last executing test programs:

1m50.993813601s ago: executing program 0 (id=1134):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)

1m50.99283331s ago: executing program 0 (id=1135):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18)
connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18)
sendmmsg$inet(r1, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)="c952db941aae9f2cc687fa93540206bc81ff1c4122b62ab57619da9882499cc76abd6bcd496be62a0d8787f7f6a13c4fa30f3dc09c2852a61f79449e0b68378e0755370e00ed5201ce7c3e02dd219a9b06ecec09d497ec17e882758e0634888b6929e403177a2f049df97fe2ee2e659316def969cf98f3ae36a1670137f202156039784944cc40a260b28bd746f1a6089ad6071ab31e2a335a2a91b536649111961d7a4f4251705752a7b7dd4c6b4ee46fde00de48e5f459b37510806d", 0xbd}], 0x1}}], 0x1, 0x20000010)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/189, 0xbd}, {0x0}], 0x2}}], 0x1, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x401, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004114}, 0x800)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f00000001c0)=0x7f, 0x4)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000002c0)={0x0, 0x0}, 0x10)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendto$inet(r0, 0x0, 0x0, 0xc804, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='xprtrdma_frwr_maperr\x00', r9, 0x0, 0x3}, 0x18)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="68377863ac0225eb1646b966575a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78db91e8e4428b3cda4cca9d89ab6d341d145acf249276dda272407bc98c9e5431316d468b9e4750f2316589dc4de3156b92d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd814ec000000000000e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f0000000b40)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec", 0xe7}, {&(0x7f0000001080)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f808d3907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901ba7b32c2f8b64909bc77cebdb3d1fe42679c0bad81bbc987e4dc146cabce802cfbb1bd48bdfa1788a9cd0e2c10d97bfd158374cf6166d1d1fe69de0d7af1f82a10852bf4f191d4405d2d8f11a2d2b8316b0b82f13b666efdf680525e32fd01b43af093ff773f7f6b0ae0dab56f6e7bbebb2cd23bb5e6204ad488f6943ceae409f980b034e00", 0xbe}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad", 0x9d}], 0x4}}], 0x1, 0xc0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1m50.073702122s ago: executing program 0 (id=1137):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYRES16=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042800c00018006000600800a0000090002800400148056000000e3c664590c21d0245e2908c2"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206010600000000000000000c0000000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274000000"], 0x58}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206010600000000000000000c0000000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274000000"], 0x58}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="8000b2000a000200aaaaaaaaaa1c0000"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40800)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) (async)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000240012800b000100627200000600270000000000"], 0x44}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0xfe}]}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, 0x0, 0x4000000) (async)
sendmsg$nl_route(r9, 0x0, 0x4000000)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8=r4, @ANYRES64=r8], 0x50) (async)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8=r4, @ANYRES64=r8], 0x50)
r10 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000005c0)=""/172, 0xac}], 0x4}, 0x0) (async)
recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000005c0)=""/172, 0xac}], 0x4}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000100001080000000000000000000000006a10370ef0d5617e05e253ec03f1959176a035bdfa07126626566a7160418e94208e", @ANYRES32=0x0, @ANYBLOB="2a1004000000000008001b0000000000"], 0x28}}, 0x4000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
socket$vsock_stream(0x28, 0x1, 0x0)

1m49.953950521s ago: executing program 0 (id=1138):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}}, &(0x7f0000000200)='syzkaller\x00', 0x5}, 0x90)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}}, &(0x7f0000000200)='syzkaller\x00', 0x5}, 0x90) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async)

1m49.953546588s ago: executing program 0 (id=1139):
r0 = socket(0x10, 0x3, 0x0)
getsockopt(r0, 0x800, 0x8, &(0x7f00000001c0)=""/244, &(0x7f0000000000)=0xf4)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x800)

1m49.893307997s ago: executing program 0 (id=1140):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x79}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
socket$inet6(0xa, 0x2, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xe4, 0x8}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xe4, 0x8}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}}, 0x0)
bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
recvmmsg(r2, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x34e}], 0x1, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000431d750040000000400000000200000000000000000000090400000000000000000000010500000000000001000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000431d750040000000400000000200000000000000000000090400000000000000000000010500000000000001000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28)
socket$packet(0x11, 0x3, 0x300) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
socket$kcm(0x2, 0xa, 0x73)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)='T', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="bc", 0x1}], 0x1}}], 0x2, 0xc8000)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
connect$can_j1939(r7, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0xff, 0x3}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r9, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) (async)
connect$unix(r9, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e)

1m34.865288068s ago: executing program 32 (id=1140):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x79}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
socket$inet6(0xa, 0x2, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xe4, 0x8}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xe4, 0x8}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}}, 0x0)
bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
recvmmsg(r2, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x34e}], 0x1, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000431d750040000000400000000200000000000000000000090400000000000000000000010500000000000001000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000431d750040000000400000000200000000000000000000090400000000000000000000010500000000000001000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28)
socket$packet(0x11, 0x3, 0x300) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
socket$kcm(0x2, 0xa, 0x73)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)='T', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="bc", 0x1}], 0x1}}], 0x2, 0xc8000)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
connect$can_j1939(r7, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0xff, 0x3}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r9, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) (async)
connect$unix(r9, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e)

45.4798717s ago: executing program 1 (id=987):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
socket$inet6(0xa, 0x3, 0x3a)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000100000001"], 0xfdef)

38.111828173s ago: executing program 1 (id=987):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
socket$inet6(0xa, 0x3, 0x3a)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000100000001"], 0xfdef)

29.29882708s ago: executing program 1 (id=987):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
socket$inet6(0xa, 0x3, 0x3a)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000100000001"], 0xfdef)

21.344391347s ago: executing program 1 (id=987):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
socket$inet6(0xa, 0x3, 0x3a)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000100000001"], 0xfdef)

13.627614508s ago: executing program 1 (id=987):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
socket$inet6(0xa, 0x3, 0x3a)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000100000001"], 0xfdef)

5.807423249s ago: executing program 1 (id=987):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
socket$inet6(0xa, 0x3, 0x3a)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000100000001"], 0xfdef)

2.082017487s ago: executing program 2 (id=1935):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="7c02000013002904000000000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c40105"], 0x27c}}, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000080)={'xfrm0\x00', 0x600}) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce)

1.912349593s ago: executing program 2 (id=1938):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYBLOB="c3dddc6165d87483f65f0cd7bbc0f744831357548206f65bc4a07402e53696ddda5dd3e24d3e0e84e8137c350dd3bf78e600a8005bcc30215c32ca3cdcd4db6e5dd23415f4f2b26010b6575409037468001f348ea6ed3c3e9e1a13721323b9063201836d40b76bded1a42a6d6ec647200fb81d1fd5f7c5b4fbfb8ae3c04454c05b3f87ccf9a0dca8f8059b5623bf99128e5ccac0c082a8b4f6a6ac1a19fbd127e900d23ef3", @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x18)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)

1.851173706s ago: executing program 2 (id=1939):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}], 0x1c)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000000))
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x48840)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80)
getpeername(r1, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x2}, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000180)=0x10)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r3)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r4, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048004}, 0x4)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4)

972.256249ms ago: executing program 2 (id=1943):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) (async)
shutdown(r0, 0x1) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0xa00, 0x0, 0x0) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000180)=0x8) (rerun: 64)

900.815881ms ago: executing program 2 (id=1944):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x8, 0x8}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500f80005000000ff000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r6}, 0x10)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
close(r8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r4}, &(0x7f0000000900), &(0x7f0000000940)=r3}, 0x20)
r9 = socket$kcm(0x2, 0xa, 0x2)
syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @broadcast}}}}}, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x7)
bind$ax25(r10, &(0x7f0000000080)={{0x3, @default, 0x8}, [@null, @bcast, @default, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$ax25(r10, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef)
socket(0x2, 0x5, 0x8)

148.838446ms ago: executing program 3 (id=1953):
pipe(0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0xfe, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfffff000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0)

92.191979ms ago: executing program 3 (id=1954):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

91.580612ms ago: executing program 3 (id=1955):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)={0xd5c, r1, 0x1, 0x70bd29, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xd04, 0x8, 0x0, 0x1, [{0x274, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7e126ac19649b1a3803964a2b7853143ab8a1814f7978ab9dbfb8cb005c33ee"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x204, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x8}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x7f}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4f4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x101}}]}, {0x4f8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4f4, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x45c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ALLOWEDIPS={0x430, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0xfd, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x100, @remote, 0x7}}]}, {0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @private1}}]}]}]}, 0xd5c}, 0x1, 0x0, 0x0, 0x844}, 0x8800)

40.042372ms ago: executing program 3 (id=1956):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vlan0\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000c1) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000c1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x9b84, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x9b84, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000180)=@buf="f0b29c49114183ca5fa9ff669d1862ddba403490ce0152824789ef55", 0x2}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xbf4}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000020}, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_getvlan={0x0, 0x72, 0x400, 0x70bd25, 0x25dfdbf5, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0xffffffffffffff8f, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x2000c800) (async)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_getvlan={0x0, 0x72, 0x400, 0x70bd25, 0x25dfdbf5, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0xffffffffffffff8f, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x2000c800)

38.718306ms ago: executing program 3 (id=1957):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x4, @multicast}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r3=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.539415ms ago: executing program 2 (id=1958):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14}]}]}]}], {0x14}}, 0x80}, 0x1, 0x1000000}, 0x4000000)

0s ago: executing program 3 (id=1959):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x198, 0x4, 0x9, 0x2, 0x68}, 0xb, 0x1, 0x5, 0x1, 0x5, 0x16, 0x15, 0x1d, 0x6, 0x4, {0x5, 0xb, 0x41, 0x0, 0x16, 0x3ff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00'})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000001280), 0x8, r3}, 0x38)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=0x4)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$cgroup_subtree(r5, &(0x7f0000000700)=ANY=[], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000000080)='GPL\x00', 0xbd7, 0x7, &(0x7f00000000c0)=""/7, 0x41100, 0x0, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000180)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xa, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r6, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000003000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca910000000000035090100000000009500000000000000b702000000000000739af8ff00000000b5090000000000007baaf8ff00000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7090000080000004608f0ff76000000180100002020752500000000002020207b94f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000007f9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

kernel console output (not intermixed with test programs):

r after parsing attributes in process `syz.2.1215'.
[  140.666683][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  140.670954][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  140.678174][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  140.682485][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  140.688801][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  140.733206][T10349] lo speed is unknown, defaulting to 1000
[  140.979079][T10377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.997872][T10349] chnl_net:caif_netlink_parms(): no params data found
[  141.022524][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.069779][T10389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1226'.
[  141.074304][T10349] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.076678][T10349] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.079263][T10349] bridge_slave_0: entered allmulticast mode
[  141.082713][T10349] bridge_slave_0: entered promiscuous mode
[  141.086491][T10349] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.089200][T10349] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.091900][T10349] bridge_slave_1: entered allmulticast mode
[  141.095162][T10349] bridge_slave_1: entered promiscuous mode
[  141.113519][T10349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.118773][T10349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.142722][T10349] team0: Port device team_slave_0 added
[  141.147011][T10349] team0: Port device team_slave_1 added
[  141.166248][T10349] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.168963][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.178207][T10349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.184250][T10349] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.187585][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.196252][T10349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.233400][T10349] hsr_slave_0: entered promiscuous mode
[  141.239483][T10349] hsr_slave_1: entered promiscuous mode
[  141.242392][T10349] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  141.245860][T10349] Cannot create hsr debugfs directory
[  141.426287][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.491255][T10405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1232'.
[  141.512322][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.522530][T10405] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1232'.
[  141.577204][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  141.580746][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  141.591859][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  141.596479][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  141.599986][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  141.635445][   T13] bridge_slave_1: left allmulticast mode
[  141.637295][   T13] bridge_slave_1: left promiscuous mode
[  141.639428][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.643291][   T13] bridge_slave_0: left allmulticast mode
[  141.646470][   T13] bridge_slave_0: left promiscuous mode
[  141.648406][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.860509][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.867406][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.872712][   T13] bond0 (unregistering): Released all slaves
[  141.955887][T10420] netlink: 'syz.2.1235': attribute type 30 has an invalid length.
[  141.960295][T10411] lo speed is unknown, defaulting to 1000
[  141.965034][T10421] netlink: 'syz.2.1235': attribute type 30 has an invalid length.
[  142.008121][T10420] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.011726][T10420] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.015476][T10420] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.019034][T10420] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.029035][T10420] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.032531][T10420] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.036163][T10420] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.039613][T10420] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.093911][T10421] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.097423][T10421] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.100777][T10421] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.104423][T10421] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.117508][T10421] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.121678][T10421] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.125598][T10421] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.129205][T10421] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.434457][T10411] chnl_net:caif_netlink_parms(): no params data found
[  142.471482][   T13] hsr_slave_0: left promiscuous mode
[  142.473955][   T13] hsr_slave_1: left promiscuous mode
[  142.476162][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.478649][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.481393][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.492845][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.507156][   T13] veth1_macvtap: left promiscuous mode
[  142.509551][   T13] veth0_macvtap: left promiscuous mode
[  142.511561][   T13] veth1_vlan: left promiscuous mode
[  142.513244][   T13] veth0_vlan: left promiscuous mode
[  142.723721][ T5818] Bluetooth: hci0: command tx timeout
[  142.796077][   T13] team0 (unregistering): Port device team_slave_1 removed
[  142.821803][   T13] team0 (unregistering): Port device team_slave_0 removed
[  143.261732][T10411] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.268637][T10411] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.276540][T10411] bridge_slave_0: entered allmulticast mode
[  143.282581][T10411] bridge_slave_0: entered promiscuous mode
[  143.289482][T10411] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.291890][T10411] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.296178][T10411] bridge_slave_1: entered allmulticast mode
[  143.304437][T10411] bridge_slave_1: entered promiscuous mode
[  143.309361][T10349] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  143.323100][T10349] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  143.355943][T10447] x9: renamed from bridge_slave_0
[  143.361936][T10349] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  143.398767][T10411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.415011][T10411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.415565][T10451] set match dimension is over the limit!
[  143.421153][T10349] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  143.509286][T10411] team0: Port device team_slave_0 added
[  143.532525][T10411] team0: Port device team_slave_1 added
[  143.617217][T10411] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.620222][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.650423][T10411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.658906][T10411] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.661840][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.676785][T10411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.684261][ T5818] Bluetooth: hci3: command tx timeout
[  143.739723][T10411] hsr_slave_0: entered promiscuous mode
[  143.742036][T10411] hsr_slave_1: entered promiscuous mode
[  143.802883][T10349] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.877020][T10475] lo speed is unknown, defaulting to 1000
[  143.917654][T10349] 8021q: adding VLAN 0 to HW filter on device team0
[  144.027861][ T8188] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.031085][ T8188] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.047629][T10411] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  144.082188][T10411] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  144.092308][T10411] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  144.124422][T10411] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  144.152654][ T8188] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.155921][ T8188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.289172][T10349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  144.387446][T10411] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.436655][T10411] 8021q: adding VLAN 0 to HW filter on device team0
[  144.457751][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.460883][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.476980][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.479945][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.568627][T10411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  144.571936][T10411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  144.618881][T10349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.651725][T10349] veth0_vlan: entered promiscuous mode
[  144.659011][T10349] veth1_vlan: entered promiscuous mode
[  144.747446][T10349] veth0_macvtap: entered promiscuous mode
[  144.762015][T10349] veth1_macvtap: entered promiscuous mode
[  144.807258][ T5818] Bluetooth: hci0: command tx timeout
[  144.886723][T10411] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.899015][T10349] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.922504][T10349] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.941199][T10349] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.945279][T10349] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.953801][T10349] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.957942][T10349] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.048007][T10411] veth0_vlan: entered promiscuous mode
[  145.065435][T10411] veth1_vlan: entered promiscuous mode
[  145.102088][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.103096][T10411] veth0_macvtap: entered promiscuous mode
[  145.106003][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.142640][T10411] veth1_macvtap: entered promiscuous mode
[  145.156764][ T8194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.160099][ T8194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.179825][T10411] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.200420][T10411] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.216607][T10411] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.219547][T10411] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.222371][T10411] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.236611][T10411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.309903][T10539] lo speed is unknown, defaulting to 1000
[  145.342556][ T8194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.349859][ T8194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.383961][ T8194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.389552][ T8194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.479234][T10544] netdevsim netdevsim3: Direct firmware load for 2Q failed with error -2
[  145.483276][T10544] netdevsim netdevsim3: Falling back to sysfs fallback for: 2Q
[  145.579568][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'.
[  145.733994][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'.
[  145.764137][ T5818] Bluetooth: hci3: command tx timeout
[  145.905866][T10557] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  145.910026][T10557] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  145.914737][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'.
[  145.985651][ T5846] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.546154][ T5846] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.842168][T10563] pim6reg1: entered promiscuous mode
[  146.844415][T10563] pim6reg1: entered allmulticast mode
[  146.943853][T10569] sctp: [Deprecated]: syz.3.1261 (pid 10569) Use of struct sctp_assoc_value in delayed_ack socket option.
[  146.943853][T10569] Use struct sctp_sack_info instead
[  146.955643][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  146.959600][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  146.966268][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  146.968984][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  146.971632][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  146.997451][T10573] lo speed is unknown, defaulting to 1000
[  147.036367][T10580] netlink: 'syz.3.1265': attribute type 10 has an invalid length.
[  147.048715][T10580] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  147.164617][T10585] lo speed is unknown, defaulting to 1000
[  147.241740][ T5846] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.287192][T10573] chnl_net:caif_netlink_parms(): no params data found
[  147.381392][T10573] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.384822][T10573] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.387390][T10573] bridge_slave_0: entered allmulticast mode
[  147.390473][T10573] bridge_slave_0: entered promiscuous mode
[  147.399428][T10573] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.402450][T10573] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.406081][T10573] bridge_slave_1: entered allmulticast mode
[  147.409199][T10573] bridge_slave_1: entered promiscuous mode
[  147.437522][T10573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.447041][T10573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.489711][ T5846] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.502483][T10573] team0: Port device team_slave_0 added
[  147.505561][T10595] openvswitch: netlink: Message has 2 unknown bytes.
[  147.507131][T10573] team0: Port device team_slave_1 added
[  147.508243][T10595] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.543225][T10573] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.550972][T10573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.571253][T10573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.582960][T10573] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.595508][T10573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.620221][T10573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.675131][T10573] hsr_slave_0: entered promiscuous mode
[  147.678690][T10573] hsr_slave_1: entered promiscuous mode
[  147.684552][T10573] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  147.687013][T10573] Cannot create hsr debugfs directory
[  147.763196][T10605] tipc: Started in network mode
[  147.773324][T10605] tipc: Node identity 4, cluster identity 4711
[  147.779137][T10605] tipc: Node number set to 4
[  147.783282][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'.
[  147.798754][ T5846] bridge_slave_1: left allmulticast mode
[  147.800692][ T5846] bridge_slave_1: left promiscuous mode
[  147.802620][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.819524][ T5846] bridge_slave_0: left allmulticast mode
[  147.822029][ T5846] bridge_slave_0: left promiscuous mode
[  147.827018][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.844478][ T5818] Bluetooth: hci3: command tx timeout
[  148.168842][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.175556][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.181001][ T5846] bond0 (unregistering): Released all slaves
[  148.442826][T10625] netlink: 436 bytes leftover after parsing attributes in process `syz.2.1274'.
[  148.652962][T10635] netlink: 'syz.2.1275': attribute type 10 has an invalid length.
[  148.847933][ T5846] hsr_slave_0: left promiscuous mode
[  148.850981][ T5846] hsr_slave_1: left promiscuous mode
[  148.854884][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.858635][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.862513][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.868327][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.893100][ T5846] veth1_macvtap: left promiscuous mode
[  148.895928][ T5846] veth0_macvtap: left promiscuous mode
[  148.898557][ T5846] veth1_vlan: left promiscuous mode
[  148.901074][ T5846] veth0_vlan: left promiscuous mode
[  149.054331][ T5818] Bluetooth: hci0: command tx timeout
[  149.228458][ T5846] team0 (unregistering): Port device team_slave_1 removed
[  149.251476][ T5846] team0 (unregistering): Port device team_slave_0 removed
[  149.530397][T10645] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1277'.
[  149.662969][T10573] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  149.683037][T10573] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  149.703133][T10573] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  149.721161][T10573] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  149.853524][T10573] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.876780][T10573] 8021q: adding VLAN 0 to HW filter on device team0
[  149.882128][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.884528][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.923730][ T5818] Bluetooth: hci3: command tx timeout
[  149.929940][T10672] netlink: 'syz.3.1283': attribute type 39 has an invalid length.
[  149.934010][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.936701][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.950577][T10657] netlink: 'syz.2.1281': attribute type 1 has an invalid length.
[  149.953085][T10657] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1281'.
[  150.352247][T10690] Bluetooth: MGMT ver 1.23
[  150.357935][T10573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.428137][T10573] veth0_vlan: entered promiscuous mode
[  150.438705][T10573] veth1_vlan: entered promiscuous mode
[  150.492075][T10573] veth0_macvtap: entered promiscuous mode
[  150.499539][T10573] veth1_macvtap: entered promiscuous mode
[  150.514291][T10573] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.520331][T10573] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.528569][T10573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.531808][T10573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.536165][T10573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.539072][T10573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.626299][ T8188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.635872][ T8188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.652461][T10697] netlink: 'syz.3.1289': attribute type 9 has an invalid length.
[  150.655917][T10697] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.1289'.
[  150.671132][ T8187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.675100][ T8187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.031771][T10714] gretap0: entered promiscuous mode
[  151.085828][T10716] netem: change failed
[  151.755295][T10723] netlink: 'syz.3.1297': attribute type 1 has an invalid length.
[  151.758508][T10723] netlink: 'syz.3.1297': attribute type 2 has an invalid length.
[  151.776638][T10723] netlink: 'syz.3.1297': attribute type 4 has an invalid length.
[  151.781629][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'.
[  152.136008][ T5644] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.149957][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'.
[  152.173964][T10735] openvswitch: netlink: nsh attr 12 is out of range max 3
[  152.177048][T10735] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.176276][T10742] netlink: 'syz.3.1304': attribute type 3 has an invalid length.
[  153.191278][T10742] netlink: 'syz.3.1304': attribute type 3 has an invalid length.
[  153.285302][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  153.289738][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  153.293284][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  153.296577][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  153.299572][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  153.321564][T10746] lo speed is unknown, defaulting to 1000
[  153.330973][T10751] syz.3.1307 uses old SIOCAX25GETINFO
[  153.375969][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1308'.
[  153.525673][T10746] chnl_net:caif_netlink_parms(): no params data found
[  153.576843][T10746] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.579350][T10746] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.581768][T10746] bridge_slave_0: entered allmulticast mode
[  153.584781][T10746] bridge_slave_0: entered promiscuous mode
[  153.588576][T10746] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.591076][T10746] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.593525][T10746] bridge_slave_1: entered allmulticast mode
[  153.596697][T10746] bridge_slave_1: entered promiscuous mode
[  153.636550][ T5644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.655867][T10746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.660917][T10746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.682401][T10746] team0: Port device team_slave_0 added
[  153.686462][T10746] team0: Port device team_slave_1 added
[  153.704992][T10746] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.707881][T10746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.718814][T10746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.724863][T10746] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.727342][T10746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.735955][T10746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.779820][T10746] hsr_slave_0: entered promiscuous mode
[  153.783000][T10746] hsr_slave_1: entered promiscuous mode
[  153.786488][T10746] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.789679][T10746] Cannot create hsr debugfs directory
[  153.862474][ T5644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.927128][ T5644] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.073985][ T5644] bridge_slave_1: left allmulticast mode
[  154.076090][ T5644] bridge_slave_1: left promiscuous mode
[  154.078071][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.088878][ T5644] bridge_slave_0: left allmulticast mode
[  154.090840][ T5644] bridge_slave_0: left promiscuous mode
[  154.100688][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.262052][T10773] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1313'.
[  154.339673][T10781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.342955][T10781] IPv6: NLM_F_CREATE should be set when creating new route
[  154.348482][T10781] Bluetooth: MGMT ver 1.23
[  154.351972][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'.
[  154.387853][ T5644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.392012][ T5644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.396345][ T5644] bond0 (unregistering): Released all slaves
[  154.504380][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1317'.
[  154.513840][T10786] nbd: illegal input index -381222912
[  154.628441][T10794] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1320'.
[  154.640620][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'.
[  154.659091][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'.
[  154.662282][T10801] bridge_slave_1: left allmulticast mode
[  154.664345][T10801] bridge_slave_1: left promiscuous mode
[  154.666446][T10801] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.687718][T10801] bridge_slave_0: left allmulticast mode
[  154.689772][T10801] bridge_slave_0: left promiscuous mode
[  154.697239][T10801] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.807805][ T5644] hsr_slave_0: left promiscuous mode
[  154.810277][ T5644] hsr_slave_1: left promiscuous mode
[  154.812392][ T5644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.815822][ T5644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.822314][ T5644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.826536][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'.
[  154.827281][ T5644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.840879][ T5644] veth1_macvtap: left promiscuous mode
[  154.842709][ T5644] veth0_macvtap: left promiscuous mode
[  154.845803][ T5644] veth1_vlan: left promiscuous mode
[  154.847588][ T5644] veth0_vlan: left promiscuous mode
[  155.194605][ T5644] team0 (unregistering): Port device team_slave_1 removed
[  155.218288][ T5644] team0 (unregistering): Port device team_slave_0 removed
[  155.364810][ T5823] Bluetooth: hci0: command tx timeout
[  155.455017][T10807] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  155.515927][T10746] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  155.526324][T10746] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  155.554132][T10746] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  155.564299][T10746] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  155.682875][T10746] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.726673][T10746] 8021q: adding VLAN 0 to HW filter on device team0
[  155.739288][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.741660][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.756898][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.759689][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.792514][T10746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  155.796903][T10746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  155.876862][T10746] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.957544][T10746] veth0_vlan: entered promiscuous mode
[  155.971277][T10746] veth1_vlan: entered promiscuous mode
[  155.980534][T10861] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  155.989373][T10861] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  156.011186][T10746] veth0_macvtap: entered promiscuous mode
[  156.018645][T10746] veth1_macvtap: entered promiscuous mode
[  156.040160][T10746] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.050378][T10746] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.057984][T10868] policy can only be matched on NF_INET_PRE_ROUTING
[  156.057996][T10868] unable to load match
[  156.064483][T10746] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.068347][T10746] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.071723][T10746] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.077004][T10746] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.167750][ T8187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.170373][ T8187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.198693][ T8185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.201338][ T8185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.240148][ T8501] hid-generic 0005:0B57:00AA.0002: collection stack underflow
[  156.248477][ T8501] hid-generic 0005:0B57:00AA.0002: item 0 0 0 12 parsing failed
[  156.253337][ T8501] hid-generic 0005:0B57:00AA.0002: probe with driver hid-generic failed with error -22
[  156.525181][T10887] netlink: 'syz.2.1345': attribute type 1 has an invalid length.
[  157.861025][T10904] __nla_validate_parse: 10 callbacks suppressed
[  157.861041][T10904] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1351'.
[  158.886817][ T5846] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.989560][T10933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1362'.
[  159.994480][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1362'.
[  159.997813][T10931] x_tables: unsorted entry at hook 2
[  160.148025][ T5846] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.236543][ T5846] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.249059][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  160.253376][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  160.257773][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  160.261394][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  160.267628][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  160.317305][T10946] lo speed is unknown, defaulting to 1000
[  160.376287][ T5846] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.498455][T10963] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[  160.566221][T10965] syzkaller0: entered promiscuous mode
[  160.568129][T10965] syzkaller0: entered allmulticast mode
[  161.589105][ T5846] bridge_slave_1: left allmulticast mode
[  161.591531][ T5846] bridge_slave_1: left promiscuous mode
[  161.600702][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.608040][ T5846] bridge_slave_0: left allmulticast mode
[  161.609971][ T5846] bridge_slave_0: left promiscuous mode
[  161.612071][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.929119][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.936365][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.941731][ T5846] bond0 (unregistering): Released all slaves
[  161.995563][T10981] bond1: entered promiscuous mode
[  161.997848][T10981] 8021q: adding VLAN 0 to HW filter on device bond1
[  162.129892][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1375'.
[  162.202211][T10946] chnl_net:caif_netlink_parms(): no params data found
[  162.328054][ T5818] Bluetooth: hci0: command tx timeout
[  162.637678][T10946] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.640412][T10946] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.656503][T10946] bridge_slave_0: entered allmulticast mode
[  162.675044][T10946] bridge_slave_0: entered promiscuous mode
[  162.699260][ T5846] hsr_slave_0: left promiscuous mode
[  162.702966][ T5846] hsr_slave_1: left promiscuous mode
[  162.710706][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.715698][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.784934][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.787690][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.810275][ T5846] veth1_macvtap: left promiscuous mode
[  162.812485][ T5846] veth0_macvtap: left promiscuous mode
[  162.816250][ T5846] veth1_vlan: left promiscuous mode
[  162.819557][ T5846] veth0_vlan: left promiscuous mode
[  163.162729][ T5846] team0 (unregistering): Port device team_slave_1 removed
[  163.187866][ T5846] team0 (unregistering): Port device team_slave_0 removed
[  163.525628][T10946] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.528226][T10946] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.530700][T10946] bridge_slave_1: entered allmulticast mode
[  163.534158][T10946] bridge_slave_1: entered promiscuous mode
[  163.590789][T10946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.614411][T10946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.628061][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1381'.
[  163.682029][T10946] team0: Port device team_slave_0 added
[  163.688023][T10946] team0: Port device team_slave_1 added
[  163.752476][T10946] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.760200][T11028] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1382'.
[  163.763246][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.779854][T10946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.785917][T10946] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.788340][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.819816][T10946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.861840][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'.
[  163.881468][T10946] hsr_slave_0: entered promiscuous mode
[  163.887514][T10946] hsr_slave_1: entered promiscuous mode
[  163.889667][T10946] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.892138][T10946] Cannot create hsr debugfs directory
[  163.939611][T11036] netlink: 'syz.2.1384': attribute type 5 has an invalid length.
[  164.403906][ T5818] Bluetooth: hci0: command tx timeout
[  164.557300][T11065] lo speed is unknown, defaulting to 1000
[  164.617584][T10946] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  164.632461][T10946] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  164.636958][T10946] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  164.648199][T10946] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  164.736605][T10946] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.752986][T10946] 8021q: adding VLAN 0 to HW filter on device team0
[  164.766290][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.768875][ T8185] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.782939][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.785288][ T8185] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.909392][T11069] lo speed is unknown, defaulting to 1000
[  165.027441][T10946] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.059313][T11081] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1391'.
[  165.079607][T10946] veth0_vlan: entered promiscuous mode
[  165.099741][T10946] veth1_vlan: entered promiscuous mode
[  165.148868][T10946] veth0_macvtap: entered promiscuous mode
[  165.190646][T10946] veth1_macvtap: entered promiscuous mode
[  165.240640][T10946] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.254699][T10946] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.317775][T10946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.326728][T10946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.330575][T10946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.335398][T10946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.385235][T11065] Bluetooth: MGMT ver 1.23
[  165.500177][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.502761][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.551630][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.555054][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.671691][T11111] IPv6: NLM_F_CREATE should be specified when creating new route
[  165.802142][T11118] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1396'.
[  165.810824][T11118] netlink: zone id is out of range
[  165.823755][T11118] netlink: zone id is out of range
[  165.825942][T11118] netlink: zone id is out of range
[  165.828152][T11118] netlink: zone id is out of range
[  165.830192][T11118] netlink: zone id is out of range
[  165.843849][T11118] netlink: zone id is out of range
[  165.845986][T11118] netlink: zone id is out of range
[  165.848056][T11118] netlink: zone id is out of range
[  165.850079][T11118] netlink: zone id is out of range
[  165.852412][T11118] netlink: zone id is out of range
[  165.941790][T11128] lo speed is unknown, defaulting to 1000
[  170.243549][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.398611][T11152] netlink: 'syz.3.1401': attribute type 21 has an invalid length.
[  171.401371][T11152] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1401'.
[  171.401803][T11153] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  171.411188][T11153] net_ratelimit: 10 callbacks suppressed
[  171.411199][T11153] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  171.420962][T11152] netlink: 'syz.3.1401': attribute type 5 has an invalid length.
[  171.425736][T11152] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1401'.
[  171.431833][T11153] lo speed is unknown, defaulting to 1000
[  171.468417][T11155] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1402'.
[  171.561913][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  171.565785][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  171.568899][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  171.575858][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  171.578779][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  171.658471][T11161] lo speed is unknown, defaulting to 1000
[  171.773532][T11169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1406'.
[  171.824695][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.843939][T11175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1407'.
[  171.847321][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1407'.
[  171.881890][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.931517][T11175] netlink: 'syz.2.1407': attribute type 4 has an invalid length.
[  171.938643][   T10] lo speed is unknown, defaulting to 1000
[  171.941011][   T10] syz0: Port: 1 Link ACTIVE
[  171.946042][ T5853] lo speed is unknown, defaulting to 1000
[  171.967194][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.982009][T11161] chnl_net:caif_netlink_parms(): no params data found
[  172.161942][T11184] netdevsim0: left promiscuous mode
[  172.185887][T11184] bond0: left promiscuous mode
[  172.188122][T11184] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  172.196521][T11184] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.200187][T11184] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  172.207806][T11161] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.211654][T11161] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.217712][T11161] bridge_slave_0: entered allmulticast mode
[  172.221887][T11161] bridge_slave_0: entered promiscuous mode
[  172.227291][   T12] bridge_slave_1: left allmulticast mode
[  172.230448][   T12] bridge_slave_1: left promiscuous mode
[  172.233093][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.240643][   T12] bridge_slave_0: left allmulticast mode
[  172.243052][   T12] bridge_slave_0: left promiscuous mode
[  172.246468][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.540962][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.550239][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.555230][   T12] bond0 (unregistering): Released all slaves
[  172.573940][T11161] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.579545][T11161] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.582509][T11161] bridge_slave_1: entered allmulticast mode
[  172.587115][T11161] bridge_slave_1: entered promiscuous mode
[  172.634116][T11161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.640410][T11161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.673558][T11161] team0: Port device team_slave_0 added
[  172.710802][T11192] x_tables: duplicate underflow at hook 1
[  172.767582][T11161] team0: Port device team_slave_1 added
[  172.825601][T11199] xt_policy: too many policy elements
[  172.857120][T11161] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.859831][T11161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.870130][T11161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.875723][T11161] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.877908][T11161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.887935][T11161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.951836][T11161] hsr_slave_0: entered promiscuous mode
[  172.968769][T11161] hsr_slave_1: entered promiscuous mode
[  172.983854][T11161] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.986350][T11161] Cannot create hsr debugfs directory
[  173.078205][   T12] hsr_slave_0: left promiscuous mode
[  173.085747][   T12] hsr_slave_1: left promiscuous mode
[  173.088772][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.091357][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.095971][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.098289][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.107586][   T12] veth1_macvtap: left promiscuous mode
[  173.109467][   T12] veth0_macvtap: left promiscuous mode
[  173.111363][   T12] veth1_vlan: left promiscuous mode
[  173.113108][   T12] veth0_vlan: left promiscuous mode
[  173.396442][   T12] team0 (unregistering): Port device team_slave_1 removed
[  173.426640][   T12] team0 (unregistering): Port device team_slave_0 removed
[  173.603820][ T5823] Bluetooth: hci0: command tx timeout
[  173.897764][T11223] pim6reg1: entered promiscuous mode
[  173.900102][T11223] pim6reg1: entered allmulticast mode
[  173.962395][T11231] ip6t_srh: unknown srh match flags  4000
[  174.037840][T11234] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[  174.130940][T11239] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1421'.
[  174.263175][T11244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1423'.
[  174.301859][T11244] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  174.425177][T11161] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  174.452959][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1426'.
[  174.467389][T11161] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  174.478404][T11161] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  174.488816][T11161] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  174.555074][T11161] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.568486][T11161] 8021q: adding VLAN 0 to HW filter on device team0
[  174.573475][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.575931][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.584211][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.586647][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.687875][T11161] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.711565][T11161] veth0_vlan: entered promiscuous mode
[  174.717486][T11161] veth1_vlan: entered promiscuous mode
[  174.734625][T11161] veth0_macvtap: entered promiscuous mode
[  174.739051][T11161] veth1_macvtap: entered promiscuous mode
[  174.748806][T11161] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.757162][T11161] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.763501][T11161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.766748][T11161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.770755][T11161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.774932][T11161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.830166][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.832791][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.862374][ T8185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.866752][ T8185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.223557][T11289] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1430'.
[  175.317458][T11292] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  175.320154][T11292] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.372676][T11297] sctp: [Deprecated]: syz.2.1432 (pid 11297) Use of int in max_burst socket option deprecated.
[  175.372676][T11297] Use struct sctp_assoc_value instead
[  175.529790][T11303] x_tables: duplicate underflow at hook 1
[  175.532249][T11303] x_tables: duplicate underflow at hook 1
[  175.537889][T11303] x_tables: duplicate underflow at hook 1
[  175.543753][T11303] x_tables: duplicate underflow at hook 1
[  175.545648][T11303] x_tables: duplicate underflow at hook 1
[  175.547630][T11303] x_tables: duplicate underflow at hook 1
[  175.555041][T11303] x_tables: duplicate underflow at hook 1
[  175.557444][T11303] x_tables: duplicate underflow at hook 1
[  175.566156][T11303] x_tables: duplicate underflow at hook 1
[  175.577566][T11299] IPVS: Unknown mcast interface: bridge_slave_0
[  176.660323][T11340] __nla_validate_parse: 1 callbacks suppressed
[  176.660336][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'.
[  176.669806][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'.
[  176.782249][ T5644] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.056729][T11351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1447'.
[  178.227214][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  178.231927][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  178.236628][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  178.240576][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  178.247973][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  178.303115][T11363] lo speed is unknown, defaulting to 1000
[  178.317695][T11378] netlink: 'syz.2.1455': attribute type 1 has an invalid length.
[  178.357326][T11378] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  178.360084][T11378] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  178.362626][T11378] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  178.368217][T11378] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  178.372464][T11378] bond11: (slave geneve2): making interface the new active one
[  178.379345][T11378] bond11: (slave geneve2): Enslaving as an active interface with an up link
[  178.426396][ T5644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.436320][T11387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1455'.
[  178.458621][T11378] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link
[  178.466019][T11387] 8021q: adding VLAN 0 to HW filter on device bond11
[  178.519014][ T5644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.528346][T11378] syz.2.1455 (11378) used greatest stack depth: 19408 bytes left
[  178.588062][ T5644] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.720126][T11363] chnl_net:caif_netlink_parms(): no params data found
[  178.815841][ T5644] bridge_slave_1: left allmulticast mode
[  178.817782][ T5644] bridge_slave_1: left promiscuous mode
[  178.819729][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.842461][ T5644] bridge_slave_0: left allmulticast mode
[  178.846176][ T5644] bridge_slave_0: left promiscuous mode
[  178.848287][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.102573][ T5644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.107302][ T5644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.111161][ T5644] bond0 (unregistering): Released all slaves
[  179.161223][T11363] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.163921][T11363] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.166371][T11363] bridge_slave_0: entered allmulticast mode
[  179.169122][T11363] bridge_slave_0: entered promiscuous mode
[  179.180189][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'.
[  179.183410][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'.
[  179.185600][T11363] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.188115][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1466'.
[  179.189578][T11363] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.192441][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1466'.
[  179.195996][T11363] bridge_slave_1: entered allmulticast mode
[  179.204859][T11363] bridge_slave_1: entered promiscuous mode
[  179.257857][T11363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.262486][T11363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.304623][T11363] team0: Port device team_slave_0 added
[  179.349509][T11363] team0: Port device team_slave_1 added
[  179.434283][T11363] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.437163][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.450611][T11363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.469337][T11363] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.474060][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.506275][T11363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.641413][T11448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1470'.
[  179.650988][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'.
[  179.691597][ T5644] hsr_slave_0: left promiscuous mode
[  179.695592][ T5644] hsr_slave_1: left promiscuous mode
[  179.698029][ T5644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.700529][ T5644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.707431][ T5644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.710877][ T5644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.726917][ T5644] veth1_macvtap: left promiscuous mode
[  179.729332][ T5644] veth0_macvtap: left promiscuous mode
[  179.731716][ T5644] veth1_vlan: left promiscuous mode
[  179.733483][ T5644] veth0_vlan: left promiscuous mode
[  180.106699][ T5644] team0 (unregistering): Port device team_slave_1 removed
[  180.133436][ T5644] team0 (unregistering): Port device team_slave_0 removed
[  180.324089][ T5818] Bluetooth: hci0: command tx timeout
[  180.532656][T11455] sit1: entered promiscuous mode
[  180.553971][T11363] hsr_slave_0: entered promiscuous mode
[  180.556904][T11363] hsr_slave_1: entered promiscuous mode
[  180.559900][T11363] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  180.563054][T11363] Cannot create hsr debugfs directory
[  180.567794][ T5818] Bluetooth: hci1: command 0x0406 tx timeout
[  180.845339][T11472] netlink: 'syz.3.1477': attribute type 3 has an invalid length.
[  180.937716][T11472] netlink: 'syz.3.1477': attribute type 2 has an invalid length.
[  180.955078][T11472] : entered promiscuous mode
[  181.165493][T11487] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  181.185156][T11488] openvswitch: netlink: VXLAN extension 32 out of range max 1
[  181.442908][T11363] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  181.458765][T11363] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  181.466831][T11363] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  181.472811][T11363] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  181.530842][T11512] netlink: 'syz.2.1485': attribute type 10 has an invalid length.
[  181.623798][T11363] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.641026][T11363] 8021q: adding VLAN 0 to HW filter on device team0
[  181.649085][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.652045][ T8185] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.675170][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.677826][ T8185] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.721578][T11518] __nla_validate_parse: 4 callbacks suppressed
[  181.721597][T11518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1486'.
[  181.807263][T11525] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1487'.
[  181.832087][T11363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.862256][T11363] veth0_vlan: entered promiscuous mode
[  181.868620][T11363] veth1_vlan: entered promiscuous mode
[  181.887779][T11363] veth0_macvtap: entered promiscuous mode
[  181.892264][T11363] veth1_macvtap: entered promiscuous mode
[  181.901980][T11363] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.918226][T11363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.922220][T11363] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.928771][T11363] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.931698][T11363] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.941931][T11363] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.979762][T11532] netlink: 'syz.2.1488': attribute type 1 has an invalid length.
[  182.024270][T11532] 8021q: adding VLAN 0 to HW filter on device bond13
[  182.042118][ T8187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.045066][ T8187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.057626][T11537] trusted_key: syz.3.1489 sent an empty control message without MSG_MORE.
[  182.158686][ T8194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.172822][ T8194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.319287][T11556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1491'.
[  182.323209][T11556] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1491'.
[  182.413933][T11561] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  183.087317][T11575] xt_check_table_hooks: 24 callbacks suppressed
[  183.087329][T11575] x_tables: duplicate underflow at hook 1
[  183.418042][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'.
[  183.467965][T11597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1502'.
[  183.500959][T11600] netlink: 'syz.2.1503': attribute type 7 has an invalid length.
[  183.567099][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1504'.
[  183.583170][T11607] tipc: Enabled bearer <udp:syz2>, priority 10
[  183.615990][T11609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1506'.
[  183.761702][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1510'.
[  183.875508][T11193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.577429][   T51] tipc: Node number set to 3096997707
[  185.245432][T11644] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  185.427676][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  185.431466][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  185.437637][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  185.437669][T11193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.441058][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  185.450160][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  185.534260][T11193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.552605][T11651] lo speed is unknown, defaulting to 1000
[  185.657155][T11193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.715074][T11671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1523'.
[  185.818695][T11193] bridge_slave_1: left allmulticast mode
[  185.820541][T11193] bridge_slave_1: left promiscuous mode
[  185.822394][T11193] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.838098][T11193] bridge_slave_0: left allmulticast mode
[  185.840467][T11193] bridge_slave_0: left promiscuous mode
[  185.846101][T11193] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.963906][T11682] block nbd0: server does not support multiple connections per device.
[  185.968280][T11682] block nbd0: shutting down sockets
[  186.069510][T11193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.075426][T11193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.080042][T11193] bond0 (unregistering): Released all slaves
[  186.096068][T11651] chnl_net:caif_netlink_parms(): no params data found
[  186.291003][T11699] netlink: 'syz.3.1528': attribute type 1 has an invalid length.
[  186.339271][T11651] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.342176][T11651] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.349994][T11651] bridge_slave_0: entered allmulticast mode
[  186.352899][T11651] bridge_slave_0: entered promiscuous mode
[  186.381428][T11651] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.387581][T11651] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.390128][T11651] bridge_slave_1: entered allmulticast mode
[  186.396244][T11651] bridge_slave_1: entered promiscuous mode
[  186.476999][T11651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.501114][T11651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.528450][T11193] hsr_slave_0: left promiscuous mode
[  186.530677][T11193] hsr_slave_1: left promiscuous mode
[  186.532702][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.535327][T11193] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.538180][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.540556][T11193] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.551546][T11193] veth1_macvtap: left promiscuous mode
[  186.553354][T11193] veth0_macvtap: left promiscuous mode
[  186.555684][T11193] veth1_vlan: left promiscuous mode
[  186.557393][T11193] veth0_vlan: left promiscuous mode
[  186.877889][T11193] team0 (unregistering): Port device team_slave_1 removed
[  186.889176][    T9] page_pool_release_retry() stalled pool shutdown: id 46, 102 inflight 60 sec
[  186.907390][T11193] team0 (unregistering): Port device team_slave_0 removed
[  187.168247][T11712] __nla_validate_parse: 1 callbacks suppressed
[  187.168258][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1531'.
[  187.176706][T11651] team0: Port device team_slave_0 added
[  187.180160][T11651] team0: Port device team_slave_1 added
[  187.249502][T11651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.252475][T11651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.264155][T11651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.269942][T11651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.272792][T11651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.285172][T11651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.337211][T11726] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  187.355040][T11651] hsr_slave_0: entered promiscuous mode
[  187.361580][T11651] hsr_slave_1: entered promiscuous mode
[  187.369176][T11651] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.372324][T11651] Cannot create hsr debugfs directory
[  187.524602][ T5818] Bluetooth: hci0: command tx timeout
[  187.781368][T11742] netlink: 'syz.3.1536': attribute type 1 has an invalid length.
[  187.789931][T11742] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1536'.
[  188.041988][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'.
[  188.046568][T11755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1540'.
[  188.199891][T11651] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  188.221376][T11651] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  188.230597][T11651] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  188.240950][T11651] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  188.310279][T11764] bond0: (slave bond_slave_0): Releasing backup interface
[  188.320206][T11764] bond0: (slave bond_slave_1): Releasing backup interface
[  188.346469][T11764] team0: Port device team_slave_0 removed
[  188.362192][T11764] team0: Port device team_slave_1 removed
[  188.365745][T11764] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.369091][T11764] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.377026][T11764] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.380165][T11764] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.392445][T11764] bond0: (slave ): Releasing backup interface
[  188.429471][T11764] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1542'.
[  188.433268][T11764] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1542'.
[  188.482808][T11651] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.504739][T11651] 8021q: adding VLAN 0 to HW filter on device team0
[  188.517102][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.519725][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.526710][T11773] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1543'.
[  188.526810][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.533263][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.538814][T11773] wg1: entered allmulticast mode
[  188.797697][T11651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.857600][T11651] veth0_vlan: entered promiscuous mode
[  188.863167][T11800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  188.865619][T11800] IPv6: NLM_F_CREATE should be set when creating new route
[  188.873205][T11651] veth1_vlan: entered promiscuous mode
[  188.895640][T11803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1549'.
[  188.899290][T11799] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1548'.
[  188.915651][T11651] veth0_macvtap: entered promiscuous mode
[  188.929431][T11651] veth1_macvtap: entered promiscuous mode
[  188.947588][T11651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.982613][T11651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.001529][T11651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.006958][T11651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.015820][T11651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.019130][T11651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.121127][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1552'.
[  189.154594][ T8185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.173743][ T8185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.200895][T11820] lo speed is unknown, defaulting to 1000
[  189.232350][ T8188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.238051][ T8188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.495348][T11842] hashlimit_mt_check_common: 1 callbacks suppressed
[  189.495358][T11842] xt_hashlimit: size too large, truncated to 1048576
[  189.725332][T11849] vlan0: entered promiscuous mode
[  189.767681][T11849] syzkaller1: entered promiscuous mode
[  189.770267][T11849] syzkaller1: entered allmulticast mode
[  190.016519][T11863] unsupported nla_type 52263
[  190.067248][T11868] geneve0: entered promiscuous mode
[  190.069011][T11868] geneve0: entered allmulticast mode
[  190.387463][T11904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.671673][T11940] netlink: 'syz.2.1589': attribute type 5 has an invalid length.
[  190.685007][T11940] sctp: [Deprecated]: syz.2.1589 (pid 11940) Use of int in max_burst socket option.
[  190.685007][T11940] Use struct sctp_assoc_value instead
[  190.738977][T11948] netlink: 'syz.2.1592': attribute type 1 has an invalid length.
[  190.833253][T11953] veth3: entered promiscuous mode
[  190.895338][ T5846] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.372242][ T5846] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.405853][T11974] netlink: 'syz.2.1601': attribute type 1 has an invalid length.
[  192.410320][T11976] xt_CONNSECMARK: invalid mode: 254
[  192.439681][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  192.442921][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  192.447623][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  192.451655][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  192.456275][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  192.489718][T11974] bond14: (slave veth3): Enslaving as an active interface with a down link
[  192.508913][T11987] netlink: 'syz.3.1603': attribute type 13 has an invalid length.
[  192.512159][T11987] __nla_validate_parse: 25 callbacks suppressed
[  192.512171][T11987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1603'.
[  192.547114][T11981] lo speed is unknown, defaulting to 1000
[  192.581390][T11993] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20003
[  192.586443][ T5846] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.622163][T11989] syzkaller1: tun_chr_ioctl cmd 1074025677
[  192.633315][T11989] syzkaller1: linktype set to 804
[  192.676919][ T5846] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.837856][T12003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1608'.
[  192.930374][ T5846] bridge_slave_1: left allmulticast mode
[  192.936036][ T5846] bridge_slave_1: left promiscuous mode
[  192.941286][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.957246][ T5846] bridge_slave_0: left allmulticast mode
[  192.959880][ T5846] bridge_slave_0: left promiscuous mode
[  192.962316][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.987890][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1611'.
[  193.254928][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  193.259209][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  193.262812][ T5846] bond0 (unregistering): Released all slaves
[  193.365005][T12027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1612'.
[  193.407000][T11981] chnl_net:caif_netlink_parms(): no params data found
[  193.488235][T12036] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1615'.
[  193.519459][T12032] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1614'.
[  193.522561][T12032] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1614'.
[  193.530433][T12032] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1614'.
[  193.590632][T12033] ip6tnl1: entered promiscuous mode
[  193.592370][T12033] ip6tnl1: entered allmulticast mode
[  193.612071][T12033] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[  193.644854][T12048] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.1617'.
[  193.690572][T11981] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.693038][T11981] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.699807][T11981] bridge_slave_0: entered allmulticast mode
[  193.703258][T11981] bridge_slave_0: entered promiscuous mode
[  193.706721][T12048] ip_vti0: entered allmulticast mode
[  193.731680][T11981] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.742220][T11981] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.749438][T11981] bridge_slave_1: entered allmulticast mode
[  193.759629][T11981] bridge_slave_1: entered promiscuous mode
[  193.849514][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.897312][T11981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.908375][T11981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.931803][ T5846] hsr_slave_0: left promiscuous mode
[  193.944522][ T5846] hsr_slave_1: left promiscuous mode
[  193.947473][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.950590][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.958842][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.962058][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1
[  193.979564][ T5846] veth1_macvtap: left promiscuous mode
[  193.981418][ T5846] veth0_macvtap: left promiscuous mode
[  193.983336][ T5846] veth1_vlan: left promiscuous mode
[  193.986544][ T5846] veth0_vlan: left promiscuous mode
[  193.999142][T12059] set match dimension is over the limit!
[  194.172884][T12067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1625'.
[  194.306471][ T5846] team0 (unregistering): Port device team_slave_1 removed
[  194.331602][ T5846] team0 (unregistering): Port device team_slave_0 removed
[  194.484003][ T5818] Bluetooth: hci0: command tx timeout
[  194.648343][T11981] team0: Port device team_slave_0 added
[  194.651554][T11981] team0: Port device team_slave_1 added
[  194.720751][T11981] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.723105][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.749736][T11981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.764654][T11981] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.767236][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.784233][T11981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.985308][T11981] hsr_slave_0: entered promiscuous mode
[  194.991272][T11981] hsr_slave_1: entered promiscuous mode
[  194.994841][T11981] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.998060][T11981] Cannot create hsr debugfs directory
[  195.050647][T12087] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  195.565873][T11981] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  195.579943][T11981] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  195.587505][T11981] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  195.592211][T11981] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  195.680419][T12120] netlink: 'syz.3.1634': attribute type 29 has an invalid length.
[  195.699797][T11981] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.735145][T11981] 8021q: adding VLAN 0 to HW filter on device team0
[  195.751066][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.753851][ T8187] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.772376][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.774916][ T8187] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.850070][T12128] netlink: 'syz.3.1635': attribute type 10 has an invalid length.
[  195.859786][T12128] bond0: (slave ): Enslaving as an active interface with an up link
[  195.882620][T11981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  196.150044][T11981] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.207041][T11981] veth0_vlan: entered promiscuous mode
[  196.220190][T11981] veth1_vlan: entered promiscuous mode
[  196.242781][T11981] veth0_macvtap: entered promiscuous mode
[  196.247975][T11981] veth1_macvtap: entered promiscuous mode
[  196.265883][T11981] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.278906][T11981] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.289823][T11981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.297216][T11981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.302414][T11981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.312527][T11981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.415778][ T8187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.420820][ T8187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.451611][ T8188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.455732][ T8188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.618378][T12167] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  196.620853][   T51] IPVS: starting estimator thread 0...
[  196.713729][T12169] IPVS: using max 45 ests per chain, 108000 per kthread
[  197.388603][T12166] delete_channel: no stack
[  197.452014][T12187] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  197.782470][T12210] __nla_validate_parse: 10 callbacks suppressed
[  197.782483][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1656'.
[  197.887072][T12212] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  198.242233][ T5644] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.740346][ T5644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.950483][T12252] dummy0: entered promiscuous mode
[  199.958068][T12252] dummy0: entered allmulticast mode
[  199.977251][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  199.982003][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  199.991344][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  199.995919][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  200.001309][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  200.045444][ T5644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.060183][T12258] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1670'.
[  200.069827][T12253] lo speed is unknown, defaulting to 1000
[  200.125360][ T5644] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.145704][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1672'.
[  200.148600][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1672'.
[  200.168004][T12264] sctp: [Deprecated]: syz.3.1673 (pid 12264) Use of int in max_burst socket option.
[  200.168004][T12264] Use struct sctp_assoc_value instead
[  200.184122][T12262] veth0: entered promiscuous mode
[  200.220311][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1672'.
[  200.287861][T12262] veth0 (unregistering): left promiscuous mode
[  200.328266][ T5644] bridge_slave_1: left allmulticast mode
[  200.330317][ T5644] bridge_slave_1: left promiscuous mode
[  200.332370][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.341893][ T5644] bridge_slave_0: left allmulticast mode
[  200.345315][ T5644] bridge_slave_0: left promiscuous mode
[  200.354093][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.602557][ T5644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.607686][ T5644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.611542][ T5644] bond0 (unregistering): Released all slaves
[  200.735230][T12253] chnl_net:caif_netlink_parms(): no params data found
[  200.914039][T12285] : renamed from netdevsim0 (while UP)
[  200.922031][T12253] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.929009][T12253] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.939186][T12253] bridge_slave_0: entered allmulticast mode
[  200.942171][T12253] bridge_slave_0: entered promiscuous mode
[  200.978929][T12253] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.981696][T12253] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.990081][T12253] bridge_slave_1: entered allmulticast mode
[  200.994363][T12253] bridge_slave_1: entered promiscuous mode
[  201.077622][ T5644] hsr_slave_0: left promiscuous mode
[  201.080335][ T5644] hsr_slave_1: left promiscuous mode
[  201.083012][ T5644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.088913][ T5644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.092378][ T5644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.095211][ T5644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.126569][ T5644] veth1_macvtap: left promiscuous mode
[  201.128661][ T5644] veth0_macvtap: left promiscuous mode
[  201.130807][ T5644] veth1_vlan: left promiscuous mode
[  201.132635][ T5644] veth0_vlan: left promiscuous mode
[  201.353133][T12317] netlink: 'syz.2.1687': attribute type 8 has an invalid length.
[  201.553799][ T5644] team0 (unregistering): Port device team_slave_1 removed
[  201.582147][ T5644] team0 (unregistering): Port device team_slave_0 removed
[  201.931053][T12253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.981168][T12253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.078365][T12253] team0: Port device team_slave_0 added
[  202.083341][T12253] team0: Port device team_slave_1 added
[  202.085885][ T5818] Bluetooth: hci0: command tx timeout
[  202.154427][T12253] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.157034][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.173858][T12253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.182329][T12322] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  202.194934][T12253] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.197744][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.210248][T12253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.319976][T12253] hsr_slave_0: entered promiscuous mode
[  202.324488][T12253] hsr_slave_1: entered promiscuous mode
[  202.327519][T12253] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.330789][T12253] Cannot create hsr debugfs directory
[  202.341977][T12330] lo speed is unknown, defaulting to 1000
[  202.358836][T12330] lo speed is unknown, defaulting to 1000
[  202.397669][T12327] syzkaller0: entered promiscuous mode
[  202.399999][T12327] syzkaller0: entered allmulticast mode
[  202.417486][T12330] lo speed is unknown, defaulting to 1000
[  202.466855][T12330] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  202.501957][T12330] lo speed is unknown, defaulting to 1000
[  202.510599][T12330] lo speed is unknown, defaulting to 1000
[  202.520242][T12330] lo speed is unknown, defaulting to 1000
[  202.545434][T12330] lo speed is unknown, defaulting to 1000
[  202.752051][T12339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1691'.
[  202.825924][T12342] lo speed is unknown, defaulting to 1000
[  204.093935][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  204.168561][T12342] lo speed is unknown, defaulting to 1000
[  204.174769][ T5818] Bluetooth: hci0: command tx timeout
[  204.317981][T12253] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  204.326433][T12253] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  204.331212][T12253] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  204.339358][T12253] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  204.446057][T12253] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.469150][T12253] 8021q: adding VLAN 0 to HW filter on device team0
[  204.478276][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.481416][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.508815][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.511871][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.541453][T12364] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1693'.
[  204.670228][T12369] netlink: 'syz.3.1694': attribute type 29 has an invalid length.
[  204.757336][T12253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.763947][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1695'.
[  204.801651][T12377] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1695'.
[  204.837681][T12253] veth0_vlan: entered promiscuous mode
[  204.846569][T12253] veth1_vlan: entered promiscuous mode
[  204.894422][T12253] veth0_macvtap: entered promiscuous mode
[  204.905235][T12253] veth1_macvtap: entered promiscuous mode
[  204.921066][T12253] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.929384][T12253] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.936844][T12253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.939941][T12253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.942686][T12253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.947930][T12253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.022184][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.026523][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.055036][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.057582][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.372579][T12424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1709'.
[  205.858552][T12457] openvswitch: netlink: IP tunnel dst address not specified
[  205.890116][T12459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1720'.
[  205.968736][T12465] netlink: 'syz.2.1722': attribute type 1 has an invalid length.
[  205.983069][T12465] bond15 (unregistering): Released all slaves
[  206.010823][T12467] lo speed is unknown, defaulting to 1000
[  206.125182][T12467] lo speed is unknown, defaulting to 1000
[  206.246682][T12473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1724'.
[  206.251602][T12473] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  206.263044][T12473] netlink: 'syz.3.1724': attribute type 11 has an invalid length.
[  206.665295][T12486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.669708][T12486] D: renamed from syzkaller0
[  206.674506][T12486] tipc: Disabling bearer <eth:syzkaller0>
[  206.929137][T12496] netlink: 'syz.3.1733': attribute type 83 has an invalid length.
[  206.982610][T12498] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1734'.
[  206.992437][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.999220][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.052407][ T5846] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.582051][ T5846] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.662553][ T5846] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.717473][T12503] netlink: 'syz.3.1735': attribute type 7 has an invalid length.
[  208.720444][T12503] netlink: 'syz.3.1735': attribute type 8 has an invalid length.
[  208.731031][T12503] netlink: 'syz.3.1735': attribute type 4 has an invalid length.
[  208.733920][T12503] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1735'.
[  208.792535][ T5846] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.816599][T12507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1738'.
[  208.920841][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  208.937637][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  208.942665][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  208.948139][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  208.950785][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  208.987847][ T5846] bridge_slave_1: left allmulticast mode
[  208.990193][ T5846] bridge_slave_1: left promiscuous mode
[  208.992728][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.012087][ T5846] bridge_slave_0: left allmulticast mode
[  209.019183][ T5846] bridge_slave_0: left promiscuous mode
[  209.022698][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.414874][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.419035][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.423152][ T5846] bond0 (unregistering): Released all slaves
[  209.433561][T12520] lo speed is unknown, defaulting to 1000
[  209.643959][T12556] netlink: 'syz.2.1747': attribute type 1 has an invalid length.
[  209.649490][T12556] netlink: 600 bytes leftover after parsing attributes in process `syz.2.1747'.
[  209.678344][T12520] lo speed is unknown, defaulting to 1000
[  210.137649][ T5846] hsr_slave_0: left promiscuous mode
[  210.144300][ T5846] hsr_slave_1: left promiscuous mode
[  210.148424][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.151229][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.168899][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.172209][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.196384][ T5846] veth1_macvtap: left promiscuous mode
[  210.198819][ T5846] veth0_macvtap: left promiscuous mode
[  210.201225][ T5846] veth1_vlan: left promiscuous mode
[  210.215650][ T5846] veth0_vlan: left promiscuous mode
[  210.610871][ T5846] team0 (unregistering): Port device team_slave_1 removed
[  210.638167][ T5846] team0 (unregistering): Port device team_slave_0 removed
[  210.908040][T12520] chnl_net:caif_netlink_parms(): no params data found
[  210.938677][T12584] batadv_slave_1: entered promiscuous mode
[  210.942494][T12586] batadv_slave_1: left promiscuous mode
[  210.981538][ T5818] Bluetooth: hci0: command tx timeout
[  211.153172][T12595] !: renamed from dummy0 (while UP)
[  211.167996][T12520] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.171311][T12520] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.190386][T12520] bridge_slave_0: entered allmulticast mode
[  211.195456][T12520] bridge_slave_0: entered promiscuous mode
[  211.203503][T12595] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  211.240419][T12601] syzkaller1: entered promiscuous mode
[  211.242814][T12601] syzkaller1: entered allmulticast mode
[  211.273170][T12595] lo speed is unknown, defaulting to 1000
[  211.276168][T12520] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.286539][T12520] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.289790][T12520] bridge_slave_1: entered allmulticast mode
[  211.304336][T12520] bridge_slave_1: entered promiscuous mode
[  211.376675][T12520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.407093][T12520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.535670][T12520] team0: Port device team_slave_0 added
[  211.550056][T12520] team0: Port device team_slave_1 added
[  211.709502][T12520] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.711774][T12520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.744126][T12520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.752818][T12520] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.758968][T12520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.772337][T12520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.832896][T12520] hsr_slave_0: entered promiscuous mode
[  211.839004][T12520] hsr_slave_1: entered promiscuous mode
[  211.842281][T12520] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.853748][T12520] Cannot create hsr debugfs directory
[  211.857313][T12595] lo speed is unknown, defaulting to 1000
[  212.614061][T12670] netlink: 'syz.3.1762': attribute type 7 has an invalid length.
[  212.618462][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1761'.
[  212.632478][T12670] : entered promiscuous mode
[  212.666681][T12670] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1762'.
[  212.671866][T12670] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1762'.
[  212.675510][T12670] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1762'.
[  212.679358][T12520] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  212.706775][T12520] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  212.715918][T12520] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  212.737848][T12520] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  212.762870][T12680] netlink: 'syz.2.1765': attribute type 5 has an invalid length.
[  212.854632][T12520] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.896606][T12520] 8021q: adding VLAN 0 to HW filter on device team0
[  212.907797][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.910431][ T8194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.930082][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.932415][ T8194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.947165][T12520] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  212.950599][T12520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  213.050827][T12710] netlink: 'syz.3.1770': attribute type 2 has an invalid length.
[  213.057212][ T5818] Bluetooth: hci0: command tx timeout
[  213.067140][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1770'.
[  213.071056][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1770'.
[  213.127556][T12520] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.200792][T12520] veth0_vlan: entered promiscuous mode
[  213.206689][T12520] veth1_vlan: entered promiscuous mode
[  213.222847][T12520] veth0_macvtap: entered promiscuous mode
[  213.227148][T12520] veth1_macvtap: entered promiscuous mode
[  213.245690][T12520] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.255054][T12520] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.266749][T12520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.275313][T12520] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.279046][T12520] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.282708][T12520] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.301707][T12725] netlink: 'syz.3.1773': attribute type 1 has an invalid length.
[  213.331875][T12725] bond2: entered promiscuous mode
[  213.336734][T12725] 8021q: adding VLAN 0 to HW filter on device bond2
[  213.455701][ T8194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.468962][ T8194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.489373][T12737] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  213.521300][T12737] bond0: entered promiscuous mode
[  213.523482][T12737] netdevsim netdevsim3 : entered promiscuous mode
[  213.538076][ T8186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.541395][ T8186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.725416][T12752] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  213.832823][T12764] delete_channel: no stack
[  213.988254][T12779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1782'.
[  214.045973][T12784] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1784'.
[  214.110829][T12789] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1784'.
[  214.170943][T12792] bond16: entered promiscuous mode
[  214.173303][T12792] 8021q: adding VLAN 0 to HW filter on device bond16
[  214.839249][T12813] __nla_validate_parse: 1 callbacks suppressed
[  214.839258][T12813] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1787'.
[  214.981762][T11193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.190384][T11193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.559850][T11193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.606908][T11193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.709033][T11193] bridge_slave_1: left allmulticast mode
[  216.711807][T11193] bridge_slave_1: left promiscuous mode
[  216.714598][T11193] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.718389][T11193] bridge_slave_0: left allmulticast mode
[  216.720364][T11193] bridge_slave_0: left promiscuous mode
[  216.722366][T11193] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.752032][T12823] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1791'.
[  217.037249][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  217.040965][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  217.047406][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  217.057047][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  217.068052][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  217.130503][T11193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.138236][T11193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.143367][T11193] bond0 (unregistering): Released all slaves
[  217.232830][T12830] lo speed is unknown, defaulting to 1000
[  217.329325][T12835] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1793'.
[  217.531826][T12850] openvswitch: netlink: Flow actions attr not present in new flow.
[  217.608266][T12830] lo speed is unknown, defaulting to 1000
[  217.905937][T11193] hsr_slave_0: left promiscuous mode
[  217.920404][T11193] hsr_slave_1: left promiscuous mode
[  217.922869][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.926759][T11193] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.929683][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.932007][T11193] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.942688][T11193] veth1_macvtap: left promiscuous mode
[  217.946016][T11193] veth0_macvtap: left promiscuous mode
[  217.948004][T11193] veth1_vlan: left promiscuous mode
[  217.950026][T11193] veth0_vlan: left promiscuous mode
[  218.309347][T11193] team0 (unregistering): Port device team_slave_1 removed
[  218.345032][T11193] team0 (unregistering): Port device team_slave_0 removed
[  218.769798][T12830] chnl_net:caif_netlink_parms(): no params data found
[  218.922817][T12830] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.940928][T12830] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.945091][T12830] bridge_slave_0: entered allmulticast mode
[  218.949407][T12830] bridge_slave_0: entered promiscuous mode
[  218.958190][T12881] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  218.974559][T12830] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.977429][T12830] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.986460][T12830] bridge_slave_1: entered allmulticast mode
[  218.989554][T12830] bridge_slave_1: entered promiscuous mode
[  219.041259][T12830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.048051][T12830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.107687][T12830] team0: Port device team_slave_0 added
[  219.124635][T12830] team0: Port device team_slave_1 added
[  219.134536][ T5823] Bluetooth: hci0: command tx timeout
[  219.168100][T12830] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.171128][T12830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.192401][T12830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.227636][T12830] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.232855][T12830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.244177][T12830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.341761][T12830] hsr_slave_0: entered promiscuous mode
[  219.346698][T12830] hsr_slave_1: entered promiscuous mode
[  219.349612][T12830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.352754][T12830] Cannot create hsr debugfs directory
[  219.356239][T12905] x_tables: duplicate underflow at hook 1
[  219.363453][T12902] lo speed is unknown, defaulting to 1000
[  219.429436][T12905] netlink: 'syz.2.1807': attribute type 1 has an invalid length.
[  219.432958][T12905] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1807'.
[  219.469704][T12912] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1810'.
[  219.505086][T12912] macvtap0: entered promiscuous mode
[  219.630043][T12902] lo speed is unknown, defaulting to 1000
[  220.137706][T12830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  220.146048][T12830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  220.155800][T12830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  220.162846][T12830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  220.251960][T12830] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.270881][T12830] 8021q: adding VLAN 0 to HW filter on device team0
[  220.277333][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.279824][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.288368][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.290803][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.430462][T12830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.467763][T12830] veth0_vlan: entered promiscuous mode
[  220.475035][T12830] veth1_vlan: entered promiscuous mode
[  220.490513][T12830] veth0_macvtap: entered promiscuous mode
[  220.494682][T12830] veth1_macvtap: entered promiscuous mode
[  220.502817][T12830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.514296][T12830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.519715][T12830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.522546][T12830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.526329][T12830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.529062][T12830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.582897][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.586102][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.608835][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.611453][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.829615][T12967] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1816'.
[  221.271947][T13001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1822'.
[  221.283413][T13001] netlink: 'syz.2.1822': attribute type 1 has an invalid length.
[  221.308046][T13001] bond17 (unregistering): Released all slaves
[  221.407849][T13007] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1823'.
[  221.411778][T13007] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1823'.
[  221.516114][T13010] netlink: 'syz.3.1825': attribute type 1 has an invalid length.
[  221.568719][T13010] bond3: (slave gretap1): making interface the new active one
[  221.572794][T13010] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  221.596872][T13010] vlan2: entered allmulticast mode
[  221.599187][T13010] bond3: entered allmulticast mode
[  221.601351][T13010] gretap1: entered allmulticast mode
[  221.607865][T13010] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  221.669175][T13022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1828'.
[  221.851012][T13040] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  221.854189][T13040] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  221.920705][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'.
[  221.936518][T13040] hsr_slave_0: left promiscuous mode
[  221.939616][T13040] hsr_slave_1: left promiscuous mode
[  222.082312][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1836'.
[  222.139584][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1836'.
[  222.195228][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1836'.
[  222.250069][T13072] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1840'.
[  222.273070][T13073] syzkaller1: entered promiscuous mode
[  222.275662][T13073] syzkaller1: entered allmulticast mode
[  222.469122][T13079] lo speed is unknown, defaulting to 1000
[  222.622010][T13079] lo speed is unknown, defaulting to 1000
[  222.714990][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.049356][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.101417][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.157254][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.249153][   T13] bridge_slave_1: left allmulticast mode
[  224.251398][   T13] bridge_slave_1: left promiscuous mode
[  224.254862][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.259685][   T13] bridge_slave_0: left allmulticast mode
[  224.261992][   T13] bridge_slave_0: left promiscuous mode
[  224.265340][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.542411][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.546784][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.550433][   T13] bond0 (unregistering): Released all slaves
[  224.969067][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  224.975615][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  224.980065][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  224.985790][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  224.992231][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  225.084329][T13143] lo speed is unknown, defaulting to 1000
[  225.336252][T13143] lo speed is unknown, defaulting to 1000
[  225.650589][   T13] hsr_slave_0: left promiscuous mode
[  225.655071][   T13] hsr_slave_1: left promiscuous mode
[  225.657851][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.660904][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.674188][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.676851][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.695751][   T13] veth1_macvtap: left promiscuous mode
[  225.699453][   T13] veth0_macvtap: left promiscuous mode
[  225.704242][   T13] veth1_vlan: left promiscuous mode
[  225.706555][   T13] veth0_vlan: left promiscuous mode
[  226.187732][T13184] __nla_validate_parse: 4 callbacks suppressed
[  226.187743][T13184] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1858'.
[  226.199924][   T13] team0 (unregistering): Port device team_slave_1 removed
[  226.230151][   T13] team0 (unregistering): Port device team_slave_0 removed
[  226.761815][T13143] chnl_net:caif_netlink_parms(): no params data found
[  226.867928][T13206] ipt_ECN: cannot use operation on non-tcp rule
[  226.894588][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'.
[  226.922275][T13206] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1862'.
[  226.938189][T13214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1863'.
[  226.941314][T13214] netlink: 'syz.3.1863': attribute type 1 has an invalid length.
[  226.948289][T13214] netlink: 'syz.3.1863': attribute type 2 has an invalid length.
[  226.950815][T13214] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1863'.
[  226.977484][T13143] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.980067][T13143] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.982683][T13143] bridge_slave_0: entered allmulticast mode
[  226.987662][T13143] bridge_slave_0: entered promiscuous mode
[  226.992823][T13143] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.997064][T13143] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.999370][T13143] bridge_slave_1: entered allmulticast mode
[  227.003048][T13143] bridge_slave_1: entered promiscuous mode
[  227.037695][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'.
[  227.054690][ T5818] Bluetooth: hci0: command tx timeout
[  227.058791][T13143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.075196][T13143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.141120][T13143] team0: Port device team_slave_0 added
[  227.150123][T13143] team0: Port device team_slave_1 added
[  227.180726][T13143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.183180][T13143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.196753][T13143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.215560][T13143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.221334][T13143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.240279][T13143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.279559][T13143] hsr_slave_0: entered promiscuous mode
[  227.283499][T13143] hsr_slave_1: entered promiscuous mode
[  227.366619][T13244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1871'.
[  227.700905][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'.
[  227.784522][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1877'.
[  227.873343][T13270] netlink: 'syz.3.1878': attribute type 1 has an invalid length.
[  227.879441][T13270] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1878'.
[  227.883558][T13270] netlink: 'syz.3.1878': attribute type 1 has an invalid length.
[  227.987861][T13143] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  227.992651][T13143] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  228.001660][T13143] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  228.012283][T13143] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  228.136376][T13143] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.155799][T13143] 8021q: adding VLAN 0 to HW filter on device team0
[  228.162228][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.165154][ T8194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.181707][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.184879][ T8194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.381483][T13143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.415129][T13143] veth0_vlan: entered promiscuous mode
[  228.426238][T13143] veth1_vlan: entered promiscuous mode
[  228.441371][T13318] netlink: 'syz.2.1884': attribute type 13 has an invalid length.
[  228.491311][T13143] veth0_macvtap: entered promiscuous mode
[  228.503023][T13143] veth1_macvtap: entered promiscuous mode
[  228.525385][T13143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.538657][T13143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.549334][T13143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.552289][T13143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.558960][T13143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.562663][T13143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.642161][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.649579][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.689248][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.696589][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.756221][T13338] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  228.758683][T13338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.861698][T13343] openvswitch: netlink: Flow actions attr not present in new flow.
[  229.148372][T13382] xt_TPROXY: Can be used only with -p tcp or -p udp
[  229.510560][T13419] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  229.680272][T13430] netlink: 'syz.3.1911': attribute type 10 has an invalid length.
[  229.899795][T13445] x_tables: duplicate underflow at hook 1
[  230.459298][T13454] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  230.493106][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.554785][T13454] netlink: 'syz.3.1918': attribute type 21 has an invalid length.
[  230.557642][T13454] netlink: 'syz.3.1918': attribute type 5 has an invalid length.
[  230.561822][T13454] netlink: 'syz.3.1918': attribute type 6 has an invalid length.
[  231.990856][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.034610][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.080320][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.186571][   T13] bridge_slave_1: left allmulticast mode
[  232.189429][   T13] bridge_slave_1: left promiscuous mode
[  232.191498][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.197210][   T13] bridge_slave_0: left allmulticast mode
[  232.199235][   T13] bridge_slave_0: left promiscuous mode
[  232.202448][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.452109][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.457862][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.462694][   T13] bond0 (unregistering): Released all slaves
[  232.491566][T13462] __nla_validate_parse: 12 callbacks suppressed
[  232.491576][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1920'.
[  232.806640][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  232.811070][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  232.816753][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  232.821813][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  232.828921][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  232.930087][T13481] lo speed is unknown, defaulting to 1000
[  233.039833][   T13] hsr_slave_0: left promiscuous mode
[  233.042817][   T13] hsr_slave_1: left promiscuous mode
[  233.054338][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.057410][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.074664][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.077796][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.122697][   T13] veth1_macvtap: left promiscuous mode
[  233.125308][   T13] veth0_macvtap: left promiscuous mode
[  233.127974][   T13] veth1_vlan: left promiscuous mode
[  233.130335][   T13] veth0_vlan: left promiscuous mode
[  233.480405][   T13] team0 (unregistering): Port device team_slave_1 removed
[  233.510791][   T13] team0 (unregistering): Port device team_slave_0 removed
[  233.811838][T13481] lo speed is unknown, defaulting to 1000
[  233.921321][T13510] netlink: 'syz.2.1929': attribute type 4 has an invalid length.
[  233.928900][T13510] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1929'.
[  233.941862][T13510] wlan1: mtu less than device minimum
[  234.087330][T13481] chnl_net:caif_netlink_parms(): no params data found
[  234.230011][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1934'.
[  234.293028][T13481] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.296139][T13481] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.299143][T13481] bridge_slave_0: entered allmulticast mode
[  234.302932][T13481] bridge_slave_0: entered promiscuous mode
[  234.337072][T13481] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.340145][T13481] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.343049][T13481] bridge_slave_1: entered allmulticast mode
[  234.356418][T13481] bridge_slave_1: entered promiscuous mode
[  234.417184][T13481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.424682][T13481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.463954][T13481] team0: Port device team_slave_0 added
[  234.468576][T13481] team0: Port device team_slave_1 added
[  234.505426][T13481] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.508481][T13481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.520129][T13481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.527402][T13481] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.530439][T13481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.541587][T13481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.574409][T13562] openvswitch: netlink: IPv4 tunnel dst address is zero
[  234.603252][T13481] hsr_slave_0: entered promiscuous mode
[  234.608421][T13481] hsr_slave_1: entered promiscuous mode
[  234.657350][T13564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1942'.
[  234.884311][ T5818] Bluetooth: hci0: command tx timeout
[  235.156199][T13481] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  235.160473][T13481] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  235.166175][T13481] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  235.170720][T13481] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  235.235051][T13481] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.249277][T13481] 8021q: adding VLAN 0 to HW filter on device team0
[  235.273117][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.275617][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.288123][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.290632][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.415879][T13481] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.442186][T13481] veth0_vlan: entered promiscuous mode
[  235.449808][T13481] veth1_vlan: entered promiscuous mode
[  235.489746][T13481] veth0_macvtap: entered promiscuous mode
[  235.500003][T13481] veth1_macvtap: entered promiscuous mode
[  235.526598][T13481] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.530805][T13481] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.565204][T13481] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.570867][T13481] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.578439][T13481] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.583255][T13481] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.665952][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.668520][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.695290][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.698440][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.850829][T13633] netlink: 'syz.3.1949': attribute type 5 has an invalid length.
[  235.854407][T13633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1949'.
[  235.987252][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1951'.
[  236.076338][T13654] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1952'.
[  236.080117][T13649] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1952'.
[  236.261521][T13667] batadv_slave_0: entered promiscuous mode
[  236.266758][T13666] batadv_slave_0: left promiscuous mode
[  236.317800][T13670] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI
[  236.322667][T13670] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[  236.327130][T13670] CPU: 1 UID: 0 PID: 13670 Comm: syz.3.1959 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  236.332116][T13670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  236.336124][T13670] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  236.338773][T13670] Code: 89 ef e8 70 7f b3 f8 4d 89 ef 85 db 74 0d e8 a4 fb 4f f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 39 7f b3 f8 48 8b
[  236.346753][T13670] RSP: 0018:ffffc90002daefe8 EFLAGS: 00010202
[  236.349267][T13670] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[  236.352530][T13670] RDX: ffff8880222fd640 RSI: 0000000000000000 RDI: 0000000000000000
[  236.355674][T13670] RBP: 0000000000000000 R08: ffff8880222fd640 R09: 0000000000000002
[  236.358829][T13670] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000affe0
[  236.362013][T13670] R13: ffff888038ec5800 R14: dffffc0000000000 R15: ffff888038ec5800
[  236.365170][T13670] FS:  00007fa0675396c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  236.368921][T13670] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  236.371544][T13670] CR2: 00007fde0b7cdfc8 CR3: 000000001f846000 CR4: 00000000000006f0
[  236.374757][T13670] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  236.377985][T13670] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  236.381172][T13670] Call Trace:
[  236.382574][T13670]  <TASK>
[  236.383799][T13670]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  236.386092][T13670]  fq_change+0x1519/0x1f50
[  236.387916][T13670]  ? __pfx_fq_change+0x10/0x10
[  236.389868][T13670]  ? __hrtimer_setup+0x187/0x210
[  236.391882][T13670]  fq_init+0x699/0x960
[  236.393555][T13670]  ? __pfx_fq_init+0x10/0x10
[  236.395400][T13670]  ? lockdep_rtnl_is_held+0x26/0x40
[  236.397540][T13670]  ? qdisc_lookup+0x36d/0x6d0
[  236.399535][T13670]  ? __pfx_fq_init+0x10/0x10
[  236.401513][T13670]  qdisc_create+0x7ac/0xea0
[  236.403480][T13670]  tc_modify_qdisc+0x1426/0x2010
[  236.405510][T13670]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  236.407677][T13670]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  236.409868][T13670]  rtnetlink_rcv_msg+0x77c/0xb70
[  236.411894][T13670]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  236.414015][T13670]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  236.416293][T13670]  ? ref_tracker_free+0x63a/0x7d0
[  236.418493][T13670]  ? __copy_skb_header+0xa7/0x550
[  236.420543][T13670]  ? __pfx_ref_tracker_free+0x10/0x10
[  236.422736][T13670]  netlink_rcv_skb+0x208/0x470
[  236.424758][T13670]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  236.427084][T13670]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  236.429390][T13670]  ? netlink_deliver_tap+0x2e/0x1b0
[  236.431623][T13670]  ? netlink_deliver_tap+0x2e/0x1b0
[  236.433796][T13670]  netlink_unicast+0x75b/0x8d0
[  236.435824][T13670]  netlink_sendmsg+0x805/0xb30
[  236.437908][T13670]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.440077][T13670]  ? aa_sock_msg_perm+0x94/0x160
[  236.442050][T13670]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  236.443787][T13670]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.445498][T13670]  __sock_sendmsg+0x21c/0x270
[  236.447463][T13670]  ____sys_sendmsg+0x505/0x830
[  236.449405][T13670]  ? __pfx_____sys_sendmsg+0x10/0x10
[  236.451627][T13670]  ? import_iovec+0x74/0xa0
[  236.453592][T13670]  ___sys_sendmsg+0x21f/0x2a0
[  236.455630][T13670]  ? __pfx____sys_sendmsg+0x10/0x10
[  236.457770][T13670]  ? __fget_files+0x2a/0x420
[  236.459692][T13670]  ? __fget_files+0x3a0/0x420
[  236.461728][T13670]  __x64_sys_sendmsg+0x19b/0x260
[  236.463803][T13670]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  236.466062][T13670]  ? rcu_is_watching+0x15/0xb0
[  236.468026][T13670]  ? do_syscall_64+0xbe/0x3b0
[  236.469990][T13670]  do_syscall_64+0xfa/0x3b0
[  236.471936][T13670]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.474170][T13670]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.476753][T13670]  ? exc_page_fault+0x9f/0xf0
[  236.478802][T13670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.481349][T13670] RIP: 0033:0x7fa06678e929
[  236.483232][T13670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.491330][T13670] RSP: 002b:00007fa067539038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  236.494750][T13670] RAX: ffffffffffffffda RBX: 00007fa0669b5fa0 RCX: 00007fa06678e929
[  236.498083][T13670] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003
[  236.501385][T13670] RBP: 00007fa066810b39 R08: 0000000000000000 R09: 0000000000000000
[  236.504708][T13670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.508023][T13670] R13: 0000000000000000 R14: 00007fa0669b5fa0 R15: 00007ffc6169c348
[  236.511272][T13670]  </TASK>
[  236.512651][T13670] Modules linked in:
[  236.514726][T13670] ---[ end trace 0000000000000000 ]---
[  236.517044][T13670] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  236.519790][T13670] Code: 89 ef e8 70 7f b3 f8 4d 89 ef 85 db 74 0d e8 a4 fb 4f f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 39 7f b3 f8 48 8b
[  236.527747][T13670] RSP: 0018:ffffc90002daefe8 EFLAGS: 00010202
[  236.530122][T13670] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[  236.533241][T13670] RDX: ffff8880222fd640 RSI: 0000000000000000 RDI: 0000000000000000
[  236.536610][T13670] RBP: 0000000000000000 R08: ffff8880222fd640 R09: 0000000000000002
[  236.539804][T13670] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000affe0
[  236.543053][T13670] R13: ffff888038ec5800 R14: dffffc0000000000 R15: ffff888038ec5800
[  236.546351][T13670] FS:  00007fa0675396c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  236.550019][T13670] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  236.552794][T13670] CR2: 00007fde0b7cdfc8 CR3: 000000001f846000 CR4: 00000000000006f0
[  236.556254][T13670] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  236.559778][T13670] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  236.563138][T13670] Kernel panic - not syncing: Fatal exception in interrupt
[  236.566933][T13670] Kernel Offset: disabled
[  236.568836][T13670] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:48:24  Registers:
info registers vcpu 0

CPU#0
RAX=d17bcd7cccd18900 RBX=ffffffff81974d58 RCX=d17bcd7cccd18900 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10df0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=00000001092c4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffff0000 XMM03=ffffffffffffff00 ffffffffffff0000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fde0aa11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000018c0 RDI=00000000000018c1 RBP=00000000000003f8 RSP=ffffc90002dae810
R8 =ffff888107388237 R9 =1ffff11020e71046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac491d R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa0675396c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fde0b7cdfc8 CR3=000000001f846000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa066984478 00007fa066984450 XMM03=00007fa066984488 00007fa066984480
XMM04=00007fa0674ed100 00007fa066984440 XMM05=00007fa066984458 00007fa0669844a0
XMM06=00007fa066984498 00007fa066984490 XMM07=00007fa066984488 00007fa066984480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fa066811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
