last executing test programs:

2m20.586708947s ago: executing program 1 (id=6264):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)={0x44, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x80)

2m20.586239081s ago: executing program 1 (id=6266):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a00010000000000fddbdf258100000000003d"], 0x1c}}, 0x20000004)

2m20.508972898s ago: executing program 1 (id=6268):
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "001004", 0x8, 0x2b, 0x1, @remote, @mcast2, {[@routing={0x2f, 0x0, 0x1}]}}}}}, 0x0)

2m20.449340472s ago: executing program 1 (id=6272):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

2m20.292073274s ago: executing program 1 (id=6277):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000079c0)={0x1a8, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x144, 0x6, 0x0, 0x1, [@nested={0x140, 0xac, 0x0, 0x1, [@nested={0x13c, 0x13e, 0x0, 0x1, [@nested={0x138, 0xa0, 0x0, 0x1, [@nested={0x134, 0x61, 0x0, 0x1, [@nested={0x130, 0x9d, 0x0, 0x1, [@nested={0x12c, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x4, 0xa5}, @nested={0x119, 0x90, 0x0, 0x1, [@nested={0xe5, 0x44, 0x0, 0x1, [@typed={0x8, 0xb0, 0x0, 0x0, @str='GPL\x00'}, @generic="a4f2bdc07e8cc0404f617143e4f7b263ba6fc1453ff8932426cb0b2024dd0f1b7350887762644cd52aa6864acdf7e959a84b3dad1bc88841ef786cbde7d6215a38138e3e97b04c17bbc1841901c1583a335075ea5754b2eaa78293f03551b0562fb5a45f1f7cbb3d6e117248069b9fb39c95d130e184c9b4c03c06137216485441b97dd59aa0e33633390ce64bf88da83639f53a9b25264f438337448c8ad49b7c34940dd9f68826e015c57dcb", @typed={0x4, 0x13a}, @nested={0x25, 0x5b, 0x0, 0x1, [@generic="bc6dad2ec06ca4d4fe3dd7c279ab0ab97e40888491432f6bcceedf366490a5e0ca"]}]}, @generic="f0d1352a224aadf38cc0be9a1bfc6ea31cfe9abdfc6e08360d8cf57b7256e18c92263487faf40caf4b040e15ce"]}]}]}]}]}]}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0)

2m20.20286929s ago: executing program 1 (id=6279):
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

2m5.209626544s ago: executing program 32 (id=6279):
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

1m6.835768506s ago: executing program 2 (id=7852):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)

1m6.746842547s ago: executing program 2 (id=7853):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x10, 0x4}, 0x90)

1m6.746696679s ago: executing program 2 (id=7854):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x84040}, 0x0)

1m6.6758082s ago: executing program 2 (id=7855):
syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@nop, @nop, @eol, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ab519c9940eb739563a3c52b43aee4a2"}, @sack={0x5, 0x26, [0x9, 0xffffff4c, 0x43, 0x1, 0x8, 0xfa39, 0x8000, 0x8, 0x9]}, @md5sig={0x13, 0x12, "625fbe96fc97dc524d8a397b7b38957f"}]}}}}}}}, 0x0)

1m6.675680487s ago: executing program 2 (id=7856):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)

1m6.622927711s ago: executing program 2 (id=7858):
socket$unix(0x1, 0x1, 0x0)
getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000)
socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0)
unshare(0x62040200)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0)

51.069337616s ago: executing program 33 (id=7858):
socket$unix(0x1, 0x1, 0x0)
getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000)
socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0)
unshare(0x62040200)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0)

33.333298494s ago: executing program 3 (id=8505):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x5, 0x4, 0x4, 0x5}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

33.222785411s ago: executing program 3 (id=8510):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

32.872333401s ago: executing program 3 (id=8518):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB='\x00\x00\x00@'], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

31.932108259s ago: executing program 3 (id=8528):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
close(r0)

31.872837043s ago: executing program 3 (id=8531):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x260, 0xffffffff, 0xf0, 0x0, 0x188, 0xffffffff, 0xffffffff, 0x220, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@dev, @private, 0x0, 0x0, 'pimreg1\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_hsr\x00', 'batadv0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="9d", 0x3ec0}], 0x1)

31.792069922s ago: executing program 3 (id=8534):
socket$netlink(0x10, 0x3, 0x0)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000300))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
clock_gettime(0x0, 0x0)
sendmsg$can_bcm(r1, 0x0, 0x4804)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$smc(0x0, r1)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x40, 0x0, 0x1, 0x10000000000000], 0x0, 0x0}, 0x78)
write(r1, &(0x7f0000000000)='\"', 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r3)
recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$alg(0x26, 0x5, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

24.282717426s ago: executing program 4 (id=8686):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000003400)={0x10, 0x3f6, 0x2, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x24000004}, 0x8044)

24.22246934s ago: executing program 4 (id=8687):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)

24.222310213s ago: executing program 4 (id=8688):
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x67, 0x0, @dev, @local}}}}, 0x0)

24.152253944s ago: executing program 4 (id=8689):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

24.152141767s ago: executing program 4 (id=8690):
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e22, 0x2, @mcast1, 0x3}, 0x1c)

24.071374123s ago: executing program 4 (id=8691):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)}}], 0x2, 0x24000045)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000040))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), &(0x7f0000000dc0), 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0)

16.042057316s ago: executing program 34 (id=8534):
socket$netlink(0x10, 0x3, 0x0)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000300))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
clock_gettime(0x0, 0x0)
sendmsg$can_bcm(r1, 0x0, 0x4804)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$smc(0x0, r1)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x40, 0x0, 0x1, 0x10000000000000], 0x0, 0x0}, 0x78)
write(r1, &(0x7f0000000000)='\"', 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r3)
recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$alg(0x26, 0x5, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

9.055121709s ago: executing program 35 (id=8691):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)}}], 0x2, 0x24000045)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000040))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), &(0x7f0000000dc0), 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0)

1.983089644s ago: executing program 5 (id=8998):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000003"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

1.910000191s ago: executing program 5 (id=9001):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x1f}, {0x6, 0x8, 0x0, 0x3}]}, 0x10)

1.839882077s ago: executing program 5 (id=9005):
unshare(0x2c060000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')

1.750622849s ago: executing program 5 (id=9007):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xff, &(0x7f0000000340)=""/255, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x9, &(0x7f0000000000)={0xfffffffe}, 0x8}, 0x94)

1.70086278s ago: executing program 5 (id=9010):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x800}, &(0x7f0000000200)=0x8)

814.279093ms ago: executing program 5 (id=9017):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000080))

739.256443ms ago: executing program 6 (id=9019):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14)

685.925588ms ago: executing program 6 (id=9020):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0)

639.614873ms ago: executing program 6 (id=9021):
syz_emit_ethernet(0x9e, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x68, 0x3c, 0x0, @remote, @mcast2, {[@hopopts={0x32, 0x3, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x0, 0x4, "262dffae"}]}], {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "3baf3f40e7560eaa00e40f74235dcbe4cb1f5ec052d732ff", "7edcf63d0322223af76b456f051e3de00c45257d795b1ddbed3330afcaf01b26"}}}}}}}, 0x0)

639.20266ms ago: executing program 6 (id=9023):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f00000019c0)="e94e6785facdeda4e9a789778edd8051746667861fcb55fc79f3dce63694e62c7129c14cad36728ec771c9b3ad8ff8bb3b3aef032adf92a73fccc368f7e4d07073ce68baace2fe4cd861eb3a2988ca9fd7f2705cfa224834816767e62ff51ae65db5ee09c76585f0722b13d592d9802d70802efe930242ca43280995f58a88253329a8f6edea76902bd788304505c89f7fcdf8ae99f9d7d90748f6ba6fe67f634fd01f4748a6cdf5e7b532b57d822b4b931229e2be3205408e37917aa6aa36391d5f2d55d44148932f2e849bb14e69fca4e3bcece4c70f56094e0c5e1e489fd63b691adb46cfb1234810341415f0cd066ef33a67b6ae1c87eff349aac90632539d0f3842ac7d8d101bfb58a8ac8c353b0be5b1e16bf560cf4a909d369a73da8c5627edce549e1e307377bb768da857d113a603f051769c9df45c64550ef7299271dd821421e60977f693942666cd79fb7c96899e57b56aa13dc3334dbe96879ba304d672f92548f3b5d7df7835d7307a6d47cb13afd113609f093cf527d64d29437d15eee3cf82ecb328e7beb0595f534d712154092ab45559c25dce68753ed7956c98dd8c432415c6e7f1b1444e7178afd18f506033d4a4c5feaf56c663cad615f7e04a009e53edcbc2d587e9f8edd184d9cf8cefb8a722510f4b037fc0eeb88e4e294c3bdcd2bc36e5a79e5b03d8f0fd363142d85bc0098a13b29e5dda20f20e1f22b10bdce593ea7d0ab6a88455d2acd4667d996b3e913923099ed01944efc2427f04fa09886c6e7c43120a023d9427d38a6b0be6a35b8e83491c5e472f2bb1bdbd39b6e3c8d8fd803529de9ea66155928aa56f4cec6654d3480ad9da35624ae41b836b455a5449c73ac22a3fe8fc020a8af63e4e21c1e791bd160d1c04a2a42e93784a225fdbd169bdea851f91886433813fcd7677c2b87791dfa280c9d322b52bcd3708778cb644fd8656321416c905c893ffd578a57c2ecd21a75e34cf2e9ddb56b6e62347cfd9d4413047903a5643f6734d42699715d457ca11721e21fa2cd0bd776548d2f9da40900848606d8587fdc24612b6d9042c9f1785db6628c11d7e79e9a550a8bfbcc82f218926b3043701e0e4111d73ca7bf7b061debe7231d9293abfe2ff6dbfbdbebbed3915e9d27f2f63cb0a6091ba7bda625aa9d978fe41aed03bbd0aeb6cc2985e0c2c4d9d1eeb2474e7d26ab7cc472afe2f11f243708ed43623fd5c0861ad7cf5970f154048fbc58678cb14a4e4e6fdd43605cb3e23efd9df955c7f9539a2074bbe65ee1748a81fe5efe6bf533836becce2afb20366e647a225d7ed6d554d9df7ac1b7c466aab548283a2a9b54fea91bb1ddeceb71aa078c1b847c92d7d5ba703f9d7d9a116f9b18a27ca47c3500ccffb187d70d3b86b31da43d02f1dc0fd92072471c66b931c81dae72bbaa19556a8a806471ff5d91e6489066a287cc1f6dee365f65416fa506edfacbd4a16a66e138f93eb603babe582027e38fee835a002e1a94eb0424c016619f26604517d0bc03e7bdbf2a437fbcb6a3f9ec6977762193665339ad6af2f84872cfcc794fe1e61f6392d1f5cbc409d3050cc655435d6fdd38385e39e18d70c6ea1618e962b6b4b4d0edbffd882c700bf900137832027f807d7739af211ad5be5c538b70d1983bf6693ed909fd406e1d5c8b7bfbdd36d5f9d6a88100895f08cb6ef123e41419d5877d1e17ec72b862fbfc7ddf6f37c8aacbcfb05dad0c2a596b610da09b0bf3b72b420fd797ed0aa72fcac87a6192c0ef7551baa06d50739abff50ba92e79451dc3588ed45e821bfe9b8e25fb871e592dcfedb1b5de9fba1b1635f7e10a4aa8f1785429ac582b4d5a725c6d0051af07ab043d62326b77ea259cf44e8cf14bd8d6a1353c770ab6f1dbedd7f3b39fe2bbd9cc986db49782b34be117cf578cbc417799f12cc5c5bf32ea96d2d7ca48650c74e827f5fe12393be2181416e4030d02c875eb242f815774211cb50a1ce4d53e926388723c5d157b12bcccaf193f2fffb8a53b0b0ec9834c07e96a2cf2323cfb2e1cc92e18baf8bf87ac9a7336f8c04fe6c8fae5ccc81976a26afb44c1aa0efbd93ef87e722c6c3f00da78bdc81dad9795fe2c1c644fdc09c842c138f704353c786311a0e14c226ef9061e36cdade4febdad904cdad6cbc4edcd1d73e27e835324988510534af9475416d5b8c14075b774efaddaad27889736369ab28ac8d005292105d1c3bdc7c665fceef0d945626bf76c8c147f7de23b07c9ca073058f1150958e85193303c7f1f7a60839dcce54d466a210a6d123968fbec47ba47239c1a2fadf9566e356ac610e562b77934bf56456e16edf9a8c0915c0a0b9405676d0d20d31ad62844416de5c043255f24c591427a21479c7fccd231c6b6a90880a551832ef874a879cc7b847aa926964224231a81af9b13d48f02828cb960d88a46302d2ef1492fae558a3d9c81042e2450b3a0aa1cb86bfa58ec3b09da9c360a202d28136565bb956", 0x6f0}], 0x1, 0x0, 0x0, 0x40080}], 0x1, 0x20040800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13092abd7000ffdbdf25210000000c000100000200000000000009001f00"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x14)

490.665537ms ago: executing program 6 (id=9026):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10)
sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)

490.275755ms ago: executing program 6 (id=9028):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
pipe(&(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="d80000001b0001002dbd7000fddbdf2500000000000000000000000000000000ac1e00010000000000000000000000004e2200004e23000c0a00008032000000", @ANYRES32=0x0, @ANYBLOB="000800090000000080000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000400)={0x3ff, 0x0, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
tee(r1, r0, 0x80000001, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff}, 0x6)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, 0x0)
ioctl$sock_bt_hci(r4, 0x400448ca, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f00000007c0)=""/250}, 0x94)
vmsplice(r2, &(0x7f0000000180), 0x0, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff95000000000000004ad8ce828a0223b2e5192c6dac7abefdb6c210ee02051c1db395ac04f35696d7c0a851cdb52731c147ae9e5640b594a1851e16f2c6aeb1b6025063a4ea16dbcefaf66db70bfc574e46bccb8497ce3b734ff1fbe68eb79f586c660d4df3467fd2ffde1ab7671290890831ecfba5859b85cceb9ed171"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94)
setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000300)=0x1, 0x4)
writev(r8, &(0x7f0000000000), 0x0)

240.11858ms ago: executing program 0 (id=9035):
r0 = socket(0x10, 0x803, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7}}], 0x1, 0x2040000, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0)

176.878089ms ago: executing program 0 (id=9036):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

130.431253ms ago: executing program 0 (id=9037):
recvmmsg(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x4}, 0x8}], 0x1, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x44000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2}, 0x50)

79.884459ms ago: executing program 0 (id=9038):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
close(r0)
recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0)

79.611448ms ago: executing program 0 (id=9039):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x64, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x2f, 0xa9, @random="a0be56190a1973b9a082fe35468118f44c2f4424cd1191aaec0a3aba93d2d53a5956dd88d34f1c42da00e6"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40080)

0s ago: executing program 0 (id=9040):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000009}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

kernel console output (not intermixed with test programs):

fter parsing attributes in process `syz.2.3905'.
[  235.761225][T15037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3905'.
[  235.987351][T15055] netlink: 'syz.0.3914': attribute type 3 has an invalid length.
[  236.004765][T15055] bridge0: left allmulticast mode
[  236.040783][T15055] sit0: left promiscuous mode
[  236.069524][T15055] bridge0: port 1(syz_tun) entered blocking state
[  236.072343][T15055] bridge0: port 1(syz_tun) entered forwarding state
[  236.083540][T15055] bridge0: left promiscuous mode
[  236.088430][T15055] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.092929][T15055] 8021q: adding VLAN 0 to HW filter on device team0
[  236.096022][T15055] tipc: Resetting bearer <eth:team0>
[  236.103348][T15055] tipc: Resetting bearer <eth:team0>
[  236.111786][T15055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  236.880751][T15119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.906032][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3960'.
[  237.994950][T15176] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  238.324248][T15201] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  238.327227][T15201] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  238.494887][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3982'.
[  238.507634][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3982'.
[  238.814564][T15235] netlink: 'syz.1.3992': attribute type 20 has an invalid length.
[  239.628171][   T32] wlan0: Trigger new scan to find an IBSS to join
[  240.207332][T15296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4019'.
[  240.361912][T15300] batman_adv: batadv0: Removing interface: batadv_slave_1
[  240.510301][T15305] netlink: 'syz.1.4024': attribute type 23 has an invalid length.
[  240.619778][T15314] wg0 speed is unknown, defaulting to 1000
[  240.667181][T15319] netlink: 'syz.0.4028': attribute type 1 has an invalid length.
[  240.678392][T15319] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.4028'.
[  240.924562][T15333] wg0 speed is unknown, defaulting to 1000
[  240.988526][ T5860] Bluetooth: hci2: command 0x0405 tx timeout
[  241.614445][T15347] geneve3: entered promiscuous mode
[  241.628207][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  241.633188][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  241.636525][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  241.639696][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  241.825674][T15361] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  241.829676][T15361] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  241.983109][T15365] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4048'.
[  242.614941][T15396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.660689][   T32] wlan0: Trigger new scan to find an IBSS to join
[  242.837307][T15409] netlink: 'syz.2.4065': attribute type 1 has an invalid length.
[  242.841998][T15409] netlink: 'syz.2.4065': attribute type 3 has an invalid length.
[  242.849935][T15409] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4065'.
[  242.893730][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4066'.
[  242.902772][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4066'.
[  242.905701][ T8542] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  242.911964][ T8542] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  242.915514][ T8542] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  242.932372][ T8542] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  242.997501][T15419] bond0: (slave bond2): Error -95 calling ndo_bpf
[  243.012571][T15419] tipc: Resetting bearer <eth:team0>
[  243.043855][T15421] netlink: 'syz.2.4071': attribute type 2 has an invalid length.
[  243.051095][T15421] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.4071'.
[  243.429818][T15448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  243.627180][T15467] IPVS: stopping backup sync thread 13788 ...
[  243.633687][T15467] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4092'.
[  243.638271][T15467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4092'.
[  243.642711][T15467] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4092'.
[  244.240844][T15501] bpq0: entered promiscuous mode
[  244.242556][T15501] bpq0: entered allmulticast mode
[  244.272442][T15501] bpq0: left promiscuous mode
[  244.274106][T15501] bpq0: left allmulticast mode
[  244.616931][T15524] geneve3: entered allmulticast mode
[  244.623325][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  244.626846][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  244.632196][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  244.635412][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  245.415806][T15573] netlink: 'syz.1.4143': attribute type 3 has an invalid length.
[  245.620401][   T73] wlan0: Trigger new scan to find an IBSS to join
[  246.120500][T15620] __nla_validate_parse: 4 callbacks suppressed
[  246.120517][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4164'.
[  246.337679][T15635] netlink: 'syz.0.4173': attribute type 6 has an invalid length.
[  246.483967][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4175'.
[  246.506338][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4175'.
[  246.582155][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.682813][T15652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.686188][T15652] syzkaller0: entered promiscuous mode
[  246.689950][T15652] syzkaller0: entered allmulticast mode
[  246.716015][T15652] tipc: Resetting bearer <eth:syzkaller0>
[  246.722472][T15651] tipc: Resetting bearer <eth:syzkaller0>
[  246.750024][T15651] tipc: Disabling bearer <eth:syzkaller0>
[  246.873616][T15669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.887652][T15669] tipc: Resetting bearer <eth:syzkaller0>
[  247.141747][T15693] netlink: 'syz.0.4199': attribute type 4 has an invalid length.
[  247.154413][T15698] team0: Device gtp1 is of different type
[  247.267220][T15710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4206'.
[  247.868229][   T24] tipc: Node number set to 2446945720
[  248.152835][T15733] batadv_slave_0: entered promiscuous mode
[  248.445251][T15753] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4224'.
[  248.600159][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4229'.
[  248.603242][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4229'.
[  248.643742][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4229'.
[  248.646739][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4229'.
[  248.752557][T15780] syzkaller0: entered promiscuous mode
[  248.754975][T15780] syzkaller0: entered allmulticast mode
[  248.760181][T15777] netlink: 'syz.1.4233': attribute type 21 has an invalid length.
[  250.191688][T15777] ipvlan2: entered promiscuous mode
[  250.195018][T15777] bridge0: port 1(ipvlan2) entered blocking state
[  250.197742][T15777] bridge0: port 1(ipvlan2) entered disabled state
[  250.200687][T15777] ipvlan2: entered allmulticast mode
[  250.202637][T15777] gretap0: entered allmulticast mode
[  250.207671][T15777] ipvlan2: left allmulticast mode
[  250.209968][T15777] gretap0: left allmulticast mode
[  250.234599][T15782] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  250.241695][T15782] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  250.359251][T15789] netlink: 'syz.2.4240': attribute type 1 has an invalid length.
[  250.363124][T15789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4240'.
[  250.573687][T15811] netlink: 'syz.2.4250': attribute type 1 has an invalid length.
[  250.615041][T15811] 8021q: adding VLAN 0 to HW filter on device bond3
[  250.648664][T15811] 8021q: adding VLAN 0 to HW filter on device bond3
[  250.652285][T15811] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  250.659056][T15811] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  250.702739][T15815] veth7: entered promiscuous mode
[  250.709851][T15815] bond3: (slave veth7): Enslaving as an active interface with a down link
[  251.663779][T15833] wg0 speed is unknown, defaulting to 1000
[  251.697150][T15837] __nla_validate_parse: 1 callbacks suppressed
[  251.697166][T15837] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4258'.
[  252.520805][T15880] netlink: 'syz.1.4279': attribute type 10 has an invalid length.
[  252.523955][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4279'.
[  252.539674][T15880] !: entered promiscuous mode
[  252.542388][T15880] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  252.616660][T15882] netlink: 'syz.0.4280': attribute type 1 has an invalid length.
[  252.622429][T15882] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4280'.
[  252.631769][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4280'.
[  252.873094][T15903] netlink: 'syz.1.4290': attribute type 12 has an invalid length.
[  253.399352][T15911] siw: device registration error -23
[  253.525646][T15925] tun0: tun_chr_ioctl cmd 1074025675
[  253.529046][T15925] tun0: persist enabled
[  253.535942][T15925] tun0: tun_chr_ioctl cmd 1074025675
[  253.544431][T15925] tun0: persist disabled
[  253.634741][T15931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4303'.
[  253.684237][T15937] netlink: 'syz.2.4305': attribute type 10 has an invalid length.
[  253.687423][T15937] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4305'.
[  253.694545][T15937] 8021q: adding VLAN 0 to HW filter on device team0
[  253.725226][T15940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4307'.
[  253.795999][T15950] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  253.865904][T15957] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4316'.
[  253.949610][T15969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4317'.
[  253.954207][T15969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4317'.
[  253.960483][T15969] openvswitch: netlink: Flow key attr not present in new flow.
[  254.236153][T15995] netlink: 'syz.1.4330': attribute type 1 has an invalid length.
[  254.239468][T15995] netlink: 'syz.1.4330': attribute type 1 has an invalid length.
[  255.309231][T16050] netlink: 'syz.0.4354': attribute type 7 has an invalid length.
[  255.443540][T16056] netlink: 'syz.0.4356': attribute type 8 has an invalid length.
[  255.793530][T16080] netlink: 'syz.0.4368': attribute type 11 has an invalid length.
[  255.944313][T16093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.947696][T16093] syzkaller0: entered promiscuous mode
[  255.952225][T16093] syzkaller0: entered allmulticast mode
[  255.975042][T16093] tipc: Resetting bearer <eth:syzkaller0>
[  255.980306][T16091] tipc: Resetting bearer <eth:syzkaller0>
[  255.995889][T16091] tipc: Disabling bearer <eth:syzkaller0>
[  256.237038][T16111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.249437][T16110] tipc: Disabling bearer <eth:syzkaller0>
[  256.499111][T16119] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.845797][T16135] __nla_validate_parse: 4 callbacks suppressed
[  256.845808][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4394'.
[  257.309793][T16158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4405'.
[  257.442910][T16167] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4407'.
[  257.479177][T16167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.485195][T16167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.491147][T16167] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  257.498791][T16167] bond0 (unregistering): Released all slaves
[  257.982744][T16195] vlan2: entered promiscuous mode
[  257.985744][T16195] batadv0: entered promiscuous mode
[  258.071808][T16199] netlink: 'syz.1.4422': attribute type 1 has an invalid length.
[  258.075071][T16199] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4422'.
[  258.089921][T16203] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4423'.
[  258.571627][T16230] tipc: Resetting bearer <eth:syzkaller0>
[  258.594410][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  258.597908][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  258.604209][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  258.607520][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  258.987627][T16257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4447'.
[  259.705421][T16293] netlink: 'syz.0.4460': attribute type 1 has an invalid length.
[  259.709800][T16293] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4460'.
[  259.713267][T16293] netlink: 'syz.0.4460': attribute type 2 has an invalid length.
[  259.716346][T16293] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4460'.
[  260.801754][T16344] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4483'.
[  260.817501][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4482'.
[  260.823798][T16345] netlink: 'syz.0.4482': attribute type 1 has an invalid length.
[  260.879596][T16345] nbd: socks must be embedded in a SOCK_ITEM attr
[  260.882673][T16345] block nbd0: shutting down sockets
[  260.982479][T16353] netlink: 'syz.0.4488': attribute type 6 has an invalid length.
[  261.025655][T16357] siw: device registration error -23
[  261.035040][T16360] netlink: 'syz.2.4490': attribute type 1 has an invalid length.
[  262.307546][T16464] __nla_validate_parse: 4 callbacks suppressed
[  262.307557][T16464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4534'.
[  262.316034][T16464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4534'.
[  262.322833][T16464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4534'.
[  262.326258][T16464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4534'.
[  262.535650][T16484] openvswitch: netlink: IP tunnel dst address not specified
[  263.218641][T16504] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4556'.
[  263.733124][T16524] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4564'.
[  263.839260][T16528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4566'.
[  263.903007][T16529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.171962][T16534] wg0 speed is unknown, defaulting to 1000
[  264.217185][T16539] netlink: 'syz.1.4569': attribute type 1 has an invalid length.
[  264.230738][T16539] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.4569'.
[  264.473416][ T5860] Bluetooth: hci2: link tx timeout
[  264.475394][ T5860] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  264.480450][ T5860] Bluetooth: hci2: link tx timeout
[  264.482558][ T5860] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  264.488819][ T5860] Bluetooth: hci2: link tx timeout
[  264.491253][ T5860] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  264.494185][ T5860] Bluetooth: hci2: link tx timeout
[  264.496198][ T5860] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  264.499716][ T5860] Bluetooth: hci2: link tx timeout
[  264.501810][ T5860] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  264.876322][T16568] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.889322][T16568] syzkaller0: entered promiscuous mode
[  264.891527][T16568] syzkaller0: entered allmulticast mode
[  264.932139][T16568] tipc: Resetting bearer <eth:syzkaller0>
[  264.968108][T16567] tipc: Resetting bearer <eth:syzkaller0>
[  264.994163][T16567] tipc: Disabling bearer <eth:syzkaller0>
[  266.474666][T16632] netlink: 704 bytes leftover after parsing attributes in process `syz.0.4611'.
[  266.498521][ T5860] Bluetooth: hci2: command 0x0405 tx timeout
[  266.610847][T16638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.649992][T16638] syzkaller0: entered promiscuous mode
[  266.652264][T16638] syzkaller0: entered allmulticast mode
[  266.655017][T16638] tipc: Resetting bearer <eth:syzkaller0>
[  266.661325][T16637] tipc: Resetting bearer <eth:syzkaller0>
[  268.169937][T16637] tipc: Disabling bearer <eth:syzkaller0>
[  268.177463][T16654] !: left promiscuous mode
[  268.190508][T16654] batadv_slave_0: left promiscuous mode
[  268.193880][T16654] vlan0: left promiscuous mode
[  268.196613][T16654] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  268.201050][T16654] ip6tnl2: left promiscuous mode
[  268.202912][T16654] ip6tnl2: left allmulticast mode
[  268.204941][T16654] bridge5: left allmulticast mode
[  268.207791][T16654] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  268.215109][T16654] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  268.218210][T16654] geneve3: left promiscuous mode
[  268.270009][T16659] sctp: [Deprecated]: syz.2.4621 (pid 16659) Use of int in max_burst socket option.
[  268.270009][T16659] Use struct sctp_assoc_value instead
[  268.504877][T16685] netlink: 'syz.1.4632': attribute type 83 has an invalid length.
[  268.555500][T16688] netlink: 'syz.0.4633': attribute type 1 has an invalid length.
[  268.590256][T16688] 8021q: adding VLAN 0 to HW filter on device bond6
[  268.606411][T16688] bond6: (slave gretap1): making interface the new active one
[  268.617527][T16688] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  268.806740][T16703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4637'.
[  268.821803][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4637'.
[  268.985852][T16714] netlink: 'syz.1.4641': attribute type 15 has an invalid length.
[  269.076561][T16719] wg0 speed is unknown, defaulting to 1000
[  269.185974][T16670] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  269.189293][T16670] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  269.197205][T16670] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  269.199885][T16670] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  270.079816][T16773] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4659'.
[  270.082724][T16773] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4659'.
[  270.086071][T16773] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4659'.
[  270.136109][T16778] wg0 speed is unknown, defaulting to 1000
[  270.331182][T16794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4666'.
[  270.385229][T16796] netlink: 'syz.2.4669': attribute type 10 has an invalid length.
[  270.472130][T16803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  270.651208][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4677'.
[  270.714187][T16819] netlink: 'syz.0.4679': attribute type 13 has an invalid length.
[  270.717539][T16819] netlink: 'syz.0.4679': attribute type 17 has an invalid length.
[  270.731725][T16819] tipc: Resetting bearer <eth:team0>
[  270.739925][T16819] tipc: Resetting bearer <eth:team0>
[  270.743698][T16819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  270.887406][T16827] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4684'.
[  270.933700][T16825] syzkaller1: entered promiscuous mode
[  270.935883][T16825] syzkaller1: entered allmulticast mode
[  271.418937][T16861] sctp: [Deprecated]: syz.1.4696 (pid 16861) Use of int in max_burst socket option.
[  271.418937][T16861] Use struct sctp_assoc_value instead
[  271.421111][T16850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4693'.
[  271.488605][T16865] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4697'.
[  271.492687][T16865] batadv_slave_1: entered promiscuous mode
[  271.533002][T16869] pim6reg1: entered promiscuous mode
[  271.534784][T16869] pim6reg1: entered allmulticast mode
[  271.791401][T16894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.795126][T16894] syzkaller0: entered promiscuous mode
[  271.796986][T16894] syzkaller0: entered allmulticast mode
[  271.808101][T16894] tipc: Resetting bearer <eth:syzkaller0>
[  271.811503][T16891] tipc: Resetting bearer <eth:syzkaller0>
[  271.822498][T16891] tipc: Disabling bearer <eth:syzkaller0>
[  273.468883][T17040] sctp: [Deprecated]: syz.0.4777 (pid 17040) Use of int in maxseg socket option.
[  273.468883][T17040] Use struct sctp_assoc_value instead
[  274.924807][T17147] pim6reg1: entered promiscuous mode
[  274.926963][T17147] pim6reg1: entered allmulticast mode
[  275.324920][T17172] syzkaller1: entered promiscuous mode
[  275.327189][T17172] syzkaller1: entered allmulticast mode
[  276.163197][T17253] IPVS: length: 209 != 24
[  276.268738][T17251] netlink: 'syz.0.4877': attribute type 4 has an invalid length.
[  277.037189][T17305] wg0 speed is unknown, defaulting to 1000
[  277.288054][T17318] __nla_validate_parse: 3 callbacks suppressed
[  277.288072][T17318] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.4905'.
[  277.400950][T17322] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4907'.
[  277.473263][T17325] wg0 speed is unknown, defaulting to 1000
[  277.529069][T17329] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4908'.
[  277.532478][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4908'.
[  278.490058][T17356] netlink: 'syz.1.4918': attribute type 13 has an invalid length.
[  278.493082][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4918'.
[  278.620722][T17363] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  278.754482][T17373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4928'.
[  278.842551][T17379] lo: entered allmulticast mode
[  278.865567][T17379] dvmrp8: entered allmulticast mode
[  278.920856][T17378] lo: left allmulticast mode
[  278.922926][T17378] dvmrp8: left allmulticast mode
[  279.347417][T17406] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4942'.
[  279.460721][T17409] wg0 speed is unknown, defaulting to 1000
[  280.276685][T17468] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4972'.
[  280.356769][T17472] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4974'.
[  280.366761][T17472] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4974'.
[  280.658299][ T5234] Bluetooth: hci0: command tx timeout
[  280.769392][T17498] pim6reg1: entered promiscuous mode
[  280.771512][T17498] pim6reg1: entered allmulticast mode
[  280.931056][T17515] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  280.935786][T17515] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  280.939510][T17515] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  281.754702][T17565] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  282.669000][T17627] wg0 speed is unknown, defaulting to 1000
[  282.691185][T17632] __nla_validate_parse: 2 callbacks suppressed
[  282.691202][T17632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5045'.
[  283.023195][T17640] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5049'.
[  284.020049][T17694] wg0 speed is unknown, defaulting to 1000
[  284.350936][T17708] netlink: 'syz.2.5079': attribute type 10 has an invalid length.
[  284.356584][T17708] team0: Device veth1_macvtap failed to register rx_handler
[  285.157373][T17717] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5084'.
[  286.100115][T17790] openvswitch: netlink: IP tunnel dst address not specified
[  286.104204][   T13] syzkaller0: tun_net_xmit 76
[  286.105756][T17788] syzkaller0: create flow: hash 3490192427 index 1
[  286.108787][   T13] syzkaller0: tun_net_xmit 48
[  286.128262][   T51] syzkaller0: tun_net_xmit 76
[  286.179659][T17796] syzkaller0: delete flow: hash 3490192427 index 1
[  286.297642][T17803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5121'.
[  287.541677][T17815] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5125'.
[  287.545245][T17815] netlink: 'syz.1.5125': attribute type 3 has an invalid length.
[  287.602458][T17821] netlink: 83 bytes leftover after parsing attributes in process `syz.2.5128'.
[  287.692891][T17829] wg0 speed is unknown, defaulting to 1000
[  289.013615][T17886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5159'.
[  289.016918][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5159'.
[  289.093871][T17893] netlink: 'syz.0.5158': attribute type 31 has an invalid length.
[  290.593395][   T33] audit: type=1804 audit(1755303408.317:2): pid=17995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5210" name="/newroot/1622/cgroup.controllers" dev="tmpfs" ino=8185 res=1 errno=0
[  290.612152][   T33] audit: type=1800 audit(1755303408.327:3): pid=17995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5210" name="cgroup.controllers" dev="tmpfs" ino=8185 res=0 errno=0
[  290.629640][   T33] audit: type=1800 audit(1755303408.327:4): pid=17995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5210" name="cgroup.controllers" dev="tmpfs" ino=8185 res=0 errno=0
[  290.701891][T18003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5214'.
[  291.155065][T18029] netlink: 'syz.1.5224': attribute type 13 has an invalid length.
[  291.158806][T18029] netlink: 'syz.1.5224': attribute type 17 has an invalid length.
[  291.198182][T18029] 8021q: adding VLAN 0 to HW filter on device team0
[  291.202798][T18029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  291.259627][T18029] wg0 speed is unknown, defaulting to 1000
[  291.272045][T18036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.280506][T18036] syzkaller0: entered promiscuous mode
[  291.282711][T18036] syzkaller0: entered allmulticast mode
[  291.286871][T18032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.336574][T18036] tipc: Resetting bearer <eth:syzkaller0>
[  291.347501][T18032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.352600][T18035] tipc: Resetting bearer <eth:syzkaller0>
[  291.379434][T18035] tipc: Disabling bearer <eth:syzkaller0>
[  291.751644][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5238'.
[  291.759400][T18058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5238'.
[  291.762318][T18058] netlink: 'syz.2.5238': attribute type 1 has an invalid length.
[  291.764870][T18058] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5238'.
[  291.818748][T18058] nbd: socks must be embedded in a SOCK_ITEM attr
[  291.821060][T18058] block nbd0: shutting down sockets
[  291.914458][T18069] syzkaller0: entered promiscuous mode
[  291.920813][T18069] syzkaller0: entered allmulticast mode
[  292.835120][T18136] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  294.725239][T18184] netlink: 'syz.2.5299': attribute type 17 has an invalid length.
[  294.734479][T18184] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5299'.
[  294.742889][T18184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  294.770921][T18188] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  294.773924][T18188] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  294.800947][T18190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5302'.
[  294.823250][T18193] netlink: 'syz.1.5303': attribute type 1 has an invalid length.
[  294.915593][T18194] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5301'.
[  294.918835][T18194] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5301'.
[  294.986777][T18205] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.176602][T18231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5321'.
[  295.458260][T18251] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.493673][T18251] syzkaller0: entered promiscuous mode
[  295.495432][T18251] syzkaller0: entered allmulticast mode
[  295.500022][T18251] tipc: Resetting bearer <eth:syzkaller0>
[  295.504240][T18255] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5333'.
[  295.508028][T18250] tipc: Resetting bearer <eth:syzkaller0>
[  297.089530][T18250] tipc: Disabling bearer <eth:syzkaller0>
[  297.097286][T18269] tun0: tun_chr_ioctl cmd 2148553947
[  297.791910][T18319] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  297.893213][T18323] erspan1: entered promiscuous mode
[  297.977291][T18325] wg0 speed is unknown, defaulting to 1000
[  298.250964][T18328] syz_tun: entered allmulticast mode
[  298.532607][T18347] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma?
[  298.790400][T18370] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5381'.
[  298.793289][T18370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5381'.
[  299.166940][T18407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5398'.
[  299.212763][T18412] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5399'.
[  299.305844][T18422] netlink: 'syz.0.5404': attribute type 1 has an invalid length.
[  299.414305][T18433] netlink: 'syz.1.5409': attribute type 2 has an invalid length.
[  299.593264][T18454] netlink: 'syz.2.5420': attribute type 1 has an invalid length.
[  300.843937][T18509] pim6reg: entered allmulticast mode
[  300.847397][T18509] pim6reg: left allmulticast mode
[  302.031061][T18543] __nla_validate_parse: 3 callbacks suppressed
[  302.031078][T18543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5456'.
[  302.115101][T18549] netlink: 'syz.2.5459': attribute type 5 has an invalid length.
[  302.172337][T18551] wg0 speed is unknown, defaulting to 1000
[  302.268319][T18560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5463'.
[  302.765825][T18585] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  302.976240][T18595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.989477][T18595] syzkaller0: entered promiscuous mode
[  302.991521][T18595] syzkaller0: entered allmulticast mode
[  303.056735][T18595] tipc: Resetting bearer <eth:syzkaller0>
[  303.080661][T18594] tipc: Resetting bearer <eth:syzkaller0>
[  303.099546][T18594] tipc: Disabling bearer <eth:syzkaller0>
[  303.130603][T18603] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.133863][T18603] syzkaller0: entered promiscuous mode
[  303.135913][T18603] syzkaller0: entered allmulticast mode
[  303.191315][T18603] tipc: Resetting bearer <eth:syzkaller0>
[  303.222158][T18602] tipc: Resetting bearer <eth:syzkaller0>
[  303.240776][T18605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5484'.
[  303.257481][T18602] tipc: Disabling bearer <eth:syzkaller0>
[  303.754052][T18627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5492'.
[  304.432835][T18649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5502'.
[  304.435503][T18649] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5502'.
[  304.488741][T18649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5502'.
[  304.493171][T18649] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5502'.
[  304.615814][T18663] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5509'.
[  304.976144][T18685] netlink: 'syz.0.5519': attribute type 32 has an invalid length.
[  304.978986][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5519'.
[  304.982451][T18685] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  305.078614][T18691] bridge0: port 2(erspan0) entered blocking state
[  305.081007][T18691] bridge0: port 2(erspan0) entered disabled state
[  305.083599][T18691] erspan0: entered allmulticast mode
[  305.086493][T18691] erspan0: entered promiscuous mode
[  305.094370][T18691] bridge0: port 2(erspan0) entered blocking state
[  305.097155][T18691] bridge0: port 2(erspan0) entered forwarding state
[  305.102574][T18691] erspan0: left allmulticast mode
[  305.104543][T18691] erspan0: left promiscuous mode
[  305.108000][T18691] bridge0: port 2(erspan0) entered disabled state
[  305.832842][T18713] tipc: Failed to remove unknown binding: 66,1,1/2446945720:162105176/162105178
[  305.836518][T18713] tipc: Failed to remove unknown binding: 66,1,1/2446945720:162105176/162105178
[  306.025448][T18717] Unsupported ieee802154 address type: 0
[  306.296716][T18730] netlink: 'syz.0.5538': attribute type 10 has an invalid length.
[  306.307314][T18730] macvlan0: entered promiscuous mode
[  306.310304][T18730] bond0: (slave macvlan0): Error -22 calling dev_set_mtu
[  306.635429][T18746] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  306.644046][T18746] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  306.872683][T18758] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  306.876780][T18758] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  306.880112][T18758] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  307.254910][T18789] wg0 speed is unknown, defaulting to 1000
[  307.990943][T18789] __nla_validate_parse: 4 callbacks suppressed
[  307.990999][T18789] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5568'.
[  308.927607][T18856] tipc: Resetting bearer <eth:syzkaller0>
[  308.942213][T18856] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  308.951498][T18856] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  309.085569][T18876] batman_adv: batadv0: Interface deactivated: macvtap1
[  309.093059][T18876] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  309.149781][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  309.153023][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  309.156262][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  309.169062][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  309.202942][T18887] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5590'.
[  309.208230][T18881] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5590'.
[  309.280514][T18894] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  309.283977][T18894] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  309.367181][T18899] netlink: 'syz.0.5598': attribute type 13 has an invalid length.
[  309.372688][T18899] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.5598'.
[  309.447108][T18904] wg0 speed is unknown, defaulting to 1000
[  309.553671][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  309.556371][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  309.569274][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  309.572936][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  310.259596][T18961] netlink: 'syz.2.5623': attribute type 12 has an invalid length.
[  310.276049][T18961] netlink: 'syz.2.5623': attribute type 18 has an invalid length.
[  310.278843][T18961] netlink: 'syz.2.5623': attribute type 21 has an invalid length.
[  310.281703][T18961] netlink: 'syz.2.5623': attribute type 26 has an invalid length.
[  310.786601][T18991] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5637'.
[  310.789828][T18991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5637'.
[  310.792957][T18991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5637'.
[  310.909143][T18997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5640'.
[  311.003228][T19001] netlink: 'syz.1.5642': attribute type 10 has an invalid length.
[  311.389149][T19023] netlink: 'syz.2.5652': attribute type 3 has an invalid length.
[  311.392253][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5652'.
[  311.395633][T19023] netlink: 'syz.2.5652': attribute type 3 has an invalid length.
[  311.398915][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5652'.
[  311.555069][T19031] gretap0: entered promiscuous mode
[  311.558330][T19031] gretap0: left promiscuous mode
[  311.662750][T19035] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  311.726378][T19036] bond0: (slave bond_slave_0): Releasing backup interface
[  311.730185][T19036] bond_slave_0: left promiscuous mode
[  311.734174][T19036] bond0: (slave bond_slave_1): Releasing backup interface
[  311.737521][T19036] bond_slave_1: left promiscuous mode
[  311.741230][T19036] team_slave_0: left promiscuous mode
[  311.745206][T19036] team0: Port device team_slave_0 removed
[  311.749194][T19036] team_slave_1: left promiscuous mode
[  311.752879][T19036] team0: Port device team_slave_1 removed
[  311.756618][T19036] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.761929][T19036] bond0: (slave vxlan0): Releasing backup interface
[  311.765999][T19036] vxlan0: left promiscuous mode
[  311.769389][T19036] batman_adv: batadv0: Removing interface: macvtap1
[  311.773707][T19036] bond3: (slave veth7): Releasing active interface
[  311.954902][T19046] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.958900][T19046] syzkaller0: entered promiscuous mode
[  311.962552][T19046] syzkaller0: entered allmulticast mode
[  311.982932][T19046] tipc: Resetting bearer <eth:syzkaller0>
[  311.986862][T19045] tipc: Resetting bearer <eth:syzkaller0>
[  312.001579][T19045] tipc: Disabling bearer <eth:syzkaller0>
[  312.347464][T19071] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  312.503036][T19088] syzkaller0: entered promiscuous mode
[  312.505267][T19088] syzkaller0: entered allmulticast mode
[  313.219937][T19131] pimreg: entered allmulticast mode
[  313.873934][T19165] __nla_validate_parse: 7 callbacks suppressed
[  313.873952][T19165] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5718'.
[  314.119288][T19180] : entered promiscuous mode
[  314.973682][T19216] netlink: 'syz.0.5741': attribute type 1 has an invalid length.
[  315.007683][T19220] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  315.226571][T19240] netlink: 'syz.0.5753': attribute type 3 has an invalid length.
[  315.436522][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5761'.
[  315.442403][T19260] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5762'.
[  315.576067][T19269] netlink: 'syz.0.5763': attribute type 1 has an invalid length.
[  315.881309][T19290] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5775'.
[  317.364169][T19385] sctp: [Deprecated]: syz.2.5812 (pid 19385) Use of int in max_burst socket option.
[  317.364169][T19385] Use struct sctp_assoc_value instead
[  319.661437][T19485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5845'.
[  319.691277][T19489] openvswitch: netlink: IP tunnel dst address not specified
[  319.785729][T19503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5854'.
[  319.803310][T19503] macsec0: entered promiscuous mode
[  319.804980][T19503] macvlan1: entered promiscuous mode
[  319.812089][T19503] macvlan1: left promiscuous mode
[  319.923347][T19517] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5861'.
[  319.942666][T19521] netlink: 'syz.2.5862': attribute type 1 has an invalid length.
[  319.953650][T19517] bond0: (slave dummy0): Releasing backup interface
[  320.151285][T19536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5870'.
[  321.527282][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5894'.
[  321.701261][T19608] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5903'.
[  322.814974][T19715] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  323.212443][T19740] wg0 speed is unknown, defaulting to 1000
[  323.991559][T19772] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5974'.
[  324.097559][T19776] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  324.325139][T19786] vlan0: entered promiscuous mode
[  324.464591][T19791] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5983'.
[  324.470891][T19791] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5983'.
[  324.496263][T19791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5983'.
[  324.594264][T19795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.610645][T19795] syzkaller0: entered promiscuous mode
[  324.612986][T19795] syzkaller0: entered allmulticast mode
[  324.633406][T19795] tipc: Resetting bearer <eth:syzkaller0>
[  324.644909][T19794] tipc: Resetting bearer <eth:syzkaller0>
[  324.675599][T19794] tipc: Disabling bearer <eth:syzkaller0>
[  324.775862][T19807] wg0 speed is unknown, defaulting to 1000
[  324.878452][T19815] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  325.676403][T19840] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  325.994865][T19853] wg0 speed is unknown, defaulting to 1000
[  326.744986][T19882] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6019'.
[  327.059544][T19895] wg0 speed is unknown, defaulting to 1000
[  327.759899][T19905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6026'.
[  328.360893][T19934] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6038'.
[  328.416347][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6043'.
[  329.056511][T19990] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6062'.
[  329.059332][T19990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6062'.
[  329.067164][T19990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6062'.
[  329.202091][T19997] netlink: 'syz.0.6065': attribute type 5 has an invalid length.
[  329.376773][T20005] IPv6: addrconf: prefix option has invalid lifetime
[  329.738241][T20022] nbd2: detected capacity change from 0 to 63
[  329.740790][T20027] block nbd2: NBD_DISCONNECT
[  329.748458][T20027] block nbd2: Disconnected due to user request.
[  329.750892][T20027] block nbd2: shutting down sockets
[  330.010836][T20046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6086'.
[  330.039197][T20048] siw: device registration error -23
[  330.615450][T20093] netlink: 'syz.0.6106': attribute type 3 has an invalid length.
[  330.773216][T20099] netlink: 'syz.0.6109': attribute type 17 has an invalid length.
[  330.779811][T20099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  330.978997][T20106] netlink: 'syz.0.6112': attribute type 10 has an invalid length.
[  331.694916][T20132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6124'.
[  332.396851][T20185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6146'.
[  332.500714][T20191] netlink: 'syz.0.6150': attribute type 21 has an invalid length.
[  332.503090][T20191] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6150'.
[  332.643518][T20207] team_slave_1: left promiscuous mode
[  332.651892][T20207] team0: Port device team_slave_1 removed
[  332.654633][T20207] batman_adv: batadv0: Removing interface: batadv_slave_0
[  332.659217][T20207] batadv1: left promiscuous mode
[  332.663463][T20207] team0: Port device batadv1 removed
[  332.666157][T20205] mac80211_hwsim hwsim1 wlan0: entered promiscuous mode
[  332.680164][T20207] team0: Mode changed to "activebackup"
[  333.101954][T20248] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6178'.
[  333.245596][T20258] wg0 speed is unknown, defaulting to 1000
[  333.614641][T20274] vlan0: entered promiscuous mode
[  333.616645][T20274] veth1_to_bridge: entered promiscuous mode
[  333.643750][T20270] wg0 speed is unknown, defaulting to 1000
[  333.990039][T20291] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  334.005907][T20289] wg0 speed is unknown, defaulting to 1000
[  334.077748][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6199'.
[  334.233718][T20298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6201'.
[  334.236720][T20298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6201'.
[  334.249414][T20298] netlink: 'syz.2.6201': attribute type 20 has an invalid length.
[  334.398430][T20302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.490461][T20305] netlink: 'syz.2.6204': attribute type 3 has an invalid length.
[  334.731507][T20309] syzkaller1: entered promiscuous mode
[  334.733205][T20309] syzkaller1: entered allmulticast mode
[  335.644520][T20334] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  335.650857][T20334] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  335.653618][T20334] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  335.664427][T20334] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  335.849757][T20352] syz_tun (unregistering): left allmulticast mode
[  335.886890][T20358] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6228'.
[  335.971091][T20370] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6232'.
[  336.009930][T20371] wg0 speed is unknown, defaulting to 1000
[  336.020286][T20374] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.131199][T20383] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  336.371061][T20369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.747528][T20429] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6260'.
[  337.120752][T20455] team0: Device gtp1 is up. Set it down before adding it as a team port
[  337.172824][T20464] netlink: 'syz.0.6278': attribute type 2 has an invalid length.
[  337.282303][T20468] netlink: 'syz.1.6279': attribute type 39 has an invalid length.
[  337.324334][   T26] smc: removing ib device syz2
[  337.609509][T20483] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  338.312693][T20510] batman_adv: batadv0: Adding interface: ip6gretap0
[  338.315356][T20510] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.325595][T20510] batman_adv: batadv0: Interface activated: ip6gretap0
[  338.452001][T20517] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6299'.
[  338.645363][T20531] netlink: 'syz.2.6305': attribute type 13 has an invalid length.
[  338.648557][T20531] netlink: 'syz.2.6305': attribute type 17 has an invalid length.
[  338.651590][T20531] netlink: 'syz.2.6305': attribute type 27 has an invalid length.
[  338.789137][T20543] netlink: 'syz.0.6310': attribute type 3 has an invalid length.
[  338.815850][T20543] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  338.885623][T20543] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  338.956737][T20543] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  338.966317][T20555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6314'.
[  339.019041][T20543] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  339.103915][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  339.117183][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  339.130623][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  339.143315][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  339.689932][T20593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6331'.
[  339.991165][T20611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6340'.
[  340.228600][T20616] netlink: 'syz.2.6342': attribute type 10 has an invalid length.
[  340.234358][T20616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.240814][T20616] batadv0: entered promiscuous mode
[  340.244526][T20616] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  341.277425][T20639] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.281572][T20638] tipc: Resetting bearer <eth:syzkaller0>
[  342.778170][T20638] tipc: Disabling bearer <eth:syzkaller0>
[  343.275730][T20680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6369'.
[  343.760160][T20704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  343.771497][T20704] syzkaller0: entered promiscuous mode
[  343.777745][T20704] syzkaller0: entered allmulticast mode
[  343.791365][T20704] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  343.809150][T20704] tipc: Resetting bearer <eth:syzkaller0>
[  343.814757][T20703] tipc: Resetting bearer <eth:syzkaller0>
[  343.842686][T20703] tipc: Disabling bearer <eth:syzkaller0>
[  344.078275][T20724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6388'.
[  344.081076][T20724] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6388'.
[  344.198447][T20735] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  344.406463][T20754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6401'.
[  344.814031][T20772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6409'.
[  345.231792][T20806] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6422'.
[  345.235412][T20806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  345.811220][T20843] syzkaller0: entered promiscuous mode
[  345.813459][T20843] syzkaller0: entered allmulticast mode
[  347.430260][T20851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.454603][T20852] syzkaller0: entered promiscuous mode
[  347.456583][T20852] syzkaller0: entered allmulticast mode
[  347.494488][T20856] tipc: Resetting bearer <eth:syzkaller0>
[  348.839039][T20856] tipc: Disabling bearer <eth:syzkaller0>
[  349.524189][T20933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6471'.
[  350.150956][T20946] bridge0: port 1(syz_tun) entered disabled state
[  350.177646][T20946] tipc: Resetting bearer <eth:team0>
[  350.190646][T20946] batadv_slave_0: left promiscuous mode
[  350.193768][T20946] batadv_slave_1: left promiscuous mode
[  350.201915][T20946] 0: left allmulticast mode
[  350.203846][T20946] hsr_slave_0: left allmulticast mode
[  350.205906][T20946] hsr_slave_1: left allmulticast mode
[  350.224932][T20946] bond4: left promiscuous mode
[  350.226794][T20946] bond4: left allmulticast mode
[  350.231621][T20946] veth9: left promiscuous mode
[  350.280540][T20946] erspan1: left promiscuous mode
[  350.285564][T20946] mac80211_hwsim hwsim1 wlan0: left promiscuous mode
[  350.290600][ T5719] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  350.293280][ T5719] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  350.295872][ T5719] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  350.300170][ T5719] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  351.285512][T20975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6487'.
[  351.289119][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6487'.
[  351.741454][T21013] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.747104][T21013] syzkaller0: entered promiscuous mode
[  351.753866][T21013] syzkaller0: entered allmulticast mode
[  351.772522][T21013] tipc: Resetting bearer <eth:syzkaller0>
[  351.777450][T21012] tipc: Resetting bearer <eth:syzkaller0>
[  351.793916][T21012] tipc: Disabling bearer <eth:syzkaller0>
[  351.800464][T21019] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6509'.
[  351.897473][T21025] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6512'.
[  352.334250][T21043] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6520'.
[  352.343264][T21043] netem: unknown loss type 13
[  352.345557][T21043] netem: change failed
[  352.521583][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  352.526467][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  352.530640][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  352.534590][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  352.544082][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  352.550253][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  352.553365][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  352.557078][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  352.561607][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  352.565064][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  352.853577][T21050] chnl_net:caif_netlink_parms(): no params data found
[  352.917118][T21050] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.920066][T21050] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.922518][T21050] bridge_slave_0: entered allmulticast mode
[  352.925502][T21050] bridge_slave_0: entered promiscuous mode
[  352.930600][T21050] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.933064][T21050] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.935522][T21050] bridge_slave_1: entered allmulticast mode
[  352.939313][T21050] bridge_slave_1: entered promiscuous mode
[  352.981713][T21050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.989070][T21050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.028966][T21050] team0: Port device team_slave_0 added
[  353.033932][T21050] team0: Port device team_slave_1 added
[  353.076113][T21050] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.082793][T21050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.092379][T21079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6533'.
[  353.093165][T21050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.102799][T21050] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.104956][T21050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.112895][T21050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.144845][T21050] hsr_slave_0: entered promiscuous mode
[  353.147167][T21050] hsr_slave_1: entered promiscuous mode
[  353.150574][T21050] debugfs: 'hsr0' already exists in 'hsr'
[  353.152316][T21050] Cannot create hsr debugfs directory
[  353.295711][T21050] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  353.302930][T21050] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  353.311156][T21050] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  353.318758][T21050] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  353.350770][T21050] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.353665][T21050] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.356808][T21050] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.359777][T21050] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.417193][T21050] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.434137][T20844] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.438885][T20844] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.453325][T21050] 8021q: adding VLAN 0 to HW filter on device team0
[  353.464856][T20844] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.467754][T20844] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.479039][T20844] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.481994][T20844] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.654684][T21050] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.694522][T21050] veth0_vlan: entered promiscuous mode
[  353.703596][T21050] veth1_vlan: entered promiscuous mode
[  353.728354][T21050] veth0_macvtap: entered promiscuous mode
[  353.732977][T21050] veth1_macvtap: entered promiscuous mode
[  353.745682][T21050] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.759794][T21050] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.767611][T21100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6536'.
[  353.769125][ T8542] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.774290][T21100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6536'.
[  353.775616][ T8542] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.784954][ T8542] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.790727][ T8542] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.891598][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.894065][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.915470][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.918602][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.027363][T21115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6541'.
[  354.049750][T21117] batadv_slave_1: entered promiscuous mode
[  354.085085][T21121] nbd: must specify at least one socket
[  354.578650][ T5860] Bluetooth: hci3: command tx timeout
[  354.596782][T21135] __nla_validate_parse: 2 callbacks suppressed
[  354.596793][T21135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6551'.
[  354.630203][T21138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6552'.
[  354.985148][T21156] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6560'.
[  355.275301][T21173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6567'.
[  355.609838][T21196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6577'.
[  355.612774][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6577'.
[  355.615684][T21196] netlink: 'syz.0.6577': attribute type 6 has an invalid length.
[  356.051360][T21223] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  356.398511][ T7387] IPVS: starting estimator thread 0...
[  356.401473][T21243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.472797][T21249] veth0_to_team: entered promiscuous mode
[  356.497963][T21245] IPVS: using max 61 ests per chain, 146400 per kthread
[  356.570485][T21253] syzkaller0: entered promiscuous mode
[  356.572399][T21253] syzkaller0: entered allmulticast mode
[  356.660955][ T5860] Bluetooth: hci3: command tx timeout
[  357.137031][T21277] netlink: 'syz.3.6609': attribute type 20 has an invalid length.
[  358.034262][T21257] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  358.378773][T21326] syzkaller0: entered promiscuous mode
[  358.381120][T21326] syzkaller0: entered allmulticast mode
[  358.611919][T21342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6638'.
[  358.615482][T21342] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  358.740969][ T5860] Bluetooth: hci3: command tx timeout
[  358.805201][T21349] openvswitch: netlink: Message has 20 unknown bytes.
[  358.808765][T21349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.866823][T21353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6643'.
[  358.921966][T21358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6645'.
[  359.037694][T21366] netlink: 'syz.3.6649': attribute type 13 has an invalid length.
[  359.045337][T21366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6649'.
[  359.064693][ T5719] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  359.064805][T21366] netlink: 'syz.3.6649': attribute type 13 has an invalid length.
[  359.067851][ T5719] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  359.083542][ T5719] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  359.086528][ T5719] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  359.695329][T21416] pim6reg: entered allmulticast mode
[  359.704611][T21416] pim6reg: left allmulticast mode
[  360.041386][T21449] __nla_validate_parse: 3 callbacks suppressed
[  360.041404][T21449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6689'.
[  360.065023][T21449] 8021q: adding VLAN 0 to HW filter on device bond1
[  360.080050][T21449] bond_slave_0: entered promiscuous mode
[  360.082687][T21449] bond_slave_1: entered promiscuous mode
[  360.085566][T21449] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  360.090144][T21450] netlink: 'syz.0.6685': attribute type 13 has an invalid length.
[  360.091461][T21449] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  360.092975][T21450] netlink: 'syz.0.6685': attribute type 17 has an invalid length.
[  360.132612][T21450] bridge0: port 1(syz_tun) entered blocking state
[  360.134865][T21450] bridge0: port 1(syz_tun) entered forwarding state
[  360.162751][T21450] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.175336][T21450] 8021q: adding VLAN 0 to HW filter on device team0
[  360.182753][T21450] tipc: Resetting bearer <eth:team0>
[  360.188924][T21450] tipc: Resetting bearer <eth:team0>
[  360.192887][T21450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  360.232342][T21450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  360.237686][T21450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  360.332864][T21474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6698'.
[  360.336371][T21474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6698'.
[  360.340996][T21474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6698'.
[  360.344402][T21474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6698'.
[  360.347591][T21474] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6698'.
[  360.378231][T21476] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6699'.
[  360.552992][T21484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6703'.
[  360.818081][ T5860] Bluetooth: hci3: command tx timeout
[  361.015383][T21501] netlink: 'syz.2.6711': attribute type 1 has an invalid length.
[  361.101946][T21509] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6715'.
[  361.153998][T21513] netlink: 'syz.3.6717': attribute type 2 has an invalid length.
[  361.157374][T21513] netlink: 4856 bytes leftover after parsing attributes in process `syz.3.6717'.
[  361.267555][T21523] netlink: 'syz.3.6721': attribute type 1 has an invalid length.
[  361.631124][T21554] IPVS: Scheduler module ip_vs_ not found
[  361.970993][T21568] : renamed from wg2
[  362.101708][T21573] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  362.105704][T21572] IPVS: stopping backup sync thread 21573 ...
[  363.881944][T21655] syz.0.6779 uses old SIOCAX25GETINFO
[  364.000788][T21663] netlink: 'syz.0.6783': attribute type 3 has an invalid length.
[  364.772612][T21720] mac80211_hwsim hwsim1 wlan0: entered promiscuous mode
[  364.775550][T21720] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  365.072404][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880270f7800: rx timeout, send abort
[  365.075865][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880270f7c00: rx timeout, send abort
[  365.079699][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880270f7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  365.085748][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880270f7c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  365.792646][T21789] __nla_validate_parse: 10 callbacks suppressed
[  365.792657][T21789] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6838'.
[  366.016723][T21800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.374164][T21842] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6863'.
[  367.490408][T21849] netlink: 'syz.2.6866': attribute type 11 has an invalid length.
[  367.566292][T21854] ip6tnl1: entered promiscuous mode
[  367.568867][T21854] ip6tnl1: entered allmulticast mode
[  367.788277][T21870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6876'.
[  367.934075][T21880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6880'.
[  368.160594][T21894] gtp0: entered promiscuous mode
[  368.162939][T21894] gtp0: entered allmulticast mode
[  368.353117][T21910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6895'.
[  368.466604][T21910] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.469262][T21910] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.479834][T21910] bond_slave_0: left promiscuous mode
[  368.482261][T21910] bond_slave_1: left promiscuous mode
[  368.567499][T21910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  368.579853][T21910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  368.687075][T21910] ip6tnl1: left promiscuous mode
[  368.689798][T21910] ip6tnl1: left allmulticast mode
[  368.694513][T21910] gtp0: left promiscuous mode
[  368.696364][T21910] gtp0: left allmulticast mode
[  368.706712][T21931] vlan0: entered allmulticast mode
[  368.723492][ T5719] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.727290][ T5719] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.730361][ T5719] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.733265][ T5719] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.736341][ T5719] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.741197][ T5719] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.745093][ T5719] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.756109][ T5719] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.911532][T21949] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  368.915134][T21949] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  368.950666][T21951] netlink: 'syz.0.6914': attribute type 17 has an invalid length.
[  369.022933][T21955] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6916'.
[  369.405554][T21972] syzkaller0: entered promiscuous mode
[  369.407431][T21972] syzkaller0: entered allmulticast mode
[  371.663912][T21984] netlink: 'syz.3.6928': attribute type 2 has an invalid length.
[  371.963087][T22011] IPVS: Error connecting to the multicast addr
[  372.054140][T22016] vlan1: entered promiscuous mode
[  372.056196][T22016] hsr_slave_1: entered promiscuous mode
[  372.060217][T22016] vlan1: entered allmulticast mode
[  372.063269][T22016] hsr_slave_1: entered allmulticast mode
[  372.128914][T22022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6941'.
[  372.300269][T22033] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6945'.
[  372.836664][T22081] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6968'.
[  373.019156][T22101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6976'.
[  373.022273][T22101] netlink: 560 bytes leftover after parsing attributes in process `syz.3.6976'.
[  373.487091][T22157] lo speed is unknown, defaulting to 1000
[  373.494891][T22157] lo speed is unknown, defaulting to 1000
[  373.498514][T22157] lo speed is unknown, defaulting to 1000
[  373.643424][T22160] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.646543][T22160] 8021q: adding VLAN 0 to HW filter on device team0
[  373.657965][T22160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  373.673316][T22157] infiniband syz0: set active
[  373.674844][   T51] lo speed is unknown, defaulting to 1000
[  373.676896][   T51] syz0: Port: 1 Link ACTIVE
[  373.681827][T22157] infiniband syz0: added lo
[  373.696179][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6999'.
[  373.717492][T22157] RDS/IB: syz0: added
[  373.718924][T22157] smc: adding ib device syz0 with port count 1
[  373.720748][T22157] smc:    ib device syz0 port 1 has pnetid 
[  373.722613][   T51] lo speed is unknown, defaulting to 1000
[  373.724911][T22157] lo speed is unknown, defaulting to 1000
[  373.734227][T22172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7000'.
[  373.859993][T22157] lo speed is unknown, defaulting to 1000
[  373.903093][T22178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6999'.
[  373.906377][T22178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6999'.
[  373.996642][T22157] lo speed is unknown, defaulting to 1000
[  374.145643][T22157] lo speed is unknown, defaulting to 1000
[  374.297362][T22157] lo speed is unknown, defaulting to 1000
[  374.301996][T22198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7010'.
[  374.433348][T22157] lo speed is unknown, defaulting to 1000
[  374.509516][T22206] netlink: 'syz.0.7014': attribute type 7 has an invalid length.
[  374.791185][T22228] netlink: 'syz.2.7024': attribute type 11 has an invalid length.
[  376.865666][T22291] vlan2: entered allmulticast mode
[  376.869464][T22291] bond0: entered allmulticast mode
[  376.871501][T22291] bond_slave_0: entered allmulticast mode
[  376.873651][T22291] bond_slave_1: entered allmulticast mode
[  377.531314][T22320] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  377.534532][T22320] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  377.583037][T22324] veth0: entered promiscuous mode
[  377.767247][T22334] netlink: 'syz.2.7072': attribute type 3 has an invalid length.
[  377.772154][T22334] netlink: 'syz.2.7072': attribute type 1 has an invalid length.
[  377.774721][T22334] __nla_validate_parse: 6 callbacks suppressed
[  377.774729][T22334] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.7072'.
[  377.818077][T22340] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7075'.
[  377.821546][T22340] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7075'.
[  377.824900][T22340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7075'.
[  377.830741][T22342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7076'.
[  377.955333][T22346] vlan0: entered promiscuous mode
[  378.325829][T22319] veth0: left promiscuous mode
[  380.706672][T22471] tipc: Resetting bearer <eth:team0>
[  380.709018][T22471] tipc: Resetting bearer <eth:team0>
[  380.866855][T22487] dvmrp1: tun_chr_ioctl cmd 1074025677
[  380.871497][T22487] dvmrp1: linktype set to 773
[  381.363015][T22518] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1550) !
[  382.015784][T22551] netlink: 'syz.0.7176': attribute type 10 has an invalid length.
[  382.032003][T22551] 8021q: adding VLAN 0 to HW filter on device bond0
[  382.034878][T22551] team0: Device bond0 failed to register rx_handler
[  382.102320][T22555] netlink: 'syz.2.7178': attribute type 3 has an invalid length.
[  382.104757][T22555] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7178'.
[  382.335233][T22575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7188'.
[  382.770422][T22603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7201'.
[  382.774318][T22603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7201'.
[  382.778334][T22603] netlink: 31 bytes leftover after parsing attributes in process `syz.2.7201'.
[  382.782018][T22603] netlink: 'syz.2.7201': attribute type 3 has an invalid length.
[  382.784761][T22605] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7202'.
[  382.785341][T22603] netlink: 'syz.2.7201': attribute type 2 has an invalid length.
[  382.791377][T22603] netlink: 31 bytes leftover after parsing attributes in process `syz.2.7201'.
[  382.795062][T22603] netlink: 'syz.2.7201': attribute type 2 has an invalid length.
[  382.906075][T22614] bridge_slave_0: default FDB implementation only supports local addresses
[  382.983019][T22618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7208'.
[  384.074271][T22641] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7219'.
[  384.233528][T22652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  384.847429][T22679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7236'.
[  384.930677][T22683] tipc: Started in network mode
[  384.932634][T22683] tipc: Node identity ee45cbfaa887, cluster identity 4711
[  384.935644][T22683] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.939140][T22683] syzkaller0: entered promiscuous mode
[  384.940878][T22683] syzkaller0: entered allmulticast mode
[  384.959427][T22683] tipc: Resetting bearer <eth:syzkaller0>
[  384.963209][T22682] tipc: Resetting bearer <eth:syzkaller0>
[  384.975716][T22682] tipc: Disabling bearer <eth:syzkaller0>
[  385.095044][T22692] netlink: 'syz.3.7242': attribute type 29 has an invalid length.
[  385.102690][T22692] netlink: 'syz.3.7242': attribute type 29 has an invalid length.
[  385.149915][T22697] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  385.468713][T22722] @: renamed from veth0_vlan
[  385.672375][T22740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7265'.
[  387.055584][T22801] syz_tun: entered allmulticast mode
[  387.108626][T22801] dvmrp1: entered allmulticast mode
[  387.132988][T22800] syz_tun: left allmulticast mode
[  387.322029][T22821] netem: change failed
[  387.512673][T22833] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  387.515218][T22833] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  387.597550][T22842] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  387.662899][T22828] lo speed is unknown, defaulting to 1000
[  388.092633][T22862] lo speed is unknown, defaulting to 1000
[  388.522369][T22885] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7330'.
[  389.098376][T22907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7340'.
[  389.253048][T22913] Bluetooth: hci1: Opcode 0x080f failed: -22
[  389.962512][T22943] wireguard0: entered promiscuous mode
[  389.964857][T22943] wireguard0: entered allmulticast mode
[  390.722307][T22979] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7373'.
[  390.755328][T22982] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  390.769580][T22982] bond0: (slave batadv0): Releasing backup interface
[  390.773570][T22982] batadv0: left promiscuous mode
[  390.789576][T22982] batman_adv: batadv0: Interface deactivated: ip6gretap0
[  390.792309][T22982] batman_adv: batadv0: Removing interface: ip6gretap0
[  390.797649][T22984] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7377'.
[  390.807225][T22982] netlink: 'syz.2.7375': attribute type 10 has an invalid length.
[  390.810635][T22982] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  390.813066][T22982] bond0: (slave wlan1): refused to change device type
[  390.817176][T22982] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  390.820375][T22982] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  391.297987][ T5860] Bluetooth: hci1: command tx timeout
[  391.454108][T23027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7397'.
[  391.620681][ T7387] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0
[  391.624165][ T7387] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  391.633828][T23032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7399'.
[  391.636972][T23032] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  391.642993][T23032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.243641][T23060] netlink: 'syz.2.7411': attribute type 1 has an invalid length.
[  392.449825][T23067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7414'.
[  392.853935][T23082] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  393.172809][T23086] lo speed is unknown, defaulting to 1000
[  394.552060][T23156] syz_tun: entered promiscuous mode
[  394.556207][T23156] syz_tun: left promiscuous mode
[  394.789368][T23171] pim6reg1: entered promiscuous mode
[  394.791085][T23171] pim6reg1: entered allmulticast mode
[  395.725137][T23229] lo speed is unknown, defaulting to 1000
[  397.257322][T23280] lo speed is unknown, defaulting to 1000
[  397.513195][T23303] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7516'.
[  398.032198][T23339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7528'.
[  399.318635][ T5860] Bluetooth: hci3: link tx timeout
[  399.320988][ T5860] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  399.786715][T23436] netlink: 'syz.0.7570': attribute type 12 has an invalid length.
[  399.791915][T23436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7570'.
[  399.795623][T23436] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  399.973603][T23416] lo speed is unknown, defaulting to 1000
[  401.004567][T23514] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7605'.
[  401.008385][T23514] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7605'.
[  401.382002][T23392] Bluetooth: hci3: command 0x0406 tx timeout
[  401.516124][T23557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.525753][T23557] syzkaller0: entered promiscuous mode
[  401.533656][T23557] syzkaller0: entered allmulticast mode
[  401.577380][T23557] tipc: Resetting bearer <eth:syzkaller0>
[  401.593856][T23556] tipc: Resetting bearer <eth:syzkaller0>
[  401.617756][T23556] tipc: Disabling bearer <eth:syzkaller0>
[  401.622132][T23567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7630'.
[  401.831642][T23588] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  402.617731][T23673] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7673'.
[  402.621375][T23673] netlink: 35 bytes leftover after parsing attributes in process `syz.3.7673'.
[  402.732167][T23679] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode
[  402.986385][T23693] syzkaller1: entered promiscuous mode
[  402.988362][T23693] syzkaller1: entered allmulticast mode
[  403.215914][T23699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  403.222708][T23699] syzkaller0: entered promiscuous mode
[  403.226783][T23699] syzkaller0: entered allmulticast mode
[  403.245280][T23699] tipc: Resetting bearer <eth:syzkaller0>
[  403.252767][T23698] tipc: Resetting bearer <eth:syzkaller0>
[  403.263928][T23698] tipc: Disabling bearer <eth:syzkaller0>
[  403.437670][T23709] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  403.663542][T23723] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  403.732735][T23732] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7698'.
[  403.737379][T23727] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7698'.
[  404.522531][T23781] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7720'.
[  404.528757][T23781] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  404.575120][T23786] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  405.392194][T23826] lo speed is unknown, defaulting to 1000
[  405.882994][T23846] lo speed is unknown, defaulting to 1000
[  406.030480][T23851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7747'.
[  406.046672][T23851] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  406.053637][T23851] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  407.121823][T23892] batadv3: entered allmulticast mode
[  407.124915][T23892] 8021q: adding VLAN 0 to HW filter on device batadv3
[  407.343760][T23907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7769'.
[  407.349664][T23907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7769'.
[  407.353117][T23907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7769'.
[  407.356574][T23907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7769'.
[  407.880698][T23958] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7793'.
[  407.892352][T23958] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7793'.
[  408.597392][T24017] netlink: 'syz.0.7818': attribute type 32 has an invalid length.
[  408.695295][T24029] syzkaller1: entered promiscuous mode
[  408.697097][T24029] syzkaller1: entered allmulticast mode
[  408.814071][T24045] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7831'.
[  408.816950][T24045] netlink: 'syz.0.7831': attribute type 3 has an invalid length.
[  408.845224][T21934] syzkaller0: tun_net_xmit 76
[  408.846919][T21934] syzkaller0: tun_net_xmit 48
[  408.851142][T24041] syzkaller0: create flow: hash 3490192427 index 1
[  408.879221][ T2298] syzkaller0: tun_net_xmit 76
[  408.894365][T24041] syzkaller0: delete flow: hash 3490192427 index 1
[  411.195465][T24105] lo speed is unknown, defaulting to 1000
[  411.422906][T24121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7865'.
[  411.426837][T24121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7865'.
[  411.966755][T24140] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7874'.
[  412.557597][T24194] netlink: 'syz.0.7898': attribute type 1 has an invalid length.
[  412.564924][T24194] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7898'.
[  412.575521][T24196] sit0: entered promiscuous mode
[  412.587274][T24196] netlink: 'syz.3.7897': attribute type 1 has an invalid length.
[  412.600917][T24196] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7897'.
[  412.721605][T24206] netlink: 324 bytes leftover after parsing attributes in process `syz.3.7903'.
[  413.022994][T24228] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7914'.
[  413.140450][T24237] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.148429][T24237] syzkaller0: entered promiscuous mode
[  413.150356][T24237] syzkaller0: entered allmulticast mode
[  413.183261][T24237] tipc: Resetting bearer <eth:syzkaller0>
[  413.191126][T24236] tipc: Resetting bearer <eth:syzkaller0>
[  413.267093][T24236] tipc: Disabling bearer <eth:syzkaller0>
[  415.641473][T24313] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7956'.
[  416.750093][T24337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7968'.
[  416.753312][T24337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7968'.
[  417.305649][T24385] sctp: [Deprecated]: syz.0.7988 (pid 24385) Use of int in max_burst socket option deprecated.
[  417.305649][T24385] Use struct sctp_assoc_value instead
[  418.863010][T24428] netlink: 'syz.3.8008': attribute type 1 has an invalid length.
[  418.887432][T24428] 8021q: adding VLAN 0 to HW filter on device bond3
[  418.898028][T24428] vlan4: entered allmulticast mode
[  418.899647][T24428] macvtap0: entered allmulticast mode
[  418.901934][T24428] bond3: (slave vlan4): Opening slave failed
[  419.030810][T24433] netlink: 324 bytes leftover after parsing attributes in process `syz.3.8010'.
[  419.180489][T24446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8016'.
[  419.560441][T24471] dvmrp0: entered allmulticast mode
[  419.610251][T24476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8029'.
[  419.746794][T24487] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8034'.
[  419.819575][   T33] audit: type=1800 audit(1755303537.547:5): pid=24488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8031" name="memory.events" dev="tmpfs" ino=14553 res=0 errno=0
[  420.201423][T24515] openvswitch: netlink: Message has 4 unknown bytes.
[  420.204147][T24515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.257934][T23392] Bluetooth: hci3: command 0x0406 tx timeout
[  420.326235][T24519] netlink: 'syz.3.8047': attribute type 17 has an invalid length.
[  420.336245][T24519] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8047'.
[  420.341606][T24519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  420.347558][   T51] lo speed is unknown, defaulting to 1000
[  421.064248][T24529] lo speed is unknown, defaulting to 1000
[  421.313711][T24537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8054'.
[  421.317061][T24537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8054'.
[  421.321576][T24537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8054'.
[  421.432429][T24543] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  421.731090][T24561] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  421.735746][T24561] syzkaller0: entered promiscuous mode
[  421.739106][T24561] syzkaller0: entered allmulticast mode
[  421.755701][T24561] tipc: Resetting bearer <eth:syzkaller0>
[  421.759644][T24560] tipc: Resetting bearer <eth:syzkaller0>
[  421.787705][T24560] tipc: Disabling bearer <eth:syzkaller0>
[  421.870475][T24567] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  421.966056][T24575] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  421.972925][T24575] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  422.116722][T24578] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8071'.
[  422.126193][T24578] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8071'.
[  422.131945][T24578] dvmrp0: left allmulticast mode
[  422.133972][T24578] pimreg: left allmulticast mode
[  422.204900][   T33] audit: type=1800 audit(1755303539.927:6): pid=24582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8073" name="memory.events" dev="tmpfs" ino=2595 res=0 errno=0
[  423.154739][T24636] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  423.261654][T24646] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  424.265821][T24699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.413555][T24707] tun0: tun_chr_ioctl cmd 2148553947
[  424.425022][T24709] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  424.428366][T24708] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  424.831334][T24747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  424.882339][T24747] syzkaller0: entered promiscuous mode
[  424.884698][T24747] syzkaller0: entered allmulticast mode
[  424.888952][T24747] tipc: Resetting bearer <eth:syzkaller0>
[  424.897224][T24745] tipc: Resetting bearer <eth:syzkaller0>
[  425.878292][   T24] tipc: Node number set to 1187171322
[  426.326053][T24745] tipc: Disabling bearer <eth:syzkaller0>
[  426.539632][T24766] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  426.572321][T23392] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  426.575871][T23392] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  426.579277][T23392] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  426.583184][T23392] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  426.586074][T23392] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  426.631397][T24771] __nla_validate_parse: 3 callbacks suppressed
[  426.631409][T24771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8158'.
[  426.725655][T24768] lo speed is unknown, defaulting to 1000
[  427.019527][T24768] chnl_net:caif_netlink_parms(): no params data found
[  427.115360][T24768] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.124005][T24768] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.126269][T24768] bridge_slave_0: entered allmulticast mode
[  427.131881][T24768] bridge_slave_0: entered promiscuous mode
[  427.135587][T24768] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.138301][T24768] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.140722][T24768] bridge_slave_1: entered allmulticast mode
[  427.144006][T24768] bridge_slave_1: entered promiscuous mode
[  427.167295][T24768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.172402][T24768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.199028][T24768] team0: Port device team_slave_0 added
[  427.203161][T24768] team0: Port device team_slave_1 added
[  427.230790][T24768] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.233025][T24768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.245300][T24768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.250425][T24768] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.253103][T24768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.265020][T24768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.309050][T24768] hsr_slave_0: entered promiscuous mode
[  427.311568][T24768] hsr_slave_1: entered promiscuous mode
[  427.314143][T24768] debugfs: 'hsr0' already exists in 'hsr'
[  427.316141][T24768] Cannot create hsr debugfs directory
[  427.493334][T24768] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  427.498966][T24768] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  427.504585][T24768] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  427.511949][T24768] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  427.580659][T24768] 8021q: adding VLAN 0 to HW filter on device bond0
[  427.595286][T24768] 8021q: adding VLAN 0 to HW filter on device team0
[  427.603259][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.605665][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  427.614853][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.617652][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.738670][T24768] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.939621][T24818] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.004885][T24818] syzkaller0: entered promiscuous mode
[  428.006751][T24818] syzkaller0: entered allmulticast mode
[  428.009031][T24818] tipc: Resetting bearer <eth:syzkaller0>
[  428.029714][T24827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8173'.
[  428.031134][T24768] veth0_vlan: entered promiscuous mode
[  428.042928][T24768] veth1_vlan: entered promiscuous mode
[  428.047048][T24816] tipc: Resetting bearer <eth:syzkaller0>
[  428.670571][ T5860] Bluetooth: hci4: command tx timeout
[  429.476163][T24816] tipc: Disabling bearer <eth:syzkaller0>
[  429.524766][T24768] veth0_macvtap: entered promiscuous mode
[  429.548984][T24768] veth1_macvtap: entered promiscuous mode
[  429.571894][T24768] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.582047][T24768] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.594785][T21934] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.598487][T21934] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.601165][T21934] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.616983][T21934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  429.688789][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.691132][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.721608][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.724327][T24840] netlink: 'syz.3.8177': attribute type 39 has an invalid length.
[  429.724695][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.066519][T24844] lo speed is unknown, defaulting to 1000
[  430.379967][T24862] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  430.749402][ T5860] Bluetooth: hci4: command tx timeout
[  431.018409][T24893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8197'.
[  431.174843][T24903] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8201'.
[  431.178658][T24903] nbd: must specify at least one socket
[  431.314511][T24905] bond_slave_0: entered promiscuous mode
[  431.316956][T24905] bond_slave_1: entered promiscuous mode
[  431.326744][T24905] vlan2: entered promiscuous mode
[  431.332994][T24905] bond0: entered promiscuous mode
[  431.845675][T24928] lo speed is unknown, defaulting to 1000
[  432.073067][T24936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8213'.
[  432.828091][ T5860] Bluetooth: hci4: command tx timeout
[  433.447095][T24986] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882)
[  433.456266][T24986] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  433.718597][T25008] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8245'.
[  433.822663][T25018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8250'.
[  434.400088][T25050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.404864][T25050] syzkaller0: entered promiscuous mode
[  434.407892][T25050] syzkaller0: entered allmulticast mode
[  434.490337][T25050] tipc: Resetting bearer <eth:syzkaller0>
[  434.493673][T25048] tipc: Resetting bearer <eth:syzkaller0>
[  434.508529][T25048] tipc: Disabling bearer <eth:syzkaller0>
[  434.521947][T25047] lo speed is unknown, defaulting to 1000
[  434.908428][ T5860] Bluetooth: hci4: command tx timeout
[  435.914384][T25068] nbd0: detected capacity change from 0 to 127
[  435.950478][   T55] block nbd0: Receive control failed (result -32)
[  436.191575][T25099] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8287'.
[  436.194535][T25099] 0X: renamed from caif0
[  436.200408][T25099] 0X: entered allmulticast mode
[  436.202305][T25099] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  436.383142][T25114] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8293'.
[  436.400849][T25114] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8293'.
[  436.413189][T25108] netlink: 'syz.0.8288': attribute type 1 has an invalid length.
[  436.463908][T25120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8296'.
[  436.468071][T25120] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  436.543281][T25128] netlink: 'syz.3.8300': attribute type 2 has an invalid length.
[  436.545860][T25128] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8300'.
[  436.860405][T25147] syzkaller0: tun_chr_ioctl cmd 1074812117
[  437.232863][T25154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8311'.
[  437.328081][T25155] nbd1: detected capacity change from 0 to 127
[  437.337661][   T55] block nbd1: Receive control failed (result -32)
[  437.407424][T25161] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  437.474666][T25162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8313'.
[  437.815756][T25185] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8325'.
[  438.544820][T25207] netlink: 'syz.3.8335': attribute type 11 has an invalid length.
[  439.225989][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8357'.
[  439.695536][T25292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8372'.
[  439.703328][T25292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8372'.
[  441.772644][T25390] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  441.781955][T25390] syzkaller0: entered promiscuous mode
[  441.789391][T25390] syzkaller0: entered allmulticast mode
[  441.812920][T25390] tipc: Resetting bearer <eth:syzkaller0>
[  441.821520][T25389] tipc: Resetting bearer <eth:syzkaller0>
[  441.836516][T25389] tipc: Disabling bearer <eth:syzkaller0>
[  442.287479][T25422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  442.652079][T21934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  442.664474][T21934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  442.684470][T21934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  442.690651][T21934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  442.736496][T25469] netlink: 'syz.4.8455': attribute type 303 has an invalid length.
[  443.013248][T25499] netlink: 'syz.3.8467': attribute type 21 has an invalid length.
[  443.212921][T25518] macsec1: entered promiscuous mode
[  443.215350][T25518] hsr0: entered promiscuous mode
[  443.217275][T25518] macsec1: entered allmulticast mode
[  443.224217][T25518] hsr0: entered allmulticast mode
[  443.225911][T25518] hsr_slave_0: entered allmulticast mode
[  443.228033][T25518] hsr_slave_1: entered allmulticast mode
[  443.234241][T25518] hsr0: left allmulticast mode
[  443.240786][T25518] hsr_slave_0: left allmulticast mode
[  443.242839][T25518] hsr_slave_1: left allmulticast mode
[  443.245972][T25518] hsr0: left promiscuous mode
[  443.296348][T25506] lo speed is unknown, defaulting to 1000
[  443.329200][T25524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  443.745471][T25545] netlink: 'syz.0.8487': attribute type 1 has an invalid length.
[  443.756252][T25545] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8487'.
[  443.760538][T25545] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8487'.
[  443.765539][T25547] netlink: 'syz.4.8488': attribute type 12 has an invalid length.
[  443.787875][T25547] netlink: 'syz.4.8488': attribute type 18 has an invalid length.
[  443.791227][T25547] netlink: 'syz.4.8488': attribute type 21 has an invalid length.
[  443.794184][T25547] netlink: 'syz.4.8488': attribute type 26 has an invalid length.
[  443.934637][T25561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8495'.
[  443.937598][T25561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8495'.
[  444.153172][T25588] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[  445.363646][T25634] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8523'.
[  445.367170][T25634] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8523'.
[  446.132937][T25675] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8541'.
[  446.299003][T25662] lo speed is unknown, defaulting to 1000
[  446.508442][T25683] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.553467][T25691] syzkaller0: entered promiscuous mode
[  446.555651][T25691] syzkaller0: entered allmulticast mode
[  446.574850][T25689] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  446.632221][T25683] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.676748][T25680] tipc: Resetting bearer <eth:syzkaller0>
[  446.712376][T25683] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.723308][T25679] tipc: Resetting bearer <eth:syzkaller0>
[  446.752911][T25679] tipc: Disabling bearer <eth:syzkaller0>
[  446.777126][T25683] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.923629][   T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.955669][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.985227][   T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.002202][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.077501][T25699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8548'.
[  447.161550][T25702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8550'.
[  447.794252][T25743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8570'.
[  447.885293][T25748] netlink: 'syz.4.8572': attribute type 4 has an invalid length.
[  448.464383][T25794] sctp: [Deprecated]: syz.0.8589 (pid 25794) Use of struct sctp_assoc_value in delayed_ack socket option.
[  448.464383][T25794] Use struct sctp_sack_info instead
[  448.642785][T25807] netlink: 'syz.4.8596': attribute type 7 has an invalid length.
[  449.962119][T25851] __nla_validate_parse: 3 callbacks suppressed
[  449.962136][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8614'.
[  450.118760][T25860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  450.121599][T25860] IPv6: NLM_F_CREATE should be set when creating new route
[  450.124662][T25860] IPv6: NLM_F_CREATE should be set when creating new route
[  450.152434][T25862] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8618'.
[  450.167379][T25862] batadv1: entered promiscuous mode
[  450.170899][T25862] batadv1: entered allmulticast mode
[  450.269023][T25862] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8618'.
[  450.399955][T25879] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8626'.
[  450.402900][T25879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8626'.
[  450.406110][T25879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8626'.
[  450.496427][T25889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8631'.
[  450.519671][T25891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8632'.
[  450.538414][T25891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8632'.
[  450.744174][T25908] bridge0: port 1(syz_tun) entered disabled state
[  451.145063][T25933] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode
[  451.184196][T25933] bridge_slave_0: left allmulticast mode
[  451.186577][T25933] bridge_slave_0: left promiscuous mode
[  451.189599][T25933] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.195902][T25933] bridge_slave_1: left allmulticast mode
[  451.203175][T25933] bridge_slave_1: left promiscuous mode
[  451.205628][T25933] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.217731][T25933] bond0: (slave bond_slave_0): Releasing backup interface
[  451.231224][T25933] bond_slave_0: left promiscuous mode
[  451.237907][T25933] bond0: (slave bond_slave_1): Releasing backup interface
[  451.242326][T25933] bond_slave_1: left promiscuous mode
[  451.253550][T25933] team0: Port device team_slave_0 removed
[  451.261469][T25933] team0: Port device team_slave_1 removed
[  451.264643][T25933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.267493][T25933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.272867][T25933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.275851][T25933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.285872][T25936] netlink: 'syz.4.8651': attribute type 10 has an invalid length.
[  451.306052][T25936] mac80211_hwsim hwsim25 wlan1: left allmulticast mode
[  451.315262][T25936] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode
[  451.320786][T25936] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  451.336571][T25933] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  451.340746][T25933] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  452.087730][T25952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8659'.
[  452.235829][T25970] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  452.240518][T25970] openvswitch: netlink: Message has 8454 unknown bytes.
[  452.453754][T25980] tipc: Started in network mode
[  452.458176][T25980] tipc: Node identity a6feea9661e5, cluster identity 4711
[  452.461437][T25980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  452.464995][T25980] syzkaller0: entered promiscuous mode
[  452.467150][T25980] syzkaller0: entered allmulticast mode
[  452.487534][T25980] tipc: Resetting bearer <eth:syzkaller0>
[  452.495048][T25979] tipc: Resetting bearer <eth:syzkaller0>
[  452.534007][T25979] tipc: Disabling bearer <eth:syzkaller0>
[  452.900198][T26001] syzkaller0: entered promiscuous mode
[  452.901874][T26001] syzkaller0: entered allmulticast mode
[  454.185305][T26021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  454.914741][T26022] lo speed is unknown, defaulting to 1000
[  456.153964][T26044] netlink: 'syz.0.8699': attribute type 12 has an invalid length.
[  456.156833][T26044] __nla_validate_parse: 2 callbacks suppressed
[  456.156846][T26044] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.8699'.
[  461.616623][T23392] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  461.621991][T23392] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  461.626430][T23392] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  461.632395][T23392] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  461.636376][T23392] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  461.806968][T26065] lo speed is unknown, defaulting to 1000
[  462.054751][T26065] chnl_net:caif_netlink_parms(): no params data found
[  462.121773][T26065] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.124181][T26065] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.126466][T26065] bridge_slave_0: entered allmulticast mode
[  462.129659][T26065] bridge_slave_0: entered promiscuous mode
[  462.133995][T26065] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.136773][T26065] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.139233][T26065] bridge_slave_1: entered allmulticast mode
[  462.142250][T26065] bridge_slave_1: entered promiscuous mode
[  462.174509][T26065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.180412][T26065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.205227][T26065] team0: Port device team_slave_0 added
[  462.209769][T26065] team0: Port device team_slave_1 added
[  462.232887][T26065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.235118][T26065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  462.244860][T26065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.251307][T26065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  462.254033][T26065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  462.264639][T26065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  462.302993][T26065] hsr_slave_0: entered promiscuous mode
[  462.306023][T26065] hsr_slave_1: entered promiscuous mode
[  462.309290][T26065] debugfs: 'hsr0' already exists in 'hsr'
[  462.311588][T26065] Cannot create hsr debugfs directory
[  462.470257][T26065] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  462.475489][T26065] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  462.480585][T26065] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  462.485153][T26065] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  462.516628][T26065] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.518975][T26065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  462.521308][T26065] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.523514][T26065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  462.588534][T26065] 8021q: adding VLAN 0 to HW filter on device bond0
[  462.599126][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.602364][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.618453][T26065] 8021q: adding VLAN 0 to HW filter on device team0
[  462.627565][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.629929][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  462.652603][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.654910][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  462.812038][T26065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  463.016154][T26065] veth0_vlan: entered promiscuous mode
[  463.026731][T26065] veth1_vlan: entered promiscuous mode
[  463.054493][T26065] veth0_macvtap: entered promiscuous mode
[  463.062650][T26065] veth1_macvtap: entered promiscuous mode
[  463.079785][T26065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.090751][T26065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.099965][T21934] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.112382][T21934] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.126258][T21934] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.130045][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.192170][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.195183][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.240287][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.243542][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.698431][T23392] Bluetooth: hci5: command tx timeout
[  464.308326][T26160] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.8734'.
[  464.312437][T26159] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.8734'.
[  464.405876][T26164] tipc: Started in network mode
[  464.411596][T26164] tipc: Node identity 023a04851f2, cluster identity 4711
[  464.414924][T26164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  464.422547][T26164] syzkaller0: entered promiscuous mode
[  464.425113][T26164] syzkaller0: entered allmulticast mode
[  464.447275][T26164] tipc: Resetting bearer <eth:syzkaller0>
[  464.454176][T26163] tipc: Resetting bearer <eth:syzkaller0>
[  464.468519][T26163] tipc: Disabling bearer <eth:syzkaller0>
[  465.204544][T26186] netlink: 'syz.0.8746': attribute type 6 has an invalid length.
[  465.206980][T26186] IPv6: NLM_F_CREATE should be specified when creating new route
[  465.295961][T26191] netlink: 'syz.0.8748': attribute type 21 has an invalid length.
[  465.299493][T26191] netlink: 'syz.0.8748': attribute type 1 has an invalid length.
[  465.301903][T26191] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8748'.
[  465.778472][T23392] Bluetooth: hci5: command tx timeout
[  465.811978][T26219] bond0: (slave bond2): Error -95 calling ndo_bpf
[  465.814540][T26219] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  466.020869][T26213] lo speed is unknown, defaulting to 1000
[  467.103251][T26251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  467.225422][T26258] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  467.227672][ T2298] IPVS: starting estimator thread 0...
[  467.318872][T26264] IPVS: using max 37 ests per chain, 88800 per kthread
[  467.733500][T26303] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  467.858699][T23392] Bluetooth: hci5: command tx timeout
[  467.860750][T26317] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8807'.
[  468.581636][ T5860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  468.586911][ T5860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  468.591026][ T5860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  468.594252][ T5860] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  468.597226][ T5860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  468.762846][T26343] lo speed is unknown, defaulting to 1000
[  469.063816][T26375] netlink: 'syz.0.8833': attribute type 2 has an invalid length.
[  469.204222][T26343] chnl_net:caif_netlink_parms(): no params data found
[  469.380028][T26343] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.384138][T26343] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.395131][   T33] audit: type=1800 audit(1755303587.117:7): pid=26396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8840" name="blkio.bfq.time_recursive" dev="tmpfs" ino=261 res=0 errno=0
[  469.396179][T26343] bridge_slave_0: entered allmulticast mode
[  469.412120][T26343] bridge_slave_0: entered promiscuous mode
[  469.416241][T26343] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.418625][T26343] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.422013][T26343] bridge_slave_1: entered allmulticast mode
[  469.426025][T26343] bridge_slave_1: entered promiscuous mode
[  469.491635][T26343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  469.503577][T26343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  469.536724][T26343] team0: Port device team_slave_0 added
[  469.541733][T26343] team0: Port device team_slave_1 added
[  469.591491][T26343] batman_adv: batadv0: Adding interface: batadv_slave_0
[  469.606983][T26343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.622293][T26343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  469.627295][T26343] batman_adv: batadv0: Adding interface: batadv_slave_1
[  469.631821][T26343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.643849][T26343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  469.697614][T26343] hsr_slave_0: entered promiscuous mode
[  469.700778][T26343] hsr_slave_1: entered promiscuous mode
[  469.702954][T26343] debugfs: 'hsr0' already exists in 'hsr'
[  469.704751][T26343] Cannot create hsr debugfs directory
[  469.939976][ T5860] Bluetooth: hci5: command tx timeout
[  470.005102][T26343] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  470.010200][T26343] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  470.023434][T26343] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  470.028314][T26343] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  470.073860][T26343] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.076115][T26343] bridge0: port 2(bridge_slave_1) entered forwarding state
[  470.078859][T26343] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.081114][T26343] bridge0: port 1(bridge_slave_0) entered forwarding state
[  470.176000][T26343] 8021q: adding VLAN 0 to HW filter on device bond0
[  470.192009][ T4069] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.195489][ T4069] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.218769][T26343] 8021q: adding VLAN 0 to HW filter on device team0
[  470.235876][ T4069] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.238206][ T4069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  470.249077][ T4069] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.251338][ T4069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  470.271835][T26420] lo speed is unknown, defaulting to 1000
[  470.573781][T26343] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.659534][ T5860] Bluetooth: hci6: command tx timeout
[  470.746801][T26455] netlink: 'syz.5.8855': attribute type 2 has an invalid length.
[  470.768579][T26455] netlink: 'syz.5.8855': attribute type 2 has an invalid length.
[  470.856137][T26343] veth0_vlan: entered promiscuous mode
[  470.869954][T26343] veth1_vlan: entered promiscuous mode
[  470.880256][T26447] lo speed is unknown, defaulting to 1000
[  470.911402][T26343] veth0_macvtap: entered promiscuous mode
[  470.915511][T26343] veth1_macvtap: entered promiscuous mode
[  470.943039][T26343] batman_adv: batadv0: Interface activated: batadv_slave_0
[  470.959589][T26343] batman_adv: batadv0: Interface activated: batadv_slave_1
[  470.976817][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.987273][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.002933][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.022831][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.208006][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.210657][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.254661][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.266919][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.453221][T26493] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8872'.
[  471.501584][T26493] bridge1: port 1(veth3) entered blocking state
[  471.505368][T26493] bridge1: port 1(veth3) entered disabled state
[  471.516520][T26493] veth3: entered allmulticast mode
[  471.521243][T26493] veth3: entered promiscuous mode
[  471.540072][T26499] bridge1: port 2(veth0_to_bond) entered blocking state
[  471.543005][T26499] bridge1: port 2(veth0_to_bond) entered disabled state
[  471.546205][T26499] veth0_to_bond: entered allmulticast mode
[  471.551482][T26499] veth0_to_bond: entered promiscuous mode
[  471.692940][T26499] vlan2: entered allmulticast mode
[  471.695062][T26499] veth1: entered allmulticast mode
[  471.711416][T26499] bridge1: port 3(vlan2) entered blocking state
[  471.740710][T26499] bridge1: port 3(vlan2) entered disabled state
[  471.744175][T26499] vlan2: entered promiscuous mode
[  471.745931][T26499] veth1: entered promiscuous mode
[  471.816109][T26515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8881'.
[  472.036708][T26535] netlink: 'syz.6.8891': attribute type 3 has an invalid length.
[  472.072424][T26540] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  472.076397][T26540] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[  472.167063][T26548] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  472.240955][T26556] netlink: 'syz.6.8901': attribute type 17 has an invalid length.
[  472.244546][T26556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  472.401123][T26566] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8906'.
[  472.502854][T26571] netlink: 'syz.6.8908': attribute type 13 has an invalid length.
[  472.506037][T26571] netlink: 'syz.6.8908': attribute type 17 has an invalid length.
[  472.563242][T26571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  472.716503][T26571] lo speed is unknown, defaulting to 1000
[  472.738980][ T5860] Bluetooth: hci6: command tx timeout
[  472.797021][T26577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8911'.
[  472.814627][T26577] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.196466][T26618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8930'.
[  473.283301][T26624] IPVS: persistence engine module ip_vs_pe_ not found
[  473.807343][T26676] netlink: 830 bytes leftover after parsing attributes in process `syz.6.8958'.
[  473.937248][T26676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8958'.
[  473.958607][T26676] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  473.964873][T26676] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  474.587271][T26703] netlink: 'syz.0.8968': attribute type 4 has an invalid length.
[  474.818220][ T5860] Bluetooth: hci6: command tx timeout
[  475.039060][T26733] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8983'.
[  475.446076][T26765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8997'.
[  475.449958][T26765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8997'.
[  475.986175][T26812] netlink: 'syz.6.9016': attribute type 13 has an invalid length.
[  476.125743][T26812] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.129037][T26812] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.330291][T26812] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  476.351794][T26812] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  476.539597][ T5719] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  476.542677][ T5719] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  476.546664][ T5719] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  476.550091][ T5719] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  476.899022][ T5860] Bluetooth: hci6: command tx timeout
[  477.031434][T26848] pimreg: entered allmulticast mode
[  477.252940][T26860] __nla_validate_parse: 1 callbacks suppressed
[  477.252956][T26860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9036'.
[  477.458395][T20468] unregister_netdevice: waiting for wg0 to become free. Usage count = 5
[  477.462256][T20468] ref_tracker: netdev@ffff88810588c610 has 1/1 users at
[  477.462256][T20468]      ib_device_set_netdev+0x31f/0x6d0
[  477.462256][T20468]      rxe_register_device+0x1c7/0x310
[  477.462256][T20468]      rxe_net_add+0x81/0x110
[  477.462256][T20468]      rxe_newlink+0xdd/0x190
[  477.462256][T20468]      nldev_newlink+0x4a5/0x5a0
[  477.462256][T20468]      rdma_nl_rcv+0x6ae/0x980
[  477.462256][T20468]      netlink_unicast+0x82f/0x9e0
[  477.462256][T20468]      netlink_sendmsg+0x805/0xb30
[  477.462256][T20468]      __sock_sendmsg+0x21c/0x270
[  477.462256][T20468]      ____sys_sendmsg+0x505/0x830
[  477.462256][T20468]      ___sys_sendmsg+0x21f/0x2a0
[  477.462256][T20468]      __x64_sys_sendmsg+0x19b/0x260
[  477.462256][T20468]      do_syscall_64+0xfa/0x3b0
[  477.462256][T20468]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.462256][T20468] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  478.045880][ T5856] bridge0: port 1(syz_tun) entered disabled state
[  478.063740][ T5856] syz_tun (unregistering): left promiscuous mode
[  478.065769][ T5856] bridge0: port 1(syz_tun) entered disabled state
[  487.138210][   T34] INFO: task kworker/u9:0:26 blocked for more than 143 seconds.
[  487.140568][   T34]       Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0
[  487.143159][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  487.146592][   T34] task:kworker/u9:0    state:D stack:20856 pid:26    tgid:26    ppid:2      task_flags:0x4208160 flags:0x00004000
[  487.151648][   T34] Workqueue: ib-unreg-wq ib_unregister_work
[  487.153994][   T34] Call Trace:
[  487.155323][   T34]  <TASK>
[  487.156476][   T34]  __schedule+0x1798/0x4cc0
[  487.158622][   T34]  ? validate_chain+0x897/0x2140
[  487.160625][   T34]  ? __lock_acquire+0xab9/0xd20
[  487.162583][   T34]  ? __pfx___schedule+0x10/0x10
[  487.164523][   T34]  ? schedule+0x91/0x360
[  487.166235][   T34]  schedule+0x165/0x360
[  487.168090][   T34]  schedule_timeout+0x9a/0x270
[  487.170026][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  487.172045][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  487.174055][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  487.176150][   T34]  ? wait_for_completion+0x267/0x5d0
[  487.179464][   T34]  wait_for_completion+0x2bf/0x5d0
[  487.181540][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  487.183815][   T34]  ? remove_client_context+0x19c/0x1e0
[  487.186005][   T34]  disable_device+0x1c6/0x320
[  487.187997][   T34]  ? __pfx_disable_device+0x10/0x10
[  487.190075][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  487.192235][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  487.194318][   T34]  ib_unregister_work+0x19/0x30
[  487.196265][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  487.198804][   T34]  process_scheduled_works+0xae1/0x17b0
[  487.201059][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  487.204419][   T34]  worker_thread+0x8a0/0xda0
[  487.206357][   T34]  kthread+0x711/0x8a0
[  487.208637][   T34]  ? __pfx_worker_thread+0x10/0x10
[  487.210640][   T34]  ? __pfx_kthread+0x10/0x10
[  487.212491][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  487.214582][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  487.216677][   T34]  ? __pfx_kthread+0x10/0x10
[  487.218861][   T34]  ret_from_fork+0x3fc/0x770
[  487.220751][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  487.222800][   T34]  ? __switch_to_asm+0x39/0x70
[  487.224732][   T34]  ? __switch_to_asm+0x33/0x70
[  487.226660][   T34]  ? __pfx_kthread+0x10/0x10
[  487.229004][   T34]  ret_from_fork_asm+0x1a/0x30
[  487.231064][   T34]  </TASK>
[  487.232252][   T34] 
[  487.232252][   T34] Showing all locks held in the system:
[  487.234687][   T34] 4 locks held by kworker/u8:0/12:
[  487.236447][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  487.241254][   T34]  #1: ffffc900000f7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  487.245364][   T34]  #2: ffffffff8f527b10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  487.249183][   T34]  #3: ffff888124098700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  487.253497][   T34] 3 locks held by kworker/u9:0/26:
[  487.255171][   T34]  #0: ffff888104b9d948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  487.259245][   T34]  #1: ffffc900001efbc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  487.264440][   T34]  #2: ffff888124098700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  487.269234][   T34] 1 lock held by khungtaskd/34:
[  487.271169][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  487.274941][   T34] 2 locks held by getty/5678:
[  487.276751][   T34]  #0: ffff888104af50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  487.280763][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  487.284725][   T34] 2 locks held by syz.2.7858/24105:
[  487.286776][   T34]  #0: ffffffff8f527b10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  487.291232][   T34]  #1: ffff888124098700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  487.295628][   T34] 2 locks held by syz.3.8534/25662:
[  487.297693][   T34]  #0: ffffffff8f527b10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  487.302949][   T34]  #1: ffff888124098700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  487.308358][   T34] 2 locks held by syz.4.8691/26022:
[  487.310443][   T34]  #0: ffffffff8f527b10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  487.314143][   T34]  #1: ffff888124098700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  487.317740][   T34] 
[  487.318920][   T34] =============================================
[  487.318920][   T34] 
[  487.322208][   T34] NMI backtrace for cpu 1
[  487.322235][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  487.322252][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  487.322261][   T34] Call Trace:
[  487.322269][   T34]  <TASK>
[  487.322277][   T34]  dump_stack_lvl+0x189/0x250
[  487.322301][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  487.322319][   T34]  ? __pfx__printk+0x10/0x10
[  487.322348][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  487.322366][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  487.322382][   T34]  ? __pfx__printk+0x10/0x10
[  487.322404][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  487.322427][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  487.322445][   T34]  watchdog+0xf93/0xfe0
[  487.322468][   T34]  ? watchdog+0x1de/0xfe0
[  487.322492][   T34]  kthread+0x711/0x8a0
[  487.322511][   T34]  ? __pfx_watchdog+0x10/0x10
[  487.322529][   T34]  ? __pfx_kthread+0x10/0x10
[  487.322548][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  487.322563][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  487.322578][   T34]  ? __pfx_kthread+0x10/0x10
[  487.322594][   T34]  ret_from_fork+0x3fc/0x770
[  487.322611][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  487.322630][   T34]  ? __switch_to_asm+0x39/0x70
[  487.322647][   T34]  ? __switch_to_asm+0x33/0x70
[  487.322663][   T34]  ? __pfx_kthread+0x10/0x10
[  487.322681][   T34]  ret_from_fork_asm+0x1a/0x30
[  487.322711][   T34]  </TASK>
[  487.322717][   T34] Sending NMI from CPU 1 to CPUs 0:
[  487.381176][    C0] NMI backtrace for cpu 0
[  487.381192][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  487.381207][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  487.381216][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  487.381236][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 77 0f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  487.381248][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  487.381259][    C0] RAX: a4123ba330300100 RBX: ffffffff81968308 RCX: a4123ba330300100
[  487.381269][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b494b RDI: ffffffff8be32680
[  487.381277][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  487.381286][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa34730
[  487.381295][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  487.381303][    C0] FS:  0000000000000000(0000) GS:ffff8880b8621000(0000) knlGS:0000000000000000
[  487.381313][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  487.381321][    C0] CR2: 00005635ae278600 CR3: 0000000111a2a000 CR4: 00000000000006f0
[  487.381351][    C0] Call Trace:
[  487.381359][    C0]  <TASK>
[  487.381364][    C0]  default_idle+0x13/0x20
[  487.381381][    C0]  default_idle_call+0x74/0xb0
[  487.381400][    C0]  do_idle+0x1e8/0x510
[  487.381416][    C0]  ? __pfx_do_idle+0x10/0x10
[  487.381434][    C0]  cpu_startup_entry+0x44/0x60
[  487.381446][    C0]  rest_init+0x2de/0x300
[  487.381465][    C0]  start_kernel+0x3a9/0x410
[  487.381481][    C0]  x86_64_start_reservations+0x24/0x30
[  487.381500][    C0]  x86_64_start_kernel+0x143/0x1c0
[  487.381517][    C0]  common_startup_64+0x13e/0x147
[  487.381540][    C0]  </TASK>
[  487.382265][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  487.444265][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  487.447965][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  487.451124][   T34] Call Trace:
[  487.452416][   T34]  <TASK>
[  487.453505][   T34]  dump_stack_lvl+0x99/0x250
[  487.455192][   T34]  ? __asan_memcpy+0x40/0x70
[  487.456674][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  487.458298][   T34]  ? __pfx__printk+0x10/0x10
[  487.459833][   T34]  vpanic+0x281/0x750
[  487.461051][   T34]  ? __pfx_vpanic+0x10/0x10
[  487.462438][   T34]  ? preempt_schedule+0xae/0xc0

VM DIAGNOSIS:
00:19:55  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffffffff81aab3dd RCX=ffff88811d9e1cc0 RDX=0000000000000000
RSI=ffffffff8be32660 RDI=00007f12d098ebe9 RBP=0000000000000000 RSP=ffffc90006e570a0
R8 =0000000000000000 R9 =ffffffff81aab3dd R10=ffffc90006e57198 R11=ffffffff81ac3890
R12=ffff88811d9e1cc0 R13=0000000000000000 R14=00007f12d098ebe9 R15=1ffff92000dcae32
RIP=ffffffff81a65d89 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f12cebf66c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c35eea2 CR3=000000001c7d2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=1d1c0502ee10c2b6 fdbe7aac6d2c19e5 XMM03=c13127b5cd51a8c0 d79656f304ac95b3
XMM04=b6b1aec6f2161e85 a194b540569eae47 XMM05=71d19eebcc859b85 a5fbec3108899012
XMM06=67b71adeffd27f46 f34d0d666c589fb7 XMM07=8ee6fbf14f733bce 9784cbbc464e57fc
XMM08=0bb76df6facedb16 eaa4635002b6b1ae XMM09=0000000000000000 00007f1fba012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bd260 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=000000000007ffff RDI=0000000000080000 RBP=ffffffff99de9770 RSP=ffffc900066b67b0
R8 =ffff888020b20237 R9 =1ffff11004164046 R10=dffffc0000000000 R11=ffffffff854e7100
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e7177 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd0d70666c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2ed835 CR3=0000000111a2a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f1fba012e53
XMM06=0000000000000000 00007f1fba012e4d XMM07=0000000000000000 00007f1fba012e61
XMM08=0000000000000000 00007f1fba012ee7 XMM09=0000000000000000 00007f1fba012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
