533.715216ms ago: executing program 1 (id=17296):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e)

464.247256ms ago: executing program 1 (id=17298):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0xcb1d, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000880)=0xfbf, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)

463.606114ms ago: executing program 1 (id=17300):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x45, 0x0, &(0x7f00000001c0))

443.840811ms ago: executing program 3 (id=17302):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
recvfrom$packet(r1, &(0x7f0000001400)=""/110, 0x6e, 0x3, 0x0, 0x0)

443.686563ms ago: executing program 1 (id=17304):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

389.337918ms ago: executing program 1 (id=17305):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000e000300000008"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880)

388.969732ms ago: executing program 3 (id=17307):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0xcb1d, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000880)=0xfbf, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)

320.314365ms ago: executing program 3 (id=17309):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="1844ab68257d2068f56d57a02a7eae952da77917f3d3bcfd17fa697866339abc453b61dec0b0cc634d93cda9ed0568f89163a15513547104661234827edb11431d00de617faf10b5325091e6ea70bd944773d08f73c872eace457ba5f58ada6d8990441f2d87f6c1bae3f521039cb80523708fe6b91397d87277dd924be366aa9c7651e9c398a161f7d1a747d585013de417ce572a38b47e7a73da49f859b81397bf6664db41e97563541e39d05c03e9304513a9d7da57dcbfafc8315adb5695c8d37428c186f136f81f76cebb70b48a4970b0c55921f6ba846526e173bf568fc59fac1f823a562bb4", 0xe9}], 0x1, 0x0, 0x0, 0x5000000}}, {{0x0, 0x0, &(0x7f00000010c0)=[{0x0, 0x12}, {&(0x7f0000001040)="7824a0dc9ad7f268aac63ae0191537bc82ee3d56e4fb23064596", 0x1a}], 0x2}}], 0x2, 0x10)

320.080106ms ago: executing program 3 (id=17311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0)

319.879554ms ago: executing program 1 (id=17312):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a060000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0, 0xfffffef8, 0xfffffffffffffdc8, 0x0, 0x200000}, 0x28)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000038000107fcffffff0000000006000000cfed860235d618f5811a5da23e45dc378203f42eeb19409f747a1ebe0a05f28719da075f8d1af69b683d7b534a7f9daedcad6bcb94343d36d3373960e5a5df732ef9039d1d1444d1eacbbd9b5115eda762adf7ae3fbc15c9d54e280d7e2e"], 0x14}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2c, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x88c0)
socketpair(0x1, 0x1, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2, 0x400000000002, 0x0)
setsockopt(r2, 0x0, 0x8d0, &(0x7f00000012c0)="15020000", 0x4)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r6, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r5, 0x0, &(0x7f0000000200))
connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="28144000", @ANYRESOCT=r8, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x9, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

319.789063ms ago: executing program 3 (id=17313):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x7bc, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006b00)=""/31, 0x1f}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0)

259.503527ms ago: executing program 3 (id=17314):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0xfffffffe, 0x4)

59.139796ms ago: executing program 4 (id=17322):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006b0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000b9b99fce2505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)

59.044178ms ago: executing program 4 (id=17323):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xffffffffffffff3f}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/212, 0x1b, 0xd4, 0xa}, 0x28)

58.98665ms ago: executing program 4 (id=17324):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200001300000000000000000000008500000020000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

346.999µs ago: executing program 4 (id=17325):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)

204.122µs ago: executing program 4 (id=17326):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r0, 0x0)
close(0x3)

0s ago: executing program 4 (id=17327):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x22}}}]}, 0x58}}, 0x0)

kernel console output (not intermixed with test programs):

ribute type 20 has an invalid length.
[  395.060832][T32191] netlink: 'syz.1.11788': attribute type 21 has an invalid length.
[  395.289318][T32219] macsec0: entered promiscuous mode
[  395.291074][T32219] macvlan1: entered promiscuous mode
[  395.292926][T32219] macsec0: entered allmulticast mode
[  395.300230][T32219] macvlan1: entered allmulticast mode
[  395.323481][T32219] macvlan1: left allmulticast mode
[  395.325563][T32219] macvlan1: left promiscuous mode
[  395.383653][T32230] syz0: rxe_newlink: already configured on lo
[  395.408878][T32230] 8021q: adding VLAN 0 to HW filter on device team0
[  395.411329][T32230] tipc: Resetting bearer <eth:team0>
[  395.413214][T32230] tipc: Resetting bearer <eth:team0>
[  395.422890][T32230] 8021q: adding VLAN 0 to HW filter on device batadv0
[  395.463199][T32230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  395.468624][T32230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  395.494165][T32230] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  395.501467][   T24] lo speed is unknown, defaulting to 1000
[  395.503629][   T24] syz1: Port: 1 Link ACTIVE
[  395.512191][ T5855] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.519398][ T5855] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.522623][ T5855] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.526034][ T5855] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.659957][T32263] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  395.749674][T32270] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  396.058776][T32297] netlink: 'syz.1.11834': attribute type 3 has an invalid length.
[  396.483203][T32332] syzkaller1: entered promiscuous mode
[  396.487595][T32332] syzkaller1: entered allmulticast mode
[  396.706577][T32352] macsec2: entered promiscuous mode
[  396.708401][T32352] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode
[  396.712481][T32352] mac80211_hwsim hwsim25 wlan1: left promiscuous mode
[  396.820578][T32367] unknown channel width for channel at 909000KHz?
[  396.872286][T32373] __nla_validate_parse: 19 callbacks suppressed
[  396.872301][T32373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11872'.
[  397.062790][T32395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11883'.
[  397.066950][T32395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11883'.
[  397.178223][T32405] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  397.430079][T32416] tipc: Resetting bearer <eth:team0>
[  397.595943][T32416] tipc: Resetting bearer <eth:syzkaller0>
[  397.630049][   T47] lo speed is unknown, defaulting to 1000
[  397.632281][ T5906] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.635303][   T47] syz1: Port: 1 Link DOWN
[  397.637045][ T5906] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.642100][ T5906] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.654875][ T5906] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.753760][T32419] lo speed is unknown, defaulting to 1000
[  397.878922][T32419] lo speed is unknown, defaulting to 1000
[  397.881626][T32419] lo speed is unknown, defaulting to 1000
[  397.947350][T32426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.241016][T32451] netlink: 'syz.3.11905': attribute type 1 has an invalid length.
[  398.277639][T32451] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[  398.281032][T32451] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  398.287966][T32451] bond4: (slave vti0): making interface the new active one
[  398.292627][T32451] bond4: (slave vti0): Enslaving as an active interface with an up link
[  398.423262][T32478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11916'.
[  398.427036][T32478] netlink: 'syz.3.11916': attribute type 1 has an invalid length.
[  398.430069][T32478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11916'.
[  398.521481][T32489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11923'.
[  398.720345][T32511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11933'.
[  399.020703][T32528] netlink: 'syz.3.11941': attribute type 3 has an invalid length.
[  399.025847][T32528] netlink: 'syz.3.11941': attribute type 3 has an invalid length.
[  399.131057][T32541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11946'.
[  399.247851][T32549] pimreg: entered allmulticast mode
[  399.358685][T32549] pimreg: left allmulticast mode
[  399.382355][T32551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11951'.
[  399.586678][T32576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11962'.
[  399.593495][T32576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.297321][T32655] netlink: 'syz.2.11999': attribute type 11 has an invalid length.
[  400.965445][T32692] tipc: Disabling bearer <eth:team0>
[  401.128502][T32723] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  401.132747][T32723] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  401.135631][T32723] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  401.138511][T32723] tipc: Resetting bearer <eth:syzkaller0>
[  401.547709][T32763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.707465][  T307] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  401.709904][  T307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.890067][  T319] __nla_validate_parse: 6 callbacks suppressed
[  401.890077][  T319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12055'.
[  401.936002][  T323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12057'.
[  402.031864][  T333] bridge0: port 1(ipvlan0) entered blocking state
[  402.034135][  T333] bridge0: port 1(ipvlan0) entered disabled state
[  402.036987][  T333] ipvlan0: entered allmulticast mode
[  402.038748][  T333] bridge0: entered allmulticast mode
[  402.041541][  T333] ipvlan0: left allmulticast mode
[  402.043216][  T333] bridge0: left allmulticast mode
[  402.188066][  T353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.243249][   T24] IPVS: starting estimator thread 0...
[  402.246015][  T345] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  402.252662][  T361] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12072'.
[  402.335997][  T360] IPVS: using max 79 ests per chain, 189600 per kthread
[  402.420418][  T381] syzkaller1: entered promiscuous mode
[  402.422293][  T381] syzkaller1: entered allmulticast mode
[  402.628165][  T410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12095'.
[  402.803566][  T432] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12104'.
[  402.926634][  T444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12110'.
[  402.952908][  T448] netlink: 'syz.3.12112': attribute type 1 has an invalid length.
[  402.985668][  T448] bond5: (slave geneve3): making interface the new active one
[  402.988657][  T448] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  402.991665][ T5855] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  402.994518][ T5855] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  402.995491][  T448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12112'.
[  402.997778][ T5855] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  403.003119][ T5855] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  403.010619][  T448] 8021q: adding VLAN 0 to HW filter on device bond5
[  403.021789][   T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  403.105530][  T461] bond0: Device is already in use.
[  403.123254][  T464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12117'.
[  403.166381][  T466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  403.278407][  T476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12123'.
[  403.445014][  T489] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.12129'.
[  404.616559][  T578] nbd: nbd1 already in use
[  404.618721][  T578] nbd: nbd1 already in use
[  404.891069][  T614] netlink: 'syz.1.12189': attribute type 1 has an invalid length.
[  404.929131][  T615] lo speed is unknown, defaulting to 1000
[  405.028368][  T615] lo speed is unknown, defaulting to 1000
[  405.031790][  T615] lo speed is unknown, defaulting to 1000
[  405.213653][  T641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.432577][  T668] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  405.492712][  T671] IPv6: NLM_F_CREATE should be specified when creating new route
[  405.500658][  T671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  405.503161][  T671] IPv6: NLM_F_CREATE should be set when creating new route
[  405.505569][  T671] IPv6: NLM_F_CREATE should be set when creating new route
[  405.507912][  T671] IPv6: NLM_F_CREATE should be set when creating new route
[  405.534105][  T677] netlink: 'syz.1.12216': attribute type 16 has an invalid length.
[  405.541978][  T677] netlink: 'syz.1.12216': attribute type 17 has an invalid length.
[  405.548878][  T677] tipc: Resetting bearer <eth:syzkaller0>
[  405.631733][  T689] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  405.678150][  T697] netlink: 'syz.3.12226': attribute type 178 has an invalid length.
[  405.826749][  T718] syzkaller1: entered promiscuous mode
[  405.828594][  T718] syzkaller1: entered allmulticast mode
[  405.853716][  T721] netlink: 'syz.1.12237': attribute type 29 has an invalid length.
[  405.877418][  T723] netlink: 'syz.1.12238': attribute type 10 has an invalid length.
[  406.001507][  T739] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  406.016972][  T739] syzkaller0: entered promiscuous mode
[  406.018816][  T739] syzkaller0: entered allmulticast mode
[  406.021973][  T735] netlink: 'syz.2.12244': attribute type 2 has an invalid length.
[  406.068225][  T739] tipc: Resetting bearer <eth:syzkaller0>
[  406.071486][  T738] tipc: Resetting bearer <eth:syzkaller0>
[  406.089093][  T738] tipc: Disabling bearer <eth:syzkaller0>
[  406.101398][  T745] lo speed is unknown, defaulting to 1000
[  406.257172][  T745] lo speed is unknown, defaulting to 1000
[  406.260176][  T745] lo speed is unknown, defaulting to 1000
[  406.589181][  T804] vlan4: entered allmulticast mode
[  406.590994][  T804] bridge_slave_0: entered allmulticast mode
[  406.711706][  T814] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode
[  406.739449][  T814] bond4: (slave vti0): Releasing backup interface
[  406.746276][  T814] bond5: (slave geneve3): Releasing active interface
[  406.762745][ T5855] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  406.769189][ T5855] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  406.772089][ T5855] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  406.776540][ T5855] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  406.839782][  T823] netlink: 'syz.3.12278': attribute type 10 has an invalid length.
[  406.843279][  T823] mac80211_hwsim hwsim25 wlan1: left allmulticast mode
[  406.855482][  T823] bond0: (slave wlan1): refused to change device type
[  406.867139][  T823] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  406.871182][  T823] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  406.882101][  T825] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  407.061649][  T836] __nla_validate_parse: 10 callbacks suppressed
[  407.061664][  T836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12288'.
[  407.236242][  T848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  407.241264][   T24] lo speed is unknown, defaulting to 1000
[  407.243119][   T24] syz1: Port: 1 Link ACTIVE
[  407.366388][  T858] netlink: 45 bytes leftover after parsing attributes in process `syz.1.12299'.
[  407.713560][  T886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.719194][  T886] syzkaller0: entered promiscuous mode
[  407.721078][  T886] syzkaller0: entered allmulticast mode
[  407.728010][  T886] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  407.738672][  T886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12313'.
[  407.745776][  T886] tipc: Resetting bearer <eth:syzkaller0>
[  407.749972][  T885] tipc: Resetting bearer <eth:syzkaller0>
[  407.761676][  T885] tipc: Disabling bearer <eth:syzkaller0>
[  408.165130][  T914] Set syz1 is full, maxelem 65536 reached
[  408.697437][  T948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12335'.
[  408.877942][  T972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12345'.
[  408.895227][  T974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12347'.
[  409.055188][  T995] netlink: 'syz.1.12353': attribute type 4 has an invalid length.
[  409.061632][   T24] lo speed is unknown, defaulting to 1000
[  409.063496][   T24] syz1: Port: 1 Link DOWN
[  409.065628][  T995] netlink: 'syz.1.12353': attribute type 4 has an invalid length.
[  409.070604][   T24] lo speed is unknown, defaulting to 1000
[  409.072484][  T997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  409.077763][   T24] syz1: Port: 1 Link ACTIVE
[  409.097776][ T1000] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12356'.
[  409.203265][ T1008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12360'.
[  409.207519][ T1008] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12360'.
[  409.453829][ T1028] netlink: 'syz.3.12367': attribute type 10 has an invalid length.
[  409.457905][ T1028] veth1_macvtap: left promiscuous mode
[  409.460364][ T1028] team0: Device veth1_macvtap failed to register rx_handler
[  409.491977][ T1030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12368'.
[  410.749232][ T1115] bridge19: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  412.158464][ T1158] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  412.201343][ T1164] validate_nla: 2 callbacks suppressed
[  412.201354][ T1164] netlink: 'syz.3.12414': attribute type 1 has an invalid length.
[  412.279528][ T1170] __nla_validate_parse: 6 callbacks suppressed
[  412.279541][ T1170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12417'.
[  412.318850][ T1170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12417'.
[  412.524233][ T1196] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.12430'.
[  412.712170][ T1227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12442'.
[  412.716358][ T1226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12441'.
[  412.719324][ T1226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12441'.
[  412.924501][ T1251] lo speed is unknown, defaulting to 1000
[  413.029973][ T1251] lo speed is unknown, defaulting to 1000
[  413.032593][ T1251] lo speed is unknown, defaulting to 1000
[  413.256304][ T1289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12469'.
[  413.300391][ T1289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12469'.
[  413.305148][ T5906] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  413.312899][ T5906] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  413.320255][ T5906] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  413.322960][ T5906] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  413.326006][ T1291] tap0: tun_chr_ioctl cmd 1074025676
[  413.330663][ T1291] tap0: owner set to 0
[  413.373654][ T1295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12472'.
[  413.487450][ T1310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12479'.
[  413.750943][ T1344] bridge10: entered promiscuous mode
[  413.826233][ T1357] netlink: 'syz.1.12501': attribute type 1 has an invalid length.
[  413.828845][ T1357] NCSI netlink: No device for ifindex 0
[  414.248312][ T1403] vlan4: entered allmulticast mode
[  414.397760][ T1429] netlink: 'syz.1.12534': attribute type 3 has an invalid length.
[  414.440582][ T1435] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode
[  414.459164][ T1435] netlink: 'syz.3.12537': attribute type 10 has an invalid length.
[  414.461829][ T1435] mac80211_hwsim hwsim25 wlan1: left allmulticast mode
[  414.464192][ T1435] bond0: (slave wlan1): refused to change device type
[  414.471899][ T1435] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  414.476254][ T1435] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  414.841463][ T1462] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  415.263058][ T1500] netlink: 'syz.1.12569': attribute type 2 has an invalid length.
[  415.395966][ T1508] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  415.602008][ T1529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.776856][ T1551] tipc: New replicast peer: 255.255.255.255
[  415.779573][ T1551] tipc: Enabled bearer <udp:syz2>, priority 10
[  417.021585][ T1603] syzkaller1: entered promiscuous mode
[  417.023414][ T1603] syzkaller1: entered allmulticast mode
[  417.388186][ T1631] __nla_validate_parse: 8 callbacks suppressed
[  417.388197][ T1631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12629'.
[  417.599427][ T1643] tun0: tun_chr_ioctl cmd 1074025675
[  417.601280][ T1643] tun0: persist enabled
[  417.602939][ T1643] tun0: tun_chr_ioctl cmd 1074025675
[  417.607257][ T1643] tun0: persist enabled
[  417.672030][ T1648] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.676929][ T1648] syzkaller0: entered promiscuous mode
[  417.678778][ T1648] syzkaller0: entered allmulticast mode
[  417.698256][ T1648] tipc: Resetting bearer <eth:syzkaller0>
[  417.702491][ T1647] tipc: Resetting bearer <eth:syzkaller0>
[  417.721023][ T1653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12637'.
[  417.724375][ T1647] tipc: Disabling bearer <eth:syzkaller0>
[  417.869657][ T1671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12646'.
[  417.951423][ T1683] netlink: 'syz.1.12652': attribute type 8 has an invalid length.
[  417.954316][ T1683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12652'.
[  417.965315][ T1683] netlink: 'syz.1.12652': attribute type 8 has an invalid length.
[  417.967941][ T1683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12652'.
[  418.088368][ T1702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12658'.
[  418.093278][ T1704] atomic_op ffff8880273f8198 conn xmit_atomic 0000000000000000
[  418.152854][ T1712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12663'.
[  418.251828][ T1725] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12669'.
[  418.262524][ T1725] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12669'.
[  418.543128][ T1749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12680'.
[  419.572024][   T12] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  419.653113][ T1788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  419.772844][ T1798] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  419.845444][ T1809] netlink: 'syz.3.12704': attribute type 3 has an invalid length.
[  419.919956][ T1815] netlink: 'syz.1.12709': attribute type 1 has an invalid length.
[  420.023228][ T1821] bpq0: entered promiscuous mode
[  420.053760][ T1827] bridge0: port 1(syz_tun) entered blocking state
[  420.056248][ T1827] bridge0: port 1(syz_tun) entered disabled state
[  420.058510][ T1827] syz_tun: entered allmulticast mode
[  420.061064][ T1827] syz_tun: entered promiscuous mode
[  420.220909][ T1847] netlink: 'syz.1.12722': attribute type 6 has an invalid length.
[  420.228039][ T1847] netlink: 'syz.1.12722': attribute type 6 has an invalid length.
[  420.433230][ T1874] netlink: 'syz.3.12734': attribute type 10 has an invalid length.
[  420.617425][ T1890] TCP: TCP_TX_DELAY enabled
[  421.459671][ T1927] netlink: 'syz.3.12760': attribute type 13 has an invalid length.
[  421.542410][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  421.546181][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  421.549011][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  421.552445][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  421.566971][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  421.592324][ T1932] lo speed is unknown, defaulting to 1000
[  421.717393][ T1932] lo speed is unknown, defaulting to 1000
[  421.720009][ T1932] lo speed is unknown, defaulting to 1000
[  421.828492][ T1932] chnl_net:caif_netlink_parms(): no params data found
[  421.882137][ T1932] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.884579][ T1932] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.887335][ T1932] bridge_slave_0: entered allmulticast mode
[  421.890085][ T1932] bridge_slave_0: entered promiscuous mode
[  421.893262][ T1932] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.895767][ T1932] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.898106][ T1932] bridge_slave_1: entered allmulticast mode
[  421.900810][ T1932] bridge_slave_1: entered promiscuous mode
[  421.920187][ T1932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  421.925393][ T1932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  421.951919][ T1932] team0: Port device team_slave_0 added
[  421.955630][ T1932] team0: Port device team_slave_1 added
[  421.971065][ T1932] batman_adv: batadv0: Adding interface: batadv_slave_0
[  421.973375][ T1932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.981795][ T1932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  421.986397][ T1932] batman_adv: batadv0: Adding interface: batadv_slave_1
[  421.988658][ T1932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.997529][ T1932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  422.022837][ T1932] hsr_slave_0: entered promiscuous mode
[  422.025614][ T1932] hsr_slave_1: entered promiscuous mode
[  422.027803][ T1932] debugfs: 'hsr0' already exists in 'hsr'
[  422.029691][ T1932] Cannot create hsr debugfs directory
[  422.123882][ T1932] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  422.130067][ T1932] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  422.135261][ T1932] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  422.139398][ T1932] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  422.162724][ T1932] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.165175][ T1932] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.167673][ T1932] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.170035][ T1932] bridge0: port 1(bridge_slave_0) entered forwarding state
[  422.202772][ T1932] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.210989][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.213794][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.222147][ T1932] 8021q: adding VLAN 0 to HW filter on device team0
[  422.229069][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.231405][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  422.245770][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.248112][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.334308][ T1932] 8021q: adding VLAN 0 to HW filter on device batadv0
[  422.381627][ T1960] netlink: 'syz.1.12770': attribute type 13 has an invalid length.
[  422.439305][ T1932] veth0_vlan: entered promiscuous mode
[  422.444879][ T1932] veth1_vlan: entered promiscuous mode
[  422.462332][ T1932] veth0_macvtap: entered promiscuous mode
[  422.470826][ T1932] veth1_macvtap: entered promiscuous mode
[  422.483376][ T1932] batman_adv: batadv0: Interface activated: batadv_slave_0
[  422.492364][ T1932] batman_adv: batadv0: Interface activated: batadv_slave_1
[  422.501345][ T5855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.504391][ T5855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.509191][ T5855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.512346][ T5855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.561669][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.570042][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.597062][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.599997][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.611667][ T1979] netlink: 'syz.3.12771': attribute type 1 has an invalid length.
[  423.112561][ T2026] pim6reg1: entered promiscuous mode
[  423.118296][ T2026] pim6reg1: entered allmulticast mode
[  423.271443][ T2043] __nla_validate_parse: 11 callbacks suppressed
[  423.271467][ T2043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12800'.
[  423.277207][ T2043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12800'.
[  423.635828][T29014] Bluetooth: hci3: command tx timeout
[  423.646960][ T2080] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  423.828300][ T2091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  423.831069][ T2091] syzkaller0: entered promiscuous mode
[  423.833023][ T2091] syzkaller0: entered allmulticast mode
[  423.852427][ T2091] tipc: Resetting bearer <eth:syzkaller0>
[  423.855814][ T2090] tipc: Resetting bearer <eth:syzkaller0>
[  423.864595][ T2090] tipc: Disabling bearer <eth:syzkaller0>
[  424.527994][ T2136] netlink: 'syz.4.12845': attribute type 27 has an invalid length.
[  424.641587][ T2142] bridge21: entered allmulticast mode
[  424.671389][ T2148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12851'.
[  424.690767][ T2148] gtp3: entered promiscuous mode
[  424.695928][ T2148] gtp3: entered allmulticast mode
[  424.746989][ T2159] netlink: 'syz.4.12855': attribute type 42 has an invalid length.
[  425.687888][ T2178] Bluetooth: MGMT ver 1.23
[  425.714754][T29014] Bluetooth: hci3: command tx timeout
[  426.060014][ T2187] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  426.109904][ T2190] vlan0: entered promiscuous mode
[  426.111813][ T2190] batadv0: entered promiscuous mode
[  426.246166][ T2201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12876'.
[  426.249364][ T2201] openvswitch: netlink: EtherType 0 is less than min 600
[  426.498808][ T2223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12887'.
[  427.685858][ T2271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12909'.
[  427.794951][T29014] Bluetooth: hci3: command tx timeout
[  427.889368][ T2297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12922'.
[  427.894479][ T2301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12923'.
[  427.917591][ T2300] pim6reg: entered allmulticast mode
[  427.920554][ T2297] netlink: 23932 bytes leftover after parsing attributes in process `syz.1.12922'.
[  427.926166][ T2300] pim6reg: left allmulticast mode
[  428.022927][ T2316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12929'.
[  428.058317][ T2316] netlink: 'syz.3.12929': attribute type 1 has an invalid length.
[  428.061688][ T2316] netlink: 'syz.3.12929': attribute type 1 has an invalid length.
[  428.152139][ T2324] syzkaller0: entered promiscuous mode
[  428.153935][ T2324] syzkaller0: entered allmulticast mode
[  428.199211][ T2332] netlink: 'syz.1.12937': attribute type 10 has an invalid length.
[  428.569782][ T2349] netlink: 'syz.4.12938': attribute type 11 has an invalid length.
[  429.202634][ T2332] !: entered promiscuous mode
[  429.204297][ T2332] !: entered allmulticast mode
[  429.207835][ T2332] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  429.875105][T29014] Bluetooth: hci3: command tx timeout
[  430.139825][ T2430] __nla_validate_parse: 1 callbacks suppressed
[  430.139836][ T2430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12976'.
[  430.147712][ T2430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12976'.
[  430.222382][ T2438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12980'.
[  430.309722][ T2451] netlink: 'syz.3.12985': attribute type 16 has an invalid length.
[  430.312439][ T2451] netlink: 'syz.3.12985': attribute type 3 has an invalid length.
[  430.322847][ T2451] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.12985'.
[  430.331874][ T2453] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12986'.
[  430.373974][ T2457] netlink: 'syz.4.12988': attribute type 1 has an invalid length.
[  430.383949][ T2457] netlink: 228 bytes leftover after parsing attributes in process `syz.4.12988'.
[  430.460268][ T2469] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  430.464377][ T2469] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  430.467744][ T2470] netlink: 'syz.3.12993': attribute type 25 has an invalid length.
[  430.493799][ T2474] netlink: 'syz.4.12995': attribute type 3 has an invalid length.
[  430.628481][ T2502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13006'.
[  430.653642][ T2507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13009'.
[  430.871449][ T2550] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13025'.
[  430.900797][ T2550] bond0 (unregistering): Released all slaves
[  431.278449][ T2585] bond0: option arp_validate: invalid value (18446744073491447809)
[  431.278527][ T5872] bond0: (slave bond_slave_0): interface is now down
[  431.283868][ T5872] bond0: (slave bond_slave_1): interface is now down
[  431.314173][ T5872] bond0: now running without any active interface!
[  431.411391][ T2605] netlink: 'syz.4.13047': attribute type 1 has an invalid length.
[  431.414043][ T2605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13047'.
[  431.631881][ T2639] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  431.638934][ T2639] macsec1: entered allmulticast mode
[  431.641242][ T2639] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  431.698856][ T2639] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  431.702792][ T2639] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  431.875257][ T2669] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  431.891886][ T2669] lo speed is unknown, defaulting to 1000
[  432.182797][ T2669] lo speed is unknown, defaulting to 1000
[  432.190540][ T2669] lo speed is unknown, defaulting to 1000
[  432.435446][ T2732] batadv_slave_1: entered promiscuous mode
[  432.458672][ T2733] delete_channel: no stack
[  432.720852][ T2766] sctp: [Deprecated]: syz.3.13096 (pid 2766) Use of struct sctp_assoc_value in delayed_ack socket option.
[  432.720852][ T2766] Use struct sctp_sack_info instead
[  432.848487][ T2788] netlink: 'syz.3.13103': attribute type 5 has an invalid length.
[  432.851088][ T2788] netlink: 'syz.3.13103': attribute type 5 has an invalid length.
[  432.921428][ T2789] bpq0: left promiscuous mode
[  433.500630][ T2840] x_tables: ip_tables: udp match: only valid for protocol 17
[  433.676634][ T2858] netlink: 'syz.4.13130': attribute type 21 has an invalid length.
[  433.679177][ T2858] netlink: 'syz.4.13130': attribute type 22 has an invalid length.
[  434.016888][ T2927] vlan0: entered allmulticast mode
[  434.073011][ T2931] bond1: entered promiscuous mode
[  434.078692][ T2931] 8021q: adding VLAN 0 to HW filter on device bond1
[  434.098795][ T2935] 8021q: adding VLAN 0 to HW filter on device bond1
[  434.101962][ T2935] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  434.108376][ T2935] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  434.114318][ T2935] bond1: (slave wireguard0): making interface the new active one
[  434.117486][ T2935] wireguard0: entered promiscuous mode
[  434.119997][ T2935] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  434.129003][ T2931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  434.131478][ T2931] IPv6: NLM_F_CREATE should be set when creating new route
[  434.134081][ T2931] IPv6: NLM_F_CREATE should be set when creating new route
[  434.139612][ T2931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  434.147501][ T2931] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[  434.153185][ T2931] bond1: (slave wireguard1): Enslaving as a backup interface with an up link
[  435.189652][ T3027] __nla_validate_parse: 17 callbacks suppressed
[  435.189665][ T3027] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13200'.
[  435.193864][ T3021] netlink: 277 bytes leftover after parsing attributes in process `syz.3.13197'.
[  435.230051][   T33] audit: type=1804 audit(1755016855.475:11): pid=3035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.13203" name="/newroot/2029/cgroup.controllers" dev="tmpfs" ino=10231 res=1 errno=0
[  435.237950][   T33] audit: type=1800 audit(1755016855.475:12): pid=3035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13203" name="cgroup.controllers" dev="tmpfs" ino=10231 res=0 errno=0
[  435.714402][ T3088] netlink: 420 bytes leftover after parsing attributes in process `syz.1.13226'.
[  435.930810][ T3101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13232'.
[  436.106762][ T3126] validate_nla: 3 callbacks suppressed
[  436.106781][ T3126] netlink: 'syz.1.13244': attribute type 14 has an invalid length.
[  436.268194][ T3144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13250'.
[  436.404402][ T3159] tun0: tun_chr_ioctl cmd 2147767520
[  437.120551][ T3223] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.13279'.
[  437.123752][ T3223] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  437.391645][ T3254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13292'.
[  437.681181][ T3288] netlink: 9 bytes leftover after parsing attributes in process `syz.1.13305'.
[  437.685636][ T3288] 0: renamed from hsr0
[  437.689359][ T3288] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  437.692695][ T3288] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  437.698876][ T3288] 0: entered allmulticast mode
[  437.700552][ T3288] hsr_slave_0: entered allmulticast mode
[  437.702444][ T3288] hsr_slave_1: entered allmulticast mode
[  437.710373][ T3288] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  437.780015][ T3286] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  437.789967][ T3286] netlink: 'syz.4.13304': attribute type 4 has an invalid length.
[  437.886233][ T3286] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.888761][ T3286] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.007461][ T3286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  438.019821][ T3286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  438.166137][ T5906] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.182380][ T5906] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.188012][ T5906] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.201820][ T5906] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.382819][ T3342] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  438.383698][ T3345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13330'.
[  438.392145][ T3345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13330'.
[  438.493111][ T3362] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  438.569537][ T3376] netlink: 'syz.3.13345': attribute type 1 has an invalid length.
[  438.576008][ T3375] mac80211_hwsim hwsim6 ": renamed from wlan0 (while UP)
[  439.007577][ T3404] bridge0: entered promiscuous mode
[  439.086689][ T3410] netlink: 'syz.1.13362': attribute type 5 has an invalid length.
[  439.247268][ T3417] tipc: Resetting bearer <eth:syzkaller0>
[  439.596637][ T3423] macsec0: entered promiscuous mode
[  439.598962][ T3423] veth1_macvtap: entered promiscuous mode
[  439.600955][ T3423] macsec0: left promiscuous mode
[  439.602515][ T3423] veth1_macvtap: left promiscuous mode
[  440.093162][ T3454] netlink: 'syz.4.13376': attribute type 16 has an invalid length.
[  440.099196][ T3454] netlink: 'syz.4.13376': attribute type 17 has an invalid length.
[  440.139431][ T3454] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.142634][ T3454] 8021q: adding VLAN 0 to HW filter on device team0
[  440.151766][ T3454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  440.552635][ T3489] lo speed is unknown, defaulting to 1000
[  440.636850][ T3489] lo speed is unknown, defaulting to 1000
[  440.639547][ T3489] lo speed is unknown, defaulting to 1000
[  440.819812][ T3502] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  440.826845][ T3502] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  440.996443][ T3518] netlink: 'syz.4.13407': attribute type 1 has an invalid length.
[  441.023982][ T3520] __nla_validate_parse: 8 callbacks suppressed
[  441.023993][ T3520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13408'.
[  441.034166][ T3520] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  441.176079][ T3543] netlink: 'syz.4.13419': attribute type 2 has an invalid length.
[  441.235073][ T3551] netlink: 'syz.4.13423': attribute type 1 has an invalid length.
[  441.237615][ T3551] netlink: 'syz.4.13423': attribute type 4 has an invalid length.
[  441.245367][ T3555] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13424'.
[  441.248283][ T3555] netem: invalid attributes len -16
[  441.249952][ T3555] netem: change failed
[  441.308665][ T3561] ip6gre1: entered promiscuous mode
[  441.318674][ T3561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13427'.
[  441.323453][ T3561] bond0: option resend_igmp: invalid value (18446744072065384451)
[  441.331599][ T3561] bond0: option resend_igmp: allowed values 0 - 255
[  441.460655][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13435'.
[  441.466832][ T3575] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  441.472104][ T3575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  442.042100][ T3641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13465'.
[  442.100681][ T3649] netlink: 'syz.4.13469': attribute type 1 has an invalid length.
[  442.243508][ T3668] netlink: 'syz.4.13476': attribute type 13 has an invalid length.
[  442.250415][ T3668] netlink: 'syz.4.13476': attribute type 17 has an invalid length.
[  442.281931][ T3668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  442.309868][ T3668] lo speed is unknown, defaulting to 1000
[  442.413900][ T3668] lo speed is unknown, defaulting to 1000
[  442.418868][ T3668] lo speed is unknown, defaulting to 1000
[  442.489850][ T3690] netlink: 'syz.3.13488': attribute type 2 has an invalid length.
[  442.543997][ T3694] netlink: 'syz.3.13490': attribute type 1 has an invalid length.
[  442.547602][ T3694] netlink: 'syz.3.13490': attribute type 10 has an invalid length.
[  442.550973][ T3694] netlink: 236 bytes leftover after parsing attributes in process `syz.3.13490'.
[  442.559368][ T3694] netlink: 'syz.3.13490': attribute type 1 has an invalid length.
[  442.579346][ T3694] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.615568][ T3694] bond0: (slave gretap2): making interface the new active one
[  442.619078][ T3694] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  442.833810][ T3715] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13499'.
[  442.837780][ T3715] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13499'.
[  442.863932][ T3718] netlink: 172 bytes leftover after parsing attributes in process `syz.3.13501'.
[  444.353716][ T3831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  444.356174][   T54] Bluetooth: hci3: command 0x0405 tx timeout
[  444.407954][ T3831] syzkaller0: entered promiscuous mode
[  444.409841][ T3831] syzkaller0: entered allmulticast mode
[  444.433962][ T3831] tipc: Resetting bearer <eth:syzkaller0>
[  444.440231][ T3830] tipc: Resetting bearer <eth:syzkaller0>
[  444.449623][ T3830] tipc: Disabling bearer <eth:syzkaller0>
[  444.461128][ T3833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  444.623855][ T3851] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  444.626645][ T3851] tipc: Resetting bearer <eth:syzkaller0>
[  444.703544][ T3863] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  444.707810][ T3863] syzkaller0: entered promiscuous mode
[  444.709591][ T3863] syzkaller0: entered allmulticast mode
[  444.721404][ T3863] tipc: Resetting bearer <eth:syzkaller0>
[  444.724427][ T3862] tipc: Resetting bearer <eth:syzkaller0>
[  444.734021][ T3862] tipc: Disabling bearer <eth:syzkaller0>
[  445.198012][ T3912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13587'.
[  445.230941][ T3907] syz_tun: left promiscuous mode
[  445.233297][ T3907] bridge0: port 1(syz_tun) entered disabled state
[  445.370397][ T3931] syzkaller1: entered promiscuous mode
[  445.372238][ T3931] syzkaller1: entered allmulticast mode
[  445.752365][ T3964] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  445.809361][ T3967] sit0: entered promiscuous mode
[  445.862099][ T3971] block nbd7: Unsupported socket: shutdown callout must be supported.
[  446.388238][ T3988] __nla_validate_parse: 4 callbacks suppressed
[  446.388249][ T3988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13621'.
[  446.478631][ T3999] lo speed is unknown, defaulting to 1000
[  446.574081][ T3999] lo speed is unknown, defaulting to 1000
[  446.583620][ T3999] lo speed is unknown, defaulting to 1000
[  448.033339][ T4080] "syz.3.13656" (4080) uses obsolete ecb(arc4) skcipher
[  448.223111][   T55] block nbd7: Receive control failed (result -32)
[  448.251674][ T4116] bond0: up delay (65536) is not a multiple of miimon (100), value rounded to 65500 ms
[  448.428211][ T4142] validate_nla: 4 callbacks suppressed
[  448.428223][ T4142] netlink: 'syz.4.13683': attribute type 3 has an invalid length.
[  448.432660][ T4142] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13683'.
[  448.439366][ T4142] netlink: 'syz.4.13683': attribute type 3 has an invalid length.
[  448.441876][ T4142] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13683'.
[  448.539035][ T4149] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004
[  448.721465][ T4179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13698'.
[  448.731659][ T4179] netlink: 'syz.3.13698': attribute type 8 has an invalid length.
[  448.736203][ T4181] sctp: [Deprecated]: syz.4.13699 (pid 4181) Use of int in maxseg socket option.
[  448.736203][ T4181] Use struct sctp_assoc_value instead
[  448.768750][ T4183] netlink: 'syz.1.13700': attribute type 1 has an invalid length.
[  448.776612][ T4186] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  448.869225][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13709'.
[  448.900640][ T4205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13711'.
[  448.998719][ T4222] netlink: 'syz.4.13719': attribute type 1 has an invalid length.
[  449.001270][ T4222] netlink: 'syz.4.13719': attribute type 2 has an invalid length.
[  449.003745][ T4222] netlink: 'syz.4.13719': attribute type 1 has an invalid length.
[  449.009796][ T4222] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.13719'.
[  449.039591][ T4226] netem: incorrect gi model size
[  449.041628][ T4226] netem: change failed
[  449.051020][ T4228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13722'.
[  449.240276][ T4248] netlink: 'syz.4.13732': attribute type 6 has an invalid length.
[  449.916506][ T4259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13737'.
[  450.057631][ T4265] syzkaller1: entered promiscuous mode
[  450.059572][ T4265] syzkaller1: entered allmulticast mode
[  450.274005][   T24] IPVS: starting estimator thread 0...
[  450.281704][ T4289] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13752'.
[  450.311791][ T4289] netlink: 'syz.4.13752': attribute type 8 has an invalid length.
[  450.365815][ T4290] IPVS: using max 78 ests per chain, 187200 per kthread
[  450.866136][ T4329] netlink: 'syz.3.13771': attribute type 4 has an invalid length.
[  451.667525][ T4399] __nla_validate_parse: 1 callbacks suppressed
[  451.667566][ T4399] netlink: 244 bytes leftover after parsing attributes in process `syz.1.13803'.
[  451.782497][ T4409] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13808'.
[  451.941817][ T4423] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13816'.
[  452.244083][ T4458] netlink: set zone limit has 8 unknown bytes
[  452.294396][ T4462] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  452.308117][ T4462] lo speed is unknown, defaulting to 1000
[  452.382894][ T4471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13835'.
[  452.442541][ T4462] lo speed is unknown, defaulting to 1000
[  452.447219][ T4462] lo speed is unknown, defaulting to 1000
[  452.604421][ T4486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13842'.
[  452.869414][ T4512] lo speed is unknown, defaulting to 1000
[  452.980969][ T4512] lo speed is unknown, defaulting to 1000
[  452.983659][ T4512] lo speed is unknown, defaulting to 1000
[  453.078757][ T4528] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  453.350639][ T4551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  453.461106][ T4560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13874'.
[  453.520745][ T4564] netlink: 200 bytes leftover after parsing attributes in process `syz.3.13876'.
[  453.524582][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13876'.
[  453.840031][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13885'.
[  453.920431][ T4597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.034966][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  454.035005][T29014] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  454.269160][ T4644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13907'.
[  454.272312][ T4644] validate_nla: 3 callbacks suppressed
[  454.272346][ T4644] netlink: 'syz.1.13907': attribute type 11 has an invalid length.
[  454.367687][ T4655] vlan0: entered promiscuous mode
[  454.421644][ T4661] netlink: 'syz.3.13914': attribute type 11 has an invalid length.
[  454.471575][ T4667] bond0: option mode: unable to set because the bond device has slaves
[  454.582714][ T4679] sctp: [Deprecated]: syz.4.13923 (pid 4679) Use of struct sctp_assoc_value in delayed_ack socket option.
[  454.582714][ T4679] Use struct sctp_sack_info instead
[  455.614427][ T4726] netlink: 'syz.4.13940': attribute type 83 has an invalid length.
[  455.661016][ T4726] lo speed is unknown, defaulting to 1000
[  455.989090][ T4726] lo speed is unknown, defaulting to 1000
[  455.992708][ T4726] lo speed is unknown, defaulting to 1000
[  457.549479][ T4836] __nla_validate_parse: 4 callbacks suppressed
[  457.549490][ T4836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13990'.
[  457.812439][ T4870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  457.967245][ T4893] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.14016'.
[  457.978601][ T4888] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14015'.
[  458.030511][ T4899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14020'.
[  458.140371][ T4910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14025'.
[  458.143303][ T4910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14025'.
[  458.563219][ T4945] netlink: 'syz.4.14038': attribute type 1 has an invalid length.
[  458.580613][ T4945] bond2: entered promiscuous mode
[  458.582621][ T4945] bond2: entered allmulticast mode
[  458.593109][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14038'.
[  458.603867][ T4945] bridge1: the hash_elasticity option has been deprecated and is always 16
[  458.769080][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14046'.
[  458.806870][ T4966] netlink: 'syz.1.14047': attribute type 1 has an invalid length.
[  458.809641][ T4966] netlink: 228 bytes leftover after parsing attributes in process `syz.1.14047'.
[  459.127835][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14059'.
[  459.260644][ T5010] tipc: Started in network mode
[  459.262283][ T5010] tipc: Node identity 163148d7f9db, cluster identity 4711
[  459.265036][ T5010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  459.273805][ T5010] syzkaller0: entered promiscuous mode
[  459.278411][ T5010] syzkaller0: entered allmulticast mode
[  459.292981][ T5010] tipc: Resetting bearer <eth:syzkaller0>
[  459.300464][ T5009] tipc: Resetting bearer <eth:syzkaller0>
[  459.323610][ T5009] tipc: Disabling bearer <eth:syzkaller0>
[  459.565578][ T5050] netlink: 'syz.4.14087': attribute type 1 has an invalid length.
[  460.028688][ T5085] netlink: 'syz.4.14103': attribute type 25 has an invalid length.
[  461.860386][ T5243] syzkaller1: entered promiscuous mode
[  461.862354][ T5243] syzkaller1: entered allmulticast mode
[  462.230569][ T5304] lo speed is unknown, defaulting to 1000
[  462.400011][ T5315] netlink: 'syz.4.14192': attribute type 1 has an invalid length.
[  462.414346][ T5315] 8021q: adding VLAN 0 to HW filter on device bond3
[  462.423331][ T5304] lo speed is unknown, defaulting to 1000
[  462.440792][ T5315] 8021q: adding VLAN 0 to HW filter on device bond3
[  462.443154][ T5315] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[  462.448305][ T5315] bond3: (slave vxcan5): Error -95 calling set_mac_address
[  462.457177][ T5304] lo speed is unknown, defaulting to 1000
[  462.488129][ T5321] gretap1: entered promiscuous mode
[  462.493111][ T5321] bond3: (slave gretap1): making interface the new active one
[  462.497270][ T5321] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  462.510551][ T5315] macvlan2: entered promiscuous mode
[  462.512371][ T5315] macvlan2: entered allmulticast mode
[  462.514555][ T5315] bond3: entered promiscuous mode
[  462.517395][ T5315] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  462.521661][ T5315] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  462.526815][ T5315] bond3: left promiscuous mode
[  462.696090][ T5340] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  462.835737][ T5355] macsec2: entered promiscuous mode
[  462.839137][ T5355] ip6gretap0: entered promiscuous mode
[  462.841285][ T5355] macsec2: entered allmulticast mode
[  462.842981][ T5355] ip6gretap0: entered allmulticast mode
[  463.154166][ T5408] __nla_validate_parse: 9 callbacks suppressed
[  463.154178][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14235'.
[  463.413709][ T5430] netlink: 'syz.1.14245': attribute type 2 has an invalid length.
[  463.417309][ T5430] netlink: 119 bytes leftover after parsing attributes in process `syz.1.14245'.
[  463.422434][ T5432] netlink: 256 bytes leftover after parsing attributes in process `syz.4.14246'.
[  463.681902][ T5462] netlink: 76 bytes leftover after parsing attributes in process `syz.1.14261'.
[  463.692786][ T5468] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14263'.
[  463.910042][ T5495] netlink: 'syz.3.14275': attribute type 39 has an invalid length.
[  463.956937][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14276'.
[  464.015520][ T5507] netlink: 212892 bytes leftover after parsing attributes in process `syz.4.14279'.
[  464.219441][ T5537] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  464.230108][ T5537] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  464.232792][ T5537] tipc: Resetting bearer <eth:syzkaller0>
[  464.238240][ T5543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14297'.
[  464.244283][ T5545] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  464.491550][ T5585] netlink: 'syz.4.14317': attribute type 17 has an invalid length.
[  464.494529][ T5585] netlink: 2 bytes leftover after parsing attributes in process `syz.4.14317'.
[  464.500718][ T5585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  464.536758][ T5594] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14319'.
[  464.602766][ T5594] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  464.606706][ T5594] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  464.752282][ T5615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  464.826874][ T5628] tipc: Resetting bearer <eth:syzkaller0>
[  464.935311][ T5642] netem: change failed
[  465.316129][ T5701] tipc: Cannot configure node identity twice
[  465.631999][ T5755] netlink: 'syz.3.14394': attribute type 10 has an invalid length.
[  465.709060][ T5768] netlink: 'syz.4.14400': attribute type 8 has an invalid length.
[  465.877314][ T5797] netlink: 'syz.4.14413': attribute type 11 has an invalid length.
[  466.092218][ T5826] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  466.095175][ T5826] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  466.097749][ T5826] tipc: Resetting bearer <eth:syzkaller0>
[  466.104306][ T5828] bond0: (slave gretap2): Releasing active interface
[  466.259399][ T5861] netlink: 'syz.3.14439': attribute type 10 has an invalid length.
[  466.496084][ T5899] netlink: 'syz.3.14448': attribute type 2 has an invalid length.
[  466.501677][ T5899] : entered promiscuous mode
[  467.142468][ T5918] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  467.159199][ T5918] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  467.164201][ T5918] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  467.172144][ T5918] tipc: Resetting bearer <eth:syzkaller0>
[  467.691555][ T5978] siw: device registration error -23
[  467.792045][ T5989] syzkaller1: entered promiscuous mode
[  467.793906][ T5989] syzkaller1: entered allmulticast mode
[  468.029514][ T6028] netlink: 'syz.1.14510': attribute type 9 has an invalid length.
[  468.032281][ T6028] netlink: 'syz.1.14510': attribute type 7 has an invalid length.
[  468.036344][ T6028] netlink: 'syz.1.14510': attribute type 8 has an invalid length.
[  468.198433][ T6050] __nla_validate_parse: 11 callbacks suppressed
[  468.198444][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14519'.
[  468.414229][ T6081] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14533'.
[  468.469567][ T6086] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14535'.
[  468.696111][ T6119] tap0: tun_chr_ioctl cmd 1074025677
[  468.700965][ T6119] tap0: linktype set to 780
[  469.004453][ T6164] team0: Mode changed to "loadbalance"
[  469.061068][ T6170] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14575'.
[  469.088214][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14577'.
[  469.123036][ T6178] netlink: 'syz.3.14579': attribute type 2 has an invalid length.
[  469.127438][ T6178] netlink: 'syz.3.14579': attribute type 1 has an invalid length.
[  469.166669][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14582'.
[  469.192464][ T6186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  469.263872][ T6194] netlink: 'syz.4.14587': attribute type 3 has an invalid length.
[  469.559933][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14597'.
[  469.726096][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14606'.
[  469.851593][ T6245] netlink: 256 bytes leftover after parsing attributes in process `syz.1.14611'.
[  470.032561][ T6259] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.130285][ T6267] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14622'.
[  470.240992][ T6279] tipc: Failed to remove unknown binding: 66,1,1/3723304821:2926327376/2926327378
[  470.244062][ T6279] tipc: Failed to remove unknown binding: 66,1,1/3723304821:2926327376/2926327378
[  470.288778][ T6285] IPv6: NLM_F_CREATE should be specified when creating new route
[  470.413790][ T6299] IPVS: length: 209 != 24
[  470.640522][ T6329] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  471.092036][ T6379] bridge0: port 3(erspan0) entered blocking state
[  471.094311][ T6379] bridge0: port 3(erspan0) entered disabled state
[  471.110416][ T6379] erspan0: entered allmulticast mode
[  471.119561][ T6379] erspan0: entered promiscuous mode
[  471.121699][ T6379] bridge0: port 3(erspan0) entered blocking state
[  471.123904][ T6379] bridge0: port 3(erspan0) entered forwarding state
[  471.150696][ T6379] erspan0: left allmulticast mode
[  471.153120][ T6379] erspan0: left promiscuous mode
[  471.159033][ T6379] bridge0: port 3(erspan0) entered disabled state
[  471.283290][ T6391] syzkaller1: entered promiscuous mode
[  471.286512][ T6391] syzkaller1: entered allmulticast mode
[  471.391630][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_0
[  471.406224][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_1
[  471.784509][ T6430] netlink: 'syz.1.14696': attribute type 16 has an invalid length.
[  472.540205][ T6454] netlink: 'syz.3.14709': attribute type 1 has an invalid length.
[  472.843409][ T6493] netlink: 'syz.3.14726': attribute type 4 has an invalid length.
[  472.851101][ T6493] netlink: 'syz.3.14726': attribute type 4 has an invalid length.
[  472.856790][  T792] lo speed is unknown, defaulting to 1000
[  472.858695][  T792] syz2: Port: 1 Link ACTIVE
[  473.603610][ T6499] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  473.610223][ T6499] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  473.612730][ T6499] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  473.615801][ T6499] tipc: Resetting bearer <eth:syzkaller0>
[  473.811439][ T6517] __nla_validate_parse: 14 callbacks suppressed
[  473.811450][ T6517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14738'.
[  473.847614][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14742'.
[  473.871021][ T6529] netlink: 134820 bytes leftover after parsing attributes in process `syz.3.14744'.
[  473.891372][ T6527] netlink: 'syz.1.14743': attribute type 83 has an invalid length.
[  474.065250][ T6551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  474.067883][ T6551] syzkaller0: entered promiscuous mode
[  474.069723][ T6551] syzkaller0: entered allmulticast mode
[  474.098841][ T6551] tipc: Resetting bearer <eth:syzkaller0>
[  474.101767][ T6550] tipc: Resetting bearer <eth:syzkaller0>
[  474.124552][ T6550] tipc: Disabling bearer <eth:syzkaller0>
[  474.356674][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14765'.
[  474.398815][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14765'.
[  474.436805][ T6606] netlink: 232 bytes leftover after parsing attributes in process `syz.4.14771'.
[  474.606195][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14777'.
[  474.610392][ T6621] IPVS: Error joining to the multicast group
[  474.654005][ T6627] netlink: 'syz.4.14779': attribute type 1 has an invalid length.
[  474.895723][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14794'.
[  475.130827][ T6693] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  475.133365][ T6693] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  475.136250][ T6693] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  475.198686][ T6694] netlink: 'syz.3.14808': attribute type 4 has an invalid length.
[  475.201428][ T6694] netlink: 168 bytes leftover after parsing attributes in process `syz.3.14808'.
[  475.792161][ T6696] lo speed is unknown, defaulting to 1000
[  475.871654][ T6696] lo speed is unknown, defaulting to 1000
[  475.874359][ T6696] lo speed is unknown, defaulting to 1000
[  475.947961][ T6696] netlink: 'syz.1.14809': attribute type 13 has an invalid length.
[  475.957970][ T6696] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  476.069217][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14816'.
[  476.273850][ T6737] netlink: 'syz.3.14828': attribute type 5 has an invalid length.
[  476.294548][ T6740] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  476.324048][ T6737] lo speed is unknown, defaulting to 1000
[  476.455416][ T6737] lo speed is unknown, defaulting to 1000
[  476.457958][ T6737] lo speed is unknown, defaulting to 1000
[  476.749379][ T6774] netlink: 'syz.3.14842': attribute type 4 has an invalid length.
[  476.898735][ T6794] netlink: 'syz.4.14852': attribute type 7 has an invalid length.
[  476.907001][ T6794] : entered promiscuous mode
[  477.031607][ T6808] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  477.192649][ T6828] smc: net device bond0 applied user defined pnetid SYZ2
[  477.355868][ T6828] smc: removing net device bond0 with user defined pnetid SYZ2
[  477.359895][ T6828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  477.363663][ T6828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  477.367748][ T6828] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  477.375157][ T6828] bond0 (unregistering): Released all slaves
[  477.414344][ T6836] lo speed is unknown, defaulting to 1000
[  477.500565][ T6836] lo speed is unknown, defaulting to 1000
[  477.503092][ T6836] lo speed is unknown, defaulting to 1000
[  477.727662][ T6857] netlink: 'syz.3.14880': attribute type 3 has an invalid length.
[  477.753440][ T6859] netlink: 'syz.3.14881': attribute type 4 has an invalid length.
[  478.302591][ T6907] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  478.306159][ T6907] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  478.308593][ T6907] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  478.311164][ T6907] tipc: Resetting bearer <eth:syzkaller0>
[  478.834744][   T24] page_pool_release_retry() stalled pool shutdown: id 141, 3329 inflight 60 sec
[  478.898820][ T6968] syzkaller1: entered promiscuous mode
[  478.900703][ T6968] syzkaller1: entered allmulticast mode
[  478.964575][ T6970] __nla_validate_parse: 17 callbacks suppressed
[  478.964587][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14932'.
[  479.087329][ T6980] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14936'.
[  479.090703][ T6980] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14936'.
[  479.129939][ T6975] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.14934'.
[  479.243124][ T5855] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  480.630997][ T7029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14954'.
[  480.658817][ T7031] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  480.661542][ T7031] syzkaller0: entered promiscuous mode
[  480.661667][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14956'.
[  480.663367][ T7031] syzkaller0: entered allmulticast mode
[  480.679326][ T7031] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  480.724242][ T7031] tipc: Resetting bearer <eth:syzkaller0>
[  480.731532][ T7030] tipc: Resetting bearer <eth:syzkaller0>
[  480.747600][ T7030] tipc: Disabling bearer <eth:syzkaller0>
[  480.783883][ T7045] vxcan1: entered allmulticast mode
[  480.941635][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14971'.
[  481.240073][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14987'.
[  481.368770][ T7107] netlink: 'syz.4.14990': attribute type 1 has an invalid length.
[  481.371320][ T7107] netlink: 228 bytes leftover after parsing attributes in process `syz.4.14990'.
[  481.579905][ T7126] tc_dump_action: action bad kind
[  481.843297][ T7141] netlink: 508 bytes leftover after parsing attributes in process `syz.1.15006'.
[  482.082442][ T7179] netlink: 'syz.3.15022': attribute type 23 has an invalid length.
[  482.401271][ T7216] netlink: 'syz.1.15038': attribute type 21 has an invalid length.
[  482.403928][ T7216] netlink: 'syz.1.15038': attribute type 5 has an invalid length.
[  482.406951][ T7216] netlink: 'syz.1.15038': attribute type 6 has an invalid length.
[  483.239269][ T7290] sctp: [Deprecated]: syz.3.15071 (pid 7290) Use of struct sctp_assoc_value in delayed_ack socket option.
[  483.239269][ T7290] Use struct sctp_sack_info instead
[  483.281576][ T7295] policy can only be matched on NF_INET_PRE_ROUTING
[  483.281591][ T7295] unable to load match
[  483.778183][ T7348] netlink: 'syz.4.15096': attribute type 29 has an invalid length.
[  484.012666][ T7379] __nla_validate_parse: 13 callbacks suppressed
[  484.012677][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15110'.
[  484.137684][ T7395] smc: net device bond0 applied user defined pnetid SYZ2
[  484.141299][ T7395] smc: net device bond0 erased user defined pnetid SYZ2
[  484.172234][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15121'.
[  484.198603][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15120'.
[  484.363263][ T7427] netlink: 'syz.4.15131': attribute type 1 has an invalid length.
[  484.444658][ T7435] IPv4: Oversized IP packet from 127.202.26.0
[  484.766069][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15148'.
[  484.835894][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15150'.
[  484.958521][ T7499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  485.256143][ T7524] netlink: 104 bytes leftover after parsing attributes in process `syz.4.15169'.
[  485.331092][ T7536] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  485.559606][ T7555] netlink: 'syz.4.15180': attribute type 1 has an invalid length.
[  485.562507][ T7555] netlink: 'syz.4.15180': attribute type 4 has an invalid length.
[  485.565611][ T7555] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15180'.
[  485.569532][ T7555] netlink: 'syz.4.15180': attribute type 1 has an invalid length.
[  485.572768][ T7555] netlink: 'syz.4.15180': attribute type 4 has an invalid length.
[  485.576183][ T7555] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15180'.
[  486.313307][ T7562] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15184'.
[  486.354752][T29014] Bluetooth: hci3: command 0x0405 tx timeout
[  486.471748][ T7591] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15198'.
[  487.128036][ T7696] validate_nla: 1 callbacks suppressed
[  487.128047][ T7696] netlink: 'syz.4.15248': attribute type 3 has an invalid length.
[  487.135203][ T7696] netlink: 'syz.4.15248': attribute type 1 has an invalid length.
[  487.161932][ T7700] netlink: 'syz.4.15250': attribute type 25 has an invalid length.
[  487.166486][ T7700] netlink: 'syz.4.15250': attribute type 1 has an invalid length.
[  487.918384][ T6993] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  487.921255][ T6993] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  487.926819][ T6993] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  488.044576][ T7782] netlink: 'syz.4.15284': attribute type 20 has an invalid length.
[  488.053144][   T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  488.058760][   T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  488.061555][ T7782] netlink: 'syz.4.15284': attribute type 20 has an invalid length.
[  488.064190][   T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  488.088708][   T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  488.100090][ T7784] bridge24: port 1(veth19) entered blocking state
[  488.102340][ T7784] bridge24: port 1(veth19) entered disabled state
[  488.106355][ T7784] veth19: entered allmulticast mode
[  488.109002][ T7784] veth19: entered promiscuous mode
[  488.119336][ T7784] bridge24: port 2(veth0_to_bond) entered blocking state
[  488.121739][ T7784] bridge24: port 2(veth0_to_bond) entered disabled state
[  488.124082][ T7784] veth0_to_bond: entered allmulticast mode
[  488.135791][ T7784] veth0_to_bond: entered promiscuous mode
[  488.232096][ T7792] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4
[  488.500324][T22006] cgroup: fork rejected by pids controller in /syz3
[  489.031400][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  489.036637][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  489.039654][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  489.043801][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  489.047245][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  489.051189][ T7835] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  489.258086][ T7843] syzkaller1: entered promiscuous mode
[  489.260024][ T7843] syzkaller1: entered allmulticast mode
[  489.355513][T29014] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  489.359492][T29014] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  489.362564][T29014] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  489.375445][T29014] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  489.378778][T29014] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  489.391908][ T7847] __nla_validate_parse: 13 callbacks suppressed
[  489.391942][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15312'.
[  489.401495][ T7844] lo speed is unknown, defaulting to 1000
[  489.499607][ T7844] lo speed is unknown, defaulting to 1000
[  489.502146][ T7844] lo speed is unknown, defaulting to 1000
[  489.546182][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15316'.
[  489.629230][ T7844] chnl_net:caif_netlink_parms(): no params data found
[  489.673654][ T7881] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15324'.
[  489.677450][ T7881] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15324'.
[  489.680339][ T7881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15324'.
[  489.718639][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.721114][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.723513][ T7844] bridge_slave_0: entered allmulticast mode
[  489.726547][ T7844] bridge_slave_0: entered promiscuous mode
[  489.730143][ T7885] bond0: Device is already in use.
[  489.732815][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.739890][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.742338][ T7844] bridge_slave_1: entered allmulticast mode
[  489.745457][ T7844] bridge_slave_1: entered promiscuous mode
[  489.777431][ T7891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  489.779726][ T7891] IPv6: NLM_F_CREATE should be set when creating new route
[  489.843276][ T7844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  489.855614][ T7844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  489.890583][ T7844] team0: Port device team_slave_0 added
[  489.902965][ T7844] team0: Port device team_slave_1 added
[  489.945464][ T7844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  489.947680][ T7844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  489.959011][ T7844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  489.965943][ T7844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  489.968240][ T7844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  489.979166][ T7844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  490.011679][ T7844] hsr_slave_0: entered promiscuous mode
[  490.014216][ T7844] hsr_slave_1: entered promiscuous mode
[  490.148626][ T7844] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.202950][ T7844] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.255515][ T7844] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.316524][ T7844] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.353758][ T7912] netlink: 76 bytes leftover after parsing attributes in process `syz.4.15337'.
[  490.362308][ T7912] netlink: 76 bytes leftover after parsing attributes in process `syz.4.15337'.
[  490.438435][ T7844] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  490.444470][ T7844] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  490.450601][ T7844] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  490.457515][ T7844] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  490.541934][ T7844] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.561471][ T7844] 8021q: adding VLAN 0 to HW filter on device team0
[  490.571794][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.574119][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  490.590161][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.592554][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  490.778868][ T7844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.792421][ T7943] netlink: 'syz.1.15346': attribute type 30 has an invalid length.
[  490.797969][ T7943] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  490.800922][ T7943] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  490.830444][ T7844] veth0_vlan: entered promiscuous mode
[  490.838046][ T7844] veth1_vlan: entered promiscuous mode
[  490.857375][ T7844] veth0_macvtap: entered promiscuous mode
[  490.861301][ T7844] veth1_macvtap: entered promiscuous mode
[  490.871959][ T7844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.878410][ T7844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  490.885832][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.890578][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.893710][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.901395][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  490.950062][ T6773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.952596][ T6773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.974374][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.977372][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.074170][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15356'.
[  491.395576][   T54] Bluetooth: hci2: command tx timeout
[  491.435647][ T7985] netlink: 'syz.1.15364': attribute type 2 has an invalid length.
[  491.562842][ T7995] lo speed is unknown, defaulting to 1000
[  491.645520][ T7995] lo speed is unknown, defaulting to 1000
[  491.648123][ T7995] lo speed is unknown, defaulting to 1000
[  491.742200][ T7999] lo speed is unknown, defaulting to 1000
[  491.856260][ T7999] lo speed is unknown, defaulting to 1000
[  491.885455][ T7999] lo speed is unknown, defaulting to 1000
[  492.124120][ T8024] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15380'.
[  492.178972][ T8027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15381'.
[  492.181906][ T8027] netlink: 'syz.3.15381': attribute type 4 has an invalid length.
[  492.195818][ T8026] delete_channel: no stack
[  492.243466][ T8033] netlink: 'syz.4.15386': attribute type 83 has an invalid length.
[  492.389524][ T8050] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  492.449536][ T8058] netlink: 'syz.1.15396': attribute type 29 has an invalid length.
[  492.928624][ T8120] lo speed is unknown, defaulting to 1000
[  492.981740][ T8128] bridge0: port 3(netdevsim2) entered blocking state
[  492.984226][ T8128] bridge0: port 3(netdevsim2) entered disabled state
[  492.988799][ T8128] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  492.992765][ T8128] netdevsim netdevsim3 netdevsim2: entered promiscuous mode
[  492.998741][ T8128] bridge0: port 3(netdevsim2) entered blocking state
[  493.001085][ T8128] bridge0: port 3(netdevsim2) entered forwarding state
[  493.062908][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.067762][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.087301][ T8133] bridge0: port 3(netdevsim2) entered disabled state
[  493.093127][ T8120] lo speed is unknown, defaulting to 1000
[  493.100742][ T8120] lo speed is unknown, defaulting to 1000
[  493.100968][ T8133] netlink: 'syz.3.15432': attribute type 16 has an invalid length.
[  493.110504][ T8133] netlink: 'syz.3.15432': attribute type 17 has an invalid length.
[  493.139467][ T8133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  493.269263][ T8141] netlink: 'syz.3.15434': attribute type 1 has an invalid length.
[  493.475082][   T54] Bluetooth: hci2: command tx timeout
[  494.105830][ T8179] netlink: 'syz.3.15450': attribute type 1 has an invalid length.
[  494.139310][ T8185] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  494.418778][ T8230] netlink: 'syz.3.15474': attribute type 21 has an invalid length.
[  494.421772][ T8230] netlink: 'syz.3.15474': attribute type 1 has an invalid length.
[  494.525088][ T8246] __nla_validate_parse: 14 callbacks suppressed
[  494.525099][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15482'.
[  494.531326][ T8246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15482'.
[  494.538741][ T8246] gretap1: entered promiscuous mode
[  494.564511][ T8248] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15483'.
[  495.209428][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15490'.
[  495.299661][ T8285] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15499'.
[  495.323079][ T8289] netlink: 'syz.3.15501': attribute type 3 has an invalid length.
[  495.375100][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15505'.
[  495.378111][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15505'.
[  495.410774][ T8295] lo speed is unknown, defaulting to 1000
[  495.435565][ T8304] netlink: 248 bytes leftover after parsing attributes in process `syz.1.15508'.
[  495.544106][ T8295] lo speed is unknown, defaulting to 1000
[  495.547193][ T8295] lo speed is unknown, defaulting to 1000
[  495.555465][   T54] Bluetooth: hci2: command tx timeout
[  495.608699][ T8322] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.15516'.
[  496.009921][ T8369] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  496.110959][ T8385] lo speed is unknown, defaulting to 1000
[  496.139308][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15549'.
[  496.303883][ T8385] lo speed is unknown, defaulting to 1000
[  496.313218][ T8385] lo speed is unknown, defaulting to 1000
[  496.356414][ T8403] gretap0: entered promiscuous mode
[  496.591858][ T8431] delete_channel: no stack
[  497.033309][ T8472] smc: adding net device bond0 with user defined pnetid SYZ2
[  497.038106][ T8472] 8021q: adding VLAN 0 to HW filter on device bond0
[  497.060556][ T8478] bond0: (slave geneve2): making interface the new active one
[  497.068305][ T8478] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  497.074193][ T5872] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.081053][ T5872] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.083893][ T5872] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.097141][ T5872] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.479016][ T8526] syzkaller1: entered promiscuous mode
[  497.480913][ T8526] syzkaller1: entered allmulticast mode
[  497.629404][ T8545] pim6reg1: entered promiscuous mode
[  497.631922][ T8545] pim6reg1: entered allmulticast mode
[  497.634523][ T8549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  497.639565][   T54] Bluetooth: hci2: command tx timeout
[  497.676177][ T8546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  497.741719][ T8560] syzkaller1: entered promiscuous mode
[  497.743505][ T8560] syzkaller1: entered allmulticast mode
[  497.891412][ T8577] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode
[  497.895601][ T8577] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  497.954419][ T8577] lo speed is unknown, defaulting to 1000
[  498.012803][ T8592] openvswitch: netlink: Message has 1 unknown bytes.
[  498.015768][ T8592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.083047][ T8577] lo speed is unknown, defaulting to 1000
[  498.086798][ T8577] lo speed is unknown, defaulting to 1000
[  498.227128][ T8612] xfrm1: entered allmulticast mode
[  498.353798][ T8627] validate_nla: 4 callbacks suppressed
[  498.353839][ T8627] netlink: 'syz.4.15653': attribute type 5 has an invalid length.
[  498.537247][ T8654] netlink: 'syz.3.15666': attribute type 11 has an invalid length.
[  499.226360][ T8749] tipc: MTU too low for tipc bearer
[  499.570047][ T8795] __nla_validate_parse: 14 callbacks suppressed
[  499.570058][ T8795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15731'.
[  500.523543][ T8852] vlan2: entered promiscuous mode
[  500.823178][ T8856] sock: sock_timestamping_bind_phc: sock not bind to device
[  501.548339][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15779'.
[  501.580171][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15779'.
[  501.723523][ T8916] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15784'.
[  502.200466][ T8947] vcan0: tx drop: invalid sa for name 0x0000000010000000
[  502.251533][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15801'.
[  502.985597][ T8980] netlink: 'syz.1.15812': attribute type 1 has an invalid length.
[  503.287870][ T8973] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  503.797216][ T9076] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15859'.
[  503.861465][ T9076] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  503.861729][T16362] IPVS: starting estimator thread 0...
[  503.955569][ T9078] IPVS: using max 78 ests per chain, 187200 per kthread
[  504.139877][ T9093] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15866'.
[  504.150363][ T9093] netlink: 'syz.1.15866': attribute type 1 has an invalid length.
[  504.166984][ T9093] 8021q: adding VLAN 0 to HW filter on device bond10
[  504.182855][ T9093] bond10: (slave gretap4): making interface the new active one
[  504.186612][ T9093] bond10: (slave gretap4): Enslaving as an active interface with an up link
[  504.417698][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15877'.
[  504.442777][ T9118] netlink: 'syz.1.15878': attribute type 83 has an invalid length.
[  504.464438][ T9120] netlink: 'syz.1.15879': attribute type 4 has an invalid length.
[  504.619968][ T9132] geneve3: entered promiscuous mode
[  504.867250][ T9153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15894'.
[  504.992193][ T9167] tipc: Started in network mode
[  504.993854][ T9167] tipc: Node identity ff, cluster identity 4711
[  504.998752][ T9167] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  505.378971][ T9186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15908'.
[  505.560429][ T9209] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15919'.
[  505.567515][ T9209] netlink: 43 bytes leftover after parsing attributes in process `syz.1.15919'.
[  505.570360][ T9209] netlink: 'syz.1.15919': attribute type 5 has an invalid length.
[  505.573125][ T9209] netlink: 43 bytes leftover after parsing attributes in process `syz.1.15919'.
[  505.600427][ T9213] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15921'.
[  505.611507][ T9213] netlink: 43 bytes leftover after parsing attributes in process `syz.1.15921'.
[  505.615183][ T9213] netlink: 'syz.1.15921': attribute type 6 has an invalid length.
[  505.617816][ T9213] netlink: 'syz.1.15921': attribute type 5 has an invalid length.
[  505.620344][ T9213] netlink: 43 bytes leftover after parsing attributes in process `syz.1.15921'.
[  505.719063][ T9215] lo speed is unknown, defaulting to 1000
[  505.833316][ T9215] lo speed is unknown, defaulting to 1000
[  505.836775][ T9215] lo speed is unknown, defaulting to 1000
[  505.941534][ T9240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  505.947084][ T9240] syzkaller0: entered promiscuous mode
[  505.949512][ T9240] syzkaller0: entered allmulticast mode
[  505.967968][ T9240] tipc: Resetting bearer <eth:syzkaller0>
[  505.972522][ T9239] tipc: Resetting bearer <eth:syzkaller0>
[  505.988604][ T9239] tipc: Disabling bearer <eth:syzkaller0>
[  506.098851][ T9244] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15934'.
[  506.268956][ T9258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15941'.
[  507.250865][ T9338] xt_policy: too many policy elements
[  507.368373][ T9358] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  507.602967][ T9384] lo speed is unknown, defaulting to 1000
[  507.689341][ T9384] lo speed is unknown, defaulting to 1000
[  507.689375][ T9387] lo speed is unknown, defaulting to 1000
[  507.692020][ T9384] lo speed is unknown, defaulting to 1000
[  507.805233][ T9387] lo speed is unknown, defaulting to 1000
[  507.807953][ T9387] lo speed is unknown, defaulting to 1000
[  507.995069][ T9403] !: left promiscuous mode
[  507.996684][ T9403] !: left allmulticast mode
[  508.000622][ T9403] 0: left allmulticast mode
[  508.002187][ T9403] hsr_slave_0: left allmulticast mode
[  508.004074][ T9403] hsr_slave_1: left allmulticast mode
[  508.013694][ T9403] tipc: Resetting bearer <eth:syzkaller0>
[  508.023627][ T9403] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  508.026252][ T9403] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  508.030772][ T9403] vlan0: left promiscuous mode
[  508.032314][ T9403] veth1: left promiscuous mode
[  508.040245][ T9403] bond7: left promiscuous mode
[  508.041845][ T9403] bond7: left allmulticast mode
[  508.044275][ T9403] bridge17: left allmulticast mode
[  508.047773][ T9403] macvlan1: left promiscuous mode
[  508.056205][ T9403] bridge21: left allmulticast mode
[  508.091369][ T9403] xfrm1: left allmulticast mode
[  508.098870][ T6993] lo speed is unknown, defaulting to 1000
[  508.101003][ T6993] syz1: Port: 1 Link DOWN
[  508.250134][ T9406] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  508.261224][ T9406] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  508.368958][ T9406] mac80211_hwsim hwsim34 wlan0: left promiscuous mode
[  508.379036][ T9406] gretap1: left promiscuous mode
[  508.383266][ T9406] vlan2: left promiscuous mode
[  508.385331][ T9406] gretap0: left promiscuous mode
[  508.387599][ T9404] @: renamed from veth0_vlan
[  508.396732][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.400322][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.403317][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.410286][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.523913][ T9421] netlink: 'syz.4.16008': attribute type 62 has an invalid length.
[  509.613566][ T9477] netlink: 'syz.3.16034': attribute type 16 has an invalid length.
[  509.616476][ T9477] netlink: 'syz.3.16034': attribute type 17 has an invalid length.
[  509.648845][ T9477] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.652267][ T9477] 8021q: adding VLAN 0 to HW filter on device team0
[  509.657452][ T9477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  510.618298][ T9503] __nla_validate_parse: 5 callbacks suppressed
[  510.618310][ T9503] netlink: 68 bytes leftover after parsing attributes in process `syz.4.16045'.
[  510.623707][ T9503] netlink: 56 bytes leftover after parsing attributes in process `syz.4.16045'.
[  510.816013][ T9519] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  511.075111][T29014] Bluetooth: hci2: command tx timeout
[  512.119639][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16095'.
[  512.238101][   T33] audit: type=1804 audit(1755016932.485:13): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.16103" name="/newroot/1141/cgroup.controllers" dev="tmpfs" ino=5763 res=1 errno=0
[  512.249845][   T33] audit: type=1800 audit(1755016932.485:14): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16103" name="cgroup.controllers" dev="tmpfs" ino=5763 res=0 errno=0
[  512.258765][   T33] audit: type=1800 audit(1755016932.495:15): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16103" name="cgroup.controllers" dev="tmpfs" ino=5763 res=0 errno=0
[  512.407790][ T9642] vlan3: entered allmulticast mode
[  512.409460][ T9642] dummy0: entered allmulticast mode
[  512.953081][ T9648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16109'.
[  512.988395][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16110'.
[  513.165628][T29014] Bluetooth: hci2: command 0x0405 tx timeout
[  513.442485][ T9695] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16131'.
[  513.475286][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16133'.
[  513.609310][ T9720] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  513.748681][ T9744] netlink: 'syz.4.16156': attribute type 1 has an invalid length.
[  514.572564][ T9818] netlink: 'syz.3.16189': attribute type 1 has an invalid length.
[  514.593022][ T9820] nbd: nbd1 already in use
[  514.597132][ T9820] block nbd1: NBD_DISCONNECT
[  514.598882][ T9820] block nbd1: Send disconnect failed -32
[  514.826994][ T9856] siw: device registration error -23
[  514.853569][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16210'.
[  514.993567][ T9869] netlink: 'syz.1.16214': attribute type 1 has an invalid length.
[  515.091467][ T9881] netlink: 'syz.4.16220': attribute type 4 has an invalid length.
[  515.114072][ T9881] netlink: 'syz.4.16220': attribute type 4 has an invalid length.
[  515.198212][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16227'.
[  515.547527][ T9932] lo speed is unknown, defaulting to 1000
[  515.623813][ T9932] lo speed is unknown, defaulting to 1000
[  515.626559][ T9932] lo speed is unknown, defaulting to 1000
[  515.680124][   T33] audit: type=1107 audit(1755016935.925:16): pid=9936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  515.961270][ T9962] netlink: 'syz.3.16257': attribute type 21 has an invalid length.
[  515.965176][ T9962] netlink: 128 bytes leftover after parsing attributes in process `syz.3.16257'.
[  515.969297][ T9962] netlink: 3 bytes leftover after parsing attributes in process `syz.3.16257'.
[  516.105104][ T9976] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  516.108406][ T9976] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  516.190902][ T9984] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.16268'.
[  516.260133][ T9994] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.16273'.
[  516.330498][T10000] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  516.720989][T10030] netlink: 'syz.1.16290': attribute type 4 has an invalid length.
[  517.103113][T10064] syz.4.16307: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  517.108666][T10064] CPU: 0 UID: 0 PID: 10064 Comm: syz.4.16307 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  517.108681][T10064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  517.108686][T10064] Call Trace:
[  517.108690][T10064]  <TASK>
[  517.108693][T10064]  dump_stack_lvl+0x189/0x250
[  517.108710][T10064]  ? __pfx_dump_stack_lvl+0x10/0x10
[  517.108721][T10064]  ? __pfx__printk+0x10/0x10
[  517.108734][T10064]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  517.108746][T10064]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  517.108758][T10064]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  517.108769][T10064]  warn_alloc+0x214/0x310
[  517.108782][T10064]  ? stack_depot_save_flags+0x40/0x860
[  517.108792][T10064]  ? __pfx_warn_alloc+0x10/0x10
[  517.108804][T10064]  ? kasan_save_track+0x4f/0x80
[  517.108815][T10064]  ? xskq_create+0x56/0x170
[  517.108824][T10064]  ? xsk_init_queue+0xb0/0x110
[  517.108830][T10064]  ? xsk_setsockopt+0x4dc/0x8d0
[  517.108837][T10064]  ? do_sock_setsockopt+0x17c/0x1b0
[  517.108847][T10064]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  517.108856][T10064]  ? do_syscall_64+0xfa/0x3b0
[  517.108865][T10064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.108876][T10064]  __vmalloc_node_range_noprof+0x125/0x12f0
[  517.108900][T10064]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  517.108912][T10064]  ? xskq_create+0x56/0x170
[  517.108921][T10064]  ? __kasan_kmalloc+0x93/0xb0
[  517.108934][T10064]  vmalloc_user_noprof+0xad/0xf0
[  517.108946][T10064]  ? xskq_create+0xbf/0x170
[  517.108955][T10064]  xskq_create+0xbf/0x170
[  517.108964][T10064]  xsk_init_queue+0xb0/0x110
[  517.108973][T10064]  xsk_setsockopt+0x4dc/0x8d0
[  517.108982][T10064]  ? __pfx_xsk_setsockopt+0x10/0x10
[  517.108989][T10064]  ? __pfx_aa_sk_perm+0x10/0x10
[  517.109000][T10064]  ? aa_sock_opt_perm+0xff/0x1b0
[  517.109012][T10064]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  517.109019][T10064]  ? __pfx_xsk_setsockopt+0x10/0x10
[  517.109028][T10064]  do_sock_setsockopt+0x17c/0x1b0
[  517.109039][T10064]  __x64_sys_setsockopt+0x13f/0x1b0
[  517.109051][T10064]  do_syscall_64+0xfa/0x3b0
[  517.109060][T10064]  ? lockdep_hardirqs_on+0x9c/0x150
[  517.109068][T10064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.109075][T10064]  ? exc_page_fault+0x9f/0xf0
[  517.109084][T10064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.109091][T10064] RIP: 0033:0x7fcc3678ebe9
[  517.109099][T10064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  517.109106][T10064] RSP: 002b:00007fcc37646038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  517.109115][T10064] RAX: ffffffffffffffda RBX: 00007fcc369b5fa0 RCX: 00007fcc3678ebe9
[  517.109120][T10064] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  517.109125][T10064] RBP: 00007fcc36811e19 R08: 0000000000000004 R09: 0000000000000000
[  517.109129][T10064] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  517.109133][T10064] R13: 00007fcc369b6038 R14: 00007fcc369b5fa0 R15: 00007fffd2eb1ea8
[  517.109145][T10064]  </TASK>
[  517.109148][T10064] Mem-Info:
[  517.149853][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16309'.
[  517.150920][T10064] active_anon:12841 inactive_anon:0 isolated_anon:0
[  517.150920][T10064]  active_file:1063 inactive_file:38398 isolated_file:0
[  517.150920][T10064]  unevictable:1768 dirty:191 writeback:0
[  517.150920][T10064]  slab_reclaimable:11613 slab_unreclaimable:128537
[  517.150920][T10064]  mapped:23215 shmem:2454 pagetables:1186
[  517.150920][T10064]  sec_pagetables:0 bounce:0
[  517.150920][T10064]  kernel_misc_reclaimable:0
[  517.150920][T10064]  free:191465 free_pcp:23045 free_cma:0
[  517.220523][T10075] netlink: 248 bytes leftover after parsing attributes in process `syz.3.16311'.
[  517.223003][T10064] Node 0 active_anon:44560kB inactive_anon:0kB active_file:3072kB inactive_file:20152kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:76488kB dirty:480kB writeback:0kB shmem:4988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6144kB pagetables:2124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  517.238151][T10064] Node 1 active_anon:6736kB inactive_anon:0kB active_file:1180kB inactive_file:133440kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16372kB dirty:284kB writeback:0kB shmem:4828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7244kB pagetables:2892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  517.249155][T10064] Node 0 DMA free:14980kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:360kB local_pcp:360kB free_cma:0kB
[  517.259076][T10064] lowmem_reserve[]: 0 811 811 811 811
[  517.260807][T10064] Node 0 DMA32 free:127308kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44628kB inactive_anon:0kB active_file:3072kB inactive_file:20152kB unevictable:3536kB writepending:480kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:33240kB local_pcp:16968kB free_cma:0kB
[  517.270805][T10064] lowmem_reserve[]: 0 0 0 0 0
[  517.272307][T10064] Node 1 DMA32 free:395852kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:16896kB local_pcp:6380kB free_cma:0kB
[  517.284935][T10064] lowmem_reserve[]: 0 0 854 854 854
[  517.286657][T10064] Node 1 Normal free:226888kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6704kB inactive_anon:0kB active_file:1180kB inactive_file:133432kB unevictable:3536kB writepending:284kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41404kB local_pcp:15208kB free_cma:0kB
[  517.312781][T10064] lowmem_reserve[]: 0 0 0 0 0
[  517.314304][T10064] Node 0 DMA: 5*4kB (U) 6*8kB (U) 6*16kB (U) 5*32kB (U) 5*64kB (U) 8*128kB (UM) 6*256kB (UM) 7*512kB (UM) 6*1024kB (UM) 1*2048kB (U) 0*4096kB = 14980kB
[  517.317991][T10081] netlink: 'syz.3.16314': attribute type 142 has an invalid length.
[  517.321362][T10064] Node 0 DMA32: 0*4kB 132*8kB (ME) 82*16kB (UME) 137*32kB (UM) 197*64kB (UM) 71*128kB (UME) 27*256kB (UM) 14*512kB (UME) 8*1024kB (UM) 5*2048kB (UME) 16*4096kB (U) = 126496kB
[  517.327636][T10064] Node 1 DMA32: 153*4kB (UM) 149*8kB (UM) 136*16kB (UME) 230*32kB (UME) 146*64kB (UME) 125*128kB (UM) 113*256kB (UME) 105*512kB (UME) 102*1024kB (UME) 6*2048kB (UME) 39*4096kB (UM) = 395852kB
[  517.337123][T10064] Node 1 Normal: 293*4kB (UME) 868*8kB (UME) 1035*16kB (UME) 586*32kB (UME) 439*64kB (UM) 242*128kB (UME) 122*256kB (UM) 72*512kB (UM) 51*1024kB (UM) 2*2048kB (UE) 0*4096kB = 226916kB
[  517.343252][T10064] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  517.352671][T10064] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  517.355792][T10064] 41972 total pagecache pages
[  517.368052][T10064] 6 pages in swap cache
[  517.369476][T10064] Free swap  = 124972kB
[  517.370796][T10064] Total swap = 124996kB
[  517.372068][T10064] 786301 pages RAM
[  517.373239][T10064] 0 pages HighMem/MovableOnly
[  517.375422][T10064] 241320 pages reserved
[  517.376808][T10064] 0 pages cma reserved
[  517.447989][T10091] netlink: 830 bytes leftover after parsing attributes in process `syz.1.16319'.
[  517.503844][T10098] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  517.514441][T10098] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  517.519560][T10098] tipc: Resetting bearer <eth:syzkaller0>
[  517.664962][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16334'.
[  517.861072][   T33] audit: type=1800 audit(1755016938.105:17): pid=10119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.16330" name="cgroup.controllers" dev="tmpfs" ino=1690 res=0 errno=0
[  517.924951][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.929875][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.992822][T10157] lo speed is unknown, defaulting to 1000
[  518.094038][T10157] lo speed is unknown, defaulting to 1000
[  518.096664][T10157] lo speed is unknown, defaulting to 1000
[  518.193687][T10175] netlink: 'syz.1.16357': attribute type 5 has an invalid length.
[  518.196305][T10175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16357'.
[  518.290342][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16360'.
[  518.365196][ T5906] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  518.725464][T10215] netlink: 'syz.1.16373': attribute type 1 has an invalid length.
[  518.728223][T10215] netlink: 'syz.1.16373': attribute type 2 has an invalid length.
[  518.860492][T10224] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  519.139610][T10263] netlink: 'syz.3.16393': attribute type 1 has an invalid length.
[  519.146449][T10263] netlink: 'syz.3.16393': attribute type 11 has an invalid length.
[  519.154272][T10263] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  519.234390][T10274] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  519.585292][T10301] nbd1: detected capacity change from 0 to 875674160
[  519.628618][T10314] sch_tbf: burst 2 is lower than device lo mtu (230) !
[  519.640287][T10314] sch_tbf: burst 2 is lower than device lo mtu (230) !
[  519.643036][T10314] sch_tbf: burst 2 is lower than device lo mtu (230) !
[  519.801406][    C0] vcan0: j1939_tp_rxtimer: 0xffff888044fb6400: rx timeout, send abort
[  520.301449][    C0] vcan0: j1939_tp_rxtimer: 0xffff888044fb7000: rx timeout, send abort
[  520.306708][    C0] vcan0: j1939_tp_rxtimer: 0xffff888044fb6400: abort rx timeout. Force session deactivation
[  520.311768][   T55] block nbd1: Receive control failed (result -32)
[  520.530829][T10345] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode
[  520.534446][T10345] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  520.804145][    C0] vcan0: j1939_tp_rxtimer: 0xffff888044fb7000: abort rx timeout. Force session deactivation
[  521.063253][T10376] __nla_validate_parse: 12 callbacks suppressed
[  521.063265][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16446'.
[  521.102326][T10380] netlink: 'syz.1.16448': attribute type 8 has an invalid length.
[  521.167815][T10384] sctp: [Deprecated]: syz.1.16450 (pid 10384) Use of struct sctp_assoc_value in delayed_ack socket option.
[  521.167815][T10384] Use struct sctp_sack_info instead
[  521.552677][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16464'.
[  521.588486][T10416] netlink: 172 bytes leftover after parsing attributes in process `syz.3.16465'.
[  521.623833][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16467'.
[  521.628053][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16467'.
[  521.778507][T10438] netlink: 244 bytes leftover after parsing attributes in process `syz.1.16476'.
[  521.972582][T10467] netlink: 83 bytes leftover after parsing attributes in process `syz.4.16488'.
[  522.134084][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16493'.
[  522.580432][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16523'.
[  522.631277][T10553] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.16527'.
[  523.382096][T10647] netlink: 'syz.3.16571': attribute type 1 has an invalid length.
[  523.557396][T10657] smc: net device bond0 applied user defined pnetid SYZ2
[  523.559927][T10657] smc: net device bond0 erased user defined pnetid SYZ2
[  523.737029][T10676] veth0_to_team: entered promiscuous mode
[  523.957760][T10700] smc: net device bond0 applied user defined pnetid SYZ
[  524.049469][T10711] netlink: 'syz.3.16601': attribute type 2 has an invalid length.
[  524.055689][T10711] netlink: 'syz.3.16601': attribute type 1 has an invalid length.
[  524.851712][T10773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  525.171337][T10794] lo speed is unknown, defaulting to 1000
[  525.257081][T10794] lo speed is unknown, defaulting to 1000
[  525.259618][T10794] lo speed is unknown, defaulting to 1000
[  525.263896][T10803] netlink: 'syz.4.16642': attribute type 1 has an invalid length.
[  525.350381][T10810] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  525.424155][T10816] batadv_slave_0: entered promiscuous mode
[  525.598090][T10826] netlink: 'syz.4.16648': attribute type 13 has an invalid length.
[  525.616945][T10826] netlink: 'syz.4.16648': attribute type 17 has an invalid length.
[  525.621793][T10826] sit0: left promiscuous mode
[  525.653481][T10826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  525.673801][T10830] lo speed is unknown, defaulting to 1000
[  525.753635][T10826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.808402][T10830] lo speed is unknown, defaulting to 1000
[  525.810934][T10830] lo speed is unknown, defaulting to 1000
[  525.833313][T10841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  526.043827][T10852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  526.081157][T10854] sctp: [Deprecated]: syz.3.16660 (pid 10854) Use of int in maxseg socket option.
[  526.081157][T10854] Use struct sctp_assoc_value instead
[  526.527247][T10868] 8021q: adding VLAN 0 to HW filter on device bond11
[  526.529974][T10868] bridge0: port 1(bond11) entered blocking state
[  526.532185][T10868] bridge0: port 1(bond11) entered disabled state
[  526.534272][T10868] bond11: entered allmulticast mode
[  526.539956][T10868] bond11: entered promiscuous mode
[  527.556432][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  527.822459][T10930] __nla_validate_parse: 13 callbacks suppressed
[  527.822505][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16693'.
[  527.828086][T10930] openvswitch: netlink: Missing key (keys=40, expected=100)
[  527.857973][T10933] netlink: 'syz.4.16695': attribute type 10 has an invalid length.
[  527.943739][T10951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16704'.
[  527.959288][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16704'.
[  528.045035][T10963] netlink: 'syz.3.16710': attribute type 6 has an invalid length.
[  528.182667][T10986] batadv0: entered promiscuous mode
[  528.284516][T10996] netlink: 'syz.1.16725': attribute type 2 has an invalid length.
[  528.289152][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16725'.
[  528.316021][T11001] netlink: 'syz.1.16727': attribute type 8 has an invalid length.
[  528.319820][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16727'.
[  528.658382][T11041] netlink: 256 bytes leftover after parsing attributes in process `syz.1.16746'.
[  528.872613][T11067] netlink: 248 bytes leftover after parsing attributes in process `syz.1.16758'.
[  529.080037][T11093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16770'.
[  529.197067][T11109] syzkaller1: entered promiscuous mode
[  529.198922][T11109] syzkaller1: entered allmulticast mode
[  529.254129][T11119] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  529.395693][T11136] bridge1: entered allmulticast mode
[  529.413881][T11138] lo speed is unknown, defaulting to 1000
[  529.457432][T11144] netlink: 'syz.4.16790': attribute type 21 has an invalid length.
[  529.460124][T11144] netlink: 'syz.4.16790': attribute type 6 has an invalid length.
[  529.462741][T11144] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16790'.
[  529.468813][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16790'.
[  529.522275][T11138] lo speed is unknown, defaulting to 1000
[  529.528562][T11138] lo speed is unknown, defaulting to 1000
[  529.861206][T11180] netlink: 'syz.3.16808': attribute type 3 has an invalid length.
[  529.861338][T11181] netlink: 'syz.4.16809': attribute type 21 has an invalid length.
[  529.866987][T11181] IPv6: NLM_F_CREATE should be specified when creating new route
[  529.869600][T11181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  529.872001][T11181] IPv6: NLM_F_CREATE should be set when creating new route
[  529.874352][T11181] IPv6: NLM_F_CREATE should be set when creating new route
[  529.876728][T11181] IPv6: NLM_F_CREATE should be set when creating new route
[  529.979089][T11198] netlink: 'syz.3.16817': attribute type 9 has an invalid length.
[  530.060040][T11210] netlink: 'syz.4.16823': attribute type 1 has an invalid length.
[  530.397133][T11265] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  530.399860][T11265] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  530.410516][T11264] lo speed is unknown, defaulting to 1000
[  530.554190][T11264] lo speed is unknown, defaulting to 1000
[  530.557286][T11264] lo speed is unknown, defaulting to 1000
[  530.649690][T11281] veth0_to_team: left promiscuous mode
[  530.651880][T11281] batadv_slave_0: left promiscuous mode
[  530.655321][T11281] vlan0: left promiscuous mode
[  530.657429][T11281] mac80211_hwsim hwsim30 wlan0: left promiscuous mode
[  530.659950][T11281] bond1: left promiscuous mode
[  530.661572][T11281] wireguard0: left promiscuous mode
[  530.664161][T11281] ip6gre1: left promiscuous mode
[  530.673330][T11281] bond2: left promiscuous mode
[  530.676279][T11281] bond2: left allmulticast mode
[  530.683138][T11281] gretap1: left promiscuous mode
[  530.723842][T11281] geneve3: left promiscuous mode
[  530.749788][ T5564] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  530.753322][ T5564] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.759582][ T5564] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  530.763342][ T5564] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.781382][ T5564] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  530.785494][ T5564] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.789031][ T5564] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  530.792523][ T5564] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  531.158102][T11321] openvswitch: netlink: IPv4 tunnel dst address is zero
[  531.513308][T11359] tipc: Resetting bearer <eth:syzkaller0>
[  531.521762][T11359] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  531.524188][T11359] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  531.640025][T11368] 8021q: adding VLAN 0 to HW filter on device bond12
[  531.657295][T11368] 8021q: adding VLAN 0 to HW filter on device bond12
[  531.659812][T11368] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[  531.664343][T11368] bond12: (slave vxcan1): Error -95 calling set_mac_address
[  531.709130][T11375] bond12: (slave bridge31): Enslaving as an active interface with a down link
[  532.742466][T11415] syzkaller1: entered promiscuous mode
[  532.744445][T11415] syzkaller1: entered allmulticast mode
[  533.017177][T11425] validate_nla: 5 callbacks suppressed
[  533.017197][T11425] netlink: 'syz.3.16918': attribute type 1 has an invalid length.
[  533.022125][T11425] __nla_validate_parse: 16 callbacks suppressed
[  533.022138][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16918'.
[  533.031520][T11425] netlink: 45 bytes leftover after parsing attributes in process `syz.3.16918'.
[  533.040383][T11429] netlink: 'syz.1.16917': attribute type 2 has an invalid length.
[  533.043396][T11429] netlink: 119 bytes leftover after parsing attributes in process `syz.1.16917'.
[  533.073232][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16920'.
[  533.129306][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16924'.
[  533.272209][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16933'.
[  533.701472][T11517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16961'.
[  533.715765][T11517] netlink: 'syz.1.16961': attribute type 1 has an invalid length.
[  533.753016][T11517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16961'.
[  533.971275][T11541] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  534.018562][T11543] netlink: 'syz.1.16972': attribute type 7 has an invalid length.
[  534.021142][T11543] netlink: 'syz.1.16972': attribute type 8 has an invalid length.
[  534.032539][T11543] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16972'.
[  534.081685][T11553] lo speed is unknown, defaulting to 1000
[  534.137296][T11562] netlink: 'syz.3.16979': attribute type 11 has an invalid length.
[  534.299183][T11553] lo speed is unknown, defaulting to 1000
[  534.301790][T11553] lo speed is unknown, defaulting to 1000
[  534.334005][T11560] netlink: 248 bytes leftover after parsing attributes in process `syz.4.16976'.
[  534.453858][T11588] netlink: 'syz.3.16986': attribute type 5 has an invalid length.
[  534.473216][T11588] geneve2: entered promiscuous mode
[  534.483248][T11588] geneve2: entered allmulticast mode
[  534.494138][ T5872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  534.500009][ T5872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  534.525131][T11584] netdevsim netdevsim3 netdevsim2 (unregistering): left allmulticast mode
[  534.530534][T11584] netdevsim netdevsim3 netdevsim2 (unregistering): left promiscuous mode
[  534.538077][T11584] bridge0: port 3(netdevsim2) entered disabled state
[  534.975129][T11614] netlink: 'syz.4.17000': attribute type 4 has an invalid length.
[  535.056542][T11622] netlink: 'syz.4.17004': attribute type 3 has an invalid length.
[  535.061667][T11622] syz_tun: entered allmulticast mode
[  535.066326][T11622] siw: device registration error -23
[  535.086883][T11622] 8021q: adding VLAN 0 to HW filter on device team0
[  535.091234][T11622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  535.112506][T11621] syz_tun: left allmulticast mode
[  535.447353][T11654] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  535.449980][T11654] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  535.452755][T11654] tipc: Resetting bearer <eth:syzkaller0>
[  535.689726][T11687] netlink: 'syz.1.17032': attribute type 1 has an invalid length.
[  536.012771][T11584] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  536.083715][T11584] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  536.176411][ T5906] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  536.188730][ T5872] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  536.198720][ T5906] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  536.217738][ T5564] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  536.433752][T11723] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  536.462601][T11725] xt_limit: Overflow, try lower: 604147548/4200216962
[  537.644434][T11742] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  537.706876][T11747] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  538.029473][T11781] __nla_validate_parse: 7 callbacks suppressed
[  538.029484][T11781] netlink: 208 bytes leftover after parsing attributes in process `syz.3.17075'.
[  538.034465][T11781] netlink: 208 bytes leftover after parsing attributes in process `syz.3.17075'.
[  538.070519][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17077'.
[  538.144489][ T5564] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  538.947488][T11803] veth0_to_bond: entered allmulticast mode
[  538.993161][T11812] netlink: 'syz.3.17087': attribute type 11 has an invalid length.
[  539.088837][T11822] vxcan1: left allmulticast mode
[  539.103305][T11827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17094'.
[  539.120644][T11829] validate_nla: 1 callbacks suppressed
[  539.120652][T11829] netlink: 'syz.3.17095': attribute type 1 has an invalid length.
[  539.125153][T11829] netlink: 144 bytes leftover after parsing attributes in process `syz.3.17095'.
[  539.128242][T11829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17095'.
[  539.167099][ T5312] page_pool_release_retry() stalled pool shutdown: id 141, 3329 inflight 120 sec
[  539.525607][T11877] lo speed is unknown, defaulting to 1000
[  539.535725][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17119'.
[  539.539925][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17119'.
[  539.696762][T11877] lo speed is unknown, defaulting to 1000
[  539.699802][T11877] lo speed is unknown, defaulting to 1000
[  540.014374][T11913] netlink: 'syz.3.17132': attribute type 28 has an invalid length.
[  540.060140][T11919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17134'.
[  540.063079][T11917] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17135'.
[  540.120499][T11923] netlink: 'syz.3.17137': attribute type 4 has an invalid length.
[  540.318912][T11946] lo speed is unknown, defaulting to 1000
[  540.371967][T11955] netlink: zone id is out of range
[  540.380519][T11955] netlink: zone id is out of range
[  540.395420][T11955] netlink: set zone limit has 4 unknown bytes
[  540.668571][T11981] team0 (unregistering): Port device team_slave_0 removed
[  540.672000][T11981] team0 (unregistering): Port device team_slave_1 removed
[  540.708401][T11987] nbd: must specify a size in bytes for the device
[  542.162884][T12051] netlink: 'syz.3.17201': attribute type 16 has an invalid length.
[  543.897730][T12141] macvtap1: entered promiscuous mode
[  543.899549][T12141] syz_tun: entered promiscuous mode
[  543.903821][T12141] syz_tun: left promiscuous mode
[  544.009414][T12154] syzkaller1: entered promiscuous mode
[  544.011259][T12154] syzkaller1: entered allmulticast mode
[  544.180437][T12177] __nla_validate_parse: 10 callbacks suppressed
[  544.180448][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17253'.
[  544.246615][T12183] netlink: 'syz.3.17256': attribute type 10 has an invalid length.
[  544.254059][T12183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  544.259169][T12183] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  544.293978][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17259'.
[  544.378895][T12203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17265'.
[  544.485017][T12211] netlink: 404 bytes leftover after parsing attributes in process `syz.3.17268'.
[  544.504297][T12211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17268'.
[  544.507801][T12211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17268'.
[  544.510866][T12211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17268'.
[  544.677993][T12217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17269'.
[  544.681014][T12217] openvswitch: netlink: Flow actions attr not present in new flow.
[  544.891256][T12221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17271'.
[  544.913468][T12223] netlink: 'syz.4.17272': attribute type 1 has an invalid length.
[  544.947956][T12227] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17274'.
[  545.249940][T12232] Bluetooth: MGMT ver 1.23
[  545.347561][T12240] veth0_to_bond: left allmulticast mode
[  545.349847][T12240] veth0_to_bond: left promiscuous mode
[  545.352226][T12240] bridge24: port 2(veth0_to_bond) entered disabled state
[  545.359073][T12240] tipc: Resetting bearer <eth:syzkaller0>
[  545.361736][T12240] veth19: left allmulticast mode
[  545.363741][T12240] veth19: left promiscuous mode
[  545.367188][T12240] bridge24: port 1(veth19) entered disabled state
[  545.372093][T12240] bond10: (slave gretap4): Releasing active interface
[  545.376765][T12240] bond11: left allmulticast mode
[  545.378771][T12240] bond11: left promiscuous mode
[  545.381001][T12240] bridge0: port 1(bond11) entered disabled state
[  545.387337][T12240] bond12: (slave bridge31): Releasing active interface
[  545.463606][T12240] vlan0: entered promiscuous mode
[  545.467396][T12240] veth1: entered promiscuous mode
[  545.470204][T12240] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  545.679693][T12260] netlink: 'syz.1.17288': attribute type 10 has an invalid length.
[  545.844037][T12272] netlink: 'syz.4.17294': attribute type 1 has an invalid length.
[  545.936525][T12292] netlink: 'syz.4.17303': attribute type 1 has an invalid length.
[  546.051996][T12313] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  546.084554][T12310] lo speed is unknown, defaulting to 1000
[  546.199247][T12310] lo speed is unknown, defaulting to 1000
[  546.201966][T12310] lo speed is unknown, defaulting to 1000
[  546.395133][  T751] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2
[  546.398441][  T751] ref_tracker: netdev@ffff888023e82610 has 1/1 users at
[  546.398441][  T751]      batadv_hard_if_event+0xf0f/0x1730
[  546.398441][  T751]      notifier_call_chain+0x1b6/0x3e0
[  546.398441][  T751]      register_netdevice+0x1608/0x1ae0
[  546.398441][  T751]      veth_newlink+0x5cc/0xa50
[  546.398441][  T751]      rtnl_newlink_create+0x310/0xb00
[  546.398441][  T751]      rtnl_newlink+0x16d6/0x1c70
[  546.398441][  T751]      rtnetlink_rcv_msg+0x7cf/0xb70
[  546.398441][  T751]      netlink_rcv_skb+0x208/0x470
[  546.398441][  T751]      netlink_unicast+0x82f/0x9e0
[  546.398441][  T751]      netlink_sendmsg+0x805/0xb30
[  546.398441][  T751]      __sock_sendmsg+0x21c/0x270
[  546.398441][  T751]      __sys_sendto+0x3bd/0x520
[  546.398441][  T751]      __x64_sys_sendto+0xde/0x100
[  546.398441][  T751]      do_syscall_64+0xfa/0x3b0
[  546.398441][  T751]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.398441][  T751] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  548.045414][   T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  548.091457][   T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  548.128757][   T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  548.167981][   T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  548.239615][   T12] bridge_slave_1: left allmulticast mode
[  548.242080][   T12] bridge_slave_1: left promiscuous mode
[  548.245251][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.251797][   T12] bridge_slave_0: left allmulticast mode
[  548.253903][   T12] bridge_slave_0: left promiscuous mode
[  548.256388][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.526682][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  548.530396][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  548.533863][   T12] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  548.541124][   T12] bond0 (unregistering): Released all slaves
[  548.548420][   T12] bond1 (unregistering): Released all slaves
[  548.618373][   T12] tipc: Left network mode
[  548.898288][   T12] hsr_slave_0: left promiscuous mode
[  548.900559][   T12] hsr_slave_1: left promiscuous mode
[  548.902817][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  548.905852][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  549.178398][   T12] team0 (unregistering): Port device team_slave_1 removed
[  549.203936][   T12] team0 (unregistering): Port device team_slave_0 removed
[  549.775592][   T12] IPVS: stop unused estimator thread 0...
[  549.787063][   T12] ------------[ cut here ]------------
[  549.789465][   T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  549.793530][   T12] Modules linked in:
[  549.796118][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  549.801202][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  549.805747][   T12] Workqueue: netns cleanup_net
[  549.807910][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  549.810387][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 28 c1 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d6 7e e2 f7 e8 71 56 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 63 56 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  549.819111][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  549.821801][   T12] RAX: ffffffff8a21553f RBX: ffff888030824880 RCX: ffff88801ba85640
[  549.825540][   T12] RDX: 0000000000000000 RSI: ffffffff8dba3969 RDI: ffff88801ba85640
[  549.828962][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  549.832388][   T12] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffffffff8f62d760
[  549.835920][   T12] R13: 1ffff9200001ef40 R14: ffff888030825d00 R15: dffffc0000000000
[  549.839057][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[  549.842656][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  549.845670][   T12] CR2: 00007f4f58687e20 CR3: 000000000df36000 CR4: 00000000000006f0
[  549.848866][   T12] Call Trace:
[  549.850300][   T12]  <TASK>
[  549.851520][   T12]  xfrm_net_exit+0x2d/0x70
[  549.853378][   T12]  ops_undo_list+0x49a/0x990
[  549.855781][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  549.857984][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  549.860273][   T12]  cleanup_net+0x4c5/0x800
[  549.862253][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  549.864432][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  549.867022][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  549.869350][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  549.871229][   T12]  process_scheduled_works+0xae1/0x17b0
[  549.873064][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  549.875188][   T12]  worker_thread+0x8a0/0xda0
[  549.876763][   T12]  kthread+0x711/0x8a0
[  549.878188][   T12]  ? __pfx_worker_thread+0x10/0x10
[  549.879889][   T12]  ? __pfx_kthread+0x10/0x10
[  549.881409][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  549.883121][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  549.885081][   T12]  ? __pfx_kthread+0x10/0x10
[  549.886646][   T12]  ret_from_fork+0x3fc/0x770
[  549.888178][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  549.889882][   T12]  ? __switch_to_asm+0x39/0x70
[  549.891464][   T12]  ? __switch_to_asm+0x33/0x70
[  549.893010][   T12]  ? __pfx_kthread+0x10/0x10
[  549.894527][   T12]  ret_from_fork_asm+0x1a/0x30
[  549.896194][   T12]  </TASK>
[  549.897261][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  549.899667][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  549.903583][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  549.906881][   T12] Workqueue: netns cleanup_net
[  549.908492][   T12] Call Trace:
[  549.909607][   T12]  <TASK>
[  549.910675][   T12]  dump_stack_lvl+0x99/0x250
[  549.912192][   T12]  ? __asan_memcpy+0x40/0x70
[  549.913703][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  549.915358][   T12]  ? __pfx__printk+0x10/0x10
[  549.916833][   T12]  vpanic+0x281/0x750
[  549.918203][   T12]  ? __pfx__printk+0x10/0x10
[  549.919750][   T12]  ? __pfx_vpanic+0x10/0x10
[  549.921183][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  549.922868][   T12]  panic+0xb9/0xc0
[  549.924076][   T12]  ? __pfx_panic+0x10/0x10
[  549.925519][   T12]  __warn+0x31b/0x4b0
[  549.926871][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  549.928490][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  549.930093][   T12]  report_bug+0x2be/0x4f0
[  549.931549][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  549.933199][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  549.934853][   T12]  ? xfrm_state_fini+0x272/0x2f0
[  549.936499][   T12]  handle_bug+0x84/0x160
[  549.937884][   T12]  exc_invalid_op+0x1a/0x50
[  549.939351][   T12]  asm_exc_invalid_op+0x1a/0x20
[  549.940870][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  549.942607][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 28 c1 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d6 7e e2 f7 e8 71 56 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 63 56 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  549.948802][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  549.950760][   T12] RAX: ffffffff8a21553f RBX: ffff888030824880 RCX: ffff88801ba85640
[  549.953287][   T12] RDX: 0000000000000000 RSI: ffffffff8dba3969 RDI: ffff88801ba85640
[  549.955800][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  549.958471][   T12] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffffffff8f62d760
[  549.961079][   T12] R13: 1ffff9200001ef40 R14: ffff888030825d00 R15: dffffc0000000000
[  549.963706][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  549.965354][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  549.966986][   T12]  xfrm_net_exit+0x2d/0x70
[  549.968462][   T12]  ops_undo_list+0x49a/0x990
[  549.970018][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  549.971657][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  549.973273][   T12]  cleanup_net+0x4c5/0x800
[  549.974719][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  549.976331][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  549.977953][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  549.979793][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  549.981563][   T12]  process_scheduled_works+0xae1/0x17b0
[  549.983316][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  549.985262][   T12]  worker_thread+0x8a0/0xda0
[  549.986813][   T12]  kthread+0x711/0x8a0
[  549.988173][   T12]  ? __pfx_worker_thread+0x10/0x10
[  549.989880][   T12]  ? __pfx_kthread+0x10/0x10
[  549.991416][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  549.993131][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  549.994883][   T12]  ? __pfx_kthread+0x10/0x10
[  549.996409][   T12]  ret_from_fork+0x3fc/0x770
[  549.997882][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  549.999497][   T12]  ? __switch_to_asm+0x39/0x70
[  550.001056][   T12]  ? __switch_to_asm+0x33/0x70
[  550.002650][   T12]  ? __pfx_kthread+0x10/0x10
[  550.004185][   T12]  ret_from_fork_asm+0x1a/0x30
[  550.005781][   T12]  </TASK>
[  550.007551][   T12] Kernel Offset: disabled
[  550.008993][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:42:46  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bd260 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=000000000007ffff RDI=0000000000080000 RBP=ffffffff99de9770 RSP=ffffc90002f6e7b0
R8 =ffff8881078a8237 R9 =1ffff11020f15046 R10=dffffc0000000000 R11=ffffffff854e7100
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e7177 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9f44eac6c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c27ca80 CR3=000000003cd52000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0300060008008000 0a00010006aa1414 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f5f89987478 00007f5f899874c0
XMM06=00007f5f899874b8 00007f5f899874b0 XMM07=00007f5f899874a8 00007f5f899874a0
XMM08=0000000000000000 00007f5f89812ee7 XMM09=0000000000000000 00007f5f89812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff822e48d2 RBX=8000000033ef8007 RCX=ffff888045fdd640 RDX=0000000000000000
RSI=ffff88810678baf0 RDI=ffff888111d3e0c0 RBP=0000000000000001 RSP=ffffc900099e7348
R8 =ffffea0000cfbe07 R9 =1ffffd400019f7c0 R10=dffffc0000000000 R11=fffff9400019f7c1
R12=00007fcc3635e000 R13=ffff888126b9f390 R14=ffff88810678baf0 R15=ffff888111d3e0c0
RIP=ffffffff81bfac0d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555564939500 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcc374e56c0 CR3=0000000031fa4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fcc36812e53
XMM06=0000000000000000 00007fcc36812e4d XMM07=0000000000000000 00007fcc36812e61
XMM08=0000000000000000 00007fcc36812ee7 XMM09=0000000000000000 00007fcc36812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
