last executing test programs:

1.513359925s ago: executing program 2 (id=4616):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}}, 0x894)

1.454290805s ago: executing program 2 (id=4618):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x8, {}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x72e1}]}, 0x3c}}, 0x0)

1.452057273s ago: executing program 2 (id=4620):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000800d00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}}, 0x0)

1.383020122s ago: executing program 2 (id=4622):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r0], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa, 0x0, 0x10000}, 0x28)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, 0x0, &(0x7f0000000040))
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000003"], 0xd0}}, 0x571f68543cec8180)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2})
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1)
sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1000000000000000010000000100000010"], 0x20}}], 0x1, 0x800)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f00000005c0)={&(0x7f0000000180)=0xffffffff, 0x8, &(0x7f0000000780)=[{}, {}], &(0x7f0000000500)})
bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1)
setsockopt$inet_opts(r8, 0x0, 0xc, &(0x7f00000000c0)="e0", 0xfed7)
getsockopt$inet_opts(r8, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b)

1.262955617s ago: executing program 0 (id=4628):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000200008409010000040000000400000001000000000000000001000009000000003000002e"], &(0x7f0000000f40)=""/4079, 0x42, 0xfef, 0x8}, 0x28)

1.153921469s ago: executing program 0 (id=4629):
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040000)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x100000000003f}}], 0x48}, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20)

1.153788399s ago: executing program 1 (id=4630):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000019000100000000000000000080202002ff040005000000000c0009"], 0x28}}, 0x0)

1.093861389s ago: executing program 1 (id=4631):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
accept$inet(r0, &(0x7f0000000000), 0x0)

1.031644121s ago: executing program 0 (id=4632):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
r1 = socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
r4 = socket(0x11, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', <r5=>0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}})
connect$can_bcm(r4, &(0x7f00000006c0)={0x1d, r5}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c2500000000002020"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_emit_ethernet(0xd4, &(0x7f0000000340)={@multicast, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x4, 0x6, "ecaa25", 0x9a, 0x29, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], "f77f527c45266c967dbf9e6d4334de8d27a4ab6a41a6b7c1f93b382c581e8432255362b3fdca226a31a9d23c070bbc65de68e16486cf29397810ba064a49c2d7093cd9b1fe0dc0899290b13a96f1bdd67de0acbfe988186f9a9f734fc22d90c16e4a723c4c03f9a84c59d29e981a0a1575f5ddd12e1d6b67e0dc5eb7d3fa2885909cdb77c8e0c08ed4f3c7b9ef10f7ae0869816d7781ef0beaf7"}}}}}, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000)
socket$inet(0x2, 0xa, 0x8)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})

974.621439ms ago: executing program 1 (id=4633):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0)

923.854367ms ago: executing program 2 (id=4634):
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0)
connect$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x6}}, 0x10)

875.296944ms ago: executing program 1 (id=4635):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="3e00330030000400ffffffffffff080211"], 0x5c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004)

875.039789ms ago: executing program 1 (id=4636):
unshare(0x8000400)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x82001, 0x0)
sendfile(r0, r0, 0x0, 0x40)

867.089245ms ago: executing program 1 (id=4637):
socket(0x10, 0x803, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
r0 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="10000000000000002900000443000000"], 0x10}}], 0x1, 0x4000000) (async)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24)
listen(r1, 0x1)
recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {&(0x7f0000002340)=""/68, 0x44}], 0x2}, 0x8}], 0x1, 0x60, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)

94.253545ms ago: executing program 0 (id=4638):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r1)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, r2, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "53e0e85290ceb080fb816d3cdadf198b"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, r2, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "53e0e85290ceb080fb816d3cdadf198b"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x8000000ffffffff)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x7, 0x0) (async)
splice(r3, 0x0, r5, 0x0, 0x7, 0x0)
getsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000100)={@dev, @loopback}, &(0x7f0000000140)=0xc)
shutdown(r4, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)

1.812611ms ago: executing program 0 (id=4639):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="627f0000ad97588d01c04c590d56cb1825e37ea1e78e8c3138ab6cdc3a554580bd5d555894971555374c9ffdde854b195718ce4ac43739fbc502465b95e943e5cb52b6b4e42d16fa5040919faaf3afdceeb13d78dc7ffa4b91f733f758923043d6f9cdc23422aa9c769b972d49de202965a75df8b95e55476d070a9b6afdd375ee6ca5440975781d7132d89bb9da59f625092a4bf259d044ae9e2b74cb3e77cdf0ea3d9363a8f2a5d2bca9dd424614c074ed7b676b5e459c7ed754d3", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f6873720000000008000300030000000800038004000380"], 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004)

671.386µs ago: executing program 2 (id=4640):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r1=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x91, 0x0, 0x0, @loopback, @multicast1}}}}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffcc3, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b7358fd}, 0x8050) (async)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$MRT(r3, 0x0, 0xce, 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'syztnl0\x00', r1, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x42, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b16000000000000000002008008400004800c000180080001006f0030000180080001006e61742fa2250a8b217d620024000280080000e7a8f20000080006400000001c5fef200900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00000000000000000000000000b7921a9fac593edc8d8864d8cf42f62ee2b892605be5ea0c34ad1dabba5fb340960fc57a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async)
socket(0x2b, 0x1, 0x1) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x240041c0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="43190300000000fa65ae8ad20c91616650140012800b0001006d710500000000", @ANYRES32=r7, @ANYBLOB="050d1100e9f386dec9956f81a39fecd2f993d3010008000023107af808a0"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r8, &(0x7f00000000c0), 0x12) (async)
close(r8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r8, @ANYRES8=0x0, @ANYRESDEC=r6, @ANYBLOB="ca328d0ae694de89ee5e3b31e490ab54b3aae6eb2f138c3b4087da65815294c7a8247d05f66aef58045eddab780a521393963b80232e4390e424894d00e11f63a661214923f866b4c4168ab13b982160d7216be0dc55ff16e08d35f6e7f15fa4d3d746498c3c670942ae4fb17c95affb55356080d5be1120c513aea6b06823784d2c3d67f44546714f1c8702f1104d04b2cd725edb5601f049dcb1a47c924ca3c5462d11621bb54152d55be15919cafb8d9f3345c7a0f7ee"], 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x240480c1) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x100010, r2, 0xffffb000) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000640)=0x10) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) (async)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x3}, &(0x7f00000002c0)=0x8) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)

0s ago: executing program 0 (id=4641):
socket(0xa, 0x3, 0x3a)
socket(0xa, 0x3, 0x3a)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x840)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r0], 0x54}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@null, 0xd, 'bridge_slave_0\x00'})
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x840)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r2], 0x54}}, 0x0)
socket(0xa, 0x3, 0x3a) (async)
socket(0xa, 0x3, 0x3a) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, 0x0, 0x840) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r0], 0x54}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@null, 0xd, 'bridge_slave_0\x00'}) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r3, 0x0, 0x840) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r2], 0x54}}, 0x0) (async)

0s ago: executing program 1 (id=4642):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x20040810)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
socket$kcm(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="220000000400000010000000", @ANYRES64=r1], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18070000001f00000000000000800000851000000300000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007b000000008500000013000000996e600526c1d696"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)=';', 0x1}], 0x1, 0x0)
r4 = socket$inet(0x2, 0x5, 0x82)
bind$inet(r4, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0xe06, 0xfffffffffffffffe}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x2, 0x2}, {{@in6=@mcast2, 0x4d6, 0x2b}, 0x0, @in=@empty, 0x1000, 0x0, 0x1, 0x20, 0x0, 0x0, 0x10000}}, 0xe8)
r6 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x10}}, 0x8041)
sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close(r5)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000010000000e00000020000000000000000000000006401010200000000000000000000000000000000000000000a00005f80060000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000000000000000000000000001910be1a000000000000000000000000000000000000000008000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e000000000100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x2000})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36810' (ED25519) to the list of known hosts.
syzkaller login: [   41.749530][ T5515] cgroup: Unknown subsys name 'net'
[   41.834758][ T5515] cgroup: Unknown subsys name 'cpuset'
[   41.839943][ T5515] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.248861][ T5515] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.599293][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.600483][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.600774][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.602976][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.603661][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.660528][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.667869][ T5590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.670521][ T5590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.674004][ T5590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.674212][ T5590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.677344][ T5590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.686223][ T5590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.686407][ T5600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.688547][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.688926][ T5600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   48.170596][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.175025][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.175985][ T5589] bridge_slave_0: entered allmulticast mode
[   48.185499][ T5589] bridge_slave_0: entered promiscuous mode
[   48.220701][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.224130][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.227450][ T5589] bridge_slave_1: entered allmulticast mode
[   48.231613][ T5589] bridge_slave_1: entered promiscuous mode
[   48.303142][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.309862][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.353659][ T5589] team0: Port device team_slave_0 added
[   48.358795][ T5589] team0: Port device team_slave_1 added
[   48.402364][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.402410][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.402446][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.420445][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.420455][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.420465][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.442053][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.442125][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.442318][ T5596] bridge_slave_0: entered allmulticast mode
[   48.443503][ T5596] bridge_slave_0: entered promiscuous mode
[   48.445037][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.445075][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.445126][ T5596] bridge_slave_1: entered allmulticast mode
[   48.446303][ T5596] bridge_slave_1: entered promiscuous mode
[   48.495699][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.499812][ T5589] hsr_slave_0: entered promiscuous mode
[   48.501405][ T5589] hsr_slave_1: entered promiscuous mode
[   48.510113][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.549795][ T5596] team0: Port device team_slave_0 added
[   48.569304][ T5596] team0: Port device team_slave_1 added
[   48.578412][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.578523][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.578620][ T5597] bridge_slave_0: entered allmulticast mode
[   48.579322][ T5597] bridge_slave_0: entered promiscuous mode
[   48.587308][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.587352][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.587537][ T5597] bridge_slave_1: entered allmulticast mode
[   48.588375][ T5597] bridge_slave_1: entered promiscuous mode
[   48.615072][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.615116][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.615849][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.616861][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.616867][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.616876][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.629546][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.632972][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.658788][ T5597] team0: Port device team_slave_0 added
[   48.663975][ T5596] hsr_slave_0: entered promiscuous mode
[   48.664523][ T5596] hsr_slave_1: entered promiscuous mode
[   48.664899][ T5596] debugfs: 'hsr0' already exists in 'hsr'
[   48.664941][ T5596] Cannot create hsr debugfs directory
[   48.681825][ T5597] team0: Port device team_slave_1 added
[   48.734990][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.735035][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.735073][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.735975][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.735982][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.735991][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.804096][ T5597] hsr_slave_0: entered promiscuous mode
[   48.804882][ T5597] hsr_slave_1: entered promiscuous mode
[   48.805351][ T5597] debugfs: 'hsr0' already exists in 'hsr'
[   48.805365][ T5597] Cannot create hsr debugfs directory
[   49.018825][ T5589] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   49.035269][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.052777][ T5589] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   49.060131][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.064946][ T5589] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   49.074263][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.087018][ T5589] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   49.094299][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.161548][ T5596] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   49.170479][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.172514][ T5596] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   49.176750][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.187887][ T5596] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   49.193673][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.194088][ T5596] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   49.197627][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.257179][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   49.263608][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.269103][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   49.273569][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.273960][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   49.277396][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.281583][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   49.286155][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.330021][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.354583][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.363825][ T5589] 8021q: adding VLAN 0 to HW filter on device team0
[   49.374837][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.374919][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.386928][ T5596] 8021q: adding VLAN 0 to HW filter on device team0
[   49.396161][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.396262][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.408277][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.408401][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.429261][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.429383][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.480079][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.521812][ T5597] 8021q: adding VLAN 0 to HW filter on device team0
[   49.535002][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.535121][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.546857][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.546974][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.663519][ T5602] Bluetooth: hci0: command tx timeout
[   49.742837][ T5602] Bluetooth: hci2: command tx timeout
[   49.752508][ T5602] Bluetooth: hci1: command tx timeout
[   49.878505][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.908440][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.940631][ T5589] veth0_vlan: entered promiscuous mode
[   49.960841][ T5589] veth1_vlan: entered promiscuous mode
[   49.966593][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.975033][ T5596] veth0_vlan: entered promiscuous mode
[   49.987284][ T5596] veth1_vlan: entered promiscuous mode
[   50.025537][ T5589] veth0_macvtap: entered promiscuous mode
[   50.035750][ T5597] veth0_vlan: entered promiscuous mode
[   50.050540][ T5597] veth1_vlan: entered promiscuous mode
[   50.060628][ T5589] veth1_macvtap: entered promiscuous mode
[   50.068433][ T5596] veth0_macvtap: entered promiscuous mode
[   50.077513][ T5596] veth1_macvtap: entered promiscuous mode
[   50.085914][ T5597] veth0_macvtap: entered promiscuous mode
[   50.087920][ T5597] veth1_macvtap: entered promiscuous mode
[   50.098610][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.108075][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.109618][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.119822][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.124119][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.125762][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.273108][ T5650] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.278801][ T5650] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.307293][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.307345][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.325299][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.325743][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.334924][ T5650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.335724][ T5650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.335792][ T5650] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.335834][ T5650] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.352745][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.352799][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.380920][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.381037][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.392129][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.392178][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.431868][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.431918][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.441756][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.446251][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.446280][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.446299][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.446318][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.446337][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.479067][ T5589] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   50.683904][ T5712] xt_hashlimit: overflow, try lower: 18446744073709551614/255
[   51.369380][ T5768] warning: `syz.2.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   51.509248][ T5782] netlink: Conntrack attr has 4 unknown bytes
[   51.511885][ T5782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   51.588002][ T5787] pimreg: entered allmulticast mode
[   51.594377][ T5787] pimreg: left allmulticast mode
[   51.735380][ T5797] tipc: Started in network mode
[   51.735436][ T5797] tipc: Node identity a669f04c780a, cluster identity 4711
[   51.737372][ T5797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.737670][ T5797] syzkaller0: entered promiscuous mode
[   51.737678][ T5797] syzkaller0: entered allmulticast mode
[   51.743741][ T4990] Bluetooth: hci0: command tx timeout
[   51.757534][ T5797] tipc: Resetting bearer <eth:syzkaller0>
[   51.760696][ T5796] tipc: Resetting bearer <eth:syzkaller0>
[   51.769473][ T5796] tipc: Disabling bearer <eth:syzkaller0>
[   51.822100][ T4990] Bluetooth: hci1: command tx timeout
[   51.822153][ T4990] Bluetooth: hci2: command tx timeout
[   52.027345][ T5815] netlink: 36 bytes leftover after parsing attributes in process `syz.2.54'.
[   52.027398][ T5815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'.
[   52.248216][ T5837] syzkaller0: entered promiscuous mode
[   52.250578][ T5837] syzkaller0: entered allmulticast mode
[   53.219422][ T5859] tun0: tun_chr_ioctl cmd 1074025677
[   53.223453][ T5859] tun0: linktype set to 0
[   53.393561][ T5911] bridge0: port 3(bond0) entered blocking state
[   53.393962][ T5911] bridge0: port 3(bond0) entered disabled state
[   53.394224][ T5911] bond0: entered allmulticast mode
[   53.394259][ T5911] bond_slave_0: entered allmulticast mode
[   53.394348][ T5911] bond_slave_1: entered allmulticast mode
[   53.402519][ T5911] bond0: entered promiscuous mode
[   53.402535][ T5911] bond_slave_0: entered promiscuous mode
[   53.402660][ T5911] bond_slave_1: entered promiscuous mode
[   53.406134][ T5911] bridge0: port 3(bond0) entered blocking state
[   53.406495][ T5911] bridge0: port 3(bond0) entered forwarding state
[   53.529314][   T29] IPVS: starting estimator thread 0...
[   53.539257][ T5926] netlink: 'syz.0.72': attribute type 10 has an invalid length.
[   53.550810][ T5926] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   53.553365][ T5926] team0: Port device netdevsim1 added
[   53.555940][ T5926] netlink: 'syz.0.72': attribute type 10 has an invalid length.
[   53.564528][ T5926] team0: Port device netdevsim1 removed
[   53.565284][ T5926] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   53.566197][ T5926] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[   53.566266][ T5926] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[   53.566569][ T5926] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[   53.631457][ T5924] IPVS: using max 86 ests per chain, 206400 per kthread
[   53.631797][ T5930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.74'.
[   53.641621][ T5930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.74'.
[   53.645241][ T5930] netlink: 'syz.2.74': attribute type 32 has an invalid length.
[   53.645255][ T5930] netlink: 500 bytes leftover after parsing attributes in process `syz.2.74'.
[   53.795279][ T5946] netlink: 'syz.2.82': attribute type 4 has an invalid length.
[   53.795328][ T5946] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.82'.
[   53.823879][ T5948] Zero length message leads to an empty skb
[   53.831995][ T5602] Bluetooth: hci0: command tx timeout
[   53.901713][ T5602] Bluetooth: hci2: command tx timeout
[   53.901762][ T5602] Bluetooth: hci1: command tx timeout
[   54.088673][ T5970] syz.0.93 uses obsolete (PF_INET,SOCK_PACKET)
[   54.187189][ T5978] ip_tables: iptables: counters copy to user failed while replacing table
[   54.300432][ T5988] netlink: 27 bytes leftover after parsing attributes in process `syz.2.102'.
[   54.915060][ T6027] syzkaller1: tun_chr_ioctl cmd 1074812117
[   54.983200][ T6032] netlink: 36 bytes leftover after parsing attributes in process `syz.1.122'.
[   55.235553][ T6054] netlink: 'syz.2.133': attribute type 13 has an invalid length.
[   55.235604][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'.
[   55.298197][ T6060] syzkaller0: entered promiscuous mode
[   55.298264][ T6060] syzkaller0: entered allmulticast mode
[   55.302098][ T6060] tipc: Started in network mode
[   55.302113][ T6060] tipc: Node identity 86e6816a5df9, cluster identity 4711
[   55.302308][ T6060] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.304212][ T6060] tipc: Resetting bearer <eth:syzkaller0>
[   55.436172][ T6059] tipc: Resetting bearer <eth:syzkaller0>
[   55.445450][ T6059] tipc: Disabling bearer <eth:syzkaller0>
[   55.506658][ T6069] netlink: 'syz.1.140': attribute type 96 has an invalid length.
[   55.543346][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.142'.
[   55.645219][ T6080] netlink: 'syz.1.146': attribute type 3 has an invalid length.
[   55.901431][ T5602] Bluetooth: hci0: command tx timeout
[   55.981106][ T5602] Bluetooth: hci1: command tx timeout
[   55.991328][ T5602] Bluetooth: hci2: command tx timeout
[   57.227612][ T6148] netlink: 'syz.1.178': attribute type 39 has an invalid length.
[   57.292150][ T6152] netlink: 'syz.0.180': attribute type 3 has an invalid length.
[   57.295778][ T6152] netlink: 'syz.0.180': attribute type 3 has an invalid length.
[   57.566223][ T6081] Set syz1 is full, maxelem 65536 reached
[   57.580028][ T6166] Illegal XDP return value 4294967283 on prog  (id 38) dev N/A, expect packet loss!
[   57.974089][ T6190] xt_hashlimit: size too large, truncated to 1048576
[   58.739760][ T6218] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   58.991348][ T6231] syzkaller0: entered promiscuous mode
[   58.993863][ T6231] syzkaller0: entered allmulticast mode
[   59.252803][ T6255] netlink: 36 bytes leftover after parsing attributes in process `syz.2.226'.
[   59.667732][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[   59.969691][ T6314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.979324][ T6314] syzkaller0: entered promiscuous mode
[   59.982780][ T6314] syzkaller0: entered allmulticast mode
[   60.009067][ T6314] tipc: Resetting bearer <eth:syzkaller0>
[   60.015484][ T6313] tipc: Resetting bearer <eth:syzkaller0>
[   60.045331][ T6313] tipc: Disabling bearer <eth:syzkaller0>
[   60.116022][ T6323] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.246701][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'.
[   60.250488][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'.
[   60.338725][ T6338] ip_tables: iptables: counters copy to user failed while replacing table
[   60.350067][ T6340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.267'.
[   60.360223][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'.
[   60.493445][ T6349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'.
[   60.660631][ T6355] netlink: 'syz.2.273': attribute type 23 has an invalid length.
[   60.664230][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'.
[   61.735320][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'.
[   61.786479][ T6387] syz_tun: entered allmulticast mode
[   61.808933][ T6387] syz_tun (unregistering): left allmulticast mode
[   62.033238][ T6407] netlink: 'syz.1.297': attribute type 2 has an invalid length.
[   62.033274][ T6407] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.297'.
[   62.822744][ T6463] netlink: NAT attribute has 4 unknown bytes
[   62.822797][ T6463] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.846361][ T6465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.886745][ T6465] syzkaller0: entered promiscuous mode
[   62.889031][ T6465] syzkaller0: entered allmulticast mode
[   62.891629][ T6465] tipc: Resetting bearer <eth:syzkaller0>
[   62.902482][ T6464] tipc: Resetting bearer <eth:syzkaller0>
[   63.654729][ T6464] tipc: Disabling bearer <eth:syzkaller0>
[   64.487331][ T6551] __nla_validate_parse: 4 callbacks suppressed
[   64.487719][ T6551] netlink: 76 bytes leftover after parsing attributes in process `syz.0.363'.
[   64.487729][ T6551] nbd: illegal input index -1721480071
[   64.688632][ T6572] netlink: 'syz.2.374': attribute type 8 has an invalid length.
[   64.691963][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'.
[   64.887380][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[   64.932422][ T6592] gtp0: entered promiscuous mode
[   64.932484][ T6592] gtp0: entered allmulticast mode
[   65.049834][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'.
[   65.049873][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'.
[   65.165756][ T6612] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   65.341606][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.402'.
[   65.344696][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.402'.
[   66.266517][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.408'.
[   67.423459][ T6663] bond1 (unregistering): Released all slaves
[   68.227418][ T6747] tap0: tun_chr_ioctl cmd 2147767520
[   69.672455][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'.
[   69.820649][ T6810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.485'.
[   69.828293][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   69.828361][ T5650] syzkaller0: tun_net_xmit 76
[   69.829337][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   69.829352][ T5650] syzkaller0: tun_net_xmit 48
[   69.846471][ T6810] syzkaller0: create flow: hash 2690332544 index 0
[   69.902184][ T6810] syzkaller0 (unregistered): delete flow: hash 2690332544 index 0
[   69.935517][ T6812] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   71.665578][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[   71.665682][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[   71.977885][ T6822] af_packet: packet size is too long (100663297 > 72)
[   72.046311][ T6826] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   72.218337][ T6830] netlink: Invalid conntrack helper
[   72.220697][ T6830] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.380775][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.500'.
[   72.501561][ T6795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   72.720750][ T6862] The dccp option matching is deprecated and scheduled to be removed in 2027.
[   72.720750][ T6862] Please contact the netfilter-devel mailing list or update your nftables rules.
[   72.853280][ T6872] netlink: 'syz.1.516': attribute type 10 has an invalid length.
[   72.857879][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'.
[   72.885859][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'.
[   72.911360][ T6874] ip6gre1: entered promiscuous mode
[   72.911413][ T6874] ip6gre1: entered allmulticast mode
[   73.428289][ T6916] openvswitch: netlink: IP tunnel dst address not specified
[   73.428344][ T6916] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.758643][ T6947] netlink: 'syz.2.553': attribute type 2 has an invalid length.
[   73.758679][ T6947] netlink: 224 bytes leftover after parsing attributes in process `syz.2.553'.
[   73.769812][ T6947] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   73.815025][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'.
[   73.904719][ T6963] netlink: 'syz.2.559': attribute type 13 has an invalid length.
[   73.904775][ T6963] netlink: 'syz.2.559': attribute type 17 has an invalid length.
[   73.910117][ T6955] bond1: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms
[   73.910141][ T6955] bond1: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms
[   73.912508][ T6955] bond1: entered allmulticast mode
[   73.913981][ T6955] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.929991][ T6963] gretap0: refused to change device tx_queue_len
[   73.930187][ T6963] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   74.020659][ T6971] netlink: 68 bytes leftover after parsing attributes in process `syz.0.562'.
[   74.048974][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'.
[   74.102724][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.567'.
[   76.808169][    T9] cfg80211: failed to load regulatory.db
[   76.904715][ T7071] ip_tables: iptables: counters copy to user failed while replacing table
[   76.980319][ T7077] __nla_validate_parse: 2 callbacks suppressed
[   76.982585][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'.
[   76.985800][ T7077] nbd: couldn't find a device at index 65546
[   78.830614][ T7112] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   78.836099][ T7112] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   78.836119][ T7112] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   78.847041][ T7112] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   78.860045][ T7112] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   78.969907][ T7119] syzkaller1: entered promiscuous mode
[   78.969957][ T7119] syzkaller1: entered allmulticast mode
[   79.148432][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'.
[   79.158339][ T7134] bond1: option lacp_active: invalid value (5)
[   79.162547][ T7134] bond1 (unregistering): Released all slaves
[   79.283185][ T7141] ip_tables: iptables: counters copy to user failed while replacing table
[   79.457661][ T7155] veth0: entered promiscuous mode
[   79.460296][ T7153] veth0: left promiscuous mode
[   79.545211][ T7163] ip_tables: iptables: counters copy to user failed while replacing table
[   79.917783][ T7193] netlink: 60 bytes leftover after parsing attributes in process `syz.0.662'.
[   79.923773][ T7193] unsupported nlmsg_type 40
[   80.196538][ T7215] netlink: 68 bytes leftover after parsing attributes in process `syz.0.674'.
[   81.293937][ T7282] netlink: 100 bytes leftover after parsing attributes in process `syz.2.703'.
[   81.299407][ T7282] netlink: 239 bytes leftover after parsing attributes in process `syz.2.703'.
[   81.347358][ T7280] netlink: zone id is out of range
[   81.347401][ T7280] netlink: zone id is out of range
[   81.347452][ T7280] netlink: zone id is out of range
[   81.347478][ T7280] netlink: zone id is out of range
[   81.347505][ T7280] netlink: zone id is out of range
[   81.347531][ T7280] netlink: zone id is out of range
[   81.347558][ T7280] netlink: zone id is out of range
[   81.605490][ T7302] netlink: 'syz.2.712': attribute type 10 has an invalid length.
[   81.605554][ T7302] netlink: 2 bytes leftover after parsing attributes in process `syz.2.712'.
[   81.619523][ T7302] team0: Device wg2 is of different type
[   81.826291][ T7314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.718'.
[   81.896232][ T7318] netlink: 48 bytes leftover after parsing attributes in process `syz.0.721'.
[   81.921535][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.718'.
[   82.187908][ T7333] syzkaller0: entered promiscuous mode
[   82.190735][ T7333] syzkaller0: entered allmulticast mode
[   82.455405][ T7348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.735'.
[   82.455479][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'.
[   83.893469][ T7430] netlink: 'syz.2.768': attribute type 1 has an invalid length.
[   83.940559][ T7430] veth3: entered allmulticast mode
[   83.977526][ T7437] bond2: (slave veth0_to_bond): making interface the new active one
[   83.981143][ T7437] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   83.999633][ T7437] macvlan2: entered promiscuous mode
[   84.003496][ T7437] macvlan2: entered allmulticast mode
[   84.006496][ T7437] bond2: entered promiscuous mode
[   84.006564][ T7437] veth0_to_bond: entered promiscuous mode
[   84.015031][ T7437] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   84.018343][ T7437] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   84.026011][ T7437] bond2: left promiscuous mode
[   84.029076][ T7437] veth0_to_bond: left promiscuous mode
[   87.153051][ T7437] syz.2.768 (7437) used greatest stack depth: 20192 bytes left
[   87.489069][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'.
[   87.640017][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'.
[   87.640071][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'.
[   87.640127][ T7517] netlink: 140 bytes leftover after parsing attributes in process `syz.1.786'.
[   88.083926][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'.
[   88.146647][ T7555] IPv6: NLM_F_CREATE should be specified when creating new route
[   88.150203][ T7555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   88.150267][ T7555] IPv6: NLM_F_CREATE should be set when creating new route
[   88.150316][ T7555] IPv6: NLM_F_CREATE should be set when creating new route
[   88.150354][ T7555] IPv6: NLM_F_CREATE should be set when creating new route
[   88.857932][ T7569] netlink: 144 bytes leftover after parsing attributes in process `syz.0.810'.
[   93.456362][    T9] hid-generic 0005:0008:0009.0001: item fetching failed at offset 2/3
[   93.457054][    T9] hid-generic 0005:0008:0009.0001: probe with driver hid-generic failed with error -22
[   93.734790][ T7672] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   93.991829][ T7688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'.
[   93.991904][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.854'.
[   94.489567][ T7715] tipc: Started in network mode
[   94.489751][ T7715] tipc: Node identity 70000000, cluster identity 4711
[   94.490141][ T7715] tipc: Node number set to 1879048192
[   94.494009][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.867'.
[   94.506147][   T57] block nbd0: Receive control failed (result -1)
[   95.386416][ T7751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.882'.
[   95.393065][ T7751] netlink: 76 bytes leftover after parsing attributes in process `syz.1.882'.
[   95.393263][ T7751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.882'.
[   95.832554][ T7756] tipc: Subscription rejected, illegal request
[   96.094410][ T7766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.886'.
[   96.236081][ T7782] netlink: 224 bytes leftover after parsing attributes in process `syz.1.892'.
[   96.427604][ T7800] net_ratelimit: 7 callbacks suppressed
[   96.430341][ T7800] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   96.449821][ T7800] syzkaller1: entered promiscuous mode
[   96.451884][ T7800] syzkaller1: entered allmulticast mode
[   97.283339][ T7887] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.307118][ T7889] netlink: 179624 bytes leftover after parsing attributes in process `syz.0.937'.
[   97.740701][ T7904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.977300][ T7910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.947'.
[   98.418323][ T7959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.533387][ T7969] syzkaller0: entered promiscuous mode
[   98.536433][ T7969] syzkaller0: entered allmulticast mode
[   98.837809][ T7994] netlink: 'syz.2.986': attribute type 1 has an invalid length.
[   98.928311][ T8002] team0: Port device team_slave_0 removed
[   99.596310][ T8036] syzkaller0: entered promiscuous mode
[   99.596366][ T8036] syzkaller0: entered allmulticast mode
[   99.826800][ T8050] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[   99.905196][ T8058] geneve2: entered promiscuous mode
[   99.907294][ T8058] geneve2: entered allmulticast mode
[  100.017239][ T8067] __nla_validate_parse: 4 callbacks suppressed
[  100.019742][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1021'.
[  100.053315][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1022'.
[  100.056497][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'.
[  100.115463][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'.
[  100.115534][ T8078] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1025'.
[  100.398968][ T8088] openvswitch: netlink: Key 3 has unexpected len 2 expected 4
[  100.490357][ T8103] netlink: 'syz.0.1037': attribute type 1 has an invalid length.
[  100.490420][ T8103] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1037'.
[  100.490478][ T8103] netlink: 'syz.0.1037': attribute type 1 has an invalid length.
[  100.540246][ T8105] syzkaller0: entered promiscuous mode
[  100.540297][ T8105] syzkaller0: entered allmulticast mode
[  100.753791][ T5602] Bluetooth: hci2: link tx timeout
[  100.757952][ T5602] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  101.344596][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'.
[  102.399965][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'.
[  102.405532][ T8177] syzkaller0: entered promiscuous mode
[  102.405613][ T8177] syzkaller0: entered allmulticast mode
[  102.418722][ T8177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.447399][ T8177] tipc: Resetting bearer <eth:syzkaller0>
[  102.702390][ T8176] tipc: Resetting bearer <eth:syzkaller0>
[  102.756440][ T8176] tipc: Disabling bearer <eth:syzkaller0>
[  102.791376][ T4990] Bluetooth: hci2: command 0x0406 tx timeout
[  103.083115][ T8216] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  103.126390][ T8218] netlink: 'syz.2.1089': attribute type 1 has an invalid length.
[  103.126459][ T8218] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1089'.
[  103.126505][ T8218] netlink: 'syz.2.1089': attribute type 1 has an invalid length.
[  104.188216][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'.
[  104.260725][ T8278] netlink: 'syz.2.1101': attribute type 1 has an invalid length.
[  105.439478][ T8329] __nla_validate_parse: 1 callbacks suppressed
[  105.442660][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'.
[  105.862159][ T8357] sctp: [Deprecated]: syz.2.1137 (pid 8357) Use of struct sctp_assoc_value in delayed_ack socket option.
[  105.862159][ T8357] Use struct sctp_sack_info instead
[  105.937757][ T8360] tipc: Enabled bearer <eth:syzkaller0>, priority 1
[  105.942792][ T8358] tipc: Resetting bearer <eth:syzkaller0>
[  105.972659][ T8358] tipc: Disabling bearer <eth:syzkaller0>
[  106.016593][ T8365] netlink: 'syz.2.1141': attribute type 1 has an invalid length.
[  106.020547][ T8365] netlink: 'syz.2.1141': attribute type 2 has an invalid length.
[  106.026064][ T8365] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1141'.
[  106.890134][ T8416] openvswitch: netlink: Message has 8 unknown bytes.
[  106.894959][ T8416] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.070829][ T8440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.085440][ T8440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.753892][ T8471] netlink: 'syz.2.1190': attribute type 3 has an invalid length.
[  107.753964][ T8471] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.1190'.
[  107.844949][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'.
[  107.965711][ T8482] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.004999][ T8482] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  108.083670][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1201'.
[  108.088994][ T8495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.092807][ T8495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.095793][ T8495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.099295][ T8495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.144357][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.219915][ T8499] 8021q: adding VLAN 0 to HW filter on device bond2
[  108.275640][ T8511] bridge_slave_0: left allmulticast mode
[  108.277721][ T8511] bridge_slave_0: left promiscuous mode
[  108.281594][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.294447][ T8511] bridge_slave_1: left allmulticast mode
[  108.296874][ T8511] bridge_slave_1: left promiscuous mode
[  108.299525][ T8511] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.305832][ T8511] bond2: (slave veth0_to_bond): Releasing active interface
[  108.314246][ T8511] bond0: (slave bond_slave_0): Releasing backup interface
[  108.319897][ T8511] bond0: (slave bond_slave_1): Releasing backup interface
[  108.332937][ T8511] team0: Port device team_slave_0 removed
[  108.338352][ T8511] team0: Port device team_slave_1 removed
[  108.343955][ T8511] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.346535][ T8511] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.357204][ T8511] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.357244][ T8511] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.367749][ T8513] team0: Mode changed to "roundrobin"
[  108.414574][ T8511] vlan0: entered promiscuous mode
[  108.424690][ T8511] team0: Port device vlan0 added
[  108.431403][ T8511] tipc: Enabled bearer <eth:team0>, priority 0
[  109.072593][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1226'.
[  109.667880][    T9] tipc: Node number set to 3731091532
[  110.019260][ T8578] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  110.089539][ T8586] bridge0: port 3(bond0) entered disabled state
[  110.089750][ T8586] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.090811][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.169964][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.204530][ T5547] hid-generic 0005:0458:1010.0002: item fetching failed at offset 0/1
[  110.206441][ T5547] hid-generic 0005:0458:1010.0002: probe with driver hid-generic failed with error -22
[  110.236835][ T8598] netlink: 'syz.2.1242': attribute type 5 has an invalid length.
[  111.064911][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'.
[  111.113800][ T5602] Bluetooth: hci0: connection err: -111
[  111.898187][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'.
[  112.444131][ T8771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1325'.
[  112.523689][ T8771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1325'.
[  112.773101][ T8807] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1340'.
[  112.934205][ T8828] netlink: 'syz.0.1349': attribute type 12 has an invalid length.
[  113.050582][ T8838] netlink: 'syz.1.1355': attribute type 1 has an invalid length.
[  113.050629][ T8838] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1355'.
[  113.336636][ T8869] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1370'.
[  113.523246][ T8880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1373'.
[  113.527302][ T8880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1373'.
[  113.531857][ T8880] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1373'.
[  113.778898][ T8898] net_ratelimit: 15 callbacks suppressed
[  113.782605][ T8898] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  113.902605][ T1104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.902666][ T1104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.902713][ T1104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.902751][ T1104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.451278][ T8942] xt_hashlimit: size too large, truncated to 1048576
[  114.655204][ T8954] netlink: 'syz.1.1407': attribute type 2 has an invalid length.
[  114.896043][ T8968] block nbd1: server does not support multiple connections per device.
[  114.897323][ T8968] block nbd1: shutting down sockets
[  115.568251][ T8959] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  115.749090][ T9023] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  115.754807][ T9023] SET target dimension over the limit!
[  116.237192][ T9070] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  116.685190][ T9099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  116.685248][ T9099] IPv6: NLM_F_CREATE should be set when creating new route
[  116.685314][ T9099] IPv6: NLM_F_CREATE should be set when creating new route
[  116.782852][ T5602] Bluetooth: hci0: command 0x0401 tx timeout
[  117.022602][ T9127] __nla_validate_parse: 2 callbacks suppressed
[  117.022885][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'.
[  117.196726][ T9143] netlink: 'syz.0.1497': attribute type 29 has an invalid length.
[  117.537596][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'.
[  117.537805][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'.
[  117.585065][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'.
[  117.589342][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'.
[  118.035058][ T9185] netlink: 'syz.2.1514': attribute type 4 has an invalid length.
[  118.171857][ T9159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  118.294419][ T9199] netlink: 'syz.1.1522': attribute type 1 has an invalid length.
[  118.335427][ T9205] ieee802154 phy0 wpan0: encryption failed: -22
[  118.382486][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.400455][ T9212] netlink: 'syz.0.1527': attribute type 1 has an invalid length.
[  118.400506][ T9212] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1527'.
[  118.586700][ T9230] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  118.586755][ T9230] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  118.601151][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1537'.
[  118.608928][ T9233] veth1_macvtap: left promiscuous mode
[  118.748687][ T9247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1543'.
[  118.942559][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.942617][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.942673][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.943762][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.447827][ T9294] netlink: 'syz.0.1564': attribute type 10 has an invalid length.
[  119.451672][ T9294] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1564'.
[  119.455682][ T9294] dummy0: entered promiscuous mode
[  119.458507][ T9294] bridge0: port 4(dummy0) entered blocking state
[  119.461209][ T9294] bridge0: port 4(dummy0) entered disabled state
[  119.463841][ T9294] dummy0: entered allmulticast mode
[  122.072530][ T9277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  122.320231][ T9315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.321501][ T9315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.321610][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.327476][ T9315] geneve0: entered promiscuous mode
[  122.451294][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'.
[  122.506109][ T9323] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1577'.
[  122.506165][ T9323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1577'.
[  122.506223][ T9323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1577'.
[  122.740012][ T9337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1584'.
[  123.093283][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'.
[  123.187986][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'.
[  123.241251][ T9371] syzkaller0: entered promiscuous mode
[  123.241331][ T9371] syzkaller0: entered allmulticast mode
[  123.252855][ T9371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.258172][ T9370] tipc: Resetting bearer <eth:syzkaller0>
[  123.305224][ T9370] tipc: Disabling bearer <eth:syzkaller0>
[  123.452746][ T9385] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[  123.452795][ T9385] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  123.461098][ T9385] bond1: entered allmulticast mode
[  123.557505][ T9396] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1612'.
[  123.617716][ T9404] netlink: zone id is out of range
[  123.622065][ T9404] netlink: zone id is out of range
[  123.622111][ T9404] netlink: zone id is out of range
[  124.128253][ T9450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'.
[  124.128329][ T9450] netlink: 'syz.1.1636': attribute type 7 has an invalid length.
[  124.128355][ T9450] netlink: 'syz.1.1636': attribute type 8 has an invalid length.
[  124.128377][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'.
[  124.145751][   T64] net_ratelimit: 5 callbacks suppressed
[  124.145770][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.145814][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.145847][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.145878][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.266250][ T9543] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  126.519413][ T9574] netlink: 'syz.2.1687': attribute type 21 has an invalid length.
[  126.519473][ T9574] netlink: 'syz.2.1687': attribute type 20 has an invalid length.
[  127.101726][ T9615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.119055][ T9619] bridge_slave_1: invalid flags given to default FDB implementation
[  127.165159][ T9622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.221363][ T9615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.450569][ T9639] geneve2: entered promiscuous mode
[  127.486207][ T9641] syzkaller0: entered promiscuous mode
[  127.486283][ T9641] syzkaller0: entered allmulticast mode
[  127.496502][ T9641] netlink: 'syz.2.1717': attribute type 13 has an invalid length.
[  127.496552][ T9641] netlink: 'syz.2.1717': attribute type 17 has an invalid length.
[  127.556896][ T9641] vlan0: left promiscuous mode
[  127.607640][ T9641] geneve2: left promiscuous mode
[  127.607691][ T9641] geneve2: left allmulticast mode
[  127.607740][ T9641] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  127.677134][ T9649] nftables ruleset with unbound set
[  127.841268][ T9657] __nla_validate_parse: 3 callbacks suppressed
[  127.851231][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'.
[  127.987910][ T2423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.425053][ T9697] xt_hashlimit: max too large, truncated to 1048576
[  128.896571][ T9707] block nbd2: not configured, cannot reconfigure
[  129.606375][ T9777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1781'.
[  129.606425][ T9777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1781'.
[  129.642261][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'.
[  129.649638][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'.
[  129.927638][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1795'.
[  130.600527][ T7716] block nbd1: Receive control failed (result -32)
[  130.708265][ T9830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1806'.
[  130.715487][ T9830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1806'.
[  130.725904][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'.
[  130.725952][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'.
[  130.963083][ T9852] tipc: MTU too low for tipc bearer
[  131.035290][ T9861] netlink: 'syz.2.1821': attribute type 1 has an invalid length.
[  131.098256][ T9868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.051329][ T9889] vlan3: entered allmulticast mode
[  132.051376][ T9889] batadv0: entered allmulticast mode
[  132.437209][ T9900] x_tables: duplicate underflow at hook 3
[  132.486106][ T9906] Bluetooth: MGMT ver 1.23
[  132.506463][ T9906] Bluetooth: hci0: invalid length 0, exp 2 for type 19
[  133.108564][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  133.108650][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  133.154714][ T9952] tipc: Can't bind to reserved service type 1
[  133.209270][ T9954] Bluetooth: MGMT ver 1.23
[  133.271936][ T9959] __nla_validate_parse: 7 callbacks suppressed
[  133.274189][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'.
[  133.361547][ T9966] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  133.546443][ T9978] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  133.616566][ T9986] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1877'.
[  133.616615][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1877'.
[  133.702005][ T9982] bond3: Unable to set peer notification delay as MII monitoring is disabled
[  133.727288][ T9982] bond3 (unregistering): Released all slaves
[  133.958368][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'.
[  133.958428][T10019] netlink: 'syz.1.1891': attribute type 9 has an invalid length.
[  133.981568][ T7756] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.982072][ T7756] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.982150][ T7756] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.982223][ T7756] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.072411][T10023] bond2: entered promiscuous mode
[  134.075303][T10023] bond2: entered allmulticast mode
[  134.078680][T10023] 8021q: adding VLAN 0 to HW filter on device bond2
[  134.249974][T10042] batman_adv: batadv0: Adding interface: macvtap0
[  134.252742][T10042] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  134.310321][   T34] audit: type=1804 audit(1788971001.082:2): pid=10044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1903" name="/newroot/687/cgroup.controllers" dev="tmpfs" ino=3479 res=1 errno=0
[  134.320867][   T34] audit: type=1800 audit(1788971001.092:3): pid=10044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1903" name="cgroup.controllers" dev="tmpfs" ino=3479 res=0 errno=0
[  135.019319][T10042] batman_adv: batadv0: Removing interface: macvtap0
[  135.255445][T10063] xt_connbytes: Forcing CT accounting to be enabled
[  135.483541][T10083] tc action pedit 'at' offset 5 out of bounds
[  135.483604][T10083] tc action pedit 'at' offset 5 out of bounds
[  135.483651][T10083] tc action pedit 'at' offset 5 out of bounds
[  135.483681][T10083] tc action pedit 'at' offset 5 out of bounds
[  135.483710][T10083] tc action pedit 'at' offset 5 out of bounds
[  135.483737][T10083] tc action pedit 'at' offset 5 out of bounds
[  135.483761][T10083] tc action pedit 'at' offset 5 out of bounds
[  135.483783][T10083] tc action pedit 'at' offset 5 out of bounds
[  135.483806][T10083] tc action pedit 'at' offset 5 out of bounds
[  135.483834][T10083] tc action pedit 'at' offset 5 out of bounds
[  135.483878][T10083] TC_ACT_REPEAT abuse ?
[  135.498612][T10085] xt_CT: You must specify a L4 protocol and not use inversions on it
[  135.573241][T10088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.597101][T10088] syzkaller0: entered promiscuous mode
[  135.599459][T10088] syzkaller0: entered allmulticast mode
[  135.603436][T10088] tipc: Resetting bearer <eth:syzkaller0>
[  135.606334][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'.
[  135.610575][T10076] bridge: RTM_NEWNEIGH with invalid state 0x0
[  135.620296][T10087] tipc: Resetting bearer <eth:syzkaller0>
[  136.590326][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'.
[  136.699989][T10109] netlink: Unknown NAT attribute (type=1137, max=9)
[  136.700051][T10109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.204114][T10087] tipc: Disabling bearer <eth:syzkaller0>
[  137.214065][ T5636] tipc: Node number set to 3676275050
[  137.462200][T10134] netlink: 'syz.0.1941': attribute type 6 has an invalid length.
[  137.462268][T10134] IPv6: NLM_F_CREATE should be specified when creating new route
[  137.611877][T10147] 8021q: adding VLAN 0 to HW filter on device macsec0
[  137.756228][T10159] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  138.278569][T10195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1970'.
[  138.278638][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'.
[  138.496779][T10207] ipvlan2: entered allmulticast mode
[  138.496853][T10207] macvlan1: entered allmulticast mode
[  138.497301][T10207] veth1_vlan: entered allmulticast mode
[  138.499528][T10207] batman_adv: batadv0: Adding interface: ipvlan2
[  138.499540][T10207] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.499563][T10207] batman_adv: batadv0: Interface activated: ipvlan2
[  138.756829][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'.
[  138.924010][T10244] tipc: Resetting bearer <eth:team0>
[  138.924389][T10244] tipc: Resetting bearer <eth:team0>
[  138.968314][T10248] netlink: 'syz.2.1994': attribute type 16 has an invalid length.
[  138.975844][T10248] netlink: 'syz.2.1994': attribute type 17 has an invalid length.
[  139.020218][   T37] tipc: Resetting bearer <eth:team0>
[  139.064232][T10248] tipc: Resetting bearer <eth:team0>
[  139.067027][T10248] tipc: Resetting bearer <eth:team0>
[  139.082657][ T5602] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  139.207613][T10248] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  139.316320][T10262] No such timeout policy "syz1"
[  139.648364][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2012'.
[  141.032325][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2049'.
[  141.143979][T10379] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  141.310782][T10395] xt_IDLETIMER: timeout value is zero
[  141.510205][T10412] netlink: 'syz.1.2067': attribute type 16 has an invalid length.
[  141.510258][T10412] netlink: 'syz.1.2067': attribute type 3 has an invalid length.
[  141.510291][T10412] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.2067'.
[  141.670828][T10425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2074'.
[  141.946046][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'.
[  142.522629][T10512] block nbd2: server does not support multiple connections per device.
[  142.526207][T10512] block nbd2: shutting down sockets
[  142.618382][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2112'.
[  142.700247][T10525] syzkaller1: entered promiscuous mode
[  142.704869][T10525] syzkaller1: entered allmulticast mode
[  142.751929][T10530] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  142.981763][T10545] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  142.981823][T10545] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  143.414239][T10512] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  143.414371][T10512] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  143.435827][T10512] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  143.435898][T10512] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  143.447556][T10512] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  143.447617][T10512] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  144.013542][T10578] netlink: 'syz.1.2138': attribute type 11 has an invalid length.
[  144.016630][T10578] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2138'.
[  144.191725][T10586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2145'.
[  144.191781][T10586] netlink: 'syz.0.2145': attribute type 5 has an invalid length.
[  144.266192][T10590] : renamed from sit0 (while UP)
[  144.625883][T10619] IPv6: NLM_F_CREATE should be specified when creating new route
[  144.628791][T10619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.628837][T10619] IPv6: NLM_F_CREATE should be set when creating new route
[  144.628873][T10619] IPv6: NLM_F_CREATE should be set when creating new route
[  144.628902][T10619] IPv6: NLM_F_CREATE should be set when creating new route
[  144.645889][T10619] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2160'.
[  144.760504][T10629] tap0: tun_chr_ioctl cmd 1074025677
[  144.763054][T10629] tap0: linktype set to 804
[  144.899774][T10647] netlink: 'syz.2.2174': attribute type 1 has an invalid length.
[  144.899841][T10647] netlink: 'syz.2.2174': attribute type 1 has an invalid length.
[  144.981616][T10654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2178'.
[  145.301845][T10688] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2194'.
[  145.347167][T10692] tc_dump_action: action bad kind
[  145.405160][T10696] netlink: 'syz.0.2198': attribute type 9 has an invalid length.
[  145.880709][T10744] sctp: [Deprecated]: syz.1.2221 (pid 10744) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.880709][T10744] Use struct sctp_sack_info instead
[  145.881527][T10744] sctp: [Deprecated]: syz.1.2221 (pid 10744) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.881527][T10744] Use struct sctp_sack_info instead
[  146.189427][T10772] netlink: 'syz.0.2233': attribute type 5 has an invalid length.
[  146.218909][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'.
[  146.218972][T10774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2234'.
[  146.259799][T10774] veth5: entered allmulticast mode
[  146.264429][T10774] team0: Port device veth5 added
[  146.278695][T10778] syzkaller0: entered promiscuous mode
[  146.280746][T10778] syzkaller0: entered allmulticast mode
[  146.286414][T10778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.290731][T10778] tipc: Resetting bearer <eth:syzkaller0>
[  146.295919][T10777] tipc: Resetting bearer <eth:syzkaller0>
[  146.331858][T10777] tipc: Disabling bearer <eth:syzkaller0>
[  146.748192][T10813] netlink: 'syz.0.2253': attribute type 1 has an invalid length.
[  146.748263][T10813] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2253'.
[  146.748308][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2253'.
[  147.264118][T10829] xt_hashlimit: size too large, truncated to 1048576
[  148.585283][T10915] netlink: 616 bytes leftover after parsing attributes in process `syz.1.2298'.
[  148.808317][T10937] netlink: 'syz.2.2310': attribute type 32 has an invalid length.
[  149.059648][T10957] syzkaller1: tun_chr_ioctl cmd 2147767521
[  150.414084][T11010] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2341'.
[  152.585862][T11091] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received
[  152.700431][T11097] x_tables: duplicate underflow at hook 3
[  152.913239][T11112] Bluetooth: hci0: invalid length 0, exp 2 for type 3
[  153.799628][T11172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2418'.
[  153.806496][T11172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2418'.
[  154.365690][T11202] netlink: 'syz.0.2432': attribute type 2 has an invalid length.
[  154.406275][T11202] D'|o: entered promiscuous mode
[  154.480257][T11208] netlink: 'syz.0.2435': attribute type 10 has an invalid length.
[  154.488264][T11208] dummy0: left allmulticast mode
[  154.490097][T11208] dummy0: left promiscuous mode
[  154.492036][T11208] bridge0: port 4(dummy0) entered disabled state
[  154.499152][T11208] team0: Port device dummy0 added
[  155.132563][T11247] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) !
[  155.517722][T11267] syzkaller1: entered promiscuous mode
[  155.517790][T11267] syzkaller1: entered allmulticast mode
[  155.526764][T11267] syzkaller1: left promiscuous mode
[  157.391823][T10093] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.391932][T10093] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.392307][T10093] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.392330][T10093] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.709327][T11436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2541'.
[  157.797548][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'.
[  158.220083][T11473] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  158.278288][T11477] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2561'.
[  158.446069][T11495] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2570'.
[  158.450155][T11495] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2570'.
[  158.454118][T11495] netlink: 'syz.0.2570': attribute type 6 has an invalid length.
[  158.454137][T11495] netlink: 'syz.0.2570': attribute type 5 has an invalid length.
[  158.454146][T11495] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2570'.
[  158.748259][T11527] bridge0: port 3(macvlan2) entered blocking state
[  158.748417][T11527] bridge0: port 3(macvlan2) entered disabled state
[  158.748480][T11527] macvlan2: entered allmulticast mode
[  158.748490][T11527] ip6gretap0: entered allmulticast mode
[  158.749547][T11527] macvlan2: entered promiscuous mode
[  158.750218][T11527] bridge0: port 3(macvlan2) entered blocking state
[  158.750418][T11527] bridge0: port 3(macvlan2) entered forwarding state
[  159.063222][T11549] xt_bpf: check failed: parse error
[  159.666618][T11583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2613'.
[  160.323160][T11622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2630'.
[  160.488326][T11626] netlink: 'syz.1.2632': attribute type 4 has an invalid length.
[  160.504071][T11626] netlink: 'syz.1.2632': attribute type 4 has an invalid length.
[  160.839697][T11639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2638'.
[  161.176209][T11667] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  161.258201][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2655'.
[  161.921749][T11742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.957521][T11742] syzkaller0: entered promiscuous mode
[  161.960064][T11742] syzkaller0: entered allmulticast mode
[  161.963282][T11742] tipc: Resetting bearer <eth:syzkaller0>
[  161.975046][T11741] tipc: Resetting bearer <eth:syzkaller0>
[  163.144403][T11741] tipc: Disabling bearer <eth:syzkaller0>
[  163.277878][T11764] __nla_validate_parse: 1 callbacks suppressed
[  163.281056][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2697'.
[  163.284637][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2697'.
[  166.500363][T11810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2713'.
[  166.575476][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2714'.
[  166.952322][T11829] syzkaller0: entered promiscuous mode
[  166.955871][T11829] syzkaller0: entered allmulticast mode
[  166.965375][T11829] TC_ACT_REPEAT abuse ?
[  167.594713][T11846] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  168.651491][T11861] bond3: option downdelay: invalid value (18446744073709551487)
[  168.651561][T11861] bond3: option downdelay: allowed values 0 - 2147483647
[  168.660411][T11861] bond3 (unregistering): Released all slaves
[  168.874601][T11882] team0: Device wg1 failed to enter team mode
[  168.874674][T11882] team0: Device wg1 failed to enter team mode
[  168.874768][T11882] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  171.773554][T11873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  171.857230][T11917] netlink: 'syz.0.2756': attribute type 4 has an invalid length.
[  171.857306][T11917] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2756'.
[  171.872004][T11917] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  172.262435][T11955] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2775'.
[  172.368005][T11968] netlink: 'syz.1.2781': attribute type 8 has an invalid length.
[  172.371944][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2781'.
[  172.570444][T11993] gtp1: entered promiscuous mode
[  172.574546][T11993] gtp1: entered allmulticast mode
[  172.609843][T11995] IPv6: sit2: Disabled Multicast RS
[  172.637858][T11999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2797'.
[  172.745168][T12015] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  172.750027][T12015] bond3 (unregistering): Released all slaves
[  172.848135][T12019] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  173.393593][T12066] bond0: option min_links: invalid value (18446744073709551615)
[  173.393650][T12066] bond0: option min_links: allowed values 0 - 2147483647
[  176.086724][T12041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  176.211284][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2841'.
[  176.311786][T12112] Bluetooth: hci0: invalid length 0, exp 2 for type 14
[  176.356861][T12117] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2847'.
[  176.410793][T12120] netlink: 564 bytes leftover after parsing attributes in process `syz.1.2848'.
[  177.110896][T12182] netlink: 'syz.2.2880': attribute type 1 has an invalid length.
[  177.113968][T12182] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2880'.
[  177.117055][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2880'.
[  177.953324][T12202] syz.0.2889 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  177.953397][T12202] CPU: 0 UID: 0 PID: 12202 Comm: syz.0.2889 Not tainted syzkaller #0 PREEMPT(full) 
[  177.953423][T12202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  177.953430][T12202] Call Trace:
[  177.953434][T12202]  <TASK>
[  177.953438][T12202]  dump_stack_lvl+0xe8/0x150
[  177.953456][T12202]  dump_header+0xd3/0x4b0
[  177.953468][T12202]  oom_kill_process+0x3ab/0x9e0
[  177.953480][T12202]  out_of_memory+0x1064/0x1480
[  177.953488][T12202]  ? try_charge_memcg+0xc32/0x15e0
[  177.953504][T12202]  ? __pfx_out_of_memory+0x10/0x10
[  177.953512][T12202]  ? do_raw_spin_unlock+0x4d/0x200
[  177.953528][T12202]  try_charge_memcg+0xcdf/0x15e0
[  177.953543][T12202]  ? __pfx_try_charge_memcg+0x10/0x10
[  177.953559][T12202]  ? charge_memcg+0x47/0x310
[  177.953569][T12202]  charge_memcg+0x1dd/0x310
[  177.953578][T12202]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  177.953586][T12202]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  177.953596][T12202]  swap_cache_alloc_folio+0x4de/0x990
[  177.953612][T12202]  swap_cache_read_folio+0x44/0x120
[  177.953647][T12202]  swap_cluster_readahead+0x392/0x630
[  177.953660][T12202]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  177.953670][T12202]  ? __css_rstat_updated+0x237/0x540
[  177.953688][T12202]  swapin_readahead+0x1a3/0xc50
[  177.953702][T12202]  ? __pfx_swapin_readahead+0x10/0x10
[  177.953715][T12202]  ? swap_table_get+0x1e/0x260
[  177.953724][T12202]  ? swap_table_get+0x1e/0x260
[  177.953732][T12202]  ? swap_table_get+0x1e/0x260
[  177.953742][T12202]  ? swap_table_get+0x216/0x260
[  177.953752][T12202]  ? swap_cache_get_folio+0x2e7/0x2f0
[  177.953764][T12202]  do_swap_page+0x3fb/0x4c10
[  177.953781][T12202]  ? __lock_acquire+0x6df/0x2e50
[  177.953788][T12202]  ? do_swap_page+0x126/0x4c10
[  177.953796][T12202]  ? __pfx_do_swap_page+0x10/0x10
[  177.953804][T12202]  ? __pte_offset_map+0x1ae/0x240
[  177.953822][T12202]  ? pte_offset_map_rw_nolock+0xea/0x160
[  177.953837][T12202]  handle_mm_fault+0x1398/0x3750
[  177.953857][T12202]  ? handle_mm_fault+0xf1/0x3750
[  177.953876][T12202]  ? __pfx_handle_mm_fault+0x10/0x10
[  177.953888][T12202]  ? lock_vma_under_rcu+0x45a/0x500
[  177.953920][T12202]  do_user_addr_fault+0xa4f/0x1340
[  177.953939][T12202]  ? trace_page_fault_user+0x84/0x1e0
[  177.953948][T12202]  exc_page_fault+0x6a/0xc0
[  177.953960][T12202]  asm_exc_page_fault+0x26/0x30
[  177.953969][T12202] RIP: 0033:0x7f3ab74640ae
[  177.953979][T12202] Code: 8d 15 f6 86 25 00 48 8d 04 c0 48 c1 e0 04 48 83 7c 02 28 00 74 0f 48 8b 44 24 08 c7 80 90 00 00 00 16 00 00 00 48 8b 44 24 08 <80> 3d 31 16 ef 00 00 c6 80 e8 00 00 00 00 74 27 80 3d 0e 16 ef 00
[  177.953986][T12202] RSP: 002b:00007f3ab844a050 EFLAGS: 00010246
[  177.953995][T12202] RAX: 00007f3ab7825fa0 RBX: 00007f3ab7825fa0 RCX: 00007f3ab7825fa0
[  177.954000][T12202] RDX: 00007f3ab76bc780 RSI: 0000200000001880 RDI: 0000000000000000
[  177.954005][T12202] RBP: 00007f3ab7635024 R08: 0000000000000000 R09: 0000000000000000
[  177.954010][T12202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.954015][T12202] R13: 00007f3ab7826038 R14: 00007f3ab7825fa0 R15: 00007ffd85837358
[  177.954027][T12202]  </TASK>
[  177.956678][T12202] memory: usage 307200kB, limit 307200kB, failcnt 3132
[  177.956687][T12202] memory+swap: usage 307284kB, limit 9007199254740988kB, failcnt 0
[  177.956692][T12202] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
[  177.956697][T12202] Memory cgroup stats for /syz0:
[  177.956864][T12202] cache 4096
[  177.956868][T12202] rss 0
[  177.956870][T12202] rss_huge 0
[  177.956873][T12202] shmem 0
[  177.956875][T12202] mapped_file 0
[  177.956878][T12202] dirty 0
[  177.956880][T12202] writeback 0
[  177.956883][T12202] workingset_refault_anon 19
[  177.956886][T12202] workingset_refault_file 0
[  177.956888][T12202] swap 86016
[  177.956891][T12202] swapcached 204800
[  177.956893][T12202] pgpgin 89232
[  177.956896][T12202] pgpgout 89223
[  177.956898][T12202] pgfault 181397
[  177.956901][T12202] pgmajfault 9
[  177.956903][T12202] inactive_anon 24576
[  177.956905][T12202] active_anon 8192
[  177.956908][T12202] inactive_file 0
[  177.956910][T12202] active_file 4096
[  177.956913][T12202] unevictable 0
[  177.956915][T12202] hierarchical_memory_limit 314572800
[  177.956918][T12202] hierarchical_memsw_limit 9223372036854771712
[  177.956921][T12202] total_cache 4096
[  177.956924][T12202] total_rss 0
[  177.956926][T12202] total_rss_huge 0
[  177.956929][T12202] total_shmem 0
[  177.956931][T12202] total_mapped_file 0
[  177.956934][T12202] total_dirty 0
[  177.956936][T12202] total_writeback 0
[  177.956939][T12202] total_workingset_refault_anon 19
[  177.956941][T12202] total_workingset_refault_file 0
[  177.956944][T12202] total_swap 86016
[  177.956947][T12202] total_swapcached 204800
[  177.956949][T12202] total_pgpgin 89232
[  177.956952][T12202] total_pgpgout 89223
[  177.956954][T12202] total_pgfault 181397
[  177.956957][T12202] total_pgmajfault 9
[  177.956959][T12202] total_inactive_anon 24576
[  177.956962][T12202] total_active_anon 8192
[  177.956965][T12202] total_inactive_file 0
[  177.956967][T12202] total_active_file 4096
[  177.956970][T12202] total_unevictable 0
[  177.956972][T12202] anon_cost 0
[  177.956975][T12202] file_cost 0
[  177.956978][T12202] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2889,pid=12201,uid=0
[  177.957108][T12202] Memory cgroup out of memory: Killed process 12201 (syz.0.2889) total-vm:102252kB, anon-rss:1256kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  178.269089][T12201] syz.0.2889 (12201) used greatest stack depth: 20000 bytes left
[  178.426695][T12202] syz.0.2889 (12202) used greatest stack depth: 19648 bytes left
[  179.846337][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2924'.
[  179.995280][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2931'.
[  180.389651][T12313] syzkaller0: entered promiscuous mode
[  180.391534][T12313] syzkaller0: entered allmulticast mode
[  180.544001][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'.
[  180.544070][T12327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2947'.
[  180.810393][T12348] netlink: 'syz.1.2954': attribute type 2 has an invalid length.
[  180.813829][T12348] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2954'.
[  181.710477][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2960'.
[  182.311377][T12407] netlink: Failed to add filter helper -22
[  182.313617][T12407] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.982033][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2999'.
[  183.199069][T12467] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3007'.
[  184.375488][T12527] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  184.428858][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3031'.
[  184.563995][T12549] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  184.567705][T12549] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len
[  184.568183][T12549] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  184.758340][T12569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3047'.
[  185.230787][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'.
[  185.250301][T12600] bond3: option lacp_active: invalid value (5)
[  185.256594][T12600] bond3 (unregistering): Released all slaves
[  185.616419][T12622] ovs-s!: entered promiscuous mode
[  185.878490][T12657] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  185.878574][T12657] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  185.920870][T12665] netlink: 'syz.1.3085': attribute type 12 has an invalid length.
[  185.995860][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3088'.
[  186.028799][T12675] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3091'.
[  186.209439][T12690] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3098'.
[  186.209500][T12690] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3098'.
[  186.209564][T12690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3098'.
[  186.515358][T12724] gretap0: entered promiscuous mode
[  186.518318][T12724] macvlan2: entered allmulticast mode
[  186.520763][T12724] gretap0: entered allmulticast mode
[  187.590409][T12803] syzkaller0: entered promiscuous mode
[  187.597099][T12803] syzkaller0: entered allmulticast mode
[  188.089622][T12832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.656835][T12867] block nbd2: not configured, cannot reconfigure
[  188.825000][T12877] netlink: 'syz.2.3183': attribute type 3 has an invalid length.
[  188.878898][T12881] syzkaller1: entered allmulticast mode
[  189.096861][T12901] netlink: 'syz.1.3178': attribute type 15 has an invalid length.
[  189.282542][T12925] __nla_validate_parse: 7 callbacks suppressed
[  189.282972][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'.
[  189.377156][T12931] netlink: 'syz.0.3208': attribute type 21 has an invalid length.
[  189.377218][T12931] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3208'.
[  189.377657][T12931] netlink: 'syz.0.3208': attribute type 5 has an invalid length.
[  189.377664][T12931] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3208'.
[  189.380667][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3208'.
[  189.785849][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3225'.
[  190.496013][T13020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3242'.
[  190.660825][T13032] netlink: 'syz.2.3247': attribute type 1 has an invalid length.
[  190.710080][T13032] veth3: entered allmulticast mode
[  190.781053][T13040] bond3: (slave veth0_to_bond): making interface the new active one
[  190.792842][T13040] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  190.806892][T13032] macvlan3: entered promiscuous mode
[  190.808809][T13032] macvlan3: entered allmulticast mode
[  190.811195][T13032] bond3: entered promiscuous mode
[  190.813146][T13032] veth0_to_bond: entered promiscuous mode
[  190.815903][T13032] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  190.818679][T13032] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  190.824492][T13032] bond3: left promiscuous mode
[  190.824506][T13032] veth0_to_bond: left promiscuous mode
[  191.013525][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3257'.
[  191.038102][T13055] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  191.125730][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3262'.
[  191.129725][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3262'.
[  191.131019][T13067] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3262'.
[  191.235407][T13077] bond4: option arp_validate: invalid value (8192)
[  191.239194][T13077] bond4 (unregistering): Released all slaves
[  191.402841][T13015] IPVS: starting estimator thread 0...
[  191.420843][T13092] IPVS: Scheduler module ip_vs_sip not found
[  191.501836][T13094] IPVS: using max 50 ests per chain, 120000 per kthread
[  191.551612][T13110] netlink: 'syz.2.3280': attribute type 18 has an invalid length.
[  191.629285][T13116] netlink: 'syz.0.3283': attribute type 11 has an invalid length.
[  191.634999][T13116] netlink: 'syz.0.3283': attribute type 11 has an invalid length.
[  192.300045][T13189] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  192.867950][T13233] netlink: 'syz.2.3338': attribute type 23 has an invalid length.
[  192.946515][T13235] tcf_pedit_act: 22 callbacks suppressed
[  192.946584][T13235] tc action pedit 'at' offset 525311 out of bounds
[  193.161377][T13249] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  193.165626][T13249] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  194.189193][T13310] syzkaller0: entered promiscuous mode
[  194.189260][T13310] syzkaller0: entered allmulticast mode
[  194.232200][ T5650] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c
[  194.242960][T13303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  194.491842][T13336] nbd: must specify a size in bytes for the device
[  194.547673][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  194.547730][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  194.617793][T13343] netlink: 'syz.0.3386': attribute type 39 has an invalid length.
[  194.663443][T13357] syzkaller1: entered promiscuous mode
[  194.663490][T13357] syzkaller1: entered allmulticast mode
[  194.780543][T13363] netlink: 'syz.2.3395': attribute type 4 has an invalid length.
[  195.156848][T13395] syzkaller0: entered promiscuous mode
[  195.156908][T13395] syzkaller0: entered allmulticast mode
[  195.530889][T13419] __nla_validate_parse: 9 callbacks suppressed
[  195.533495][T13419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3422'.
[  195.536475][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3422'.
[  195.912044][T13457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.914802][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'.
[  195.932338][ T7756] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  195.938143][ T7756] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  195.942300][ T7756] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  195.946810][ T7756] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  196.009040][T13463] syzkaller0: entered promiscuous mode
[  196.011659][T13463] syzkaller0: entered allmulticast mode
[  196.016291][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'.
[  196.046643][T13463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.055341][T13462] tipc: Resetting bearer <eth:syzkaller0>
[  196.156674][T13462] tipc: Disabling bearer <eth:syzkaller0>
[  196.209061][T13475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.378255][T13492] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3457'.
[  196.516722][T13501] syzkaller0: entered promiscuous mode
[  196.516788][T13501] syzkaller0: entered allmulticast mode
[  196.523207][T13501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.537299][T13501] tipc: Resetting bearer <eth:syzkaller0>
[  196.543847][T13500] tipc: Resetting bearer <eth:syzkaller0>
[  196.570344][T13500] tipc: Disabling bearer <eth:syzkaller0>
[  197.627148][T13516] vcan0: entered promiscuous mode
[  197.627208][T13516] vcan0: entered allmulticast mode
[  197.637631][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3474'.
[  198.076766][T13566] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3491'.
[  198.304243][T13596] netlink: 'syz.1.3506': attribute type 23 has an invalid length.
[  199.113843][T13650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3530'.
[  200.524007][T13710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3557'.
[  200.975246][T13724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3562'.
[  201.088088][T13740] macvtap0: entered promiscuous mode
[  201.088154][T13740] bridge0: entered promiscuous mode
[  201.450829][T13770] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  201.460621][T13770] syzkaller0: entered promiscuous mode
[  201.464107][T13770] syzkaller0: entered allmulticast mode
[  201.594782][T13786] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3589'.
[  201.596577][T13786] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3589'.
[  201.626591][ T1107] IPVS: starting estimator thread 0...
[  201.679011][T13795] netlink: 'syz.1.3594': attribute type 21 has an invalid length.
[  201.679172][T13795] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3594'.
[  201.711414][T13791] IPVS: using max 86 ests per chain, 206400 per kthread
[  201.732953][T13801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.737614][T13801] syzkaller0: mtu less than device minimum
[  201.936227][T13815] netlink: 'syz.0.3602': attribute type 1 has an invalid length.
[  201.936274][T13815] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3602'.
[  201.936341][T13815] netlink: 'syz.0.3602': attribute type 1 has an invalid length.
[  202.168420][T13830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3609'.
[  202.266195][T13838] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  202.270693][T13838] bond3 (unregistering): Released all slaves
[  202.402033][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3617'.
[  202.535044][T13858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  202.535090][T13858] IPv6: NLM_F_CREATE should be set when creating new route
[  202.615817][T13861] netlink: 'syz.2.3622': attribute type 62 has an invalid length.
[  202.864370][T13873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3628'.
[  203.668615][T13918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3649'.
[  203.832383][T13936] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3657'.
[  203.986737][T13958] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  205.887209][T14029] openvswitch: netlink: nsh attr 251 is out of range max 3
[  206.193071][T14065] bridge1: the hash_elasticity option has been deprecated and is always 16
[  206.196923][T14067] __nla_validate_parse: 6 callbacks suppressed
[  206.200821][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3720'.
[  206.207871][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3719'.
[  206.223662][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3719'.
[  206.224190][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3719'.
[  206.224338][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3719'.
[  206.224918][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3719'.
[  206.225036][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3719'.
[  207.229826][T14133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3746'.
[  207.683767][T14167] netlink: 'syz.1.3759': attribute type 4 has an invalid length.
[  207.735622][T14169] netlink: 'syz.1.3759': attribute type 4 has an invalid length.
[  208.015773][T14191] netlink: 'syz.2.3769': attribute type 6 has an invalid length.
[  208.015838][T14191] netlink: 'syz.2.3769': attribute type 7 has an invalid length.
[  208.015880][T14191] netlink: 'syz.2.3769': attribute type 8 has an invalid length.
[  208.031539][T14192] ip_tables: iptables: counters copy to user failed while replacing table
[  208.156925][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3775'.
[  208.468501][T14226] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  208.512719][T14228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3785'.
[  208.538082][T14228] vlan3: entered allmulticast mode
[  208.538147][T14228] bridge5: entered allmulticast mode
[  208.546007][T14228] bridge5: port 1(erspan0) entered blocking state
[  208.546200][T14228] bridge5: port 1(erspan0) entered disabled state
[  208.546325][T14228] erspan0: entered allmulticast mode
[  208.548393][T14228] erspan0: left allmulticast mode
[  208.578102][T14228] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.607426][T14228] bridge0: port 3(macvlan2) entered disabled state
[  208.667683][T14233] netlink: 'syz.1.3786': attribute type 3 has an invalid length.
[  208.934376][T14245] syzkaller0: left promiscuous mode
[  208.934442][T14245] syzkaller0: left allmulticast mode
[  210.017261][T14301] bond0: (slave gretap0): Opening slave failed
[  210.601927][T14357] netlink: 'syz.0.3845': attribute type 10 has an invalid length.
[  210.606726][T14357] geneve3: entered promiscuous mode
[  210.607187][T14357] geneve3: entered allmulticast mode
[  210.738951][T14368] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  210.738995][T14368] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  211.083689][T14408] 8021q: adding VLAN 0 to HW filter on device macsec1
[  211.084192][ T9749] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  211.255804][T14426] __nla_validate_parse: 8 callbacks suppressed
[  211.258775][T14426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3878'.
[  211.353780][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3879'.
[  211.360486][T14429] netlink: zone id is out of range
[  211.364394][T14429] netlink: zone id is out of range
[  211.369317][T14429] netlink: zone id is out of range
[  211.373027][T14429] netlink: zone id is out of range
[  211.375592][T14429] netlink: zone id is out of range
[  211.377957][T14429] netlink: zone id is out of range
[  211.380542][T14429] netlink: zone id is out of range
[  211.380551][T14429] netlink: zone id is out of range
[  212.116961][T14439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3883'.
[  212.344470][T14459] syzkaller0: entered promiscuous mode
[  212.344533][T14459] syzkaller0: entered allmulticast mode
[  212.347822][T14459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.351897][T14459] tipc: Resetting bearer <eth:syzkaller0>
[  212.356802][T14457] tipc: Resetting bearer <eth:syzkaller0>
[  212.373850][T14457] tipc: Disabling bearer <eth:syzkaller0>
[  212.781137][T14502] sock: sock_timestamping_bind_phc: sock not bind to device
[  213.545414][T14534] netlink: 'syz.0.3928': attribute type 1 has an invalid length.
[  213.548041][T14534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3928'.
[  213.592952][T14539] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  213.659853][T14546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3936'.
[  213.718370][T14551] net_ratelimit: 480 callbacks suppressed
[  213.720911][T14551] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  213.841761][T14553] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  213.858624][T14553] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  214.043690][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3944'.
[  214.043765][T14566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.580497][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3948'.
[  214.580557][T14575] netlink: 'syz.0.3948': attribute type 3 has an invalid length.
[  214.581278][T14575] netlink: 'syz.0.3948': attribute type 5 has an invalid length.
[  214.581287][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3948'.
[  214.585551][T14575] geneve4: entered promiscuous mode
[  214.585564][T14575] geneve4: entered allmulticast mode
[  214.600191][ T7757] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 50704 - 0
[  214.606234][ T7757] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 50704 - 0
[  214.609296][ T7757] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 50704 - 0
[  214.609315][ T7757] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 50704 - 0
[  214.786729][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'.
[  214.839218][T14593] netlink: 'syz.0.3956': attribute type 1 has an invalid length.
[  214.839753][T14593] netlink: 'syz.0.3956': attribute type 2 has an invalid length.
[  215.169272][T14613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.180397][T14613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.209907][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3985'.
[  216.319208][T14668] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  216.804387][T14691] netlink: 'syz.2.3999': attribute type 1 has an invalid length.
[  216.935897][T14691] bond4: entered promiscuous mode
[  216.936219][T14691] 8021q: adding VLAN 0 to HW filter on device bond4
[  216.963157][T14709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4007'.
[  216.975673][T14704] 8021q: adding VLAN 0 to HW filter on device bond4
[  216.978152][T14704] bond4: (slave gre2): The slave device specified does not support setting the MAC address
[  216.982692][T14704] bond4: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  216.996086][T14704] bond4: (slave gre2): making interface the new active one
[  216.998603][T14704] gre2: entered promiscuous mode
[  217.003261][T14704] bond4: (slave gre2): Enslaving as an active interface with an up link
[  217.180353][T14728] netlink: 'syz.1.4016': attribute type 4 has an invalid length.
[  217.581762][T14755] xt_TCPMSS: Only works on TCP SYN packets
[  217.619422][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4029'.
[  218.130840][T14796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4046'.
[  218.139543][T14796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  218.163809][T14800] syzkaller0: entered promiscuous mode
[  218.168604][T14800] syzkaller0: entered allmulticast mode
[  218.181231][T14800] syzkaller0: tun_net_xmit 14
[  218.194876][T14802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4049'.
[  218.198958][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4049'.
[  218.303504][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'.
[  218.303562][T14818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4057'.
[  218.349107][T14824] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4060'.
[  218.413174][T14833] netlink: 'syz.2.4065': attribute type 3 has an invalid length.
[  218.413232][T14833] netlink: 'syz.2.4065': attribute type 3 has an invalid length.
[  218.422866][T14833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4065'.
[  218.600108][T14848] syzkaller1: tun_chr_ioctl cmd 1074025677
[  218.602661][T14850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4074'.
[  218.606002][T14848] syzkaller1: linktype set to 1
[  218.870395][T14877] netlink: 'syz.0.4085': attribute type 10 has an invalid length.
[  218.881685][T14877] dummy0: entered promiscuous mode
[  218.905015][T14877] team0: Port device dummy0 removed
[  218.905590][T14877] bridge0: port 4(dummy0) entered blocking state
[  218.905709][T14877] bridge0: port 4(dummy0) entered disabled state
[  218.909347][T14877] dummy0: entered allmulticast mode
[  219.405964][T14926] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.480128][T14934] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  220.056783][T14997] hsr_slave_0: left promiscuous mode
[  220.059341][T14997] hsr_slave_1: left promiscuous mode
[  220.717401][T15057] netlink: 'syz.2.4170': attribute type 4 has an invalid length.
[  221.949958][T15115] geneve4: entered promiscuous mode
[  221.951231][T15115] geneve4: entered allmulticast mode
[  222.767010][T15139] vlan3: entered allmulticast mode
[  224.099466][T15079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  224.158543][T15155] netlink: 'syz.0.4209': attribute type 3 has an invalid length.
[  224.162095][T15155] __nla_validate_parse: 23 callbacks suppressed
[  224.164865][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'.
[  224.370082][T15177] syzkaller0: entered promiscuous mode
[  224.372725][T15177] syzkaller0: entered allmulticast mode
[  224.375773][T15177] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  225.064102][T15239] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  225.158085][T15247] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4250'.
[  225.159691][T15247] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4250'.
[  225.344766][T15259] netlink: 'syz.2.4257': attribute type 2 has an invalid length.
[  225.853331][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4273'.
[  226.506838][T15372] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4312'.
[  226.506907][T15372] netlink: 'syz.2.4312': attribute type 9 has an invalid length.
[  226.507607][T15372] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4312'.
[  226.507616][T15372] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4312'.
[  227.192642][T15378] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  227.311660][T15391] netlink: 'syz.0.4321': attribute type 8 has an invalid length.
[  227.314219][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4321'.
[  227.406546][T15400] Cannot find set identified by id 0 to match
[  227.513147][T15410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.571437][T15410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.626303][T15410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.279827][T15448] bond3: Unable to set peer notification delay as MII monitoring is disabled
[  228.287432][T15448] bond3 (unregistering): Released all slaves
[  228.380642][T15457] Unknown options in mask 6
[  228.497282][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4355'.
[  228.579704][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4360'.
[  228.696258][T15490] Bluetooth: hci0: unsupported parameter 512
[  228.696326][T15490] Bluetooth: hci0: invalid length 0, exp 2 for type 27
[  228.899645][T15513] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.915595][T15513] syzkaller0: mtu less than device minimum
[  229.127166][T15528] vlan2: entered allmulticast mode
[  229.127218][T15528] bridge2: entered allmulticast mode
[  229.134755][T15528] bridge2: port 1(erspan0) entered blocking state
[  229.137755][T15528] bridge2: port 1(erspan0) entered disabled state
[  229.140720][T15528] erspan0: entered allmulticast mode
[  229.148725][T15528] erspan0: entered promiscuous mode
[  229.149832][T15528] bridge2: port 1(erspan0) entered blocking state
[  229.149945][T15528] bridge2: port 1(erspan0) entered forwarding state
[  229.172048][T15528] bridge2: port 1(erspan0) entered disabled state
[  229.180086][T15528] tipc: Resetting bearer <eth:team0>
[  229.180876][T15534] openvswitch: netlink: IPv6 tunnel dst address is zero
[  229.187252][T15528] tipc: Resetting bearer <eth:team0>
[  229.267950][T15539] __nla_validate_parse: 3 callbacks suppressed
[  229.268054][T15539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4385'.
[  229.268081][T15539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4385'.
[  229.302094][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4386'.
[  229.309713][T15543] netlink: 'syz.0.4387': attribute type 21 has an invalid length.
[  229.314760][T15543] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4387'.
[  229.601461][T15577] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.882805][T15607] vcan0: tx drop: invalid da for name 0x0000000000000001
[  229.995447][T15617] netlink: 'syz.2.4423': attribute type 3 has an invalid length.
[  230.157442][T15628] vlan3: entered allmulticast mode
[  230.159742][T15628] batadv0: entered allmulticast mode
[  230.238067][T15631] x_tables: duplicate underflow at hook 3
[  230.583291][T15648] tipc: Resetting bearer <eth:team0>
[  231.107641][T15691] syzkaller1: entered promiscuous mode
[  231.110013][T15691] syzkaller1: entered allmulticast mode
[  231.205330][T15694] netlink: 4912 bytes leftover after parsing attributes in process `syz.1.4453'.
[  231.425281][T15698] syzkaller0: entered promiscuous mode
[  231.427658][T15698] syzkaller0: entered allmulticast mode
[  231.655774][T15708] ip6t_rt: unknown flags 1F
[  231.668339][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4461'.
[  231.668406][T15708] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4461'.
[  231.677139][T15708] erspan0: entered promiscuous mode
[  231.677378][T15708] macvlan3: entered allmulticast mode
[  231.677390][T15708] erspan0: entered allmulticast mode
[  231.688245][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4459'.
[  231.695663][T15708] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  231.695722][T15708] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  232.524414][T15719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4465'.
[  232.526210][T15719] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4465'.
[  232.574594][T15723] bond5: entered promiscuous mode
[  232.576384][T15723] bond5: entered allmulticast mode
[  232.578550][T15723] 8021q: adding VLAN 0 to HW filter on device bond5
[  232.712745][T15740] netlink: 'syz.2.4475': attribute type 13 has an invalid length.
[  232.725341][T15740] tipc: Resetting bearer <eth:team0>
[  232.942393][ T4990] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  233.144154][T15774] netlink: 'syz.0.4490': attribute type 1 has an invalid length.
[  234.208566][T15806] netlink: 'syz.1.4505': attribute type 11 has an invalid length.
[  235.065136][T15808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  235.117833][T15831] netlink: 'syz.2.4512': attribute type 6 has an invalid length.
[  235.117936][T15831] IPv6: NLM_F_CREATE should be specified when creating new route
[  235.538339][T15880] ovs-s!!: entered promiscuous mode
[  235.722324][T15905] __nla_validate_parse: 5 callbacks suppressed
[  235.726024][T15905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4544'.
[  235.729007][T15905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4544'.
[  235.793434][T15912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4547'.
[  235.799937][T15912] ipvlan0: entered promiscuous mode
[  235.804291][T15912] ipvlan0: left promiscuous mode
[  236.149043][T15954] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  236.465322][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4574'.
[  236.945448][T16002] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  236.999114][T16006] netlink: 'syz.2.4581': attribute type 1 has an invalid length.
[  238.190103][T16050] tipc: Resetting bearer <eth:team0>
[  238.208235][T16050] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  238.756688][T16073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4611'.
[  238.768157][T16076] openvswitch: netlink: Unknown key attributes 1
[  238.789958][T16073] veth1_vlan: left allmulticast mode
[  238.813533][T16073] bond4 (unregistering): Released all slaves
[  239.069279][T16094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.081239][T16054] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  239.414190][T16119] block nbd2: server does not support multiple connections per device.
[  239.414421][T16119] block nbd2: shutting down sockets
[  239.536582][T16119] syzkaller1: entered promiscuous mode
[  239.536639][T16119] syzkaller1: entered allmulticast mode
[  240.447923][T16151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4640'.
[  240.494157][T16159] ------------[ cut here ]------------
[  240.496051][T16159] UBSAN: array-index-out-of-bounds in kernel/bpf/disasm.c:306:6
[  240.498515][T16159] index 3 is out of range for type 'const char *const[3]'
[  240.503352][T16159] CPU: 1 UID: 0 PID: 16159 Comm: syz.1.4642 Not tainted syzkaller #0 PREEMPT(full) 
[  240.503382][T16159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.503404][T16159] Call Trace:
[  240.503410][T16159]  <TASK>
[  240.503414][T16159]  dump_stack_lvl+0xe8/0x150
[  240.503434][T16159]  ubsan_epilogue+0xa/0x30
[  240.503444][T16159]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[  240.503461][T16159]  print_bpf_insn+0x21f1/0x2910
[  240.503472][T16159]  ? __pfx_disasm_print+0x10/0x10
[  240.503485][T16159]  ? __pfx_print_bpf_insn+0x10/0x10
[  240.503500][T16159]  ? bpf_verifier_vlog+0x3d1/0x900
[  240.503517][T16159]  diag_print_insn_context+0x433/0xd00
[  240.503534][T16159]  ? __pfx_diag_print_insn_context+0x10/0x10
[  240.503546][T16159]  ? __pfx_diag_write+0x10/0x10
[  240.503555][T16159]  ? __pfx_disasm_print+0x10/0x10
[  240.503564][T16159]  ? __pfx_disasm_kfunc_name+0x10/0x10
[  240.503575][T16159]  ? diag_print_wrapped_prefixed+0x207/0x240
[  240.503588][T16159]  bpf_diag_source+0x639/0x18d0
[  240.503598][T16159]  ? vsnprintf+0xe42/0xef0
[  240.503612][T16159]  ? vscnprintf+0x5c/0x90
[  240.503621][T16159]  ? bpf_verifier_vlog+0x3d1/0x900
[  240.503632][T16159]  ? __pfx_bpf_diag_source+0x10/0x10
[  240.503646][T16159]  ? __pfx_diag_write+0x10/0x10
[  240.503657][T16159]  ? kfree+0x1c5/0x650
[  240.503668][T16159]  ? bpf_diag_program_structure+0x28a/0x430
[  240.503679][T16159]  bpf_diag_program_structure+0x31c/0x430
[  240.503690][T16159]  ? verbose+0x11d/0x1a0
[  240.503705][T16159]  ? __pfx_bpf_diag_program_structure+0x10/0x10
[  240.503716][T16159]  ? bpf_prepare_btf_info+0x639/0x1200
[  240.503726][T16159]  ? rcu_is_watching+0x16/0xb0
[  240.503739][T16159]  check_subprogs+0x66b/0x740
[  240.503752][T16159]  bpf_check+0x17ba/0x2e10
[  240.503764][T16159]  ? ktime_get_with_offset+0x93/0x2d0
[  240.503773][T16159]  ? __pfx_bpf_check+0x10/0x10
[  240.503781][T16159]  ? bpf_obj_name_cpy+0x194/0x1e0
[  240.503793][T16159]  bpf_prog_load+0x14d6/0x1c20
[  240.503806][T16159]  ? __pfx_bpf_prog_load+0x10/0x10
[  240.503825][T16159]  __sys_bpf+0xd0d/0xd90
[  240.503837][T16159]  ? __pfx___sys_bpf+0x10/0x10
[  240.503873][T16159]  ? do_futex+0x3e7/0x4e0
[  240.503896][T16159]  ? rcu_is_watching+0x16/0xb0
[  240.503908][T16159]  __x64_sys_bpf+0xba/0xd0
[  240.503917][T16159]  do_syscall_64+0x166/0x520
[  240.503930][T16159]  ? trace_irq_disable+0x3b/0x140
[  240.503937][T16159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.503947][T16159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.503955][T16159] RIP: 0033:0x7fdd15f9e159
[  240.503964][T16159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.503971][T16159] RSP: 002b:00007fdd16e11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  240.503981][T16159] RAX: ffffffffffffffda RBX: 00007fdd16225fa0 RCX: 00007fdd15f9e159
[  240.503987][T16159] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[  240.503992][T16159] RBP: 00007fdd16035024 R08: 0000000000000000 R09: 0000000000000000
[  240.503996][T16159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.504023][T16159] R13: 00007fdd16226038 R14: 00007fdd16225fa0 R15: 00007ffd8ce9fe58
[  240.504035][T16159]  </TASK>
[  240.511871][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4641'.
[  240.512426][T16151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4640'.
[  240.517211][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4641'.
[  240.521360][T16159] ---[ end trace ]---
[  240.521375][T16159] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  240.622868][T16159] CPU: 0 UID: 0 PID: 16159 Comm: syz.1.4642 Not tainted syzkaller #0 PREEMPT(full) 
[  240.625888][T16159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.629508][T16159] Call Trace:
[  240.630781][T16159]  <TASK>
[  240.632019][T16159]  vpanic+0x56d/0xa60
[  240.633639][T16159]  ? __pfx_vpanic+0x10/0x10
[  240.635484][T16159]  ? irqentry_exit+0x218/0x910
[  240.637407][T16159]  panic+0xc5/0xd0
[  240.638916][T16159]  ? __pfx_panic+0x10/0x10
[  240.640432][T16159]  ? __pfx__printk+0x10/0x10
[  240.642013][T16159]  check_panic_on_warn+0x89/0xb0
[  240.643692][T16159]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[  240.645520][T16159]  print_bpf_insn+0x21f1/0x2910
[  240.647076][T16159]  ? __pfx_disasm_print+0x10/0x10
[  240.648678][T16159]  ? __pfx_print_bpf_insn+0x10/0x10
[  240.650317][T16159]  ? bpf_verifier_vlog+0x3d1/0x900
[  240.651951][T16159]  diag_print_insn_context+0x433/0xd00
[  240.653686][T16159]  ? __pfx_diag_print_insn_context+0x10/0x10
[  240.655581][T16159]  ? __pfx_diag_write+0x10/0x10
[  240.657116][T16159]  ? __pfx_disasm_print+0x10/0x10
[  240.658696][T16159]  ? __pfx_disasm_kfunc_name+0x10/0x10
[  240.660524][T16159]  ? diag_print_wrapped_prefixed+0x207/0x240
[  240.662485][T16159]  bpf_diag_source+0x639/0x18d0
[  240.664149][T16159]  ? vsnprintf+0xe42/0xef0
[  240.665651][T16159]  ? vscnprintf+0x5c/0x90
[  240.667107][T16159]  ? bpf_verifier_vlog+0x3d1/0x900
[  240.668896][T16159]  ? __pfx_bpf_diag_source+0x10/0x10
[  240.670733][T16159]  ? __pfx_diag_write+0x10/0x10
[  240.672356][T16159]  ? kfree+0x1c5/0x650
[  240.673763][T16159]  ? bpf_diag_program_structure+0x28a/0x430
[  240.675748][T16159]  bpf_diag_program_structure+0x31c/0x430
[  240.677866][T16159]  ? verbose+0x11d/0x1a0
[  240.679386][T16159]  ? __pfx_bpf_diag_program_structure+0x10/0x10
[  240.681544][T16159]  ? bpf_prepare_btf_info+0x639/0x1200
[  240.683423][T16159]  ? rcu_is_watching+0x16/0xb0
[  240.685017][T16159]  check_subprogs+0x66b/0x740
[  240.686610][T16159]  bpf_check+0x17ba/0x2e10
[  240.688128][T16159]  ? ktime_get_with_offset+0x93/0x2d0
[  240.689989][T16159]  ? __pfx_bpf_check+0x10/0x10
[  240.691607][T16159]  ? bpf_obj_name_cpy+0x194/0x1e0
[  240.693276][T16159]  bpf_prog_load+0x14d6/0x1c20
[  240.694933][T16159]  ? __pfx_bpf_prog_load+0x10/0x10
[  240.696616][T16159]  __sys_bpf+0xd0d/0xd90
[  240.698056][T16159]  ? __pfx___sys_bpf+0x10/0x10
[  240.699732][T16159]  ? do_futex+0x3e7/0x4e0
[  240.701316][T16159]  ? rcu_is_watching+0x16/0xb0
[  240.703051][T16159]  __x64_sys_bpf+0xba/0xd0
[  240.704489][T16159]  do_syscall_64+0x166/0x520
[  240.706273][T16159]  ? trace_irq_disable+0x3b/0x140
[  240.708154][T16159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.710232][T16159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.712185][T16159] RIP: 0033:0x7fdd15f9e159
[  240.713825][T16159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.720284][T16159] RSP: 002b:00007fdd16e11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  240.723566][T16159] RAX: ffffffffffffffda RBX: 00007fdd16225fa0 RCX: 00007fdd15f9e159
[  240.726456][T16159] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[  240.729634][T16159] RBP: 00007fdd16035024 R08: 0000000000000000 R09: 0000000000000000
[  240.732782][T16159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.735962][T16159] R13: 00007fdd16226038 R14: 00007fdd16225fa0 R15: 00007ffd8ce9fe58
[  240.738881][T16159]  </TASK>
[  240.740670][T16159] Kernel Offset: disabled
[  240.742178][T16159] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:25:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=00000000000003fd RCX=0000000000000008 RDX=0000000000000008
RSI=ffff888114c80c28 RDI=ffff888114c80000 RBP=91e83877cf8491af RSP=ffffc90004846f80
R8 =00000000000003fd R9 =0000000000000020 R10=0000000000000000 R11=ffffffff81a38c10
R12=0000000000000354 R13=ffffffff94406fe0 R14=ffff888114c80c28 R15=ffffffff9729b188
RIP=ffffffff81a33662 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd07d4fd800 ffffffff 00c00000
GS =0000 ffff88818d6d8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000558a38a5c000 CR3=00000001bb454000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0af6ddf582215000 RBX=0000000000000206 RCX=8000000000000100 RDX=ffffffff9112a001
RSI=ffffffff8e6fcd61 RDI=ffffffff8c6d9480 RBP=ffff8881604b65d8 RSP=ffffc900001e7608
R8 =ffffc900001e7d88 R9 =0000000000000000 R10=ffffc900001e7738 R11=fffff5200003cee9
R12=0000000000000001 R13=0000000000000001 R14=ffffffff8ed5c6e0 R15=ffff8881604b5a00
RIP=ffffffff81a34ec1 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a8cd8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=00000001b71ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=dc089f9caece22c7 f9b78f541c13d566
XMM06=56eb3f92b6734e6a 8f157ccbd3417187 XMM07=cedb7318dc3947b5 9de94ea975412dc1
XMM08=81035640438a52ad ea73230aaf5d3986 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
