last executing test programs:

2.670232103s ago: executing program 1 (id=2515):
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x6c, 0x0, @loopback, @local}, '8\x00eX\x00\x00\x00\x00'}}}}}, 0x0)

2.626767321s ago: executing program 1 (id=2517):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000480)=0xffffffff00000041, 0x8)
bind$vsock_stream(r1, &(0x7f0000000940), 0x10)
close(0x3)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
connect$can_bcm(r0, 0x0, 0x0)

2.45225976s ago: executing program 1 (id=2519):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40, '\x00', r2, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000280), 0x0}, 0x20)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x1d, 0x2, 0x6)
unshare(0x22020400)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', 0x0})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

2.319723983s ago: executing program 1 (id=2521):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='-', @ANYRESOCT=r1], 0x9)

2.319604312s ago: executing program 1 (id=2522):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

2.240529016s ago: executing program 1 (id=2523):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)

1.989346967s ago: executing program 0 (id=2529):
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x4}, 0x1})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r11, &(0x7f0000000000)="2a000200010078", 0x7)
connect$rose(r10, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

1.247390309s ago: executing program 0 (id=2535):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000840)=ANY=[], 0x408)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
vmsplice(r0, &(0x7f0000000180)=[{0x0}], 0x1, 0x8)

1.192298062s ago: executing program 0 (id=2537):
r0 = socket(0x21, 0x80000, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x100, 0x0, 0x0, {0x0, 0x48, 0x0, r5, 0x21eae}}, 0x20}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r8)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r10=>0xffffffffffffffff})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r12=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0xffffffffffffffc9, r11, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0xffffffffffffffc0, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfd}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r13 = socket$unix(0x1, 0x2, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r15, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r3, &(0x7f00000002c0), 0x2)

251.848781ms ago: executing program 2 (id=2551):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

248.909179ms ago: executing program 2 (id=2552):
openat$tun(0xffffffffffffff9c, 0x0, 0xc0041, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40080)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)

150.634295ms ago: executing program 0 (id=2553):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r1, 0x1, 0x72bd29, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x2}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

150.213846ms ago: executing program 2 (id=2554):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002400)={0x34, r1, 0x301, 0x0, 0x0, {0x17}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x34000804}, 0x0)

148.67224ms ago: executing program 0 (id=2555):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd25, 0x5dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0xfffffcd1, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x0, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x0, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x0, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x40000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0x0, 0x5, 0x6}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001900dd8d000000000000000002000000"], 0x1c}}, 0x8c0)

147.246822ms ago: executing program 2 (id=2556):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0)

52.471953ms ago: executing program 2 (id=2557):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0xc, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

223.834µs ago: executing program 0 (id=2558):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x74bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x3c}}, 0x84000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12a13, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x20004000)

0s ago: executing program 2 (id=2559):
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000200)=0x10000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:3813' (ED25519) to the list of known hosts.
syzkaller login: [   49.587329][ T5754] cgroup: Unknown subsys name 'net'
[   49.676726][ T5754] cgroup: Unknown subsys name 'cpuset'
[   49.683975][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.199926][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.686375][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.689665][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.693559][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.702755][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.705789][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.753679][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.757706][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.760715][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.764519][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.767549][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.783459][ T5213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.786423][ T5213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.789691][ T5213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.793914][ T5213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.798985][ T5213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.923167][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   56.036633][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   56.042840][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.046005][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.049593][ T5822] bridge_slave_0: entered allmulticast mode
[   56.054595][ T5822] bridge_slave_0: entered promiscuous mode
[   56.069036][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.072891][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.076120][ T5822] bridge_slave_1: entered allmulticast mode
[   56.079203][ T5822] bridge_slave_1: entered promiscuous mode
[   56.126653][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.147622][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.224981][ T5822] team0: Port device team_slave_0 added
[   56.227381][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.230071][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.233158][ T5827] bridge_slave_0: entered allmulticast mode
[   56.236302][ T5827] bridge_slave_0: entered promiscuous mode
[   56.239330][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   56.247911][ T5822] team0: Port device team_slave_1 added
[   56.265227][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.268346][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.272529][ T5827] bridge_slave_1: entered allmulticast mode
[   56.276788][ T5827] bridge_slave_1: entered promiscuous mode
[   56.316281][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.319074][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.330355][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.355244][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.358450][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.369249][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.375750][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.393059][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.450771][ T5827] team0: Port device team_slave_0 added
[   56.454660][ T5827] team0: Port device team_slave_1 added
[   56.479065][ T5822] hsr_slave_0: entered promiscuous mode
[   56.484038][ T5822] hsr_slave_1: entered promiscuous mode
[   56.499648][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.503524][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.515081][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.534318][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.537448][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.549213][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.562552][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.565597][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.568413][ T5829] bridge_slave_0: entered allmulticast mode
[   56.574011][ T5829] bridge_slave_0: entered promiscuous mode
[   56.591366][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.594417][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.597571][ T5829] bridge_slave_1: entered allmulticast mode
[   56.601882][ T5829] bridge_slave_1: entered promiscuous mode
[   56.690219][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.704705][ T5827] hsr_slave_0: entered promiscuous mode
[   56.707997][ T5827] hsr_slave_1: entered promiscuous mode
[   56.711040][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   56.714373][ T5827] Cannot create hsr debugfs directory
[   56.718614][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.758355][ T5829] team0: Port device team_slave_0 added
[   56.789712][ T5829] team0: Port device team_slave_1 added
[   56.854093][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.857276][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.870414][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.898947][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.903814][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.916166][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.027983][ T5829] hsr_slave_0: entered promiscuous mode
[   57.032170][ T5829] hsr_slave_1: entered promiscuous mode
[   57.034904][ T5829] debugfs: 'hsr0' already exists in 'hsr'
[   57.037403][ T5829] Cannot create hsr debugfs directory
[   57.063410][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.072933][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.101148][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.118356][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.179805][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.206564][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.213708][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.243211][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.336977][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.346770][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.357133][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.369379][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.468197][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.509757][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   57.525451][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.544528][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.547790][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.557316][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.572542][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.575723][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.594669][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   57.645570][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.647978][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.654956][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.657803][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.666575][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   57.691707][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.694484][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.714090][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.717627][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.722726][ T5213] Bluetooth: hci0: command tx timeout
[   57.766877][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.802574][ T5213] Bluetooth: hci1: command tx timeout
[   57.882917][ T5213] Bluetooth: hci2: command tx timeout
[   57.899673][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.967220][ T5822] veth0_vlan: entered promiscuous mode
[   57.979087][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.984950][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.995377][ T5822] veth1_vlan: entered promiscuous mode
[   58.065525][ T5829] veth0_vlan: entered promiscuous mode
[   58.074209][ T5827] veth0_vlan: entered promiscuous mode
[   58.077097][ T5822] veth0_macvtap: entered promiscuous mode
[   58.087079][ T5827] veth1_vlan: entered promiscuous mode
[   58.094265][ T5822] veth1_macvtap: entered promiscuous mode
[   58.097219][ T5829] veth1_vlan: entered promiscuous mode
[   58.119509][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.137033][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.156612][ T5827] veth0_macvtap: entered promiscuous mode
[   58.163163][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.167401][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.178567][ T5827] veth1_macvtap: entered promiscuous mode
[   58.184154][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.189940][ T5829] veth0_macvtap: entered promiscuous mode
[   58.199413][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.207103][ T5829] veth1_macvtap: entered promiscuous mode
[   58.237565][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.250392][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.260197][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.266879][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.285657][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.288702][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.305731][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.316342][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.322714][ T4626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.326223][ T4626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.335815][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.340004][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.350576][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.356508][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.414404][ T4626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.421106][ T4626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.472427][  T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.476246][  T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.476920][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.519294][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.534281][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.554755][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.558164][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.584123][ T4626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.587749][ T4626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.664991][ T5888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4'.
[   58.754371][ T5894] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.852198][ T5901] netlink: 'syz.2.8': attribute type 1 has an invalid length.
[   58.856054][ T5899] netlink: 116 bytes leftover after parsing attributes in process `syz.0.7'.
[   58.860600][ T5901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.867902][ T5899] Zero length message leads to an empty skb
[   59.025309][ T5908] trusted_key: syz.0.11 sent an empty control message without MSG_MORE.
[   59.194228][   T33] audit: type=1800 audit(1754620622.944:2): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9" name="cgroup.controllers" dev="tmpfs" ino=33 res=0 errno=0
[   59.342177][ T5922] netlink: 200 bytes leftover after parsing attributes in process `syz.2.17'.
[   59.350887][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'.
[   59.653873][ T5938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25'.
[   59.782458][ T5944] netlink: 'syz.1.27': attribute type 9 has an invalid length.
[   59.796512][ T5944] netlink: 'syz.1.27': attribute type 6 has an invalid length.
[   59.800498][ T5944] netlink: 'syz.1.27': attribute type 7 has an invalid length.
[   59.805260][ T5213] Bluetooth: hci0: command tx timeout
[   59.812658][ T5944] netlink: 'syz.1.27': attribute type 8 has an invalid length.
[   59.885085][ T5213] Bluetooth: hci1: command tx timeout
[   59.972870][ T5213] Bluetooth: hci2: command tx timeout
[   60.627782][ T5990] raw_sendmsg: syz.2.51 forgot to set AF_INET. Fix it!
[   60.802468][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'.
[   60.810409][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'.
[   60.985673][ T6016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.62'.
[   60.990449][ T6016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.62'.
[   61.010019][ T6016] netlink: 5 bytes leftover after parsing attributes in process `syz.2.62'.
[   61.149665][ T6028] Bluetooth: MGMT ver 1.23
[   61.410098][ T6045] atomic_op ffff88811b3eb998 conn xmit_atomic 0000000000000000
[   61.424754][ T6047] warning: `syz.1.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.484309][ T6049] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   61.578807][ T6055] syzkaller0: entered promiscuous mode
[   61.583798][ T6055] syzkaller0: entered allmulticast mode
[   61.893795][ T5213] Bluetooth: hci0: command tx timeout
[   61.921157][ T6079] syz.1.93 uses obsolete (PF_INET,SOCK_PACKET)
[   61.973612][ T5213] Bluetooth: hci1: command tx timeout
[   62.021897][ T6087] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.044574][ T5213] Bluetooth: hci2: command tx timeout
[   62.395838][ T6113] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   62.978564][ T6155] team_slave_0: entered promiscuous mode
[   62.981050][ T6155] team_slave_1: entered promiscuous mode
[   62.983986][ T6155] macsec1: entered promiscuous mode
[   62.986965][ T6155] team0: entered promiscuous mode
[   63.386199][ T6176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.768635][ T6201] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.844303][ T6201] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.968904][ T6201] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.970272][ T6211] __nla_validate_parse: 10 callbacks suppressed
[   63.970283][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'.
[   63.979524][ T5213] Bluetooth: hci0: command tx timeout
[   64.043169][ T5213] Bluetooth: hci1: command tx timeout
[   64.048299][ T6201] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.098172][ T6215] netlink: 'syz.2.152': attribute type 10 has an invalid length.
[   64.104918][ T5847] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.124041][ T5213] Bluetooth: hci2: command tx timeout
[   64.139085][ T6215] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   64.142259][ T5847] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.156651][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.179458][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.496711][ T6232] netlink: 'syz.2.160': attribute type 1 has an invalid length.
[   64.499937][ T6232] netlink: 224 bytes leftover after parsing attributes in process `syz.2.160'.
[   64.527146][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'.
[   64.674203][ T6238] tipc: Started in network mode
[   64.676530][ T6238] tipc: Node identity 7af862a59356, cluster identity 4711
[   64.680609][ T6238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.692583][ T6238] syzkaller0: entered promiscuous mode
[   64.695021][ T6238] syzkaller0: entered allmulticast mode
[   64.721952][ T6238] tipc: Resetting bearer <eth:syzkaller0>
[   64.734537][ T6237] tipc: Resetting bearer <eth:syzkaller0>
[   64.769170][ T6237] tipc: Disabling bearer <eth:syzkaller0>
[   64.802364][ T6247] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[   65.019876][ T6259] GUP no longer grows the stack in syz.0.173 (6259): 200000006000-20000000a000 (200000005000)
[   65.029974][ T6259] CPU: 0 UID: 0 PID: 6259 Comm: syz.0.173 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[   65.029996][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   65.030003][ T6259] Call Trace:
[   65.030009][ T6259]  <TASK>
[   65.030015][ T6259]  dump_stack_lvl+0x189/0x250
[   65.030038][ T6259]  ? __pfx_dump_stack_lvl+0x10/0x10
[   65.030052][ T6259]  ? __pfx__printk+0x10/0x10
[   65.030066][ T6259]  ? find_vma+0xe7/0x160
[   65.030096][ T6259]  __get_user_pages+0x2a60/0x30b0
[   65.030140][ T6259]  ? __pfx___get_user_pages+0x10/0x10
[   65.030157][ T6259]  ? __gup_longterm_locked+0xbf7/0x15b0
[   65.030174][ T6259]  ? down_read_killable+0x1d1/0x350
[   65.030185][ T6259]  ? try_get_folio+0x633/0x660
[   65.030205][ T6259]  __gup_longterm_locked+0xd66/0x15b0
[   65.030226][ T6259]  ? try_grab_folio_fast+0x1be/0x4f0
[   65.030251][ T6259]  ? gup_fast_fallback+0x1afc/0x2260
[   65.030271][ T6259]  gup_fast_fallback+0x1cd4/0x2260
[   65.030310][ T6259]  ? __pfx_gup_fast_fallback+0x10/0x10
[   65.030325][ T6259]  ? __mutex_lock+0x335/0x1340
[   65.030347][ T6259]  ? is_valid_gup_args+0x11f/0x200
[   65.030362][ T6259]  ? get_user_pages_fast+0x4d/0xb0
[   65.030377][ T6259]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   65.030400][ T6259]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   65.030413][ T6259]  ? wait_for_space+0x24d/0x2d0
[   65.030433][ T6259]  iov_iter_get_pages2+0x5e/0xa0
[   65.030452][ T6259]  __se_sys_vmsplice+0x548/0x10d0
[   65.030478][ T6259]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   65.030498][ T6259]  ? __pfx_futex_wait+0x10/0x10
[   65.030523][ T6259]  ? __lock_acquire+0xab9/0xd20
[   65.030564][ T6259]  ? do_pipe2+0xf7/0x170
[   65.030581][ T6259]  ? rcu_is_watching+0x15/0xb0
[   65.030602][ T6259]  ? do_syscall_64+0xbe/0x3b0
[   65.030623][ T6259]  do_syscall_64+0xfa/0x3b0
[   65.030639][ T6259]  ? lockdep_hardirqs_on+0x9c/0x150
[   65.030656][ T6259]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.030668][ T6259]  ? exc_page_fault+0x9f/0xf0
[   65.030687][ T6259]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.030698][ T6259] RIP: 0033:0x7ff015b8ebe9
[   65.030710][ T6259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.030721][ T6259] RSP: 002b:00007ff016a13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   65.030734][ T6259] RAX: ffffffffffffffda RBX: 00007ff015db5fa0 RCX: 00007ff015b8ebe9
[   65.030742][ T6259] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[   65.030748][ T6259] RBP: 00007ff015c11e19 R08: 0000000000000000 R09: 0000000000000000
[   65.030755][ T6259] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   65.030761][ T6259] R13: 00007ff015db6038 R14: 00007ff015db5fa0 R15: 00007ffdb360f768
[   65.030783][ T6259]  </TASK>
[   65.754486][ T6296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.439742][ T6336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.446906][ T6336] syzkaller0: entered promiscuous mode
[   66.449640][ T6336] syzkaller0: entered allmulticast mode
[   66.481646][ T6336] tipc: Resetting bearer <eth:syzkaller0>
[   66.487463][ T6335] tipc: Resetting bearer <eth:syzkaller0>
[   66.497849][ T6335] tipc: Disabling bearer <eth:syzkaller0>
[   66.504177][ T6342] netlink: 1 bytes leftover after parsing attributes in process `syz.0.211'.
[   66.559480][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'.
[   66.609080][ T6351] netlink: 'syz.2.212': attribute type 9 has an invalid length.
[   66.615687][ T6351] netlink: 'syz.2.212': attribute type 7 has an invalid length.
[   66.618305][ T6351] netlink: 'syz.2.212': attribute type 8 has an invalid length.
[   66.632182][ T6354] netlink: 'syz.0.216': attribute type 13 has an invalid length.
[   66.636114][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'.
[   66.671683][ T6354] netlink: 'syz.0.216': attribute type 13 has an invalid length.
[   66.675142][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'.
[   66.679535][ T5847] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.687350][ T5847] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   66.698096][ T5847] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   66.703483][ T5847] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.921167][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'.
[   66.947610][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.950526][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.058033][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.069225][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.240466][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.246462][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.250020][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.303218][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.350270][ T6362] syz.1.217 (6362) used greatest stack depth: 19832 bytes left
[   67.682759][ T6394] batadv_slave_1: entered promiscuous mode
[   67.685384][ T6393] batadv_slave_1: left promiscuous mode
[   68.328631][ T6410] netlink: 208 bytes leftover after parsing attributes in process `syz.1.235'.
[   68.335553][ T6410] netlink: 'syz.1.235': attribute type 1 has an invalid length.
[   68.493049][ T6428] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.310904][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'.
[   70.099022][ T6534] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.293'.
[   70.402576][ T6555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.302'.
[   71.165665][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.170207][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.428783][ T6584] vlan2: entered promiscuous mode
[   71.434353][ T6584] vlan2: entered allmulticast mode
[   71.436850][ T6584] hsr_slave_1: entered allmulticast mode
[   71.510016][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'.
[   71.889847][ T6610] netlink: 'syz.0.326': attribute type 10 has an invalid length.
[   71.921054][ T6610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.930600][ T6610] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   71.943496][ T6610] netlink: 'syz.0.326': attribute type 10 has an invalid length.
[   71.947306][ T6610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.326'.
[   71.953108][ T6610] batadv0: entered promiscuous mode
[   71.955682][ T6610] batadv0: entered allmulticast mode
[   71.960707][ T6610] bond0: (slave batadv0): Releasing backup interface
[   71.980193][ T6610] bridge0: port 3(batadv0) entered blocking state
[   71.984417][ T6610] bridge0: port 3(batadv0) entered disabled state
[   72.067161][ T6620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.328'.
[   72.157143][ T6626] netlink: 176 bytes leftover after parsing attributes in process `syz.2.330'.
[   72.161908][ T5847] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   72.161947][ T5847] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   72.249402][ T6631] openvswitch: netlink: IPv6 tunnel dst address is zero
[   72.416339][ T6633] netlink: 'syz.0.333': attribute type 3 has an invalid length.
[   73.403219][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'.
[   73.406818][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'.
[   73.410504][ T6654] netlink: 'syz.0.342': attribute type 18 has an invalid length.
[   73.751678][ T6687] netlink: 'syz.0.356': attribute type 2 has an invalid length.
[   74.848626][    T9] IPVS: starting estimator thread 0...
[   74.864533][ T6725] syzkaller1: entered promiscuous mode
[   74.866878][ T6725] syzkaller1: entered allmulticast mode
[   74.953793][ T6728] IPVS: using max 53 ests per chain, 127200 per kthread
[   75.152552][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'.
[   75.453065][ T6769] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   75.481499][ T6769] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   75.868008][ T6791] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   76.199489][ T6802] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   76.203320][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'.
[   76.638772][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'.
[   76.664256][ T6810] gtp0: entered promiscuous mode
[   76.671296][ T6810] gtp0: entered allmulticast mode
[   76.809169][ T6817] pim6reg1: entered promiscuous mode
[   76.813122][ T6817] pim6reg1: entered allmulticast mode
[   76.998319][ T6830] netlink: 'syz.1.420': attribute type 7 has an invalid length.
[   77.208382][ T6834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.421'.
[   77.213871][ T6834] netlink: 36 bytes leftover after parsing attributes in process `syz.1.421'.
[   77.539395][ T6847] netlink: 48 bytes leftover after parsing attributes in process `syz.1.426'.
[   78.450035][ T6916] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.465169][ T6918] netlink: 172 bytes leftover after parsing attributes in process `syz.2.460'.
[   78.495369][ T6920] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   78.499969][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.503340][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.682179][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'.
[   78.860318][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'.
[   78.978415][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'.
[   80.135986][ T7009] veth1: entered promiscuous mode
[   80.152354][ T7009] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[   80.355914][ T7027] netlink: 'syz.0.511': attribute type 1 has an invalid length.
[   80.430195][ T7031] netlink: 'syz.0.513': attribute type 1 has an invalid length.
[   80.463961][ T7031] bond1: entered promiscuous mode
[   80.466114][ T7031] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.480855][ T7031] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.488889][ T7031] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[   80.494460][ T7031] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   80.504565][ T7031] bond1: (slave wireguard0): making interface the new active one
[   80.508022][ T7031] wireguard0: entered promiscuous mode
[   80.512566][ T7031] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[   80.521653][ T7031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   80.524344][ T7031] IPv6: NLM_F_CREATE should be set when creating new route
[   80.526761][ T7031] IPv6: NLM_F_CREATE should be set when creating new route
[   80.530894][ T7031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   80.539124][ T7031] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[   80.545469][ T7031] bond1: (slave wireguard1): Enslaving as a backup interface with an up link
[   80.726540][ T7053] __nla_validate_parse: 6 callbacks suppressed
[   80.726556][ T7053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.522'.
[   80.762629][  T790] cfg80211: failed to load regulatory.db
[   80.777808][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.523'.
[   81.079663][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.531'.
[   81.503450][ T7097] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.544'.
[   81.570253][ T7100] Driver unsupported XDP return value 0 on prog  (id 84) dev N/A, expect packet loss!
[   81.816225][ T7114] IPv6: addrconf: prefix option has invalid lifetime
[   81.819117][ T7114] IPv6: addrconf: prefix option has invalid lifetime
[   81.821970][ T7114] IPv6: addrconf: prefix option has invalid lifetime
[   81.864062][ T7118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.900618][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.556'.
[   82.149612][ T7153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.571'.
[   82.304029][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'.
[   82.604857][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'.
[   82.626763][ T7189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.073410][ T7211] netlink: 48 bytes leftover after parsing attributes in process `syz.1.599'.
[   83.208973][ T7213] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   83.284246][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'.
[   83.697948][ T7232] netlink: 'syz.0.608': attribute type 1 has an invalid length.
[   83.702967][ T7233] netlink: 'syz.1.607': attribute type 4 has an invalid length.
[   83.907247][ T7239] tipc: Started in network mode
[   83.909191][ T7239] tipc: Node identity , cluster identity 4711
[   83.911605][ T7239] tipc: Failed to obtain node identity
[   83.913419][ T7239] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   84.277567][   T33] audit: type=1800 audit(1754620648.024:3): pid=7254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.612" name="memory.events" dev="tmpfs" ino=990 res=0 errno=0
[   84.371760][ T7273] pim6reg0: tun_chr_ioctl cmd 1074025677
[   84.374412][ T7273] pim6reg0: linktype set to 768
[   84.938601][ T7309] tipc: Enabling of bearer <dp:s> rejected, media not registered
[   85.133822][ T7319] bridge_slave_1: left allmulticast mode
[   85.136442][ T7319] bridge_slave_1: left promiscuous mode
[   85.139170][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.146386][ T7319] bridge_slave_0: left allmulticast mode
[   85.148939][ T7319] bridge_slave_0: left promiscuous mode
[   85.154430][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.328608][ T7332] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.339565][ T7332] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   85.381965][ T7333] tipc: Started in network mode
[   85.387097][ T7333] tipc: Node identity 26584a9d0fe3, cluster identity 4711
[   85.390042][ T7333] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.399888][ T7333] syzkaller0: entered promiscuous mode
[   85.405181][ T7333] syzkaller0: entered allmulticast mode
[   85.436967][ T7333] tipc: Resetting bearer <eth:syzkaller0>
[   85.444673][ T7331] tipc: Resetting bearer <eth:syzkaller0>
[   85.456712][ T7331] tipc: Disabling bearer <eth:syzkaller0>
[   85.484577][ T7337] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   85.757518][ T7341] infiniband syz!: set active
[   85.760268][ T7341] infiniband syz!: added team_slave_0
[   85.796439][ T7341] RDS/IB: syz!: added
[   85.798953][ T7341] smc: adding ib device syz! with port count 1
[   85.801985][ T7341] smc:    ib device syz! port 1 has pnetid 
[   86.908852][ T7385] xt_limit: Overflow, try lower: 271964/0
[   87.252467][ T7406] netlink: 'syz.0.685': attribute type 11 has an invalid length.
[   87.255998][ T7406] __nla_validate_parse: 10 callbacks suppressed
[   87.256012][ T7406] netlink: 224 bytes leftover after parsing attributes in process `syz.0.685'.
[   87.316402][ T7408] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.686'.
[   87.320290][ T7408] openvswitch: netlink: Message has 5 unknown bytes.
[   87.499135][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'.
[   87.554002][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'.
[   88.423499][ T7486] netlink: 'syz.2.723': attribute type 3 has an invalid length.
[   88.426212][ T7486] netlink: 156 bytes leftover after parsing attributes in process `syz.2.723'.
[   88.429353][ T7486] netlink: 'syz.2.723': attribute type 3 has an invalid length.
[   88.433266][ T7486] netlink: 156 bytes leftover after parsing attributes in process `syz.2.723'.
[   88.571966][ T7504] netlink: 'syz.0.732': attribute type 1 has an invalid length.
[   88.609901][ T7504] bond3: (slave gretap1): making interface the new active one
[   88.613606][ T7504] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   88.629026][ T7504] vlan2: entered allmulticast mode
[   88.633912][ T7507] netlink: 48 bytes leftover after parsing attributes in process `syz.2.730'.
[   88.634895][ T7504] bond3: entered allmulticast mode
[   88.640879][ T7504] gretap1: entered allmulticast mode
[   88.644848][ T7504] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   88.778923][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.735'.
[   88.792919][ T7516] openvswitch: netlink: Missing key (keys=40, expected=80)
[   88.943474][ T7528] netlink: 'syz.2.741': attribute type 1 has an invalid length.
[   88.972686][ T7528] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.007543][ T7528] bond1: (slave geneve2): making interface the new active one
[   89.012681][ T7528] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   89.120146][ T7539] netlink: 'syz.2.745': attribute type 1 has an invalid length.
[   89.124446][ T7539] netlink: 224 bytes leftover after parsing attributes in process `syz.2.745'.
[   89.172157][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'.
[   89.455453][ T7559] netlink: 'syz.2.755': attribute type 1 has an invalid length.
[   89.458101][ T7559] netlink: 'syz.2.755': attribute type 2 has an invalid length.
[   89.460910][ T7560] netlink: 'syz.0.753': attribute type 12 has an invalid length.
[   91.040196][ T7634] netlink: 'syz.1.788': attribute type 18 has an invalid length.
[   91.460578][ T7662] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   91.466657][ T7662] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   91.532188][ T7663] block nbd0: server does not support multiple connections per device.
[   91.536574][ T7663] block nbd0: shutting down sockets
[   91.619088][ T7668] netlink: 'syz.1.801': attribute type 1 has an invalid length.
[   92.359085][ T7687] syzkaller0: entered promiscuous mode
[   92.367503][ T7687] syzkaller0: entered allmulticast mode
[   93.365223][ T7707] syzkaller1: entered promiscuous mode
[   93.367286][ T7707] syzkaller1: entered allmulticast mode
[   93.617282][ T7740] __nla_validate_parse: 7 callbacks suppressed
[   93.617292][ T7740] netlink: 676 bytes leftover after parsing attributes in process `syz.2.829'.
[   93.625943][ T7740] netlink: 676 bytes leftover after parsing attributes in process `syz.2.829'.
[   93.679999][ T7746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.919228][ T7755] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   93.923020][ T7755] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   93.945572][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.837'.
[   95.191923][ T7808] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   95.269822][ T7814] netlink: 'syz.1.864': attribute type 3 has an invalid length.
[   95.275653][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'.
[   95.280279][ T7814] netlink: 'syz.1.864': attribute type 3 has an invalid length.
[   95.286488][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'.
[   95.329463][ T7818] nbd: must specify a size in bytes for the device
[   95.494817][  T973] IPVS: starting estimator thread 0...
[   95.500693][ T7832] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   95.526700][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.875'.
[   95.591375][ T7835] IPVS: using max 77 ests per chain, 184800 per kthread
[   95.745013][ T7852] syzkaller0: entered allmulticast mode
[   95.814891][ T7861] netlink: 'syz.0.887': attribute type 9 has an invalid length.
[   95.817445][ T7861] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.887'.
[   96.770229][ T7876] netlink: 244 bytes leftover after parsing attributes in process `syz.2.893'.
[   97.170647][ T7896] netlink: 'syz.2.902': attribute type 11 has an invalid length.
[   97.181742][ T7896] netlink: 48 bytes leftover after parsing attributes in process `syz.2.902'.
[   97.798886][ T7909] netlink: 'syz.1.907': attribute type 2 has an invalid length.
[   98.227621][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'.
[   98.292441][ T7932] gtp0: entered promiscuous mode
[   98.380159][ T7944] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   98.578274][ T7960] netlink: 'syz.0.931': attribute type 23 has an invalid length.
[   98.879011][ T7992] __nla_validate_parse: 4 callbacks suppressed
[   98.879022][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'.
[   98.911823][ T5884] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   98.937486][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'.
[   98.940798][ T8010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.953'.
[   98.947499][ T8010] gretap1: entered promiscuous mode
[   98.950060][ T8012] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   99.147027][ T8041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.965'.
[   99.389974][ T8063] Bluetooth: MGMT ver 1.23
[   99.423940][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'.
[   99.442485][ T8068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.974'.
[   99.484589][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'.
[   99.495574][ T8070] gtp0: entered promiscuous mode
[   99.497870][ T8070] gtp0: entered allmulticast mode
[   99.642280][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   99.801733][ T5884] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   99.936475][ T8110] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   99.946382][ T8110] bridge_slave_0: left allmulticast mode
[   99.948797][ T8110] bridge_slave_0: left promiscuous mode
[   99.953496][ T8110] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.959057][ T8110] bridge_slave_1: left allmulticast mode
[   99.962201][ T8110] bridge_slave_1: left promiscuous mode
[   99.964937][ T8110] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.973219][ T8110] bond0: (slave bond_slave_0): Releasing backup interface
[   99.978631][ T8110] bond0: (slave bond_slave_1): Releasing backup interface
[   99.985916][ T8110] team0: Port device team_slave_0 removed
[   99.990057][ T8110] team0: Port device team_slave_1 removed
[   99.993679][ T8110] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.997777][ T8110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.017396][ T8110] netlink: 'syz.1.994': attribute type 10 has an invalid length.
[  100.020781][ T8110] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  100.029409][ T8110] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  100.039339][ T8110] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  100.043860][ T8110] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.174791][ T8116] netlink: 'syz.2.996': attribute type 1 has an invalid length.
[  100.681926][ T5847] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  100.685877][ T5847] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  101.114307][ T8187] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  101.217041][ T8198] block nbd1: not configured, cannot reconfigure
[  101.481605][  T973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  101.558062][ T8221] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.1045'.
[  101.595865][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'.
[  102.451447][ T8251] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.1055'.
[  102.747019][ T8271] openvswitch: netlink: IP tunnel dst address not specified
[  103.507031][ T8319] ip6gre1: entered promiscuous mode
[  103.838846][ T8348] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  103.868970][ T8352] netlink: 'syz.1.1102': attribute type 2 has an invalid length.
[  104.329867][ T8396] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  104.488955][ T8411] tipc: Cannot configure node identity twice
[  104.654340][ T8425] macvlan1: entered promiscuous mode
[  104.657459][ T8425] macvlan1: left promiscuous mode
[  104.851437][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  105.053961][ T8460] __nla_validate_parse: 2 callbacks suppressed
[  105.053972][ T8460] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1148'.
[  105.500601][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  106.397891][ T8507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.479807][ T8522] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1170'.
[  106.500051][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1171'.
[  106.568930][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'.
[  107.181135][ T8549] syzkaller1: entered promiscuous mode
[  107.184634][ T8549] syzkaller1: entered allmulticast mode
[  107.460775][ T8565] netlink: 'syz.2.1190': attribute type 4 has an invalid length.
[  107.506176][ T8565] netlink: 'syz.2.1190': attribute type 4 has an invalid length.
[  107.540133][ T8569] netlink: 'syz.1.1192': attribute type 1 has an invalid length.
[  107.582200][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'.
[  107.585660][ T8575] netlink: 'syz.0.1195': attribute type 32 has an invalid length.
[  107.588455][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'.
[  107.592776][ T8575] netlink: 'syz.0.1195': attribute type 32 has an invalid length.
[  107.790847][ T8601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1208'.
[  107.798334][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'.
[  108.047338][ T8617] netlink: 'syz.1.1212': attribute type 83 has an invalid length.
[  109.666614][ T8658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'.
[  109.676944][ T8660] netlink: 'syz.2.1230': attribute type 6 has an invalid length.
[  109.767964][ T8666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1232'.
[  109.824359][ T8672] netlink: 'syz.2.1231': attribute type 13 has an invalid length.
[  109.827159][ T8672] netlink: 'syz.2.1231': attribute type 17 has an invalid length.
[  109.920012][ T8672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.000142][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.004970][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.102117][ T8674] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.108782][ T8674] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.121151][ T8676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.193803][ T8676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.261545][ T8676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.279638][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.296621][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.308348][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.317081][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.331640][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.335033][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.343550][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.348251][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.775334][ T8709] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1248'.
[  110.780857][ T8709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1248'.
[  110.831103][ T8713] netlink: 'syz.0.1251': attribute type 21 has an invalid length.
[  110.906752][ T8719] delete_channel: no stack
[  111.628109][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'.
[  111.979705][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1269'.
[  112.507917][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881145e3c00: rx timeout, send abort
[  112.511993][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881145e3400: rx timeout, send abort
[  112.515221][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881145e3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  112.521355][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881145e3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  113.071390][ T8771] nbd0: detected capacity change from 0 to 549764202496
[  113.075784][   T55] block nbd0: Receive control failed (result -32)
[  113.213813][ T8778] syzkaller0: entered promiscuous mode
[  113.216113][ T8778] syzkaller0: entered allmulticast mode
[  114.317305][ T8790] netlink: 'syz.2.1285': attribute type 2 has an invalid length.
[  114.320708][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'.
[  114.393023][ T8800] netlink: 'syz.2.1290': attribute type 1 has an invalid length.
[  114.422504][ T8800] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  114.427624][ T8800] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  114.470054][ T8808] gretap2: entered promiscuous mode
[  114.476151][ T8808] bond2: (slave gretap2): making interface the new active one
[  114.478966][ T8808] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  114.487567][ T8810] batadv_slave_1: entered promiscuous mode
[  114.497052][ T8810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1294'.
[  114.503618][ T8809] batadv_slave_1: left promiscuous mode
[  114.777538][ T8822] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1300'.
[  114.892451][ T8827] netlink: 'syz.0.1301': attribute type 13 has an invalid length.
[  114.895843][ T8827] netlink: 'syz.0.1301': attribute type 17 has an invalid length.
[  114.985175][ T8827] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.990772][ T8827] 8021q: adding VLAN 0 to HW filter on device team0
[  114.999661][ T8827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.106116][ T8827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.182932][ T8829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.233446][ T8833] tipc: MTU too low for tipc bearer
[  115.258808][ T8827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.162750][ T8827] syz.0.1301 (8827) used greatest stack depth: 19800 bytes left
[  116.280782][ T8850] batadv_slave_0: entered promiscuous mode
[  116.304940][ T8841] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1308'.
[  116.493801][ T8861] sctp: [Deprecated]: syz.0.1315 (pid 8861) Use of int in maxseg socket option.
[  116.493801][ T8861] Use struct sctp_assoc_value instead
[  116.594213][ T8869] netlink: 'syz.2.1319': attribute type 1 has an invalid length.
[  116.609884][ T8840] batadv_slave_0: left promiscuous mode
[  116.621137][ T8869] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  116.656398][ T8869] 8021q: adding VLAN 0 to HW filter on device bond3
[  116.659868][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  116.680799][ T8869] veth3: entered promiscuous mode
[  116.685157][ T8869] bond3: (slave veth3): Enslaving as a backup interface with a down link
[  116.711961][ T8869] bond0: (slave bond_slave_0): Releasing backup interface
[  116.727132][ T8869] bond0: (slave bond_slave_1): Releasing backup interface
[  116.735919][ T8869] team0: Port device team_slave_0 removed
[  116.747456][ T8869] team0: Port device team_slave_1 removed
[  116.750785][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.754098][ T8869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.757254][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.759657][ T8869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.769446][ T8869] bond0: (slave wlan1): Releasing backup interface
[  116.783465][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  116.787893][ T8869] bond1: (slave geneve2): Releasing active interface
[  116.803607][ T8869] bond2: (slave gretap2): Releasing active interface
[  116.811282][ T8869] bond3: (slave ip6gretap2): Removing an active aggregator
[  116.815712][ T8869] bond3: (slave ip6gretap2): Releasing backup interface
[  116.818723][ T8869] bond3: (slave ip6gretap2): the permanent HWaddr of slave - 62:9d:52:4a:51:e3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  116.827215][  T790] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  116.836195][ T8869] bond3: (slave veth3): Releasing backup interface
[  116.881541][  T790] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  117.179019][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'.
[  117.230116][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1343'.
[  117.613581][ T8958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.620844][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1356'.
[  117.633157][ T8958] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  117.642070][ T8958] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  117.955987][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'.
[  117.992359][ T9002] syzkaller0: entered promiscuous mode
[  117.994822][ T9002] syzkaller0: entered allmulticast mode
[  118.169736][ T9012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1381'.
[  118.436949][ T9026] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[  119.156832][ T9044] syzkaller1: entered promiscuous mode
[  119.159111][ T9044] syzkaller1: entered allmulticast mode
[  119.225934][ T9050] netlink: 'syz.1.1400': attribute type 1 has an invalid length.
[  119.229263][ T9050] netlink: 'syz.1.1400': attribute type 11 has an invalid length.
[  119.241500][ T9050] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1400'.
[  119.299272][ T9058] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1403'.
[  119.360012][ T9064] netlink: 'syz.2.1407': attribute type 2 has an invalid length.
[  119.370190][ T9064] : entered promiscuous mode
[  119.433958][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'.
[  119.440840][ T9069] macsec1: entered promiscuous mode
[  119.443527][ T9069] team0: entered promiscuous mode
[  119.445241][ T9069] macsec1: entered allmulticast mode
[  119.447289][ T9069] team0: entered allmulticast mode
[  119.449925][ T9069] team0: Device macsec1 is already an upper device of the team interface
[  119.462665][ T9069] team0: left allmulticast mode
[  119.464796][ T9069] team0: left promiscuous mode
[  119.529453][ T9075] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1412'.
[  119.718838][ T9095] netlink: 'syz.0.1421': attribute type 3 has an invalid length.
[  119.753191][ T9099] bond0: option use_carrier: invalid value (2)
[  119.815055][ T9105] syzkaller0: entered promiscuous mode
[  119.817044][ T9105] syzkaller0: entered allmulticast mode
[  120.866574][ T9128] veth1: left promiscuous mode
[  120.875578][ T9128] gtp0: left promiscuous mode
[  120.877177][ T9128] gtp0: left allmulticast mode
[  120.878925][ T9128] bond1: left promiscuous mode
[  120.880752][ T9128] wireguard0: left promiscuous mode
[  120.893739][ T9128] ip6gre1: left promiscuous mode
[  120.924718][ T9138] nbd2: detected capacity change from 0 to 63
[  120.927022][ T9141] block nbd2: NBD_DISCONNECT
[  120.928940][ T9141] block nbd2: Disconnected due to user request.
[  120.936259][ T9141] block nbd2: shutting down sockets
[  121.313717][ T9187] netlink: 'syz.2.1463': attribute type 1 has an invalid length.
[  121.346438][ T9189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.102306][ T9196] __nla_validate_parse: 4 callbacks suppressed
[  122.102321][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1467'.
[  123.607794][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  123.646863][ T9262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.786321][ T9272] ip6gre1: entered allmulticast mode
[  124.978376][ T9365] netlink: 'syz.0.1528': attribute type 3 has an invalid length.
[  125.729752][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1548'.
[  126.414800][ T9445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1569'.
[  126.669384][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'.
[  126.704003][ T9458] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  126.751605][ T9460] geneve3: entered promiscuous mode
[  126.951014][ T9476] bridge2: entered promiscuous mode
[  126.954247][ T9476] bridge2: entered allmulticast mode
[  129.358974][ T9563] netlink: 'syz.0.1622': attribute type 1 has an invalid length.
[  129.395972][ T9563] 8021q: adding VLAN 0 to HW filter on device bond4
[  129.401501][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  129.436190][ T9563] 8021q: adding VLAN 0 to HW filter on device bond4
[  129.439174][ T9563] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  129.444813][ T9563] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  129.486427][ T9574] bond4: (slave bridge3): Enslaving as an active interface with a down link
[  129.628993][ T9580] netlink: 'syz.1.1627': attribute type 3 has an invalid length.
[  129.947584][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1640'.
[  129.952036][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1640'.
[  130.009130][ T9613] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1642'.
[  130.150055][ T9624] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1647'.
[  130.288608][ T9641] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  130.377371][ T9652] netem: change failed
[  130.453026][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'.
[  130.456111][ T9658] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1662'.
[  130.656901][ T9683] syzkaller1: entered promiscuous mode
[  130.658818][ T9683] syzkaller1: entered allmulticast mode
[  130.785301][ T9696] netlink: 'syz.0.1679': attribute type 1 has an invalid length.
[  130.802227][ T9696] 8021q: adding VLAN 0 to HW filter on device bond5
[  130.815770][ T9696] bond5: (slave gretap2): making interface the new active one
[  130.819881][ T9696] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  130.913234][ T9706] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1683'.
[  131.022775][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'.
[  131.237894][ T9735] delete_channel: no stack
[  131.359109][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1701'.
[  131.803090][ T9760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1709'.
[  132.427458][ T9802] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  132.437422][ T9802] netlink: 'syz.1.1727': attribute type 4 has an invalid length.
[  132.605440][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.807704][ T9834] C: renamed from team_slave_0
[  132.826929][ T9834] netlink: 'syz.0.1740': attribute type 3 has an invalid length.
[  132.830214][ T9834] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  133.307124][   T24] IPVS: starting estimator thread 0...
[  133.405606][ T9872] IPVS: using max 43 ests per chain, 103200 per kthread
[  133.450177][ T9882] netlink: 'syz.1.1762': attribute type 5 has an invalid length.
[  133.476556][ T9883] syzkaller1: entered promiscuous mode
[  133.478482][ T9883] syzkaller1: entered allmulticast mode
[  133.623664][ T9897] netlink: zone id is out of range
[  133.657154][ T9901] openvswitch: netlink: Missing valid actions attribute.
[  133.667529][ T9901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.828161][ T9921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.234449][ T9947] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.242860][ T9947] syzkaller0: entered promiscuous mode
[  134.245503][ T9947] syzkaller0: entered allmulticast mode
[  134.253192][ T9947] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  134.263945][ T9947] tipc: Resetting bearer <eth:syzkaller0>
[  134.267296][ T9946] tipc: Resetting bearer <eth:syzkaller0>
[  134.279517][ T9946] tipc: Disabling bearer <eth:syzkaller0>
[  135.068642][ T6378] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.072873][ T6378] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.076693][ T6378] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.080436][ T6378] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.534900][T10014] netlink: 'syz.0.1823': attribute type 2 has an invalid length.
[  135.762119][T10035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.765839][T10035] syzkaller0: entered promiscuous mode
[  135.768364][T10035] syzkaller0: entered allmulticast mode
[  135.794227][T10038] syzkaller0: entered promiscuous mode
[  135.796736][T10038] syzkaller0: entered allmulticast mode
[  135.807480][T10035] tipc: Resetting bearer <eth:syzkaller0>
[  135.815233][T10034] tipc: Resetting bearer <eth:syzkaller0>
[  135.828205][T10034] tipc: Disabling bearer <eth:syzkaller0>
[  136.118790][T10059] __nla_validate_parse: 8 callbacks suppressed
[  136.118804][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'.
[  136.126104][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1842'.
[  136.129991][T10059] netlink: 'syz.1.1842': attribute type 3 has an invalid length.
[  136.405117][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1857'.
[  136.408750][T10089] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  136.412925][T10089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.455316][T10096] netlink: 'syz.0.1860': attribute type 1 has an invalid length.
[  136.625615][T10118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.838139][T10136] netlink: 'syz.1.1874': attribute type 1 has an invalid length.
[  136.840865][T10136] netlink: 'syz.1.1874': attribute type 2 has an invalid length.
[  136.847324][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'.
[  137.066087][T10154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1883'.
[  137.182949][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1887'.
[  137.292761][T10174] sctp: [Deprecated]: syz.1.1893 (pid 10174) Use of int in maxseg socket option.
[  137.292761][T10174] Use struct sctp_assoc_value instead
[  137.427066][T10187] netlink: 'syz.0.1899': attribute type 10 has an invalid length.
[  137.430356][T10187] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1899'.
[  137.437687][T10187] batman_adv: batadv0: Adding interface: virt_wifi0
[  137.440468][T10187] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.456126][T10187] batman_adv: batadv0: Interface activated: virt_wifi0
[  137.526281][T10194] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  137.533088][T10196] netlink: 'syz.0.1904': attribute type 15 has an invalid length.
[  137.771121][T10213] netlink: 'syz.1.1913': attribute type 1 has an invalid length.
[  138.115872][T10213] bond2 (unregistering): Released all slaves
[  138.317959][T10224] : renamed from vlan0
[  138.785792][T10240] bridge5: the hash_elasticity option has been deprecated and is always 16
[  138.788922][T10240] bridge5: entered allmulticast mode
[  139.347357][T10261] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1935'.
[  139.492769][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1943'.
[  139.788468][T10301] netlink: 'syz.2.1954': attribute type 1 has an invalid length.
[  139.895283][T10307] netlink: 'syz.2.1956': attribute type 1 has an invalid length.
[  139.898781][T10307] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1956'.
[  140.378382][T10331] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  140.822212][T10314] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  140.824984][T10329] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  140.917305][T10337] validate_nla: 1 callbacks suppressed
[  140.917319][T10337] netlink: 'syz.2.1967': attribute type 21 has an invalid length.
[  141.085768][T10345] netlink: 'syz.2.1972': attribute type 5 has an invalid length.
[  141.192921][T10349] __nla_validate_parse: 2 callbacks suppressed
[  141.192937][T10349] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1974'.
[  141.249072][T10351] netlink: 'syz.2.1975': attribute type 4 has an invalid length.
[  141.527848][T10383] netlink: 'syz.1.1991': attribute type 3 has an invalid length.
[  141.532030][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1991'.
[  141.537510][T10382] 8021q: adding VLAN 0 to HW filter on device bond4
[  141.642809][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'.
[  141.659048][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1995'.
[  141.890070][T10402] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  141.995912][T10416] netlink: 'syz.2.2007': attribute type 12 has an invalid length.
[  142.975693][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'.
[  143.088578][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'.
[  143.200373][T10470] netlink: 'syz.2.2032': attribute type 27 has an invalid length.
[  143.843844][T10555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2072'.
[  143.870661][T10559] sctp: [Deprecated]: syz.0.2074 (pid 10559) Use of int in maxseg socket option.
[  143.870661][T10559] Use struct sctp_assoc_value instead
[  143.985709][T10575] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2082'.
[  144.136344][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2083'.
[  144.454802][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2105'.
[  144.488825][T10630] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  144.722478][T10639] openvswitch: netlink: Flow actions attr not present in new flow.
[  145.881949][T10672] tun0: tun_chr_ioctl cmd 2148045848
[  145.884381][T10672] tun0: tun_chr_ioctl cmd 21731
[  145.945768][T10674] netlink: 'syz.0.2128': attribute type 2 has an invalid length.
[  145.962742][T10674] k*]: entered promiscuous mode
[  145.996043][T10674] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.000271][T10674] 8021q: adding VLAN 0 to HW filter on device team0
[  146.014216][T10674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.050764][T10674] rdma_op ffff88810a6c49f0 conn xmit_rdma 0000000000000000
[  146.944496][T10732] __nla_validate_parse: 2 callbacks suppressed
[  146.944506][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'.
[  146.966702][T10732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2155'.
[  147.072810][  T790] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  147.089956][  T790] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  147.107169][  T790] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  147.486646][T10774] netlink: 'syz.2.2166': attribute type 1 has an invalid length.
[  147.499823][T10774] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2166'.
[  147.949168][T10810] macsec2: entered allmulticast mode
[  147.952477][T10810] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  147.957411][T10810] batman_adv: batadv0: Adding interface: macsec2
[  147.960113][T10810] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.970699][T10810] batman_adv: batadv0: Interface activated: macsec2
[  148.821014][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2193'.
[  149.461653][T10882] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2214'.
[  149.465456][T10882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2214'.
[  149.597350][T10898] netlink: 'syz.1.2222': attribute type 1 has an invalid length.
[  149.626567][T10898] 8021q: adding VLAN 0 to HW filter on device bond2
[  149.927758][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2238'.
[  149.963360][T10942] netlink: 'syz.1.2241': attribute type 21 has an invalid length.
[  149.967301][T10942] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2241'.
[  150.034833][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  150.185830][T10959] syzkaller0: entered promiscuous mode
[  150.187741][T10959] syzkaller0: entered allmulticast mode
[  150.869956][T10966] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2251'.
[  150.993940][T10979] netlink: 'syz.0.2258': attribute type 29 has an invalid length.
[  150.998919][T10979] netlink: 'syz.0.2258': attribute type 29 has an invalid length.
[  151.008526][T10979] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2258'.
[  151.021626][T10979] unsupported nla_type 58
[  151.063844][T10983] tipc: Started in network mode
[  151.065524][T10983] tipc: Node identity 4e54ab0110d2, cluster identity 4711
[  151.067845][T10983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.070782][T10983] syzkaller0: entered promiscuous mode
[  151.076826][T10983] syzkaller0: entered allmulticast mode
[  151.097637][T10983] tipc: Resetting bearer <eth:syzkaller0>
[  151.109101][T10982] tipc: Resetting bearer <eth:syzkaller0>
[  151.121721][T10982] tipc: Disabling bearer <eth:syzkaller0>
[  151.628784][T11028] tap0: tun_chr_ioctl cmd 1074025680
[  151.636257][T11028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.639786][T11028] D: renamed from syzkaller0
[  151.646127][T11025] netlink: 'syz.1.2277': attribute type 39 has an invalid length.
[  151.650112][T11028] tipc: Disabling bearer <eth:syzkaller0>
[  151.909108][T11037] netlink: 'syz.1.2283': attribute type 6 has an invalid length.
[  151.957717][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'.
[  152.060655][T11051] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  152.195217][T11058] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2293'.
[  152.286479][T11067] tipc: Failed to remove unknown binding: 66,1,1/0:1981418280/1981418282
[  152.350554][T11074] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  152.353578][  T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.355709][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2302'.
[  152.356089][  T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.435209][T11080] geneve2: entered promiscuous mode
[  152.452771][ T6378] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.456280][ T6378] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.459673][ T6378] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.469651][ T6378] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.728990][T11116] IPVS: Scheduler module ip_vs_sip not found
[  152.875090][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2332'.
[  152.979759][T11154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2338'.
[  153.061351][T11162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2341'.
[  153.064816][T11162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2341'.
[  153.068366][T11162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2341'.
[  153.136000][T11166] vlan0: entered allmulticast mode
[  153.138460][T11166] dummy0: entered allmulticast mode
[  154.696912][T11284] netlink: 844 bytes leftover after parsing attributes in process `syz.2.2366'.
[  154.777282][T11288] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  154.786100][T11288] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  154.790878][T11288] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  155.017555][T11309] sctp: [Deprecated]: syz.1.2377 (pid 11309) Use of struct sctp_assoc_value in delayed_ack socket option.
[  155.017555][T11309] Use struct sctp_sack_info instead
[  155.054232][T11312] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2379'.
[  155.106208][T11316] netlink: 'syz.1.2381': attribute type 6 has an invalid length.
[  155.389827][T11340] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  155.808602][T11366] netlink: 'syz.1.2406': attribute type 21 has an invalid length.
[  155.926092][T11373] tc_dump_action: action bad kind
[  156.209321][T11384] netlink: 'syz.1.2414': attribute type 29 has an invalid length.
[  156.254446][T11386] netlink: 'syz.1.2415': attribute type 30 has an invalid length.
[  156.324441][T11388] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.328470][T11388] syzkaller0: entered promiscuous mode
[  156.330878][T11388] syzkaller0: entered allmulticast mode
[  156.367293][T11388] tipc: Resetting bearer <eth:syzkaller0>
[  156.374164][T11387] tipc: Resetting bearer <eth:syzkaller0>
[  156.385264][T11387] tipc: Disabling bearer <eth:syzkaller0>
[  157.862178][T11456] nbd: must specify a device to reconfigure
[  157.923262][T11462] __nla_validate_parse: 8 callbacks suppressed
[  157.923277][T11462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2451'.
[  157.943890][T11464] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2452'.
[  158.365613][T11492] tipc: New replicast peer: 255.255.255.255
[  158.373562][T11492] tipc: Enabled bearer <udp:syz2>, priority 10
[  158.381952][T11492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2464'.
[  158.385048][T11492] tipc: Disabling bearer <udp:syz2>
[  159.825978][T11563] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2497'.
[  159.835246][T11563] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2497'.
[  159.957475][T11575] pim6reg1: entered allmulticast mode
[  160.184471][T11590] syz.1.2510 uses old SIOCAX25GETINFO
[  160.429815][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2518'.
[  160.704244][ T5822] cgroup: fork rejected by pids controller in /syz1
[  160.769022][ T6378] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.817616][ T6378] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.888942][ T6378] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.940470][ T6378] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.155459][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  161.159321][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  161.163596][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  161.167764][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  161.171127][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  161.327424][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2530'.
[  161.382591][T11671] Bluetooth: MGMT ver 1.23
[  161.520977][ T6378] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  161.525640][ T6378] bond0 (unregistering): Released all slaves
[  161.537045][ T6378] bond1 (unregistering): Released all slaves
[  161.618596][ T6378] bond2 (unregistering): Released all slaves
[  161.636630][T11680] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2532'.
[  161.718183][ T6378] tipc: Left network mode
[  161.832399][T11690] batadv0: left allmulticast mode
[  161.834176][T11690] batadv0: left promiscuous mode
[  161.836006][T11690] bridge0: port 3(batadv0) entered disabled state
[  161.843960][T11690] bridge_slave_0: left allmulticast mode
[  161.845881][T11690] bridge_slave_0: left promiscuous mode
[  161.847863][T11690] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.851891][T11690] bridge_slave_1: left allmulticast mode
[  161.853776][T11690] bridge_slave_1: left promiscuous mode
[  161.855712][T11690] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.861831][T11690] bond0: (slave bond_slave_0): Releasing backup interface
[  161.867840][T11690] bond0: (slave bond_slave_1): Releasing backup interface
[  161.873479][T11690] C: left promiscuous mode
[  161.878228][T11690] team0: Port device C removed
[  161.882939][T11694] netlink: 'syz.0.2537': attribute type 10 has an invalid length.
[  161.884470][T11690] team_slave_1: left promiscuous mode
[  161.888415][T11690] team0: Port device team_slave_1 removed
[  161.890768][T11690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.894719][T11690] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.904592][T11690] batman_adv: batadv0: Removing interface: virt_wifi0
[  161.908354][T11690] bond1: (slave wireguard0): Releasing backup interface
[  161.910686][T11690] bond1: (slave wireguard1): making interface the new active one
[  161.915533][T11690] bond1: (slave wireguard1): Releasing backup interface
[  161.920341][T11690] bond3: (slave gretap1): Releasing active interface
[  161.926601][T11690] gretap1: left allmulticast mode
[  161.930869][T11690] bond4: (slave bridge3): Releasing active interface
[  161.938307][T11690] bond5: (slave gretap2): Releasing active interface
[  161.944309][T11690] batman_adv: batadv0: Interface deactivated: macsec2
[  161.947367][T11690] batman_adv: batadv0: Removing interface: macsec2
[  161.969565][  T973] syz1: Port: 1 Link DOWN
[  161.988013][T11694] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  161.993869][T11699] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  161.997228][T11699] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  162.006037][ T5291] syz1: Port: 1 Link ACTIVE
[  162.138661][T11660] chnl_net:caif_netlink_parms(): no params data found
[  162.159371][T11714] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2546'.
[  162.225278][ T6378] hsr_slave_0: left promiscuous mode
[  162.227686][ T6378] hsr_slave_1: left promiscuous mode
[  162.777483][T11660] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.792200][T11660] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.803369][T11660] bridge_slave_0: entered allmulticast mode
[  162.811631][T11660] bridge_slave_0: entered promiscuous mode
[  162.816189][T11660] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.819318][T11660] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.824760][T11660] bridge_slave_1: entered allmulticast mode
[  162.828591][T11660] bridge_slave_1: entered promiscuous mode
[  162.866387][T11660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.873433][T11660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.932863][T11660] team0: Port device team_slave_0 added
[  162.936527][T11660] team0: Port device team_slave_1 added
[  162.959929][T11660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.965145][T11660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.973898][T11660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.002837][T11660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.006198][T11660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.021488][T11660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.060200][ T6378] IPVS: stop unused estimator thread 0...
[  163.083772][T11660] hsr_slave_0: entered promiscuous mode
[  163.086188][T11660] hsr_slave_1: entered promiscuous mode
[  163.089548][ T6378] ------------[ cut here ]------------
[  163.091468][ T6378] WARNING: CPU: 1 PID: 6378 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  163.094536][ T6378] Modules linked in:
[  163.096358][ T6378] CPU: 1 UID: 0 PID: 6378 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  163.101648][ T6378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.104941][ T6378] Workqueue: netns cleanup_net
[  163.106544][ T6378] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  163.108408][ T6378] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 58 4a 0a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 16 19 eb f7 e8 51 27 a7 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 43 27 a7 f7 90 0f 0b 90 e9 60 fe ff ff
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  163.117093][ T6378] RSP: 0018:ffffc9000450f898 EFLAGS: 00010293
[  163.119012][ T6378] RAX: ffffffff8a18895f RBX: ffff888022580000 RCX: ffff888108611cc0
[  163.121646][ T6378] RDX: 0000000000000000 RSI: ffffffff8db66054 RDI: ffff888108611cc0
[  163.124225][ T6378] RBP: ffffc9000450f9b0 R08: ffffffff8fa07bf7 R09: 1ffffffff1f40f7e
[  163.126818][ T6378] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: ffffffff8f601ba0
[  163.129371][ T6378] R13: 1ffff920008a1f40 R14: ffff888022581480 R15: dffffc0000000000
[  163.132251][ T6378] FS:  0000000000000000(0000) GS:ffff8881a3c80000(0000) knlGS:0000000000000000
[  163.135362][ T6378] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.137548][ T6378] CR2: 00007fe8ca3b7dac CR3: 0000000022e62000 CR4: 00000000000006f0
[  163.140194][ T6378] Call Trace:
[  163.141433][ T6378]  <TASK>
[  163.142400][ T6378]  xfrm_net_exit+0x2d/0x70
[  163.143890][ T6378]  ops_undo_list+0x49a/0x990
[  163.145383][ T6378]  ? __pfx_ops_undo_list+0x10/0x10
[  163.147090][ T6378]  ? do_raw_spin_unlock+0x4d/0x240
[  163.148802][ T6378]  cleanup_net+0x4c5/0x800
[  163.150246][ T6378]  ? __pfx_cleanup_net+0x10/0x10
[  163.152007][ T6378]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.153675][ T6378]  ? process_scheduled_works+0x9ef/0x17b0
[  163.155447][ T6378]  ? process_scheduled_works+0x9ef/0x17b0
[  163.157257][ T6378]  process_scheduled_works+0xae1/0x17b0
[  163.159106][ T6378]  ? __pfx_process_scheduled_works+0x10/0x10
[  163.161115][ T6378]  worker_thread+0x8a0/0xda0
[  163.162790][ T6378]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.164901][ T6378]  ? __kthread_parkme+0x7b/0x200
[  163.166567][ T6378]  kthread+0x711/0x8a0
[  163.167989][ T6378]  ? __pfx_worker_thread+0x10/0x10
[  163.169733][ T6378]  ? __pfx_kthread+0x10/0x10
[  163.171415][ T6378]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.173190][ T6378]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.174892][ T6378]  ? __pfx_kthread+0x10/0x10
[  163.176446][ T6378]  ret_from_fork+0x3fc/0x770
[  163.177987][ T6378]  ? __pfx_ret_from_fork+0x10/0x10
[  163.179675][ T6378]  ? __switch_to_asm+0x39/0x70
[  163.181359][ T6378]  ? __switch_to_asm+0x33/0x70
[  163.182998][ T6378]  ? __pfx_kthread+0x10/0x10
[  163.184515][ T6378]  ret_from_fork_asm+0x1a/0x30
[  163.186052][ T6378]  </TASK>
[  163.187052][ T6378] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  163.189467][ T6378] CPU: 1 UID: 0 PID: 6378 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  163.193458][ T6378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.196687][ T6378] Workqueue: netns cleanup_net
[  163.198299][ T6378] Call Trace:
[  163.199434][ T6378]  <TASK>
[  163.200442][ T6378]  dump_stack_lvl+0x99/0x250
[  163.202010][ T6378]  ? __asan_memcpy+0x40/0x70
[  163.203576][ T6378]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.205305][ T6378]  ? __pfx__printk+0x10/0x10
[  163.206854][ T6378]  panic+0x2db/0x790
[  163.208209][ T6378]  ? __pfx_panic+0x10/0x10
[  163.209724][ T6378]  ? ret_from_fork_asm+0x1a/0x30
[  163.211380][ T6378]  __warn+0x31b/0x4b0
[  163.212717][ T6378]  ? xfrm_state_fini+0x270/0x2f0
[  163.214378][ T6378]  ? xfrm_state_fini+0x270/0x2f0
[  163.216113][ T6378]  report_bug+0x2be/0x4f0
[  163.217607][ T6378]  ? xfrm_state_fini+0x270/0x2f0
[  163.219346][ T6378]  ? xfrm_state_fini+0x270/0x2f0
[  163.221048][ T6378]  ? xfrm_state_fini+0x272/0x2f0
[  163.222728][ T6378]  handle_bug+0x84/0x160
[  163.224186][ T6378]  exc_invalid_op+0x1a/0x50
[  163.225740][ T6378]  asm_exc_invalid_op+0x1a/0x20
[  163.227342][ T6378] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  163.229304][ T6378] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 58 4a 0a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 16 19 eb f7 e8 51 27 a7 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 43 27 a7 f7 90 0f 0b 90 e9 60 fe ff ff
[  163.235608][ T6378] RSP: 0018:ffffc9000450f898 EFLAGS: 00010293
[  163.237629][ T6378] RAX: ffffffff8a18895f RBX: ffff888022580000 RCX: ffff888108611cc0
[  163.240155][ T6378] RDX: 0000000000000000 RSI: ffffffff8db66054 RDI: ffff888108611cc0
[  163.242632][ T6378] RBP: ffffc9000450f9b0 R08: ffffffff8fa07bf7 R09: 1ffffffff1f40f7e
[  163.245201][ T6378] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: ffffffff8f601ba0
[  163.247756][ T6378] R13: 1ffff920008a1f40 R14: ffff888022581480 R15: dffffc0000000000
[  163.250329][ T6378]  ? xfrm_state_fini+0x26f/0x2f0
[  163.251934][ T6378]  ? xfrm_state_fini+0x26f/0x2f0
[  163.253496][ T6378]  xfrm_net_exit+0x2d/0x70
[  163.254967][ T6378]  ops_undo_list+0x49a/0x990
[  163.256544][ T6378]  ? __pfx_ops_undo_list+0x10/0x10
[  163.258205][ T6378]  ? do_raw_spin_unlock+0x4d/0x240
[  163.259863][ T6378]  cleanup_net+0x4c5/0x800
[  163.261297][ T6378]  ? __pfx_cleanup_net+0x10/0x10
[  163.262924][ T6378]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.264646][ T6378]  ? process_scheduled_works+0x9ef/0x17b0
[  163.266533][ T6378]  ? process_scheduled_works+0x9ef/0x17b0
[  163.268409][ T6378]  process_scheduled_works+0xae1/0x17b0
[  163.270125][ T6378]  ? __pfx_process_scheduled_works+0x10/0x10
[  163.272083][ T6378]  worker_thread+0x8a0/0xda0
[  163.273622][ T6378]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.275869][ T6378]  ? __kthread_parkme+0x7b/0x200
[  163.277612][ T6378]  kthread+0x711/0x8a0
[  163.278924][ T6378]  ? __pfx_worker_thread+0x10/0x10
[  163.280578][ T6378]  ? __pfx_kthread+0x10/0x10
[  163.282105][ T6378]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.283805][ T6378]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.285509][ T6378]  ? __pfx_kthread+0x10/0x10
[  163.286988][ T6378]  ret_from_fork+0x3fc/0x770
[  163.288522][ T6378]  ? __pfx_ret_from_fork+0x10/0x10
[  163.290189][ T6378]  ? __switch_to_asm+0x39/0x70
[  163.291707][ T6378]  ? __switch_to_asm+0x33/0x70
[  163.293237][ T6378]  ? __pfx_kthread+0x10/0x10
[  163.294743][ T6378]  ret_from_fork_asm+0x1a/0x30
[  163.296343][ T6378]  </TASK>
[  163.298014][ T6378] Kernel Offset: disabled
[  163.299428][ T6378] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:38:47  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000202 RCX=86e7ef31e70fc100 RDX=0000000000000000
RSI=ffffffff8be309e0 RDI=ffffffff8be309a0 RBP=0000000000000001 RSP=ffffc9000357f2c8
R8 =0000000000000000 R9 =ffffffff822e0aba R10=dffffc0000000000 R11=fffff94000847a29
R12=dffffc0000000000 R13=ffffffff822e0aba R14=ffffffff8e13c5a0 R15=ffff888108531cc0
RIP=ffffffff819d81c0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555dfa2500 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff0168e56c0 CR3=000000011942a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007ff015c12e53
XMM06=0000000000000000 00007ff015c12e4d XMM07=0000000000000000 00007ff015c12e61
XMM08=0000000000000000 00007ff015c12ee7 XMM09=0000000000000000 00007ff015c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000055 RBX=0000000000000055 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000450f030
R8 =ffff888106ce8237 R9 =1ffff11020d9d046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a958ff R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe8ca3b7dac CR3=0000000022e62000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000ff0000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=0000000000000000 00007f44ba612e53
XMM06=0000000000000000 00007f44ba612e4d XMM07=0000000000000000 00007f44ba612e61
XMM08=0000000000000000 00007f44ba612ee7 XMM09=0000000000000000 00007f44ba612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
