last executing test programs:

1.072232616s ago: executing program 0 (id=3142):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f00000000c0))
pselect6(0x40, &(0x7f00000000c0)={0x3, 0x8, 0x7fffffff, 0x2, 0x3, 0x100000001, 0x27e2, 0xd}, &(0x7f0000000100)={0x5, 0x3, 0x101, 0xb21b, 0x0, 0x8000000000000001, 0x10001, 0x6}, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x6e3]}, 0x8})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r2, 0x5a40d000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x8000, 0x9d, &(0x7f00000003c0)=""/157, 0x41000, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0xbb, 0x101}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x1], &(0x7f0000000500)=[{0x3, 0x5, 0xc, 0x5}, {0x3, 0x3, 0x2, 0x7}, {0x3, 0x5, 0xd, 0xa}, {0x3, 0x3, 0xe, 0x2}], 0x10, 0x7701fb8f}, 0x94)
connect(r0, &(0x7f0000000200)=@generic={0x1f, "0000000200000100"}, 0xa)

911.375233ms ago: executing program 0 (id=3146):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="75003cdbf4945a900400000002"], 0x50)
r0 = socket(0x10, 0x80002, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
pipe(&(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
epoll_create1(0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="0300ff04", 0x4)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x34}}, 0x24040084)
socket$kcm(0x2, 0x3, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fe880000000000000000000000000001e0000002000000000000000000000000000107144e2300050000000067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x24008881}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x20004015)

721.414484ms ago: executing program 0 (id=3154):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x270bd2b, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0900000000000000020000fc0000000500000000060015000200000014001680100008800c000380050001"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
r7 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x100000)
tee(r0, r7, 0x1, 0x1)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r8, 0x3)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1)
setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4)
connect(r8, &(0x7f0000000200)=@un=@file={0x0, './file0\x00'}, 0x80)

720.085542ms ago: executing program 2 (id=3156):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000100001060100000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e000000140002800800010064"], 0x4c}}, 0x0)

690.905123ms ago: executing program 2 (id=3157):
write(0xca, &(0x7f0000000040)="040e0c01031000ffffffffff40ffff", 0xf)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
sendmmsg$unix(r1, 0x0, 0x0, 0x4040800)
write$nci(r1, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x10, @a={0xe, 0x2, 0x0, 0x0, {0xf8, 0x0, "", 0x8, 0x13}, 0x2}}, 0xc)
connect(r0, &(0x7f0000000200)=@un=@file={0x1f, '\x00\x00\x00\x00\x00\x00\x01\x00'}, 0xa)

481.522713ms ago: executing program 2 (id=3162):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

471.309801ms ago: executing program 2 (id=3163):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x9d}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0xb05, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x42}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000080}, 0x42)

381.031737ms ago: executing program 2 (id=3164):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28)
bind(0xffffffffffffffff, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6)
write(0xffffffffffffffff, &(0x7f0000000400)="2b00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
read(0xffffffffffffffff, &(0x7f0000000600)=""/256, 0x100)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001000010427bd7000fddbdf2500000000", @ANYRES64, @ANYBLOB="000b000091290400280012800b00010067656e6576650000180002801400077cff0100000000000000000000000000011400030067656e65766531000000000000000000"], 0x5c}}, 0x2000000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x44, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x1}, 0x94)
r2 = socket(0x2, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={<r5=>r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={<r6=>r5, 0x4, 0x7, 0xfffffff7}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x2542, 0x9, 0x201, 0x5, 0x8, 0xab31, 0x1, 0xb6, r6}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0)
syz_emit_ethernet(0x80, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r5], 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f0000000100)={0x1d, r8}, 0x10)
sendmmsg$sock(r7, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003100)="0100000003000000640000000000000000000000000000000000000000000000000000000000000020a10700000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003200)="0100000003000000640000000000000000000000000000580f02000000000000000000000000000000000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}], 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(r2, &(0x7f0000000140)="01154e00010000112233445588fbca010001", 0x12, 0x4044011, &(0x7f0000000040)={0x11, 0x11, 0x0, 0x0, 0x0, 0x0}, 0x14)
setsockopt(r1, 0x112, 0x11, &(0x7f0000000100)="00ff000000000000ff0000000500000001000000ff000000050000000100000000000000000000000000000000000000000000000a0000000a000000", 0x3c)
connect(r1, &(0x7f0000000200)=@generic={0x1f, "0000000000000100"}, 0xa)

379.650137ms ago: executing program 1 (id=3165):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB="f0000000120021002dbd7000fcdbdf2561656769733132386c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002c00000000000000000000080001000400000005000100"], 0xf0}}, 0x0)

379.350349ms ago: executing program 1 (id=3166):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
setsockopt(r0, 0xc8, 0x14, 0x0, 0x62)
shutdown(r0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x0, 0x9, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}, @private0, 0x40, 0x8, 0x8000, 0x4}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'erspan0\x00', <r2=>0x0, 0x10, 0x700, 0x0, 0x5, {{0x15, 0x4, 0x1, 0x7, 0x54, 0x65, 0x0, 0x10, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0xc, "d8a07bad4daf7e491b72"}, @lsrr={0x83, 0x7, 0xb5, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x86, 0x8, "acbb99285297"}, @timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x2, [{@local, 0x20}, {@remote, 0x3}, {@multicast1, 0x1}, {@broadcast, 0x2cf}]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880), 0x0, 0xc8, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f80)={'tunl0\x00', &(0x7f0000000f00)={'tunl0\x00', <r5=>0x0, 0x40, 0x40, 0x9, 0xa, {{0xa, 0x4, 0x1, 0x13, 0x28, 0x68, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1b}, {[@lsrr={0x83, 0x13, 0x7f, [@multicast2, @rand_addr=0x64010102, @multicast1, @remote]}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000001380)={0x11, 0x0, <r6=>0x0}, &(0x7f00000013c0)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001680)={<r7=>0x0, @dev, @initdev}, &(0x7f00000016c0)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001700)={'wg1\x00', <r8=>0x0})
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r10=>0x0})
connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002940)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="4db7c50c35cdb6590657aa12e457106673ae86217438b203b3d71362724556f84bf9e20b34831c908c3b127a7687e775ccd6f86f402a24b1cc5c345e4940571a2bab431fd6d9ea7cc424add604c8d69b7a064edf7cb70418c31827244501e14e53c4b1c123ca4329927a7f0b1eef0ec643a93febc3e899fed64da9b3bf94455ccd4f1b4ca211ffd3dac74fbbecf505fc24089a0aef0378473ff509bb1b03f843c372f27a78c110389d7e8640607d0ff14d6e1f6a20f1ed8fcfe0eb93affe878986bb3d01277e052ffbf7357c0c2698bf3e76e0d506bdef4bc5e4f33f", 0xdc}, {&(0x7f0000000140)="64f07465fe778ef13786660b01db66f0c901c0ea7e354b850ff3172c8250163bb4aaf9df09d2c4bf8a1ce672758dd92e975e36", 0x33}], 0x2}}, {{&(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="345ef0c30b82fde5a19562e544f9f6b90dc28fa747239715a1f57c3b8b61c4fa0920e4", 0x23}, {&(0x7f0000000240)="9a48da1c706861de1ed0704107eceea5191cbec10abc6773c1cd1b96db689b4d7823ca666936ea5863750bba9f539049e85ead4a30a012d17aeef5b69ac344e97c6b1c640c57631e6f2e995e7fbf2ae71150d4acf6f13c", 0x57}, {&(0x7f00000002c0)="dbb0a7343917bcebf166abda4ad58de54bf209da06c30d57742cdce1c49a66318624b99136bbc170ac1b9227c013bd58f6aa6cbcc43a25f1defb53c8d45bd4a7b87e83219f90d9b1c6650027e0", 0x4d}], 0x3, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010101, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x108}}, {{&(0x7f0000000640)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000680)="c26e4e66ac4b59579e86aaed53ff646044b36d4ac05bc1b54e30c7ef61a29f5b19ca82be314fbe7a6e0a6367be9c62b8e19038efcdb78e1ed80671de7bf11bce440017961884a2e498", 0x49}, {&(0x7f0000000700)="829cb11ee7be364507377719ed634b184d82a671cb936f1b823e91f411e30f2ccd4eb95d7aa422fec4c369f80868173289a566e97722c8acb175a43a7c4b97051e0e330c365fa71d068e02d308205d9d6a79d3c60b352c8ba6a0ad7326b83f44dc4b796bf3027765cde9ea99378c241a191f5a8de9f7a79e55d2c135665bccd8ae098c57fefa4bf4204e50d9f6d40a857fdc14e144295c445235d7f185eb501f100e17e0dc3a41e172", 0xa9}], 0x2, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x23, [@rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @empty]}, @rr={0x7, 0xf, 0x14, [@local, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1c8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6cdc63b1}}], 0x108}}, {{&(0x7f0000000c80)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)="c8f429fe2a93bfa9e63bbc6038becf1c22427e4028217367bd8ef7be32a04cad1e1003e69649f654fb656cbb14ba4930fa792ae5d6e21217650000a0996ed3187b49a926d024c2c494638f4d86c9e75391d5614e37cdac586d001d825a2e5af6d9f65f3a07e93b954f86ee65f65297cddbcc84fa8d60a5ced99fa5865aede9d723694259f185aec1eb7af949c6908277adf415bb4f32cf6c12839f049b7129aea8a3d338d104ac50431dbcf7ed05d1ab61fffc1f83818541bda821a77780dd1f2227e1bcbfd2d383ee1ab358a6e3af", 0xcf}, {&(0x7f0000000dc0)="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", 0xfa}], 0x2, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @dev={0xac, 0x14, 0x14, 0xf}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6d}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd0}}], 0x68}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)="e54808760fed9a689aeb6e6f1528d819b57872abf5e957ca7f2d77ac28c20bc4cfc7a9764368e709bc1c29f536991ef5ae4d93649c7401937e7d83c56c586db528a1988a40128a2397d11516a575437e9c2b3103d4ed93eff099a3f6ad3acb8c0180db18bf662fd13a4fcd49f39feed599e49d993c6700108228d53cb84a14d0d4f8bc18a52f29fe3ab9f70eaed305796c4bb3d585d8d7f779980b9ec5d3bbb26c2a3e9611b20922a0c32cb1709440fbc4bfb2a3677f992fccb1b705c535173c0f8c76cb6fe25e6c64d6aa206e8af1a6ca3eac554ca11c0f07f7e6a8e910", 0xde}, {&(0x7f0000001140)="922f3dfad24cdf67b136b74435c735502cfad3f6a9a3e41f759fd91355dfcad6f3c961d2a564520c1d4c2a873acd9fde518bf403efc691d17c199a3b4314787a89ebc4b626888dd6c782b083eb0d7ca749c39975a491c5aa88725c2db98f0065ccb2f586168c3707b28b5abe81498cbf741dc67bc371ba31ce286ed29ce83eb01fffa7f3e1dec9a86a22195453f98f4fe1794daccdbddf401bcb1c37edd51283279efe8369e57ef3ae265b91f1280c428e140cde35636bc5ca9585fe9a9acf5c3853", 0xc2}], 0x2}}, {{&(0x7f0000001280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000001340)=[{&(0x7f00000012c0)="89f36334d26a61a09dd09b74d69e621c7eae7b174172a0cd9f35adf73382a21d1aacf4fbae3a03279d4f91b6c0319615160a4c90b5f4d8d67887a035f6d95553132b1cf94cdefb8ac87012f42b67cd32f4acbaf6d02c3d8985e38fd73b50ef87a386a82726fe0a5b06e1", 0x6a}], 0x1, &(0x7f0000001400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0x4f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xa8}}, {{&(0x7f00000014c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000001640)=[{&(0x7f0000001500)="fc777392b3ffa750addb19551e6959fa3cdbe03afb421937fb8e3b27e2a4f7b8edbb0bc6274005df5c2e95bfd05f65a1ba563c56d4c13ffb853b6ad7dcd7aee44554eb3361554275c55b4e52265c80dcd711baa2cfb4b370725125168f972910ad22a912", 0x64}, {&(0x7f0000001580)="4400b71eb2e8fffbf6163fdc8c8e8cd9c04a7a147973c4979ae4abb2802ce8694c16fcaffeba99bd535e4da717b217a4d499b336623a9db019563976e6880fb5d787d15065b0acac0c329d7f8ae100d76b2e1de9f407978e0c483b1e0b11f96c7a26ade28ecfe8d1186c350eb8ce57263e805fbcee1d7ba8fd88c03a7981ac233027a2e7821c19d9822679d09a37e9dbc0131b92cd61475981026ec63eba46564751130c1351", 0xa6}], 0x2, &(0x7f0000001740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000017c0)="ed41c255a2936caf7d258a628503d9682c8889c746a76c96b93d6a8410a8c546351e57eb4125c60e1d8b414dfac200214e464e6a85ea7a73aff6ef2c7790e5eeea18d5e115485fc3f3f2cdb60882c3f3e2805cb7d7ff53495651b63e42242a69f794d1b2c724a2c92bdb61e52e5e2707463e06ffbf374f97cb68dd8b9fdb4112145cd5ca82b90232ef384f83f25db6851edebf6f759f155d34b6d8b32d2095f83c8f2fd9fbcb8538cbbc95a1c542927f484fc099404a6b24093d51ebfed7117986764e1af5c6fa2ae0e05e793bc90d3d90925d4da5e8481b5bb9742c602eaff856ab449bca2b05a2e15d8d8136ec21f0c57bb51f64c03a5ab1bf33ea274e199331d663073b0fce8729ca262e34d9af5fab713f26511906fe637dccda0f601c2e8696e183042187a792fb56a17f9ee4ed28da1510d8fd318c355d9020aa2857c0f1aeabf025dc27d1487036ebb1b2fabdcbc2c6ba27693493254935427b64d0161a3f00398fe8baf5190a0426b1934941f88ebde160e9cdb42d9d81a6e6e57ddaef453afc16fe14dc2657429dd61af0bb86d9f36fae2e6b835ed7a19b99ee0db53fb89c12cec3472c104c5bad4de156f732da40483034416cc0da716c289792f72ff4fbcdccdec9f5060a14bc1a1cc106811d045b6231e4063cda4dd9a0e8ac9b0c786475badbf701eab3e0b2acbfea9e15d15441238a657f238e80bda8d9d3a30dde543845dd91d4929b9af3fd43e0e7f57930e409a9d50c426f216e7f47e6c2b0aa2e443dd8eb39136108339fda02b24716ba6c4c696b3a7f767b1ff77ad414f7ea47b633e8d290a6562de6e181a49a4d7fed51adab4f9b15f244f90ed5ece8ff8d17684d9319b1b8afabbb4554ccfd9ea40746e1fb7f7333838e15cf77d97f5f5079ff0726f8ea406eea7c68e707cb203eb0bfe79072c3d21684b92dbb08dbd35cbb08b80df15f762c8da91d5de2f0369c707312210c9d7dc68b9ed1774a4d8b038c086cd3fe6d4722c0a0cb509ed93535f4ba041b76945de396b4985c2fd56257e787156563d33e8b5e3f37566eca7acce8d915cf392cb8c3670ed242b8272d44ab4f0da8c2303bb92f46ff3a581bf2ce789482b1029b12e38799cb0fbd665d449326aa03d4b5eda1e95c388c8576550df8d32d86f446f3878d69614fd3595e8bb18497510c4d970cf7b20b196b998fac0aac766e43844fd9415434fb15d671b08628607b3379653c2079d3bd34975a3eb3688154927c2e8589bb1b628352937f280c6868a3116e89240db4b3650259756051fc38b22d47d08f95a4c0a7f879cb2ed59b0e61ba340901366c2878d49d9a16e272eda116a9ac6e090eee73fc2f37d6ff5bcc1726a782ed3c311ab943dc49e5edf23a882b0ac9c8a786482a8e1f6f320ab918f79cec9f806cce8917b5af55c795b580e9c2abe027f82e440cae8316deb69c5cfb49781370b4ef293aeb016d8ddc844f14830bad2558dd92328810ee9b44734ba709a626a0a1b68c153f8362a0f6578e0910903a7b8944e42891eeb983b2af2487dffad33a3a284cede92bb2cdd40ffdd130db18c9a08bdfbd7878e4e550890743d51feacd3e9815e20b4fa1948fd2368876e987aa9fc1b980e5428882f1416c8ea5de37b829961e14ca684deb7475d4a32287eaa91c8888c85ceca12b9439cfc9598475b77016495af577671ddb81ebaa76ad79020f0c58107861b40264758c9f5ac55467b45ddaeb11a0367eb7fbdb404aa93597bdb40b9a18945548ec13ea24c89af545318e8d134acdcf2f199a2bdccab27059ae28d765eb116b5e80a2a7e05fee398a45551034424af389f1d8a9f9791003b1412b3a77c6ef8e76faaf82bc5ca5cc4ef0a87c6b67bd04a89f60e9e005ec3cdb38fee56278966be9b55cbb62489cee7ab2e0b3aea25dd7929882e8503fa261e20c7ce1731a2ed701da7dd12e0de90b5ec8dbe3fbb046f07967018ba255b8a684984e557c404fe3c73f93a6ec7518d3e3e32b4630d5f33b5caf7736b3812d6ba01a78697772561ad182c682223a2e7f9cb435f3225809f64da2027c531933c5caeb6b2c1fcba5fe907d57b4650fb2cdf2d5cc40f06ab6151d84b90809cddf4f108217e12c7e91c843e6209eedafd4ce434b71190df48ef5a74525c6186c99298aeaf136868d16fba4cb28fbe610d3b4a7c6d7a1ab0285284dd16d44be890b5d429833c80d647921f3e5bef0cfa0fbfe40e35ce57e530fd47b683437aec7256e74d438d30a8ad7f00e61b85886cda46da9a9c2169a11cd5e009f36457e0d28c3e6a8f7ec6132b93c8e2ff57d32c9531315d136b7cc7488bbb3852a92553abb0f633b5a0d6b0c9ee135ecb3a994487b59483a246494ffa2efd91fcd9db77cb0935c28c754d81f8e77ee0bd4ff15ae5567a6c9666553a22523eee18097b3fd53f7202794f36c9a3cee46d7a945527204000462004e376e6d3a8d62b3df2b4f965d6cb38f4c2633f238065ef147ade7059878a6a12cac95cc7c3db8bbc3c174997deacbd43976fa96ba89e114ee209ce2509aa1334c2bfdf533d726b7d2729389d6c3b31ee8190cb7878cc35d0c9e83de72129f721fdaae9bf7d9eec1fe3b79d693bbf4eef6fe12a958c18f5259ff49bc6a9f03624c1ed759070aa88d9523383dfe1cd1802701ab7d2cdea34616a46d46b3093bb92c2eac25432d67d8eef642cc0454410bad7dbb03feb66208e6eefb0609000cb7c5752910478196d694ae81855791461f86dc2b6b8ca536db2fe5546a2a463ddb76f636f6211070f3253eb810377423aad980817926fe6cb3aea49d08b1c0fb0b90a4b38bb55648634c9b0a19889952b77c8e8751357920099f5543227a4198fabf22196e4ee77e95a5c9db53a6b2f110189e02af9eff033bddfef0f4353220bff69180f0e45c8c5e67075362ac3c06cd5218d1fc85b12fda1ce225617cab90f40f52cf21d50c46cb66da7dd3eef529819f9e6b76dedef98daeae0f4719df2c0efceb8c07509ee6566ac6987246549139e8da35d3fed232a474a6f7ece4c4f4722c2a86d4cbfd4be704a0b0ca884b3c04c691a8cd1929ec57a88ff2400de8b1278a018c907e66eb9ab7ae13697bde39dfc24f4d1a1fa83aef5c6153ef2e00545dba98aa896b2bdb7b593d0e1850d33e293ca8b072845105ed26ee91cb2609aada764e083d2dac28fe08e85fac6ced1b09769c4294c1a209f1f895176362c3bdb74c7c31762b5446bdc11c05d77fa208ecd2deb0905d5abc7dab531e42f96f195663bbc3259e7f7f9aeedb51e8145cc6132b91cd6f37bb06d2b0da0b54660e3c5404c0850b89e8650e066b7982cd303add1a4245082834fd8e794ee0164c9596552d346ae8b49799bd4f23478d32e5b36585f681469132b2d57607a8e90ce787dd65e6cf69ab248a04160830cdb098e3dc8c39e10e618e5b5885887f22dc28bd5cde742c9fa707eaea93226585fb01d6a8259caae5510eb9449a006a7e097e4085fe9aa95424c836cf12949e510c00817b5e6615d6670e72f220c683c1218c8c6b58e9cef3a0eb2af4e468bb962068155857325207f390b50fed04ef69ac78a4e17fa0ac891658789d9f791b6ef5a9e3449377e8bd1c623076a31586301dbc7e7ee309d4d2a0cd4ee1bc636456b61d1af2d6e535ea230a322d3f8ce402a8106757b7de1d83c5801e536dbbf394edb9c6b9e28b12ba84aaf10464498ef3c3662afaff34b194f0a6c9a25754a186c93da5aff42fe408e7b7d376bb3f177cbf52a4aaf705e765a31d901adcca69552513b4d9f636e2541adaffa6e63b69ac78408cf22e5b5bb71ba75ac133035c6e1806a95dfa4aeb0b7da1959898a36a7f652810d293b1a3fb833864240b3372b1d39bb82860346da727566caa76098183160073ada5e53ae0d4b3f67793d0900b0c5e9053fc00b7e71c8c43d283d7a9c87fd28f9f59e4c2d06ede2a6cbd006d6a47e5586731ccbbcc325147d4fef2694a6e49069ddc3e0053e9f7dd89b3b22ed7045be6ba27937c5923a6bb74cf4e2f8a5f61f89041df2262974c093a169f3850efc31adef3fa73de26ce7216e9841f5557aa70123613023e0fcb68b3206a200d95cc53fdd8b0c40eeeac2474f676979bf6e293086ab85482886751c1520c272cd98666cf3bc5741e21aaef40f4e81ecf646267b99a7b426b3d7fe905125fbe37dcb31da634746483eb1836d40f1319a803af5cd79265339fa2175ee4bbe0309c64198d95c815f8342e360ddb2bb41c7f985b791d0e309d18ccb15a83b3a6d6321cf9dcffe787f49b6f2f0c7cff12f36d34caba6fc828a05eee0777d6f5e95ca5ca557ab43b04ca13df2723c46c287f77e8876b5601da21df9469215a699d44754af0c56404f21568625ceafe4f37734f6391c73ea4f5871d444e9a9fdd8ae550f374b950c293e716f34c5cf63e0508e5c894a4997fa08489379e6c119004f215fe3aef038a1ed11ea03f420cc9a79a3eca144a3607ad8365dc3d8de0d85bcd4eb810d46aeda0a3788dba95914d360fd03c40dd1ead5948399f40fd5dfce87d0b882a1c4a44ac36c6162e844d4fa152829d07ae1ddae608542ab5bb8d29b199e3e5a95e5006766e1b56758e1923d35cf0ee08c3859bb07b9c52be50e9a6950941924d356f54f085b7f3cb5841bf1c524f73a8eb0a5b423e0f43caf13f7f5b810c74de27b5bab3331eff849f107a5f69c2cddb280e66df004d4b444b2ff7dfd95212a0b0cc8a6f82493501149764eb215a75be9e6a493ed3e91b59d37dcee04280aef4e4c33f5bdca3aa88211e778653642282141334856455f51db819f7ac6f50cb20fcd5653a6cb7db7e736b04f94e615e04d8cc418a72bb167dc9f5bef77e9f9ab0ce71ca8306a70c97b15c2e07e62cafb1a1164a10033ac597f5ab308686ff93561fd01921376f081157e6e11b3dd4b6f93d525e47ea46917fe1a5b770aee84ff00586cd9ff5f7004e29b204c04c8fc579b1c9095bf9f682a837e0264bff367755d8ff4a0fce9c4642ff44d2c4646da3fa07cfeb965cc236dcd16ba07e532f03914e207fbfc52928799f0152990484bbd0b5ba1bed53d6355d685bf0aafbcddb5b70f1235f142e83581f77e3145e72ad8cbebffc27884efb9084c73d3b1d3d5351be85f13eda421927d5d390c24e774b6963adecdfb9cbab215f1607d42b1eba9c375017ff98437d19e22441762458d83677fdb086190020fcd9dd08496f99512369dcbe56f2d517007c192d3146e23061ef736751a04bf5a6378fe71358d9a1690163aa3126f686218d34b0396b4e9338ef9e719daa6f0e7523e8ead3303c0fa5fcc8712f658a86d38bab4c52ae78fc99270c345105d1358e2e020ed10e059f9ae39f69acd487b018398516361b3b775474855892496edd439ffb2c4fd0ed98c0444b7c215d73f0bb29200cf300f037b1ae29068814efdee407c8b2eb7ce92d1920bb308908aa4cc3778c2e4d9bead69ee00ba19efb66ecd442c60cec56f1bfe2fb12b081df7b1953d144e38f8a90e53f5c19c72f4d1d0d0a66552f11cec255731e1e6020fdb94f4a32d9757096f8f9e2aa9e2f174ce487c848da031bc937f88803026c32d04f0234933dc92aa3e458ef8eb31b91400e2eea7d4bf970b2f5d615242ece44f54ad316c4ae153b787a5cb67c36e90e871c143e3b85e12089366f8f0e55d9dd5486ed81e027e139348f40e8713e52e3ea7b084fc949a2cbf14829cb0bf1903af81168e7eb5d09f4febeb640b02eb06de6991ea6c3690b9d35ae9296258da79002", 0x1000}, {&(0x7f00000027c0)="2a80166a2486e7d512a2936767eef2d260e190bbdb4fe13c387cc9fc80143e08970c89fe7a4263dfe329172a808a5283a49ed72d", 0x34}], 0x2, &(0x7f0000002840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @private=0xa010102, @loopback}}}], 0xc8}}], 0x8, 0x0)

378.913249ms ago: executing program 0 (id=3167):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x7f6e6c90, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x19)
r0 = socket$inet(0xa, 0xa, 0x0)
r1 = socket(0x11, 0x2, 0x0)
close(0x3)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000011402002cbd700dfedbdf2508000100000000000800010000000000080001100000000008000100020000000800010001000000d5181fda4e9b10a495fe2931397d2bb1c6be0a010001000000000018a8650c13"], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x4000010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8)
close(0x3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_extract_tcp_res(&(0x7f0000000000)={<r5=>0x41424344}, 0x8, 0x800)
write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00000007461e01030094755d0067000006069078e0000041ac14004e214e23", @ANYRES32=0x41424344, @ANYRES32=r5, @ANYBLOB="c0100007907800060402fe06f9891bba080a00000002fffffff722058f3cd40303050000446d49df17a4a8365e559cbb774fc809deac1680e36c7e925c1340104e86e424013b0257d19ba56e734a85977e2caed51da0f0da4788d963456d213c13364541cb9ef1408845d030a6c645b0bb15466155266a7531b75d83fb3d47a44cdd2f8f4770a33bc1322f3aef67fdf004dbe6f41a234148a4869a5660039c815b23b9b7fd3b618dd04cdaff85e66d5cc159e129631d66203f4cf6f1a4c9e28880f5a235ccd3a55e942bdd607b1ed37bfe60d33d33cc646e5cb17c29e92060"], 0x107)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_int(r4, 0x11a, 0x2c, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000090900010073797a31000000002c000000030a01020000000000000000010000000900030001000080000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

212.223156ms ago: executing program 1 (id=3168):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000211c0012800b00010067726574617000000c800280080007007f0000010a000100aa"], 0x48}}, 0x0)

210.371008ms ago: executing program 0 (id=3169):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
connect(r0, &(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x44, r3, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x44}}, 0x4000)
sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x98}}, 0x8a965623c31197f3)

151.984959ms ago: executing program 0 (id=3170):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x30012, r2, 0xffffa000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x9, 0x2, 0xe, 0x4, 0x8000}, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000080)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendto$llc(r8, &(0x7f0000000000)="16e964f2701407dbf7899c53646bb83da622a2e53bd471877e22d66c5a95924de9f423f5e03ed0c0bb4e2244", 0x2c, 0x20048845, &(0x7f0000000040)={0x1a, 0x1, 0x80, 0x5, 0x6, 0x7c}, 0x10)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r10, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000002000)=0x3)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x3, 0xff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010100}}}})
ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000300)={{0x2, 0x4e23, @loopback}, {0x1}, 0x2, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0_to_bridge\x00'})
setsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f0000000000)={@rand_addr=0x64010101, @broadcast}, 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
close(0x4)

151.5103ms ago: executing program 1 (id=3171):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

91.784038ms ago: executing program 1 (id=3172):
write(0xca, &(0x7f0000000040)="040e0c01031000ffffffffff40ffff", 0xf)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e65766500002000028008001100e8"], 0x64}}, 0x20000000)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r3, &(0x7f0000000800)=[{&(0x7f0000000280)="e851b2965a7bb4347f2745193ab3758d269a81336aadca6b4a7fde0d3b2ecdf3b832875327962d0e813e417c8df705069a63926a1e77902dac58e564206a9d65a1357bbad61404c0c8f4961467bb6dec6f91a574d794835c1acccb619073fba1bbcc0ed4c941d1eefb37360a7708e7af5729e32b604bb56da7ae86457265360f0c743d4196ed3931e683814d6211c61e19952d9effe41219a5464c7c31efe5ddebaff1df2be3a04605a6f2290093b92c8fe2e7ef8ccb7739a39dabf21b3986b9c7454cd5e011a21a5dadfc64d515863dd562758a92eb6539c578e8ed7310730429d0b88eb2f145a2", 0xe8}, {&(0x7f00000004c0)="87aa2f4257934e499f27e48685baf1ec9fd2e1e5bdc8021a17e12b443516b61bc89a83f74c973cf97ee23e0feda7d47d344bb91ff470a3d16f8aa6b26ba410504eaca31b545eea79c88e80f9f6cf7fe246c05f90e2d4c1944fdf224cdf854c8e0e725416a951310d5addec9c2c09cbf807130fb27731434bab329e37653c2d374e99f0becfe28d0cf1db64343208d3d344b7da6e17725308151dc6393438a4d47977ddc6c3049d3f94746a99d70ac7", 0xaf}, {&(0x7f0000000580)="7717dd71c7beeca7481b3c8d34b584d85ae7a02ea593b14a1d273ed7ecc8656cbb48b88b7902de25ebb9db4573aa8ad14eeb3b9a5156e67350b6ee899baa7b0f184319a8317947868e34b90ec1b96b5f79afd369605a152a8cd3412a6bf5258a6c5b5a556c621ecd23d3aefc402b04b3964ba4", 0x73}, {&(0x7f0000000600)="a777eb022a601ba9b3f4c748e9f031388030b82ba43a75a2846815f50c62dd8efdcf2d9149c3ab10914cc3b2dc7b2f1ebb6b9395f2b092f156cb45a2ba5cf8f536396b886686d2fcfb2db03dfffa04c767d692201b534fe432bb889cd911b376b659fd0a82e51a3b737d67e476016ae034880872b5714a50613cbde1097a05bd278cadf3e68d1e08f5e3144367f87f5716a8792a61cca1dccb6be164866f163b95802ba53609589545f8d4fba36d3d7a5df31b0b22760ef6406d546b9fe16ea4632a", 0xc2}, {&(0x7f0000000700)="89cbb81def085df8b0d793ecd4ac819c720be90d8cd5375cafd6cf782c98a8d9005a3eeb5a45579a825b3f86f9cbd2d8e81d95f5b84399ea3d3c5beee9455d774ca833473d395012e99e36a3b91a065fd75d7f7fc97b041e4c65bccb6b96f1f01c", 0x61}, {&(0x7f0000000780)="94dc1a1edc1a6b40ef14d01c8a7333bbc18f1a462ac5", 0x16}], 0x6)
vmsplice(r3, &(0x7f0000000940)=[{&(0x7f0000000040)="1333", 0x2}, {&(0x7f00000007c0)="90", 0x1}, {&(0x7f00000000c0)="008e777f9d", 0xfffffef0}], 0x3, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000180))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}]}]}], {0x14}}, 0xa4}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000080)=0x14)
connect(r0, &(0x7f0000000200)=@xdp={0x2c, 0x4, r5, 0x9}, 0x80)

533.549µs ago: executing program 1 (id=3173):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000100001060100000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e000000140002800800010064"], 0x4c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000100001000200000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e0000001400028008000100640000000800030002"], 0x4c}}, 0x0)

0s ago: executing program 2 (id=3174):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2a, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
write(0xca, &(0x7f0000000080)="040e0c01031000ffffffffff40ffffb610ac316f268a8a112e439024a1de6ed988a274b9bf0c44b5b2145ab9077829797dd083cdfa6fda7b14abe0099a5d64d1410d4cface19404b8f0cab0b6f9fdb6627fade02b2e77474755074d137413fd0c5d976bf0dc41aa9d93627547840667297d19e317b561a9c703e41d452802d6e1882578d3b39ef7c90c0d29fa12952c4b01843eb6e9fa3e873855d0e176a49c0", 0xa0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000001740), &(0x7f0000001780)=0x4)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000001880)=ANY=[@ANYBLOB="9feb01001800000000799d0048000000480000000c00000006000000010000050200000002000000000000000008000010000000030000852c2800000700000000000000000800000a0000000200000002000000030000000000000000600000005f2e302e2e2e5f61303000"], &(0x7f0000001900)=""/81, 0x6c, 0x51, 0x1, 0xad0, 0x10000, @value=r2}, 0x28)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xe, &(0x7f00000033c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0, @ANYBLOB="f9189413d043df485d63380b55b38a1b179176fe6b617161fe486f8b1fe9d19475c6e37e80f0c242e96e3c6dd88c16be819d071496112ff717f32ae2e64dfea992b64da64ebf3576278a24473f99e15f643517fe716846ef78097cf278a3a2d6b19d35ad32b17af43e62122f1c95cdc2d792415ace4ac5f92ed2d247a78b601a8d7e3a8cbb254b995b2fa09ef26fd31c015855f27ee26fe4a2fc6d616e2f8c5eb3370303141e0a929b42", @ANYRES32, @ANYBLOB="24c7a1d713531d095bdd", @ANYRESDEC=r0, @ANYRESHEX=r2, @ANYBLOB="8c2e567f60e16dd9a03ad09bed796814ea232d5848dcd6a670ba0cc1009ee3fa3f1eebc74ddb6180cdbe51ecbfcda8b605a3cd12b55e568a51f8283b1fe18149804d4464", @ANYRESHEX=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0x103, 0x188, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x0, 0x0, 0x10000}, 0x50)
connect(r0, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80)

0s ago: executing program 0 (id=3175):
r0 = socket$igmp(0x2, 0x3, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002810c00220013670000000000000c002300e908000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004014}, 0x4)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
r4 = socket$packet(0x11, 0x3, 0x300)
accept$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000180)=0x14)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, <r6=>0xffffffffffffffff}, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r6, @ANYBLOB="06000000ffffffea000000000032c2c0cbff4c00b1926192c1f062bb428d8981450e13528bbed5ed72caf890b0d68df89de1333054a5e079e3e5a353cd34", @ANYRES32=r5, @ANYRES32, @ANYBLOB="04000000030000000300"/28], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="ebb6b68a99b6fcafbc52ef373aafed077f4e90568da5623b273623e88aac3bb3d59896f25f9b68963dcbc57d461684760e214c9bf2", @ANYRES64=0x0], 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r8=>0x0}, 0x8)
r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r8, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c40)={r9, 0x0, 0x0}, 0x10)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_procs(r10, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r11, &(0x7f0000002980), 0x12)
sendto(r0, &(0x7f0000000840)="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", 0x1000, 0x4000, 0x0, 0x0)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r12, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x84, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='nr0\x00', 0x7, 0x8000, 0x1a})
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32, @ANYBLOB="003000000000000014001a80100004800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
openat$cgroup(r10, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})

kernel console output (not intermixed with test programs):

t configured!
[  129.687078][ T9804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1134'.
[  129.726319][ T9806] bond0: option fail_over_mac: invalid value (127)
[  129.727253][ T9806] bond0 (unregistering): Released all slaves
[  129.882492][ T9822] macvtap1: entered allmulticast mode
[  129.882507][ T9822] dummy0: entered allmulticast mode
[  129.999561][ T4992] Bluetooth: hci0: unexpected event for opcode 0x1003
[  130.043688][ T4992] Bluetooth: hci0: unexpected event for opcode 0x1003
[  130.048515][ T9842] netlink: 'syz.2.1150': attribute type 1 has an invalid length.
[  130.048526][ T9842] netlink: 'syz.2.1150': attribute type 4 has an invalid length.
[  130.116437][ T9848] netlink: 'syz.2.1153': attribute type 30 has an invalid length.
[  131.073826][ T9863] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  131.101224][ T9866] netlink: 'syz.1.1160': attribute type 18 has an invalid length.
[  131.498909][ T4992] Bluetooth: hci0: unexpected event for opcode 0x1003
[  131.508468][ T9921] Bluetooth: MGMT ver 1.23
[  131.676359][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  131.830882][ T9945] Cannot find del_set index 4 as target
[  131.876443][ T9950] netlink: 'syz.2.1187': attribute type 1 has an invalid length.
[  132.984286][ T9962] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  132.986878][ T9969] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  133.144990][ T9981] ip_tables: iptables: counters copy to user failed while replacing table
[  133.172512][ T9981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.259329][ T9987] vlan0: entered promiscuous mode
[  133.411463][ T4992] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  133.725161][T10022] Bluetooth: hci0: unsupported parameter 5135
[  133.725179][T10022] Bluetooth: hci0: unsupported parameter 8192
[  133.725187][T10022] Bluetooth: hci0: unsupported parameter 5135
[  133.725195][T10022] Bluetooth: hci0: unsupported parameter 8192
[  133.803352][T10027] gretap0: entered promiscuous mode
[  133.805149][T10027] vlan2: entered promiscuous mode
[  133.834093][T10032] netlink: 'syz.1.1222': attribute type 4 has an invalid length.
[  133.834615][T10032] netlink: 'syz.1.1222': attribute type 1 has an invalid length.
[  133.934737][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  134.192668][T10064] netlink: 'syz.1.1230': attribute type 21 has an invalid length.
[  134.192687][T10064] __nla_validate_parse: 24 callbacks suppressed
[  134.192697][T10064] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1230'.
[  134.259387][T10064] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1230'.
[  134.475046][T10083] ip6_vti0: left promiscuous mode
[  134.475238][T10083] netlink: 988 bytes leftover after parsing attributes in process `syz.0.1233'.
[  134.620177][T10092] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1236'.
[  134.691315][T10097] netlink: 'syz.2.1239': attribute type 1 has an invalid length.
[  134.691813][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'.
[  134.862124][T10111] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1244'.
[  134.965949][T10123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1249'.
[  135.179962][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1251'.
[  135.250058][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1255'.
[  135.250144][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1255'.
[  135.395498][T10150] syz_tun: entered allmulticast mode
[  135.564820][T10165] netlink: 'syz.1.1262': attribute type 6 has an invalid length.
[  135.565615][T10165] netlink: 'syz.1.1262': attribute type 6 has an invalid length.
[  135.860983][T10183] netlink: 'syz.0.1270': attribute type 1 has an invalid length.
[  136.246443][T10215] gre0: Caught tx_queue_len zero misconfig
[  136.254595][  T455] hid-generic 0005:0008:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[  136.810501][T10232] bond0: entered allmulticast mode
[  136.821813][T10232] macvlan2: entered promiscuous mode
[  136.821829][T10232] macvlan2: entered allmulticast mode
[  136.822645][T10232] bond0: entered promiscuous mode
[  136.823386][T10232] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  136.826575][T10232] bond0: left promiscuous mode
[  136.964259][T10238] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  137.766950][T10305] netlink: 'syz.1.1306': attribute type 83 has an invalid length.
[  137.767110][T10304] netlink: 'syz.1.1306': attribute type 83 has an invalid length.
[  137.808854][T10307] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.815754][T10307] nlmon0: left promiscuous mode
[  137.820735][T10307] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.820882][T10307] bond2: (slave nlmon0): The slave device specified does not support setting the MAC address
[  137.824952][T10307] bond2: (slave nlmon0): Error -95 calling set_mac_address
[  137.874263][T10310] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  137.874313][T10310] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  138.287696][T10324] can: request_module (can-proto-0) failed.
[  138.496978][T10343] tipc: Started in network mode
[  138.497004][T10343] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  138.497200][T10343] tipc: Enabled bearer <eth:batadv0>, priority 10
[  138.497292][T10342] wg2: Caught tx_queue_len zero misconfig
[  138.676667][T10363] tipc: Started in network mode
[  138.676682][T10363] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  138.676756][T10363] tipc: Enabled bearer <eth:batadv0>, priority 10
[  138.945972][T10386] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  138.945989][T10386] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.971862][T10384] 8021q: adding VLAN 0 to HW filter on device bond3
[  139.457790][T10431] __nla_validate_parse: 28 callbacks suppressed
[  139.457806][T10431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1356'.
[  139.491737][ T9646] tipc: Node number set to 8432298
[  139.791374][    T9] tipc: Node number set to 8432298
[  140.153762][T10451] netlink: 'syz.1.1362': attribute type 2 has an invalid length.
[  140.153848][T10451] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1362'.
[  140.267257][T10457] lo: entered allmulticast mode
[  140.267489][T10457] lo: left allmulticast mode
[  140.395687][T10467] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  140.813840][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1381'.
[  140.829921][T10509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1382'.
[  140.829951][T10509] netlink: 'syz.2.1382': attribute type 7 has an invalid length.
[  140.829959][T10509] netlink: 'syz.2.1382': attribute type 8 has an invalid length.
[  140.829968][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'.
[  140.879464][T10511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1383'.
[  140.995938][T10521] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1385'.
[  141.095773][T10526] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  141.095793][T10526] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  141.221482][T10532] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1390'.
[  141.325292][T10538] xt_hashlimit: max too large, truncated to 1048576
[  141.325479][T10538] No such timeout policy "syz1"
[  141.327161][T10540] sctp: [Deprecated]: syz.2.1393 (pid 10540) Use of int in max_burst socket option.
[  141.327161][T10540] Use struct sctp_assoc_value instead
[  141.327235][T10538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1392'.
[  141.330266][T10540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1393'.
[  141.375601][T10542] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  141.376287][T10542] bond1 (unregistering): Released all slaves
[  141.377840][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  141.397561][T10545] sch_tbf: burst 173 is lower than device syzkaller0 mtu (313) !
[  141.493954][T10552] xt_esp: unknown flags DD
[  141.514424][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  141.552495][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  142.538398][T10609] x_tables: duplicate underflow at hook 1
[  142.715220][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  142.717826][T10622] netlink: 'syz.0.1422': attribute type 5 has an invalid length.
[  142.786582][T10627] netlink: 'syz.2.1425': attribute type 10 has an invalid length.
[  143.102709][T10652] openvswitch: netlink: Message has 12 unknown bytes.
[  143.145893][T10654] netlink: 'syz.1.1430': attribute type 1 has an invalid length.
[  143.292255][T10661] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  143.292282][T10661] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  143.292306][T10661] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  143.294862][T10661] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  143.302013][T10661] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98
[  143.347311][T10661] smbdirect: ib_dev[s`z1] renamed to [s]
[  143.886980][T10699] batman_adv: batadv0: Adding interface: macvtap1
[  143.886991][T10699] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  143.925557][T10701] netlink: 'syz.2.1445': attribute type 1 has an invalid length.
[  143.948833][T10701] 8021q: adding VLAN 0 to HW filter on device bond5
[  146.468872][T10674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  146.480888][T10668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  146.663267][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  146.764605][T10727] openvswitch: netlink: Unknown nsh attribute 0
[  146.790468][T10738] __nla_validate_parse: 10 callbacks suppressed
[  146.790485][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'.
[  146.790545][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'.
[  146.904650][T10745] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1459'.
[  146.987983][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  147.099503][T10770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1469'.
[  147.542423][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  148.145687][T10799] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1479'.
[  148.357444][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  148.475778][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'.
[  148.570676][T10847] bridge1: entered promiscuous mode
[  148.570694][T10847] bridge1: entered allmulticast mode
[  148.676832][T10856] netlink: 'syz.1.1490': attribute type 3 has an invalid length.
[  148.676850][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'.
[  148.678274][T10857] netlink: 'syz.1.1490': attribute type 3 has an invalid length.
[  148.678286][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'.
[  148.730850][T10856] bond4: option miimon: invalid value (18446744073357230079)
[  148.730869][T10856] bond4: option miimon: allowed values 0 - 2147483647
[  148.738342][T10856] bond4 (unregistering): Released all slaves
[  149.914382][T10923] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1504'.
[  150.074268][T10928] openvswitch: netlink: VLAN attribute unexpected.
[  150.277585][T10949] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1511'.
[  150.401474][T10959] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  150.728289][T10967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.338660][T10915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  152.347922][T10977] __nla_validate_parse: 1 callbacks suppressed
[  152.347939][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1521'.
[  152.428323][T10983] syzkaller0: entered promiscuous mode
[  152.428341][T10983] syzkaller0: entered allmulticast mode
[  152.606641][T10990] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1526'.
[  153.273129][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'.
[  153.330041][T11056] bridge5: entered promiscuous mode
[  153.330061][T11056] bridge5: entered allmulticast mode
[  153.356642][T11061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1549'.
[  153.369599][T11063] wg1: left promiscuous mode
[  153.802390][T11097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'.
[  154.233747][T11108] x_tables: duplicate underflow at hook 1
[  154.347678][T11111] bond6: Unable to set down delay as MII monitoring is disabled
[  154.351990][T11111] bond6 (unregistering): Released all slaves
[  154.366920][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'.
[  154.457306][T11116] Bluetooth: hci0: unsupported parameter 5135
[  154.457325][T11116] Bluetooth: hci0: unsupported parameter 8192
[  154.457335][T11116] Bluetooth: hci0: unsupported parameter 5135
[  154.457342][T11116] Bluetooth: hci0: unsupported parameter 8192
[  154.551036][T11121] netlink: 'syz.2.1564': attribute type 1 has an invalid length.
[  154.583462][T11121] bond6: entered promiscuous mode
[  154.583747][T11121] 8021q: adding VLAN 0 to HW filter on device bond6
[  154.602918][T11121] 8021q: adding VLAN 0 to HW filter on device bond6
[  154.606148][T11121] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  154.606165][T11121] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  154.609906][T11121] bond6: (slave ip6gre1): making interface the new active one
[  154.609920][T11121] ip6gre1: entered promiscuous mode
[  154.618262][T11121] bond6: (slave ip6gre1): Enslaving as an active interface with an up link
[  154.718530][T11131] netlink: 'syz.0.1567': attribute type 12 has an invalid length.
[  154.718548][T11131] netlink: 'syz.0.1567': attribute type 29 has an invalid length.
[  154.718556][T11131] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1567'.
[  154.718569][T11131] netlink: 'syz.0.1567': attribute type 3 has an invalid length.
[  154.718577][T11131] netlink: 'syz.0.1567': attribute type 2 has an invalid length.
[  154.718586][T11131] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1567'.
[  154.769343][T11136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1569'.
[  154.787961][T11134] netlink: 'syz.2.1568': attribute type 11 has an invalid length.
[  154.930457][T11142] pimreg: entered allmulticast mode
[  154.939269][T11141] pimreg: left allmulticast mode
[  155.115923][T11150] Cannot find add_set index 2 as target
[  155.176520][T11157] syzkaller0: entered promiscuous mode
[  155.176538][T11157] syzkaller0: entered allmulticast mode
[  155.191648][T11157] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1574'.
[  156.021357][ T4992] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  157.679131][T11189] netlink: 'syz.1.1585': attribute type 4 has an invalid length.
[  157.727446][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  157.745696][T11198] Bluetooth: hci0: unsupported parameter 5135
[  157.745712][T11198] Bluetooth: hci0: invalid length 2, exp 1 for type 31
[  157.839390][T11208] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1592'.
[  158.007347][T11228] netlink: 64595 bytes leftover after parsing attributes in process `syz.1.1600'.
[  158.065952][T11240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1603'.
[  158.079338][T11244] ip_tables: iptables: counters copy to user failed while replacing table
[  158.092744][T11244] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1604'.
[  158.169245][T11251] bond1: Unable to set down delay as MII monitoring is disabled
[  158.170534][T11251] bond1 (unregistering): Released all slaves
[  158.197653][T11253] netlink: 'syz.0.1605': attribute type 13 has an invalid length.
[  158.197668][T11253] netlink: 'syz.0.1605': attribute type 12 has an invalid length.
[  158.532530][T11281] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1611'.
[  158.533828][T11276] sctp: [Deprecated]: syz.1.1612 (pid 11276) Use of int in maxseg socket option.
[  158.533828][T11276] Use struct sctp_assoc_value instead
[  158.556430][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'.
[  158.659416][T11288] xt_time: invalid argument - start or stop time greater than 23:59:59
[  158.799762][T11302] netlink: 'syz.1.1616': attribute type 3 has an invalid length.
[  158.875814][T11307] tipc: MTU too low for tipc bearer
[  158.876737][T11307] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1618'.
[  159.304493][T11333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1628'.
[  159.322588][T11333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1628'.
[  159.364726][T11339] ipvlan0: left promiscuous mode
[  159.445682][T11344] ip_tables: iptables: counters copy to user failed while replacing table
[  159.511721][T11348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.599872][T11355] tipc: Can't bind to reserved service type 1
[  159.761296][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'.
[  160.341338][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  160.774132][T11507] validate_nla: 2 callbacks suppressed
[  160.774145][T11507] netlink: 'syz.0.1648': attribute type 11 has an invalid length.
[  160.775238][T11507] netlink: 'syz.0.1648': attribute type 11 has an invalid length.
[  160.919806][T11515] syzkaller0: entered promiscuous mode
[  160.919823][T11515] syzkaller0: entered allmulticast mode
[  160.928650][T11515] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  160.957556][T11515] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  160.993546][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  161.161230][T11542] netlink: 'syz.2.1659': attribute type 1 has an invalid length.
[  161.497163][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  161.497243][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  161.785357][T11605] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  161.939054][T11620] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  162.125083][T11637] netlink: 'syz.2.1691': attribute type 1 has an invalid length.
[  162.125101][T11637] netlink: 'syz.2.1691': attribute type 3 has an invalid length.
[  162.135279][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  163.162033][T11655] syz.2.1696 (11655) used greatest stack depth: 20200 bytes left
[  163.187119][T11656] syz.2.1696 (11656) used greatest stack depth: 19752 bytes left
[  163.337629][T11699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.474317][T11713] ip6_vti0: Caught tx_queue_len zero misconfig
[  163.601776][T11725] netlink: 'syz.2.1722': attribute type 15 has an invalid length.
[  163.684595][T11725] __nla_validate_parse: 41 callbacks suppressed
[  163.684614][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1722'.
[  163.763212][T11739] netlink: 'syz.0.1723': attribute type 1 has an invalid length.
[  163.763848][T11739] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1723'.
[  163.764249][T11739] netlink: 'syz.0.1723': attribute type 27 has an invalid length.
[  163.764476][T11739] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1723'.
[  163.826324][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'.
[  163.841683][T11742] lo: left promiscuous mode
[  163.845565][T11742] tunl0: left promiscuous mode
[  163.848281][T11742] gre0: left promiscuous mode
[  163.856429][T11742] gretap0: left promiscuous mode
[  163.857930][T11742] erspan0: left promiscuous mode
[  163.859293][T11742] ip_vti0: left promiscuous mode
[  163.862088][T11742] sit0: left promiscuous mode
[  163.867342][T11742] ip6tnl0: left promiscuous mode
[  163.868637][T11742] ip6gre0: left promiscuous mode
[  163.873880][T11742] ip6gretap0: left promiscuous mode
[  163.879033][T11742] bridge0: left promiscuous mode
[  163.880045][T11742] vcan0: left promiscuous mode
[  163.887263][T11742] team0: left promiscuous mode
[  163.890027][T11742] 8021q: adding VLAN 0 to HW filter on device team0
[  163.892840][T11742] nlmon0: left promiscuous mode
[  163.897248][T11743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1724'.
[  163.897273][T11743] openvswitch: netlink: Missing key (keys=c0, expected=40280)
[  163.898324][T11742] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.904452][T11742] vxcan0: left promiscuous mode
[  163.907735][T11742] vxcan1: left promiscuous mode
[  163.909576][T11742] veth0: left promiscuous mode
[  163.936971][T11742] wg0: left promiscuous mode
[  163.950759][T11742] wg1: left promiscuous mode
[  163.956168][T11742] wg2: left promiscuous mode
[  163.960851][T11742] veth0_to_bridge: left promiscuous mode
[  163.969532][T11742] veth1_to_bridge: left promiscuous mode
[  163.974775][T11742] veth0_to_bond: left promiscuous mode
[  163.975883][T11742] bond_slave_0: left promiscuous mode
[  163.976723][T11742] veth1_to_bond: left promiscuous mode
[  163.977686][T11742] bond_slave_1: left promiscuous mode
[  163.978467][T11742] veth0_to_team: left promiscuous mode
[  163.979474][T11742] team_slave_0: left promiscuous mode
[  163.980203][T11742] veth1_to_team: left promiscuous mode
[  163.981057][T11742] team_slave_1: left promiscuous mode
[  163.998218][T11742] veth0_to_batadv: left promiscuous mode
[  163.999947][T11742] batadv_slave_0: left promiscuous mode
[  164.000584][T11742] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.000863][T11742] veth1_to_batadv: left promiscuous mode
[  164.002197][T11742] batadv_slave_1: left promiscuous mode
[  164.003143][T11742] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.003406][T11742] xfrm0: left promiscuous mode
[  164.004811][T11742] veth0_to_hsr: left promiscuous mode
[  164.006197][T11742] veth1_to_hsr: left promiscuous mode
[  164.007814][T11742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  164.007827][T11742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  164.007861][T11742] hsr0: left promiscuous mode
[  164.009024][T11742] veth1_virt_wifi: left promiscuous mode
[  164.010054][T11742] veth0_virt_wifi: left promiscuous mode
[  164.010863][T11742] virt_wifi0: left promiscuous mode
[  164.018505][T11742] veth1_vlan: left promiscuous mode
[  164.022381][T11742] vlan0: left promiscuous mode
[  164.024322][T11742] vlan1: left promiscuous mode
[  164.025300][T11742] veth1_vlan: entered promiscuous mode
[  164.025458][T11742] macvlan0: left promiscuous mode
[  164.026685][T11742] macvlan1: left promiscuous mode
[  164.027656][T11742] ipvlan0: left promiscuous mode
[  164.028725][T11742] ipvlan1: left promiscuous mode
[  164.029540][T11742] veth1_macvtap: left promiscuous mode
[  164.031664][T11742] veth0_macvtap: left promiscuous mode
[  164.032604][T11742] veth0_macvtap: entered promiscuous mode
[  164.032746][T11742] macvtap0: left promiscuous mode
[  164.033742][T11742] veth1_macvtap: entered promiscuous mode
[  164.034000][T11742] macsec0: left promiscuous mode
[  164.036714][T11742] geneve0: left promiscuous mode
[  164.038493][T11742] geneve1: left promiscuous mode
[  164.040828][T11742] netdevsim netdevsim0 netdevsim1: left promiscuous mode
[  164.042946][T11742] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  164.046071][T11742] netdevsim netdevsim0 netdevsim2: left promiscuous mode
[  164.046316][T11742] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  164.049163][T11742] netdevsim netdevsim0 netdevsim3: left promiscuous mode
[  164.049851][T11742] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  164.050844][T11742] mac80211_hwsim hwsim3 ..c: left promiscuous mode
[  164.065745][T11742] vxlan0: left promiscuous mode
[  164.068104][T11742] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  164.071929][T11742] erspan1: left promiscuous mode
[  164.072150][T11742] ip6gre2: left promiscuous mode
[  164.078404][T11500] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.078478][T11500] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.088501][T11500] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.088574][T11500] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.101674][  T455] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  164.113113][  T455] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  164.231999][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  164.232025][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.232050][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  164.232063][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.232085][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  164.232099][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.232119][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  164.232132][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.341699][ T6407] IPVS: ip_vs_send_async error -101
[  164.542680][  T455] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  164.834567][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  166.058034][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'.
[  166.058501][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'.
[  166.058912][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'.
[  166.632778][T11827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1744'.
[  168.104260][T11774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  168.474296][T11853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1751'.
[  168.474329][T11853] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  168.568268][T11856] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  168.606270][T11863] tc_dump_action: action bad kind
[  169.189790][T11900] openvswitch: netlink: IP tunnel dst address not specified
[  169.631728][T11929] __nla_validate_parse: 1 callbacks suppressed
[  169.631740][T11929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1765'.
[  169.784332][T11942] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  169.798378][T11942] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1770'.
[  169.892507][T11950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1773'.
[  169.906836][T11950] bond1: entered promiscuous mode
[  169.907180][T11950] 8021q: adding VLAN 0 to HW filter on device bond1
[  169.937007][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  170.205677][T11984] netlink: 'syz.2.1782': attribute type 13 has an invalid length.
[  170.214113][T11984] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  170.214240][T11984] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  170.242174][T11981] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1783'.
[  170.335736][T11996] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  170.335751][T11996] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  170.335833][T11993] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1786'.
[  170.337661][T11996] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1787'.
[  170.372291][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  170.407355][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  170.417702][T12000] openvswitch: netlink: IPv6 tunnel dst address is zero
[  170.464642][T12006] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1791'.
[  170.467728][T12006] netlink: 'syz.0.1791': attribute type 1 has an invalid length.
[  170.467738][T12006] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1791'.
[  170.467744][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1791'.
[  170.484580][T12008] af_packet: packet size is too long (32 > 13)
[  170.664601][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1798'.
[  170.763394][T12032] netlink: 'syz.2.1801': attribute type 3 has an invalid length.
[  170.807791][T12035] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  170.807815][T12035] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  170.897543][T12039] 8021q: adding VLAN 0 to HW filter on device bond8
[  170.939420][T12044] block nbd0: reconnected socket
[  170.939437][T12044] nbd: socks must be embedded in a SOCK_ITEM attr
[  171.002140][ T5842] block nbd0: Receive control failed (result -32)
[  172.188716][T12086] 8021q: adding VLAN 0 to HW filter on device team0
[  172.194802][T12086] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.201979][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.202495][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.205928][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.206058][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.208922][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.209267][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.209548][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.230709][T12086] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.233121][T12086] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.238064][T12086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  172.238144][T12086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  172.266784][T12086] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  172.268127][T12086] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  172.269014][T12086] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  172.269929][T12086] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  172.290866][  T807] s: Port: 1 Link ACTIVE
[  172.299243][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.299321][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.383673][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.383706][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.383728][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.383748][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.526722][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  173.184460][T12130] bond2: invalid ARP target 0.0.0.0 specified for addition
[  173.184482][T12130] bond2: option arp_ip_target: invalid value (0)
[  173.188553][T12130] bond2 (unregistering): Released all slaves
[  173.262305][T12149] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  173.262326][T12149] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  173.351559][T12155] bond2: entered promiscuous mode
[  173.351590][T12155] bond2: entered allmulticast mode
[  173.351772][T12155] 8021q: adding VLAN 0 to HW filter on device bond2
[  173.409334][T12153] IPVS: set_ctl: invalid protocol: 16 224.0.0.1:20000
[  173.409364][T12158] IPVS: set_ctl: invalid protocol: 16 224.0.0.1:20000
[  173.419781][T12153] netlink: 'syz.2.1838': attribute type 4 has an invalid length.
[  173.703044][ T5669] net_ratelimit: 15 callbacks suppressed
[  173.703060][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.967972][ T5338] veth0_macvtap: left promiscuous mode
[  174.024224][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.024601][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.143984][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.168250][   T34] audit: type=1800 audit(1791196870.378:2): pid=12229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1846" name=CB dev="tmpfs" ino=3017 res=0 errno=0
[  174.187865][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.265152][ T5647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.281586][ T5647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.345208][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.484165][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.382183][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.437162][T12298] __nla_validate_parse: 20 callbacks suppressed
[  175.437178][T12298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1858'.
[  175.437187][T12298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1858'.
[  175.437195][T12298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1858'.
[  175.437309][T12298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1858'.
[  175.765207][T12274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  175.861621][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  175.879859][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'.
[  175.973071][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  176.048706][T12325] syzkaller0: entered promiscuous mode
[  176.048718][T12325] syzkaller0: entered allmulticast mode
[  176.065890][T12323] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1863'.
[  176.395247][T12377] sctp: [Deprecated]: syz.1.1874 (pid 12377) Use of struct sctp_assoc_value in delayed_ack socket option.
[  176.395247][T12377] Use struct sctp_sack_info instead
[  176.507433][T12383] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1875'.
[  176.581847][T12399] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1879'.
[  176.728473][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'.
[  176.878732][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'.
[  178.030408][T12544] xt_MASQUERADE: bad rangesize 20224
[  178.324180][T12579] netlink: 'syz.1.1921': attribute type 1 has an invalid length.
[  178.363039][T12584] netlink: 'syz.0.1918': attribute type 96 has an invalid length.
[  178.399162][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  178.575581][T12606] netlink: 'syz.1.1928': attribute type 1 has an invalid length.
[  178.590554][T12606] bond4: option mode: invalid value (7)
[  178.594210][T12606] bond4 (unregistering): Released all slaves
[  178.640620][T12613] netlink: 'syz.1.1928': attribute type 10 has an invalid length.
[  178.732583][T12622] net_ratelimit: 15 callbacks suppressed
[  178.732594][T12622] openvswitch: netlink: Missing key (keys=40, expected=100)
[  178.751872][T12622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.752115][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.898027][T12638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.898260][T12634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.899200][T12634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.899311][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.541915][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.557818][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.558030][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.750889][   T55] Bluetooth: hci2: ISO packet for unknown connection handle 3684
[  179.781037][T12724] syzkaller1: entered promiscuous mode
[  179.781050][T12724] syzkaller1: entered allmulticast mode
[  180.323763][T12749] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  180.323785][T12749] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  180.457791][T12757] __nla_validate_parse: 15 callbacks suppressed
[  180.457815][T12757] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1965'.
[  180.457828][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'.
[  180.457840][T12757] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1965'.
[  180.510099][T12759] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  180.525170][T12763] netlink: 'syz.1.1966': attribute type 1 has an invalid length.
[  180.525521][T12764] netlink: 'syz.1.1966': attribute type 1 has an invalid length.
[  180.998141][T12801] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1980'.
[  181.016482][T12805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1981'.
[  181.026660][T12803] netlink: 'syz.0.1980': attribute type 3 has an invalid length.
[  181.206580][T12822] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1984'.
[  181.257833][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1986'.
[  181.259721][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1984'.
[  181.848209][T12854] 8021q: adding VLAN 0 to HW filter on device bond3
[  181.855832][T12854] bond3 (unregistering): Released all slaves
[  181.864662][T12857] sctp: [Deprecated]: syz.2.1995 (pid 12857) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.864662][T12857] Use struct sctp_sack_info instead
[  181.867329][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1995'.
[  181.892526][T12858] netlink: 'syz.2.1995': attribute type 1 has an invalid length.
[  181.893565][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  181.906210][T12858] bond9: entered promiscuous mode
[  181.906230][T12858] bond9: entered allmulticast mode
[  181.906435][T12858] 8021q: adding VLAN 0 to HW filter on device bond9
[  181.960178][T12864] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1994'.
[  181.993628][T12870] netlink: 'syz.1.1997': attribute type 1 has an invalid length.
[  182.023039][T12870] bond4: option mode: invalid value (7)
[  182.024370][T12870] bond4 (unregistering): Released all slaves
[  182.252998][T12894] netlink: 'syz.1.2005': attribute type 1 has an invalid length.
[  182.266255][T12894] bond4: option mode: invalid value (8)
[  182.267207][T12894] bond4 (unregistering): Released all slaves
[  182.785750][T12939] syzkaller0: entered promiscuous mode
[  182.785767][T12939] syzkaller0: entered allmulticast mode
[  182.788468][T12939] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  184.741597][ T9644] net_ratelimit: 10 callbacks suppressed
[  184.741615][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.301890][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.302303][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.647460][T12927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  185.746541][T12954] __nla_validate_parse: 7 callbacks suppressed
[  185.746557][T12954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2020'.
[  185.781671][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.832928][T12968] geneve0: Caught tx_queue_len zero misconfig
[  185.879066][T12973] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2026'.
[  185.919910][T12984] geneve2: entered allmulticast mode
[  185.962146][T12989] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2031'.
[  186.078643][T13002] netlink: 'syz.0.2035': attribute type 1 has an invalid length.
[  186.165393][T13012] netlink: 'syz.2.2037': attribute type 1 has an invalid length.
[  186.165405][T13012] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2037'.
[  186.186876][T13012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.424365][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2042'.
[  186.424408][T13025] vlan2: left promiscuous mode
[  186.424418][T13025] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  186.424737][T13025] bridge0: port 3(vlan2) entered disabled state
[  186.426014][T13025] bridge_slave_1: left promiscuous mode
[  186.426105][T13025] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.427335][T13025] bridge_slave_0: left allmulticast mode
[  186.427344][T13025] bridge_slave_0: left promiscuous mode
[  186.427415][T13025] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.475840][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  186.476802][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'.
[  186.591621][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.835304][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.992733][T13047] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2047'.
[  187.117952][T13056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2050'.
[  187.118044][T13058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2050'.
[  187.448606][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  187.673793][T13097] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  187.674706][T13087] netlink: 'syz.0.2061': attribute type 4 has an invalid length.
[  187.788618][T13109] netlink: 'syz.1.2065': attribute type 1 has an invalid length.
[  187.822016][T13109] bond4: entered promiscuous mode
[  187.822284][T13109] 8021q: adding VLAN 0 to HW filter on device bond4
[  187.857119][T13107] bond4: (slave bridge2): making interface the new active one
[  187.857140][T13107] bridge2: entered promiscuous mode
[  187.860001][T13107] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  187.862815][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.874753][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.036188][   T55] Bluetooth: hci2: ISO packet for unknown connection handle 3684
[  188.269061][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2076'.
[  188.505450][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.622837][T13168] infiniband syz1: set down
[  188.622848][T13168] infiniband syz1: added syzkaller0
[  188.634171][T13168] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  188.634188][T13168] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  188.634203][T13168] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  188.663689][T13168] RDS/IB: syz1: added
[  188.663940][T13168] smc: adding ib device syz1 with port count 1
[  188.664051][T13168] smc:    ib device syz1 port 1 has no pnetid
[  188.692428][T13203] netlink: 'syz.2.2085': attribute type 1 has an invalid length.
[  188.902284][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.131512][T11501] smc: removing ib device syz1
[  189.187167][T11501] smbdirect: ib_dev[syz1] removed
[  189.551525][T13237] wg0: Caught tx_queue_len zero misconfig
[  189.862258][T13224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  189.926397][T13247] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  189.943574][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.957090][T13252] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  190.984585][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.266402][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  191.378939][T13284] syzkaller0: entered promiscuous mode
[  191.378961][T13284] syzkaller0: entered allmulticast mode
[  191.664714][T13311] unsupported nlmsg_type 40
[  192.382579][T13326] ip_tables: iptables: counters copy to user failed while replacing table
[  192.437735][T13328] __nla_validate_parse: 10 callbacks suppressed
[  192.437752][T13328] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2118'.
[  193.061666][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.204208][ T5592] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  193.204234][ T5592] CPU: 0 UID: 0 PID: 5592 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  193.204247][ T5592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  193.204254][ T5592] Call Trace:
[  193.204258][ T5592]  <TASK>
[  193.204264][ T5592]  dump_stack_lvl+0xe8/0x150
[  193.204287][ T5592]  dump_header+0xd3/0x4b0
[  193.204305][ T5592]  oom_kill_process+0x3ab/0x9e0
[  193.204323][ T5592]  out_of_memory+0x1064/0x1480
[  193.204337][ T5592]  ? try_charge_memcg+0xc32/0x15e0
[  193.204360][ T5592]  ? __pfx_out_of_memory+0x10/0x10
[  193.204373][ T5592]  ? do_raw_spin_unlock+0x4d/0x200
[  193.204396][ T5592]  try_charge_memcg+0xcdf/0x15e0
[  193.204415][ T5592]  ? __pfx_try_charge_memcg+0x10/0x10
[  193.204432][ T5592]  ? charge_memcg+0x47/0x310
[  193.204442][ T5592]  charge_memcg+0x1dd/0x310
[  193.204451][ T5592]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  193.204459][ T5592]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  193.204470][ T5592]  swap_cache_alloc_folio+0x4de/0x990
[  193.204486][ T5592]  swap_cache_read_folio+0x44/0x120
[  193.204498][ T5592]  swap_cluster_readahead+0x392/0x630
[  193.204511][ T5592]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  193.204531][ T5592]  swapin_readahead+0x1a3/0xc50
[  193.204546][ T5592]  ? __pfx_swapin_readahead+0x10/0x10
[  193.204559][ T5592]  ? swap_table_get+0x1e/0x260
[  193.204569][ T5592]  ? swap_table_get+0x1e/0x260
[  193.204577][ T5592]  ? swap_table_get+0x1e/0x260
[  193.204587][ T5592]  ? swap_table_get+0x216/0x260
[  193.204598][ T5592]  ? swap_cache_get_folio+0x2e7/0x2f0
[  193.204637][ T5592]  do_swap_page+0x3fb/0x4c10
[  193.204654][ T5592]  ? __lock_acquire+0x747/0x2de0
[  193.204661][ T5592]  ? do_swap_page+0x126/0x4c10
[  193.204670][ T5592]  ? __pfx_do_swap_page+0x10/0x10
[  193.204679][ T5592]  ? __pte_offset_map+0x1ae/0x240
[  193.204690][ T5592]  ? pte_offset_map_rw_nolock+0xea/0x160
[  193.204701][ T5592]  handle_mm_fault+0x1398/0x3750
[  193.204715][ T5592]  ? handle_mm_fault+0xf1/0x3750
[  193.204729][ T5592]  ? __pfx_handle_mm_fault+0x10/0x10
[  193.204738][ T5592]  ? lock_vma_under_rcu+0x45a/0x500
[  193.204758][ T5592]  do_user_addr_fault+0xa4f/0x1340
[  193.204770][ T5592]  ? trace_page_fault_user+0x84/0x1e0
[  193.204779][ T5592]  exc_page_fault+0x6a/0xc0
[  193.204788][ T5592]  asm_exc_page_fault+0x26/0x30
[  193.204796][ T5592] RIP: 0033:0x7f91e675e98e
[  193.204804][ T5592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  193.204811][ T5592] RSP: 002b:00007ffce20dcb28 EFLAGS: 00010246
[  193.204820][ T5592] RAX: 0000000000000000 RBX: 0000555570feb500 RCX: 00007f91e675e98e
[  193.204828][ T5592] RDX: 00007ffce20dcb80 RSI: 0000000000000000 RDI: 0000000000000000
[  193.204835][ T5592] RBP: 00007ffce20dcbec R08: 0000000000000000 R09: 0000000000000000
[  193.204842][ T5592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  193.204849][ T5592] R13: 00000000000927c0 R14: 000000000002f0c4 R15: 00007ffce20dcc40
[  193.204869][ T5592]  </TASK>
[  193.204874][ T5592] memory: usage 307200kB, limit 307200kB, failcnt 3304
[  193.204882][ T5592] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0
[  193.204889][ T5592] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[  193.204896][ T5592] Memory cgroup stats for /syz1:
[  193.205062][ T5592] cache 4096
[  193.205066][ T5592] rss 0
[  193.205069][ T5592] rss_huge 0
[  193.205071][ T5592] shmem 0
[  193.205073][ T5592] mapped_file 0
[  193.205076][ T5592] dirty 0
[  193.205079][ T5592] writeback 0
[  193.205081][ T5592] workingset_refault_anon 2
[  193.205084][ T5592] workingset_refault_file 0
[  193.205086][ T5592] swap 208896
[  193.205089][ T5592] swapcached 225280
[  193.205091][ T5592] pgpgin 46478
[  193.205094][ T5592] pgpgout 46476
[  193.205096][ T5592] pgfault 104799
[  193.205099][ T5592] pgmajfault 4
[  193.205102][ T5592] inactive_anon 4096
[  193.205106][ T5592] active_anon 0
[  193.205110][ T5592] inactive_file 0
[  193.205114][ T5592] active_file 0
[  193.205125][ T5592] unevictable 0
[  193.205129][ T5592] hierarchical_memory_limit 314572800
[  193.205134][ T5592] hierarchical_memsw_limit 9223372036854771712
[  193.205139][ T5592] total_cache 4096
[  193.205143][ T5592] total_rss 0
[  193.205147][ T5592] total_rss_huge 0
[  193.205151][ T5592] total_shmem 0
[  193.205155][ T5592] total_mapped_file 0
[  193.205159][ T5592] total_dirty 0
[  193.205163][ T5592] total_writeback 0
[  193.205167][ T5592] total_workingset_refault_anon 2
[  193.208577][ T5592] total_workingset_refault_file 0
[  193.208583][ T5592] total_swap 208896
[  193.208586][ T5592] total_swapcached 225280
[  193.208589][ T5592] total_pgpgin 46478
[  193.208591][ T5592] total_pgpgout 46476
[  193.208594][ T5592] total_pgfault 104799
[  193.208597][ T5592] total_pgmajfault 4
[  193.208631][ T5592] total_inactive_anon 4096
[  193.208635][ T5592] total_active_anon 0
[  193.208638][ T5592] total_inactive_file 0
[  193.208640][ T5592] total_active_file 0
[  193.208643][ T5592] total_unevictable 0
[  193.208646][ T5592] anon_cost 0
[  193.208648][ T5592] file_cost 0
[  193.208651][ T5592] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2118,pid=13327,uid=0
[  193.209576][ T5592] Memory cgroup out of memory: Killed process 13327 (syz.1.2118) total-vm:99000kB, anon-rss:1260kB, file-rss:21724kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  193.369199][T13330] syz.1.2118 (13330) used greatest stack depth: 19648 bytes left
[  193.430875][T13354] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2120'.
[  193.624273][T13366] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2123'.
[  194.101551][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.158292][T13396] bond3: entered promiscuous mode
[  194.158510][T13396] 8021q: adding VLAN 0 to HW filter on device bond3
[  194.227129][T13400] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2132'.
[  194.263580][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.990656][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'.
[  195.003385][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'.
[  195.004787][T13432] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2143'.
[  195.031732][T13427] netlink: 'syz.2.2142': attribute type 1 has an invalid length.
[  195.070784][T13427] 8021q: adding VLAN 0 to HW filter on device bond10
[  195.076134][T13427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2142'.
[  195.154928][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.208575][T13455] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2147'.
[  195.350492][T13471] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2152'.
[  195.360779][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  195.600888][T13509] netlink: 'syz.0.2160': attribute type 1 has an invalid length.
[  195.894699][T13528] syz.0.2163: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  195.894760][T13528] CPU: 0 UID: 0 PID: 13528 Comm: syz.0.2163 Not tainted syzkaller #0 PREEMPT(full) 
[  195.894771][T13528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.894776][T13528] Call Trace:
[  195.894779][T13528]  <TASK>
[  195.894784][T13528]  dump_stack_lvl+0xe8/0x150
[  195.894799][T13528]  warn_alloc+0x24d/0x270
[  195.894809][T13528]  ? kasan_save_track+0x4f/0x80
[  195.894817][T13528]  ? kasan_save_track+0x3e/0x80
[  195.894826][T13528]  ? __pfx_warn_alloc+0x10/0x10
[  195.894833][T13528]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  195.894844][T13528]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.894860][T13528]  __vmalloc_node_range_noprof+0x127/0x1540
[  195.894880][T13528]  ? rcu_is_watching+0x16/0xb0
[  195.894891][T13528]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  195.894902][T13528]  ? __kmalloc_cache_noprof+0x321/0x600
[  195.894911][T13528]  ? __kmalloc_cache_noprof+0x14d/0x600
[  195.894918][T13528]  ? xskq_create+0x56/0x220
[  195.894928][T13528]  xskq_create+0x148/0x220
[  195.894943][T13528]  ? xsk_init_queue+0x8a/0xe0
[  195.894956][T13528]  xsk_init_queue+0x8a/0xe0
[  195.894969][T13528]  xsk_setsockopt+0x52a/0x960
[  195.894982][T13528]  ? __pfx_xsk_setsockopt+0x10/0x10
[  195.894994][T13528]  ? __pfx_aa_sk_perm+0x10/0x10
[  195.895008][T13528]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  195.895018][T13528]  ? __pfx_xsk_setsockopt+0x10/0x10
[  195.895030][T13528]  do_sock_setsockopt+0x17c/0x1b0
[  195.895042][T13528]  __x64_sys_setsockopt+0x13d/0x1b0
[  195.895054][T13528]  do_syscall_64+0x166/0x520
[  195.895062][T13528]  ? trace_irq_disable+0x3b/0x140
[  195.895069][T13528]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.895079][T13528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.895086][T13528] RIP: 0033:0x7fe4d959e159
[  195.895094][T13528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.895101][T13528] RSP: 002b:00007fe4da42d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  195.895110][T13528] RAX: ffffffffffffffda RBX: 00007fe4d9825fa0 RCX: 00007fe4d959e159
[  195.895116][T13528] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  195.895121][T13528] RBP: 00007fe4d963506b R08: 0000000000000004 R09: 0000000000000000
[  195.895125][T13528] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  195.895130][T13528] R13: 00007fe4d9826038 R14: 00007fe4d9825fa0 R15: 00007ffc4fc5bf98
[  195.895142][T13528]  </TASK>
[  195.895145][T13528] Mem-Info:
[  195.895149][T13528] active_anon:5677 inactive_anon:6 isolated_anon:0
[  195.895149][T13528]  active_file:9 inactive_file:52725 isolated_file:0
[  195.895149][T13528]  unevictable:1000 dirty:69 writeback:0
[  195.895149][T13528]  slab_reclaimable:10435 slab_unreclaimable:85057
[  195.895149][T13528]  mapped:18521 shmem:1589 pagetables:1063
[  195.895149][T13528]  sec_pagetables:0 bounce:0
[  195.895149][T13528]  kernel_misc_reclaimable:0
[  195.895149][T13528]  free:1129463 free_pcp:16477 free_cma:0
[  195.895170][T13528] Node 0 active_anon:11500kB inactive_anon:24kB active_file:36kB inactive_file:165120kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:39220kB dirty:196kB writeback:0kB shmem:3376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7776kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  195.895190][T13528] Node 1 active_anon:11208kB inactive_anon:0kB active_file:0kB inactive_file:45780kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:34864kB dirty:80kB writeback:0kB shmem:2980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8096kB pagetables:2068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  195.895209][T13528] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  195.895230][T13528] lowmem_reserve[]: 0 1581 2111 2111 2111
[  195.895245][T13528] Node 0 DMA32 free:1507240kB boost:0kB min:24948kB low:31184kB high:37420kB reserved_highatomic:0kB free_highatomic:0kB active_anon:580kB inactive_anon:20kB active_file:32kB inactive_file:16120kB unevictable:0kB writepending:48kB zspages:0kB present:2080636kB managed:1619372kB mlocked:0kB bounce:0kB free_pcp:2416kB local_pcp:2208kB free_cma:0kB
[  195.895267][T13528] lowmem_reserve[]: 0 0 529 529 529
[  195.895281][T13528] Node 0 Normal free:10796kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0kB free_highatomic:0kB active_anon:10920kB inactive_anon:4kB active_file:4kB inactive_file:149000kB unevictable:2000kB writepending:148kB zspages:0kB present:1572868kB managed:542440kB mlocked:0kB bounce:0kB free_pcp:744kB local_pcp:728kB free_cma:0kB
[  195.895420][T13528] lowmem_reserve[]: 0 0 0 0 0
[  195.895437][T13528] Node 1 Normal free:2984456kB boost:0kB min:56408kB low:70508kB high:84608kB reserved_highatomic:0kB free_highatomic:0kB active_anon:11208kB inactive_anon:0kB active_file:0kB inactive_file:45780kB unevictable:2000kB writepending:80kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:62736kB local_pcp:28016kB free_cma:0kB
[  195.895461][T13528] lowmem_reserve[]: 0 0 0 0 0
[  195.895475][T13528] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  195.895523][T13528] Node 0 DMA32: 78*4kB (UM) 14*8kB (UME) 70*16kB (UME) 10*32kB (ME) 7*64kB (UME) 15*128kB (U) 7*256kB (UME) 12*512kB (UE) 4*1024kB (UME) 8*2048kB (UM) 360*4096kB (UM) = 1507208kB
[  195.895614][T13528] Node 0 Normal: 71*4kB (UME) 46*8kB (UME) 16*16kB (UE) 41*32kB (UE) 40*64kB (UM) 13*128kB (UM) 5*256kB (M) 2*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 10796kB
[  195.895676][T13528] Node 1 Normal: 754*4kB (UME) 1182*8kB (UME) 337*16kB (UME) 710*32kB (UME) 262*64kB (UME) 94*128kB (UME) 35*256kB (UM) 10*512kB (UM) 7*1024kB (UM) 3*2048kB (UE) 705*4096kB (UM) = 2984456kB
[  195.895744][T13528] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  195.895750][T13528] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  195.895756][T13528] 54323 total pagecache pages
[  195.895760][T13528] 0 pages in swap cache
[  195.895763][T13528] Free swap  = 124996kB
[  195.895766][T13528] Total swap = 124996kB
[  195.895769][T13528] 1834877 pages RAM
[  195.895772][T13528] 0 pages HighMem/MovableOnly
[  195.895775][T13528] 391912 pages reserved
[  195.895777][T13528] 0 pages cma reserved
[  196.181974][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.297786][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  196.300741][T13557] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  196.324682][T13558] bond4: Removing last ns target with arp_interval on
[  196.326566][T13557] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  196.326641][T13557] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  196.400121][T13563] netlink: 'syz.1.2169': attribute type 1 has an invalid length.
[  196.430246][T13563] 8021q: adding VLAN 0 to HW filter on device bond5
[  196.448778][T13563] bond5: entered promiscuous mode
[  196.448798][T13563] bond5: entered allmulticast mode
[  196.516696][ T5647] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x2c
[  196.518992][T13574] IPv6: addrconf: prefix option has invalid lifetime
[  196.520977][T13574] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  196.520994][T13574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.660262][T13590] netlink: 'syz.2.2177': attribute type 1 has an invalid length.
[  196.689900][T13590] 8021q: adding VLAN 0 to HW filter on device bond11
[  196.708733][T13590] bond11: entered promiscuous mode
[  196.708747][T13590] bond11: entered allmulticast mode
[  197.070102][T13625] Cannot find map_set index 2 as target
[  197.089444][T13633] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20000
[  197.218085][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  197.225737][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.266357][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  197.557696][T13672] __nla_validate_parse: 7 callbacks suppressed
[  197.557711][T13672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2203'.
[  197.570470][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  197.615803][T13674] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  197.615824][T13674] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  198.096906][T13653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  198.263198][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.437945][T13691] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2208'.
[  198.504946][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  198.706923][   T34] audit: type=1800 audit(1791196894.928:3): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2217" name=680B20 dev="tmpfs" ino=3522 res=0 errno=0
[  198.804875][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  198.909516][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  198.981413][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  199.028696][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  199.109297][T13762] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  199.175637][T13765] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2230'.
[  199.219203][T13769] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2231'.
[  199.301726][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.302342][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.343685][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.382762][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.977677][T13747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  202.127180][T13781] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  202.127487][T13781] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2236'.
[  202.265400][T13792] dummy0 speed is unknown, defaulting to 1000
[  202.265433][T13792] dummy0 speed is unknown, defaulting to 1000
[  202.280204][T13792] dummy0 speed is unknown, defaulting to 1000
[  202.291729][T13792] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  202.291752][T13792] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  202.291776][T13792] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  202.303474][T13792] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  202.317952][T13792] dummy0 speed is unknown, defaulting to 1000
[  202.318900][T13792] dummy0 speed is unknown, defaulting to 1000
[  202.319692][T13792] dummy0 speed is unknown, defaulting to 1000
[  202.425226][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.434931][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  202.579341][T13809] netlink: 'syz.1.2247': attribute type 8 has an invalid length.
[  202.580001][T13809] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2247'.
[  202.630188][T13812] netlink: 'syz.1.2248': attribute type 4 has an invalid length.
[  202.641612][T13812] netlink: 'syz.1.2248': attribute type 4 has an invalid length.
[  202.683850][T13814] IPv6: Can't replace route, no match found
[  202.686302][T13814] IPv6: Can't replace route, no match found
[  202.842845][T13825] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2253'.
[  202.874595][T13836] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2257'.
[  202.937200][T13846] xt_IDLETIMER: label is empty or not nul-terminated
[  202.951332][T13843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  203.017059][T13850] SET target dimension over the limit!
[  203.072179][T13854] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2263'.
[  203.114303][T13862] syzkaller1: entered promiscuous mode
[  203.114316][T13862] syzkaller1: entered allmulticast mode
[  203.202106][T13865] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2267'.
[  203.462815][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  203.879763][T13890] ipt_rpfilter: unknown options
[  203.946601][T13893] netlink: 'syz.1.2275': attribute type 21 has an invalid length.
[  203.946621][T13893] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2275'.
[  203.947405][T13893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.334045][T13909] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  204.351316][   T55] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  204.410642][T13916] openvswitch: netlink: Unexpected mask (mask=100000090, allowed=100010058)
[  204.489380][T13918] dummy0 speed is unknown, defaulting to 1000
[  204.497932][T13923] netlink: 'syz.2.2283': attribute type 23 has an invalid length.
[  204.498163][T13923] netlink: 'syz.2.2283': attribute type 11 has an invalid length.
[  204.498381][T13923] netlink: 'syz.2.2283': attribute type 23 has an invalid length.
[  204.498392][T13923] netlink: 'syz.2.2283': attribute type 11 has an invalid length.
[  204.498560][T13923] netlink: 'syz.2.2283': attribute type 23 has an invalid length.
[  204.498567][T13923] netlink: 'syz.2.2283': attribute type 11 has an invalid length.
[  204.498699][T13923] netlink: 'syz.2.2283': attribute type 23 has an invalid length.
[  204.498708][T13923] netlink: 'syz.2.2283': attribute type 11 has an invalid length.
[  204.502472][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.503623][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.504765][T13923] netlink: 'syz.2.2283': attribute type 23 has an invalid length.
[  204.504775][T13923] netlink: 'syz.2.2283': attribute type 11 has an invalid length.
[  204.504860][T13923] netlink: 'syz.2.2283': attribute type 23 has an invalid length.
[  204.504866][T13923] netlink: 'syz.2.2283': attribute type 11 has an invalid length.
[  204.504944][T13923] netlink: 'syz.2.2283': attribute type 11 has an invalid length.
[  204.505028][T13923] netlink: 'syz.2.2283': attribute type 11 has an invalid length.
[  204.505191][T13923] netlink: 'syz.2.2283': attribute type 11 has an invalid length.
[  204.510220][T13923] netlink: 'syz.2.2283': attribute type 11 has an invalid length.
[  204.697672][T13918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2282'.
[  205.095906][T13962] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2287'.
[  205.347915][T13995] 8021q: adding VLAN 0 to HW filter on device bond5
[  205.361859][T13995] bond5: (slave macvlan0): Enslaving as a backup interface with an up link
[  205.541679][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.674811][T14029] nftables ruleset with unbound set
[  205.707671][T14029] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2302'.
[  205.709149][T14040] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2306'.
[  205.720534][T14035] bond_slave_0: entered allmulticast mode
[  205.728197][T14035] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  206.222510][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  206.222538][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  206.222552][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  206.222565][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  206.464940][T14119] tipc: Enabled bearer <udp:syz2>, priority 10
[  206.465520][T14119] x_tables: duplicate underflow at hook 1
[  206.583535][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.758337][T14146] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  206.758395][T14146] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  207.389160][T14224] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  207.624645][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.625395][T14250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.626761][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.776426][T14260] __nla_validate_parse: 16 callbacks suppressed
[  207.776437][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2364'.
[  207.830860][T14264] validate_nla: 31 callbacks suppressed
[  207.830872][T14264] netlink: 'syz.1.2364': attribute type 16 has an invalid length.
[  207.830878][T14264] netlink: 'syz.1.2364': attribute type 17 has an invalid length.
[  207.830889][T14264] lo: left promiscuous mode
[  207.831903][T14264] tunl0: left promiscuous mode
[  207.832234][T14264] gre0: left promiscuous mode
[  207.832241][T14264] gre0: left allmulticast mode
[  207.833053][T14264] erspan0: left promiscuous mode
[  207.833408][T14264] ip_vti0: left promiscuous mode
[  207.833711][T14264] ip6_vti0: left promiscuous mode
[  207.833931][T14264] sit0: left promiscuous mode
[  207.834413][T14264] ip6tnl0: left promiscuous mode
[  207.834420][T14264] ip6tnl0: left allmulticast mode
[  207.834731][T14264] ip6gre0: left promiscuous mode
[  207.834964][T14264] syz_tun: left promiscuous mode
[  207.835516][T14264] ip6gretap0: left promiscuous mode
[  207.835885][T14264] bridge0: left promiscuous mode
[  207.836438][T14264] vcan0: left promiscuous mode
[  207.836764][T14264] team0: left promiscuous mode
[  207.838240][T14264] batadv0: left promiscuous mode
[  207.839228][T14264] veth0: left promiscuous mode
[  207.839617][T14264] veth1: left promiscuous mode
[  207.840154][T14264] wg0: left promiscuous mode
[  207.844732][T14264] wg2: left promiscuous mode
[  207.845334][T14264] veth1_to_bridge: left promiscuous mode
[  207.846378][T14264] veth0_to_bond: left promiscuous mode
[  207.846718][T14264] bond_slave_0: left promiscuous mode
[  207.846726][T14264] bond_slave_0: left allmulticast mode
[  207.847130][T14264] veth1_to_bond: left promiscuous mode
[  207.847577][T14264] bond_slave_1: left promiscuous mode
[  207.847806][T14264] veth0_to_team: left promiscuous mode
[  207.848032][T14264] team_slave_0: left promiscuous mode
[  207.848575][T14264] veth1_to_team: left promiscuous mode
[  207.850243][T14264] team_slave_1: left promiscuous mode
[  207.850729][T14264] veth0_to_batadv: left promiscuous mode
[  207.850945][T14264] batadv_slave_0: left promiscuous mode
[  207.852214][T14264] veth1_to_batadv: left promiscuous mode
[  207.852427][T14264] batadv_slave_1: left promiscuous mode
[  207.852687][T14264] xfrm0: left promiscuous mode
[  207.853739][T14264] veth1_to_hsr: left promiscuous mode
[  207.854320][T14264] hsr0: left promiscuous mode
[  207.854591][T14264] veth1_virt_wifi: left promiscuous mode
[  207.854796][T14264] veth0_virt_wifi: left promiscuous mode
[  207.855012][T14264] virt_wifi0: left promiscuous mode
[  207.855975][T14264] vlan1: left promiscuous mode
[  207.856528][T14264] macvlan0: left promiscuous mode
[  207.856828][T14264] macvlan1: left promiscuous mode
[  207.857550][T14264] ipvlan1: left promiscuous mode
[  207.858648][T14264] macvtap0: left promiscuous mode
[  207.858955][T14264] macsec0: left promiscuous mode
[  207.859252][T14264] geneve0: left promiscuous mode
[  207.859684][T14264] geneve1: left promiscuous mode
[  207.860029][T14264] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  207.860321][T14264] netdevsim netdevsim1 netdevsim1: left promiscuous mode
[  207.860633][T14264] netdevsim netdevsim1 netdevsim2: left promiscuous mode
[  207.860936][T14264] netdevsim netdevsim1 netdevsim3: left promiscuous mode
[  207.864776][T14264] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  207.865519][T14264] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  207.865528][T14264] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  207.868108][ T9646] dummy0 speed is unknown, defaulting to 1000
[  207.883248][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.151548][T14266] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  208.152750][T14266] bond12 (unregistering): Released all slaves
[  208.251642][T14269] sctp: [Deprecated]: syz.2.2366 (pid 14269) Use of int in max_burst socket option.
[  208.251642][T14269] Use struct sctp_assoc_value instead
[  208.251831][T14269] sctp: [Deprecated]: syz.2.2366 (pid 14269) Use of struct sctp_assoc_value in delayed_ack socket option.
[  208.251831][T14269] Use struct sctp_sack_info instead
[  208.430853][T14282] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2370'.
[  208.542683][T14298] netlink: 'syz.2.2375': attribute type 12 has an invalid length.
[  208.573718][T14311] openvswitch: netlink: nsh attr 251 is out of range max 3
[  208.606156][T14311] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2376'.
[  208.610464][T14313] 8021q: adding VLAN 0 to HW filter on device bond6
[  208.636145][T14311] hsr_slave_1 (unregistering): left promiscuous mode
[  208.649800][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2379'.
[  208.677284][T14321] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:19999
[  209.132339][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'.
[  209.667720][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  209.745976][T14401] netdevsim netdevsim2: Direct firmware load for 	 failed with error -2
[  209.745990][T14401] netdevsim netdevsim2: Falling back to sysfs fallback for: 	
[  209.786547][T14403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2404'.
[  209.809510][T14410] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2405'.
[  209.933634][T14432] sctp: [Deprecated]: syz.1.2407 (pid 14432) Use of int in maxseg socket option.
[  209.933634][T14432] Use struct sctp_assoc_value instead
[  210.376028][T14478] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  210.691055][T14507] syzkaller1: entered promiscuous mode
[  210.698368][T14507] syzkaller1: entered allmulticast mode
[  210.741407][  T807] net_ratelimit: 1543 callbacks suppressed
[  210.741449][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.788693][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2421'.
[  210.793812][T14513] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2422'.
[  210.839685][T14517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2423'.
[  210.968074][T14524] netlink: 'syz.1.2426': attribute type 1 has an invalid length.
[  210.969654][T14524] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:19999
[  210.970167][T14524] netlink: 'syz.1.2426': attribute type 1 has an invalid length.
[  211.086000][T14535] syz.1.2430: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  211.086039][T14535] CPU: 0 UID: 0 PID: 14535 Comm: syz.1.2430 Not tainted syzkaller #0 PREEMPT(full) 
[  211.086050][T14535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  211.086056][T14535] Call Trace:
[  211.086060][T14535]  <TASK>
[  211.086065][T14535]  dump_stack_lvl+0xe8/0x150
[  211.086080][T14535]  warn_alloc+0x24d/0x270
[  211.086091][T14535]  ? kasan_save_track+0x4f/0x80
[  211.086102][T14535]  ? kasan_save_track+0x3e/0x80
[  211.086117][T14535]  ? __pfx_warn_alloc+0x10/0x10
[  211.086127][T14535]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  211.086143][T14535]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.086165][T14535]  __vmalloc_node_range_noprof+0x127/0x1540
[  211.086200][T14535]  ? rcu_is_watching+0x16/0xb0
[  211.086216][T14535]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  211.086229][T14535]  ? __kmalloc_cache_noprof+0x321/0x600
[  211.086238][T14535]  ? __kmalloc_cache_noprof+0x14d/0x600
[  211.086247][T14535]  ? xskq_create+0x56/0x220
[  211.086258][T14535]  xskq_create+0x148/0x220
[  211.086267][T14535]  ? xsk_init_queue+0x8a/0xe0
[  211.086281][T14535]  xsk_init_queue+0x8a/0xe0
[  211.086295][T14535]  xsk_setsockopt+0x52a/0x960
[  211.086309][T14535]  ? __pfx_xsk_setsockopt+0x10/0x10
[  211.086323][T14535]  ? __pfx_aa_sk_perm+0x10/0x10
[  211.086362][T14535]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  211.086376][T14535]  ? __pfx_xsk_setsockopt+0x10/0x10
[  211.086390][T14535]  do_sock_setsockopt+0x17c/0x1b0
[  211.086404][T14535]  __x64_sys_setsockopt+0x13d/0x1b0
[  211.086448][T14535]  do_syscall_64+0x166/0x520
[  211.086463][T14535]  ? trace_irq_disable+0x3b/0x140
[  211.086475][T14535]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.086487][T14535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.086496][T14535] RIP: 0033:0x7f91e679e159
[  211.086507][T14535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.086515][T14535] RSP: 002b:00007f91e75cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  211.086525][T14535] RAX: ffffffffffffffda RBX: 00007f91e6a25fa0 RCX: 00007f91e679e159
[  211.086531][T14535] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  211.086537][T14535] RBP: 00007f91e683506b R08: 0000000000000004 R09: 0000000000000000
[  211.086544][T14535] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.086549][T14535] R13: 00007f91e6a26038 R14: 00007f91e6a25fa0 R15: 00007ffce20dc848
[  211.086562][T14535]  </TASK>
[  211.086608][T14535] Mem-Info:
[  211.086616][T14535] active_anon:5504 inactive_anon:6 isolated_anon:0
[  211.086616][T14535]  active_file:1043 inactive_file:52729 isolated_file:0
[  211.086616][T14535]  unevictable:1000 dirty:338 writeback:0
[  211.086616][T14535]  slab_reclaimable:10601 slab_unreclaimable:83583
[  211.086616][T14535]  mapped:18658 shmem:1597 pagetables:1034
[  211.086616][T14535]  sec_pagetables:0 bounce:0
[  211.086616][T14535]  kernel_misc_reclaimable:0
[  211.086616][T14535]  free:1124295 free_pcp:23101 free_cma:0
[  211.086663][T14535] Node 0 active_anon:11000kB inactive_anon:24kB active_file:36kB inactive_file:165136kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:39336kB dirty:628kB writeback:0kB shmem:3376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7752kB pagetables:1756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  211.086699][T14535] Node 1 active_anon:11016kB inactive_anon:0kB active_file:4136kB inactive_file:45780kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:35296kB dirty:724kB writeback:0kB shmem:3012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8144kB pagetables:2380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  211.086725][T14535] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  211.086753][T14535] lowmem_reserve[]: 0 1581 2111 2111 2111
[  211.086769][T14535] Node 0 DMA32 free:1507760kB boost:0kB min:24948kB low:31184kB high:37420kB reserved_highatomic:0kB free_highatomic:0kB active_anon:364kB inactive_anon:20kB active_file:32kB inactive_file:16120kB unevictable:0kB writepending:344kB zspages:0kB present:2080636kB managed:1619372kB mlocked:0kB bounce:0kB free_pcp:9972kB local_pcp:9972kB free_cma:0kB
[  211.086798][T14535] lowmem_reserve[]: 0 0 529 529 529
[  211.086813][T14535] Node 0 Normal free:11544kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0kB free_highatomic:0kB active_anon:10668kB inactive_anon:4kB active_file:4kB inactive_file:149016kB unevictable:2000kB writepending:284kB zspages:0kB present:1572868kB managed:542440kB mlocked:0kB bounce:0kB free_pcp:1068kB local_pcp:876kB free_cma:0kB
[  211.086841][T14535] lowmem_reserve[]: 0 0 0 0 0
[  211.086856][T14535] Node 1 Normal free:2962516kB boost:0kB min:56408kB low:70508kB high:84608kB reserved_highatomic:0kB free_highatomic:0kB active_anon:11016kB inactive_anon:0kB active_file:4136kB inactive_file:45780kB unevictable:2000kB writepending:724kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:81364kB local_pcp:35080kB free_cma:0kB
[  211.086884][T14535] lowmem_reserve[]: 0 0 0 0 0
[  211.086899][T14535] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  211.086953][T14535] Node 0 DMA32: 79*4kB (UM) 22*8kB (UME) 21*16kB (UM) 77*32kB (U) 90*64kB (U) 23*128kB (UE) 5*256kB (U) 15*512kB (UME) 4*1024kB (UME) 6*2048kB (UM) 359*4096kB (UM) = 1507804kB
[  211.087043][T14535] Node 0 Normal: 208*4kB (UME) 20*8kB (UME) 172*16kB (UM) 61*32kB (UME) 25*64kB (UM) 11*128kB (UM) 5*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 11520kB
[  211.087113][T14535] Node 1 Normal: 324*4kB (UME) 924*8kB (UME) 720*16kB (UME) 97*32kB (UME) 195*64kB (UME) 49*128kB (UME) 14*256kB (UM) 13*512kB (UM) 10*1024kB (UM) 6*2048kB (UME) 705*4096kB (UM) = 2962512kB
[  211.087187][T14535] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  211.087194][T14535] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  211.087201][T14535] 55369 total pagecache pages
[  211.087205][T14535] 0 pages in swap cache
[  211.087208][T14535] Free swap  = 124996kB
[  211.087211][T14535] Total swap = 124996kB
[  211.087215][T14535] 1834877 pages RAM
[  211.087218][T14535] 0 pages HighMem/MovableOnly
[  211.087221][T14535] 391912 pages reserved
[  211.087224][T14535] 0 pages cma reserved
[  211.386546][T14561] sctp: [Deprecated]: syz.0.2438 (pid 14561) Use of struct sctp_assoc_value in delayed_ack socket option.
[  211.386546][T14561] Use struct sctp_sack_info instead
[  211.448474][T14563] IPv6: NLM_F_CREATE should be specified when creating new route
[  211.448710][T14563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  211.448717][T14563] IPv6: NLM_F_CREATE should be set when creating new route
[  211.449718][T14563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  211.449727][T14563] IPv6: NLM_F_CREATE should be set when creating new route
[  211.501443][T14567] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1
[  211.542797][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.574753][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  211.602222][ T5669] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  211.604333][ T5669] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  211.691278][ T5669] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  211.712627][T14588] netlink: 'syz.0.2447': attribute type 3 has an invalid length.
[  211.781926][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.787905][T14604] ip_tables: iptables: counters copy to user failed while replacing table
[  211.914026][T14614] syzkaller1: entered promiscuous mode
[  211.914101][T14614] syzkaller1: entered allmulticast mode
[  212.001614][ T5669] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  212.072559][T14637] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  212.210759][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  212.467789][T14673] netlink: 'syz.2.2473': attribute type 3 has an invalid length.
[  212.823982][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.140654][T14727] openvswitch: netlink: Key type 29 is not supported
[  213.284156][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  213.699960][T14773] __nla_validate_parse: 13 callbacks suppressed
[  213.699976][T14773] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2501'.
[  213.700822][T14773] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2501'.
[  213.750930][T14783] netdevsim0 speed is unknown, defaulting to 1000
[  213.759877][T14783] netdevsim0 speed is unknown, defaulting to 1000
[  213.773805][T14783] netdevsim0 speed is unknown, defaulting to 1000
[  213.786970][T14788] xt_socket: unknown flags 0x4
[  213.862689][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.917483][T14783] infiniband syz1: set down
[  213.917814][ T5669] netdevsim0 speed is unknown, defaulting to 1000
[  213.917848][T14783] infiniband syz1: added netdevsim0
[  213.924923][T14783] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  213.924940][T14783] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  213.924955][T14783] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  213.958136][T14783] RDS/IB: syz1: added
[  213.958181][T14783] smc: adding ib device syz1 with port count 1
[  213.958195][T14783] smc:    ib device syz1 port 1 has no pnetid
[  213.959134][ T5669] netdevsim0 speed is unknown, defaulting to 1000
[  213.966296][T14783] netdevsim0 speed is unknown, defaulting to 1000
[  213.980741][T14798] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2507'.
[  214.137675][T14783] netdevsim0 speed is unknown, defaulting to 1000
[  214.138992][T14806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.139464][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.268141][T14783] netdevsim0 speed is unknown, defaulting to 1000
[  214.292048][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'.
[  214.479704][T14831] Cannot find add_set index 4 as target
[  214.538940][T14838] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  214.538973][T14838] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  214.579562][T14842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2519'.
[  214.700889][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2522'.
[  214.707204][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2522'.
[  214.741235][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  215.016271][T14894] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  215.025847][T14898] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2530'.
[  215.032462][T14894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2529'.
[  215.037971][T14894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2529'.
[  215.290234][T14919] syzkaller1: tun_chr_ioctl cmd 1074025677
[  215.290246][T14919] syzkaller1: Linktype set failed because interface is up
[  215.689150][T14956] sctp: [Deprecated]: syz.2.2546 (pid 14956) Use of int in max_burst socket option.
[  215.689150][T14956] Use struct sctp_assoc_value instead
[  215.946439][ T9646] net_ratelimit: 5 callbacks suppressed
[  215.946450][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.008324][T14967] netlink: 'syz.2.2550': attribute type 15 has an invalid length.
[  216.018738][T14967] netlink: 'syz.2.2550': attribute type 15 has an invalid length.
[  216.032729][ T5487] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  216.032751][ T5487] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  216.032764][ T5487] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  216.032776][ T5487] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  216.158474][T14992] netlink: 'syz.1.2557': attribute type 21 has an invalid length.
[  216.158505][T14992] netlink: 'syz.1.2557': attribute type 6 has an invalid length.
[  216.181315][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.181544][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.209869][T14995] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  216.224035][T14997] netlink: 'syz.2.2559': attribute type 1 has an invalid length.
[  216.246437][T14997] 8021q: adding VLAN 0 to HW filter on device bond12
[  216.325992][T15000] sctp: [Deprecated]: syz.1.2560 (pid 15000) Use of struct sctp_assoc_value in delayed_ack socket option.
[  216.325992][T15000] Use struct sctp_sack_info instead
[  216.494864][T15015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.663262][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.803421][    C0] vcan0: j1939_tp_rxtimer: 0xffff888112a49c00: rx timeout, send abort
[  216.805576][    C0] vcan0: j1939_tp_rxtimer: 0xffff888112a49800: rx timeout, send abort
[  216.805732][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888112a49c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  216.805864][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888112a49800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  216.982617][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.021564][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.071365][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.781423][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.055584][T15057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  220.101761][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.143866][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.143910][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.143943][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.143975][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144007][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144042][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144073][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144106][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144140][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144171][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144205][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144236][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144271][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144305][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144361][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144396][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144427][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144459][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144491][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144523][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144555][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144587][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144619][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.144986][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.145020][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.145052][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.145087][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.145121][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.145154][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.145188][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.145222][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.145253][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.145285][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.222024][T15083] tc_dump_action: action bad kind
[  220.352408][T15102] netlink: 'syz.2.2588': attribute type 6 has an invalid length.
[  220.352719][T15102] __nla_validate_parse: 58 callbacks suppressed
[  220.352727][T15102] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2588'.
[  220.468766][T15113] bond7: Unable to set peer notification delay as MII monitoring is disabled
[  220.474054][T15113] bond7 (unregistering): Released all slaves
[  220.697198][T15138] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2595'.
[  220.707134][T15138] ip6tnl1: entered allmulticast mode
[  220.708391][ T5487] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  220.708594][ T5487] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  220.737142][ T5669] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  220.761463][  T455] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  220.958695][T15165] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  220.991356][  T455] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  221.141658][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.143520][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.191837][T15189] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  221.302724][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  221.462816][T15206] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  221.537431][T15212] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2613'.
[  221.599919][T15218] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  221.599940][T15218] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  221.615585][T15218] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2615'.
[  221.812711][T15241] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  221.815435][T15241] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2622'.
[  221.909841][T15253] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2627'.
[  222.181760][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.432913][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.489759][T15290] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2639'.
[  222.725751][T15303] bond_slave_1: Caught tx_queue_len zero misconfig
[  222.771554][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2645'.
[  222.773044][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  223.020123][T15330] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  223.020137][T15330] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  223.084459][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  223.233058][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.403709][T15362] bond6: entered allmulticast mode
[  223.410830][T15362] macvlan2: entered promiscuous mode
[  223.410842][T15362] macvlan2: entered allmulticast mode
[  223.417800][T15362] bond6: entered promiscuous mode
[  223.418183][T15362] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  223.430535][T15362] bond6: left promiscuous mode
[  223.601943][T15380] veth0: Caught tx_queue_len zero misconfig
[  223.690402][T15392] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2671'.
[  223.787694][T15399] ipvlan0: Caught tx_queue_len zero misconfig
[  223.906517][T15401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2674'.
[  223.906540][T15401] bridge_slave_1: entered promiscuous mode
[  224.104246][T15411] netlink: 'syz.0.2678': attribute type 1 has an invalid length.
[  224.265539][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.741547][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  224.874051][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  224.991774][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  225.199440][T15476] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.199523][T15476] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.199585][T15476] bridge_slave_0: entered allmulticast mode
[  225.200512][T15476] bridge_slave_0: entered promiscuous mode
[  225.200831][T15476] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.200875][T15476] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.216355][T15476] bridge_slave_0: left allmulticast mode
[  225.216368][T15476] bridge_slave_0: left promiscuous mode
[  225.216511][T15476] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.311616][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.390631][T15492] netlink: 'syz.0.2699': attribute type 29 has an invalid length.
[  225.390645][T15492] netlink: 'syz.0.2699': attribute type 31 has an invalid length.
[  225.419729][T15495] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20002
[  225.689028][T15512] netlink: 'syz.1.2704': attribute type 16 has an invalid length.
[  225.689041][T15512] netlink: 'syz.1.2704': attribute type 17 has an invalid length.
[  225.749050][T15517] __nla_validate_parse: 7 callbacks suppressed
[  225.749061][T15517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2705'.
[  225.976510][T15528] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.2707'.
[  225.986668][T15528] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.2707'.
[  225.995131][T15528] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.2707'.
[  226.014926][T15528] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.2707'.
[  226.026729][T15528] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.2707'.
[  226.035514][T15528] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.2707'.
[  226.039967][T15528] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.2707'.
[  226.049391][T15528] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.2707'.
[  226.062907][T15528] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.2707'.
[  226.277252][ T6580] net_ratelimit: 4 callbacks suppressed
[  226.277924][ T6580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.291389][  T455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.344238][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.920197][T15597] trusted_key: syz.0.2715 sent an empty control message without MSG_MORE.
[  227.385470][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.182648][ T6580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.423488][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.216425][T15549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  229.439773][T15622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.445896][T15622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.446337][T15622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.446846][T15622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.680890][T15634] bond13: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  229.686674][   T34] audit: type=1800 audit(1791196925.908:4): pid=15638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2725" name=CB dev="tmpfs" ino=4269 res=0 errno=0
[  229.687523][T15634] bond13 (unregistering): Released all slaves
[  230.943926][T15670] netlink: 'syz.2.2731': attribute type 8 has an invalid length.
[  231.556481][   T25] net_ratelimit: 9 callbacks suppressed
[  231.556544][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.037100][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.595891][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.734299][T15652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  232.734365][T15652] nci: nci_start_poll: failed to set local general bytes
[  232.748363][T15640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  232.926513][T15675] __nla_validate_parse: 61 callbacks suppressed
[  232.926577][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2732'.
[  233.019140][T15686] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2732'.
[  233.301257][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  233.369763][T15704] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  233.541549][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.622457][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.701358][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.849441][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2743'.
[  233.849453][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'.
[  233.950979][T11500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.012870][T15693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  234.177776][T15756] netlink: 10056 bytes leftover after parsing attributes in process `syz.2.2747'.
[  234.179795][T15756] vcan0: tx address claim with dest, not broadcast
[  234.351322][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.671997][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.762417][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.947430][T15769] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.2749'.
[  234.947444][T15769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2749'.
[  234.947452][T15769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2749'.
[  234.947458][T15769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2749'.
[  235.000475][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'.
[  235.272439][T15798] vlan2: entered promiscuous mode
[  235.272452][T15798] bridge0: entered promiscuous mode
[  236.078426][T15842] netlink: 'syz.2.2762': attribute type 4 has an invalid length.
[  236.166226][T15851] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  236.319464][T15855] netlink: 'syz.2.2766': attribute type 5 has an invalid length.
[  236.330543][T15853] xt_policy: output policy not valid in PREROUTING and INPUT
[  236.610579][T15859] netlink: 'syz.2.2767': attribute type 83 has an invalid length.
[  236.661300][    C0] net_ratelimit: 3 callbacks suppressed
[  236.661313][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.661429][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.661568][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.749494][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.809451][T15871] netlink: 'syz.2.2772': attribute type 1 has an invalid length.
[  236.826983][T15871] 8021q: adding VLAN 0 to HW filter on device bond13
[  236.850177][T15871] bond13: (slave geneve3): making interface the new active one
[  236.855722][T15871] bond13: (slave geneve3): Enslaving as an active interface with an up link
[  236.977976][T15881] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  237.137739][T15901] bond_slave_0: entered promiscuous mode
[  237.137757][T15901] bond_slave_0: entered allmulticast mode
[  237.153722][T15901] bond0: (slave bond_slave_0): Releasing backup interface
[  237.155398][T15901] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  237.238071][T15906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.240303][T15903] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  237.240316][T15903] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  237.309279][T15913] tipc: Enabling of bearer <u$p:s> rejected, media not registered
[  237.578892][T15925] syzkaller0: entered promiscuous mode
[  237.578904][T15925] syzkaller0: entered allmulticast mode
[  237.782851][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.786678][ T6580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.112386][T15938] sctp: [Deprecated]: syz.0.2788 (pid 15938) Use of struct sctp_assoc_value in delayed_ack socket option.
[  238.112386][T15938] Use struct sctp_sack_info instead
[  238.199862][T15943] __nla_validate_parse: 16 callbacks suppressed
[  238.199873][T15943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2789'.
[  238.199882][T15943] nbd: socks must be embedded in a SOCK_ITEM attr
[  238.203634][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'.
[  238.263077][T15941] vlan0: entered allmulticast mode
[  238.263093][T15941] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  238.369273][T15941] veth0: entered promiscuous mode
[  238.375403][T15940] veth0: left promiscuous mode
[  238.415482][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2791'.
[  238.415510][T15948] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2791'.
[  238.445515][T15948] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2791'.
[  238.575419][T15959] netlink: 'syz.2.2794': attribute type 83 has an invalid length.
[  238.723034][T15969] ip_tables: iptables: counters copy to user failed while replacing table
[  238.909273][ T9646] hid-generic 0005:0008:0009.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[  239.005078][T15980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2797'.
[  239.027249][T15980] 8021q: adding VLAN 0 to HW filter on device bond8
[  239.043989][T15980] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  239.079659][T15979] syzkaller0: entered promiscuous mode
[  239.079724][T15979] syzkaller0: entered allmulticast mode
[  239.204721][T15987] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  239.571025][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  239.595961][T15995] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2802'.
[  239.622540][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  239.622854][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  239.778173][T16005] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2805'.
[  239.778941][T16009] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2805'.
[  239.916244][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  240.180581][T16033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2814'.
[  240.180600][T16033] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.180611][T16033] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.184327][T16033] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.184339][T16033] batman_adv: batadv0: Removing interface: batadv_slave_1
[  240.204754][T16033] batman_adv: batadv0: Removing interface: macvtap1
[  240.254408][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  240.435908][T16052] netlink: 'syz.2.2818': attribute type 15 has an invalid length.
[  240.619875][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  241.611776][T16089] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  241.612231][T16089] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004
[  242.017294][T16109] netlink: 'syz.1.2838': attribute type 15 has an invalid length.
[  242.076623][T16118] x_tables: duplicate underflow at hook 2
[  242.137428][T16125] netlink: 'syz.1.2842': attribute type 10 has an invalid length.
[  242.137593][T16125] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.180762][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  242.367021][T16143] netlink: 'syz.2.2845': attribute type 16 has an invalid length.
[  242.367033][T16143] netlink: 'syz.2.2845': attribute type 17 has an invalid length.
[  242.402338][T16143] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.429570][T16143] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  242.439082][T16143] vlan0: left promiscuous mode
[  242.450268][T16143] vlan0: left allmulticast mode
[  242.450368][T16143] veth0_vlan: left allmulticast mode
[  242.513605][T16143] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  242.748724][T16169] xt_CT: No such helper "snmp"
[  242.878742][T16179] ip6gre3: entered promiscuous mode
[  242.958627][T16183] netlink: 'syz.0.2858': attribute type 12 has an invalid length.
[  242.958644][T16183] netlink: 'syz.0.2858': attribute type 11 has an invalid length.
[  243.113000][T16185] netlink: 'syz.1.2855': attribute type 3 has an invalid length.
[  243.249239][T16207] __nla_validate_parse: 14 callbacks suppressed
[  243.249259][T16207] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2861'.
[  243.677420][T16235] x_tables: duplicate underflow at hook 1
[  243.747032][T16235] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2867'.
[  243.755568][T16237] bridge7: entered promiscuous mode
[  243.755615][T16237] bridge7: entered allmulticast mode
[  243.779281][T16185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  244.126803][T16251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2870'.
[  244.304876][T16253] netlink: 'syz.1.2871': attribute type 3 has an invalid length.
[  244.315343][T16253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2871'.
[  244.315369][T16253] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2871'.
[  244.316498][T16253] netlink: 'syz.1.2871': attribute type 1 has an invalid length.
[  244.316511][T16253] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2871'.
[  244.745478][T16279] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2875'.
[  244.854347][T16278] tipc: Resetting bearer <eth:batadv0>
[  244.998810][T16278] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  245.014307][T16278] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  245.314244][ T5487] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  245.314381][ T5487] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.330723][T16283] netdevsim0 speed is unknown, defaulting to 1000
[  245.332937][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  245.333170][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.333317][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  245.333404][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.333480][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  245.333615][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.447916][T16290] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2879'.
[  245.514235][T16292] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2878'.
[  245.608363][T16307] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2884'.
[  245.608380][T16307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  245.746627][T16311] netlink: 'syz.2.2885': attribute type 11 has an invalid length.
[  246.765486][T16331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  247.010377][T16360] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  247.016883][T16360] tipc: Resetting bearer <eth:syzkaller0>
[  247.023399][T16360] validate_nla: 1 callbacks suppressed
[  247.023408][T16360] netlink: 'syz.1.2899': attribute type 12 has an invalid length.
[  247.394933][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  247.455217][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  247.503344][T16389] ip_tables: iptables: counters copy to user failed while replacing table
[  247.507511][T16389] syzkaller1: entered promiscuous mode
[  247.507523][T16389] syzkaller1: entered allmulticast mode
[  247.628420][T16406] ip6t_srh: unknown srh invflags 4000
[  247.897188][T16429] syzkaller1: entered promiscuous mode
[  247.897201][T16429] syzkaller1: entered allmulticast mode
[  248.043438][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  248.433279][T16451] __nla_validate_parse: 10 callbacks suppressed
[  248.433292][T16451] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2928'.
[  248.886332][T16494] Bluetooth: ISO socket layer initialized
[  249.296873][T16516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2947'.
[  249.329961][T16519] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2947'.
[  249.646156][T16542] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2953'.
[  249.783336][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  249.910913][T16550] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  249.920947][T16550] ip6tnl2: entered allmulticast mode
[  249.929146][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  250.402856][T16534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  250.581268][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  250.630790][T16555] netlink: 'syz.1.2958': attribute type 1 has an invalid length.
[  250.630807][T16555] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2958'.
[  250.667992][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2960'.
[  250.668040][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2960'.
[  250.686803][T16557] raw_sendmsg: syz.1.2958 forgot to set AF_INET. Fix it!
[  251.960620][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  252.330759][T16590] ip_tables: iptables: counters copy to user failed while replacing table
[  252.330899][T16590] ip_tables: iptables: counters copy to user failed while replacing table
[  252.343560][T16590] ip_tables: iptables: counters copy to user failed while replacing table
[  252.343716][T16590] ip_tables: iptables: counters copy to user failed while replacing table
[  252.343838][T16590] ip_tables: iptables: counters copy to user failed while replacing table
[  252.343971][T16590] ip_tables: iptables: counters copy to user failed while replacing table
[  252.344134][T16590] ip_tables: iptables: counters copy to user failed while replacing table
[  252.346150][T16590] ip_tables: iptables: counters copy to user failed while replacing table
[  252.346281][T16590] ip_tables: iptables: counters copy to user failed while replacing table
[  252.346411][T16590] ip_tables: iptables: counters copy to user failed while replacing table
[  252.357111][T16591] nbd2: detected capacity change from 0 to 63
[  252.426783][T16599] digital: digital_start_poll: Unknown protocol
[  252.430218][T16601] digital: digital_start_poll: Unknown protocol
[  252.447977][   T57] block nbd2: Receive control failed (result -104)
[  252.474700][T16607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2969'.
[  252.602682][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  252.911351][T16630] netlink: 'syz.2.2975': attribute type 15 has an invalid length.
[  253.204642][T16642] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2980'.
[  253.225506][T16645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2981'.
[  253.395146][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  253.686177][T16683] __nla_validate_parse: 1 callbacks suppressed
[  253.686188][T16683] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2995'.
[  254.275273][T16711] netlink: 'syz.1.3004': attribute type 3 has an invalid length.
[  254.906595][T16732] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  255.045722][T16742] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3018'.
[  255.088129][T16743] netlink: 'syz.1.3017': attribute type 62 has an invalid length.
[  255.285886][T16759] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3022'.
[  255.354643][T16766] netlink: 'syz.2.3023': attribute type 11 has an invalid length.
[  255.356607][T16766] netlink: 'syz.2.3023': attribute type 29 has an invalid length.
[  255.356617][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'.
[  255.691254][T16783] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3029'.
[  255.930391][T16785] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3030'.
[  256.171875][T11485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.171888][T11485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.196587][T11485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.196598][T11485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.372466][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3039'.
[  256.372480][T16832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3039'.
[  256.372487][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3039'.
[  256.422410][T16835] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3040'.
[  256.622143][T16850] netlink: 'syz.2.3044': attribute type 7 has an invalid length.
[  256.622156][T16850] netlink: 'syz.2.3044': attribute type 5 has an invalid length.
[  256.901167][ T5487] tipc: Subscription rejected, illegal request
[  257.161003][T16866] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  257.379200][ T4992] Bluetooth: hci1: unexpected cc 0x1003 length: 18 > 9
[  257.379219][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  257.484224][T16879] net_ratelimit: 26 callbacks suppressed
[  257.484236][T16879] netlink: Conntrack attr has 2 unknown bytes
[  257.643783][T16896] netlink: 'syz.1.3058': attribute type 2 has an invalid length.
[  257.782397][T16911] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  258.864161][T16939] dummy0 speed is unknown, defaulting to 1000
[  258.868406][T16939] netdevsim0 speed is unknown, defaulting to 1000
[  258.906667][   T76] block nbd2: Connection timed out, retrying (0/1 alive)
[  258.907110][   T76] block nbd2: Connection timed out, retrying (0/1 alive)
[  258.907435][   T76] block nbd2: Dead connection, failed to find a fallback
[  258.907445][   T76] block nbd2: shutting down sockets
[  258.907476][   T76] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  258.907510][   T76] Buffer I/O error on dev nbd2, logical block 1, async page read
[  258.907576][   T76] Buffer I/O error on dev nbd2, logical block 2, async page read
[  258.907582][   T76] Buffer I/O error on dev nbd2, logical block 3, async page read
[  258.907619][   T76] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.907628][   T76] Buffer I/O error on dev nbd2, logical block 0, async page read
[  258.908761][   T76] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  258.908774][   T76] Buffer I/O error on dev nbd2, logical block 0, async page read
[  258.908810][   T76] Buffer I/O error on dev nbd2, logical block 1, async page read
[  258.908816][   T76] Buffer I/O error on dev nbd2, logical block 2, async page read
[  258.908822][   T76] Buffer I/O error on dev nbd2, logical block 3, async page read
[  258.909505][   T76] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  258.909518][   T76] Buffer I/O error on dev nbd2, logical block 0, async page read
[  258.909524][   T76] Buffer I/O error on dev nbd2, logical block 1, async page read
[  258.909588][   T76] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  258.909684][   T76] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  258.909759][   T76] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  258.909830][   T76] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  258.909893][   T76] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  258.909943][T16194] ldm_validate_partition_table(): Disk read failed.
[  258.909995][   T76] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  258.910178][T16194] Dev nbd2: unable to read RDB block 0
[  258.910805][T16194]  nbd2: unable to read partition table
[  259.047115][T16194] ldm_validate_partition_table(): Disk read failed.
[  259.055624][T16194] Dev nbd2: unable to read RDB block 0
[  259.068905][T16194]  nbd2: unable to read partition table
[  259.412599][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  259.571785][T16961] __nla_validate_parse: 5 callbacks suppressed
[  259.571799][T16961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3077'.
[  259.572243][T16962] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  259.589155][T16959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3077'.
[  260.072704][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  260.093515][T16990] netlink: 'syz.1.3083': attribute type 4 has an invalid length.
[  260.127979][T16992] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  260.149347][T16990] netlink: 'syz.1.3083': attribute type 4 has an invalid length.
[  260.293472][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  260.577472][T17005] bond_slave_0: Caught tx_queue_len zero misconfig
[  260.591475][T17005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3089'.
[  260.734948][T17020] netlink: zone id is out of range
[  260.734956][T17020] netlink: zone id is out of range
[  260.734959][T17020] netlink: zone id is out of range
[  260.734962][T17020] netlink: zone id is out of range
[  260.734964][T17020] netlink: zone id is out of range
[  260.734967][T17020] netlink: zone id is out of range
[  260.734970][T17020] netlink: zone id is out of range
[  260.734972][T17020] netlink: zone id is out of range
[  260.760787][T17020] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[  261.183225][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  261.394803][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  261.602356][T17068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3116'.
[  261.779404][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1003
[  261.895878][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  262.012054][T17093] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3128'.
[  262.093482][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3130'.
[  262.124271][T17099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3130'.
[  262.212257][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3134'.
[  262.331035][ T4992] Bluetooth: hci1: ISO packet for unknown connection handle 3684
[  262.513673][ T4992] Bluetooth: hci2: unexpected event for opcode 0x7825
[  262.577696][T17140] net_ratelimit: 108 callbacks suppressed
[  262.577708][T17140] ip_tables: iptables: counters copy to user failed while replacing table
[  262.632518][T17141] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3146'.
[  262.770515][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3156'.
[  262.807052][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
[  263.072951][T17184] netlink: 'syz.1.3165': attribute type 1 has an invalid length.
[  263.519854][T17219] 
[  263.520900][T17219] ======================================================
[  263.523243][T17219] WARNING: possible circular locking dependency detected
[  263.525503][T17219] syzkaller #0 Not tainted
[  263.527005][T17219] ------------------------------------------------------
[  263.529256][T17219] syz.0.3175/17219 is trying to acquire lock:
[  263.531193][T17219] ffffffff8ee900e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  263.534370][T17219] 
[  263.534370][T17219] but task is already holding lock:
[  263.537100][T17219] ffff8881136b4180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_iop_lookup+0x5f/0x320
[  263.540383][T17219] 
[  263.540383][T17219] which lock already depends on the new lock.
[  263.540383][T17219] 
[  263.544169][T17219] 
[  263.544169][T17219] the existing dependency chain (in reverse order) is:
[  263.547380][T17219] 
[  263.547380][T17219] -> #8 (&root->kernfs_rwsem){++++}-{4:4}:
[  263.549972][T17219]        down_write+0x96/0x200
[  263.551783][T17219]        kernfs_add_one+0x41/0x6f0
[  263.553844][T17219]        kernfs_create_dir_ns+0x1a1/0x230
[  263.555991][T17219]        internal_create_group+0x440/0x1180
[  263.557854][T17219]        cpuhp_invoke_callback+0x434/0x810
[  263.559721][T17219]        cpuhp_issue_call+0x3f0/0x750
[  263.561471][T17219]        __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0
[  263.563986][T17219]        __cpuhp_setup_state+0x3f/0x60
[  263.565737][T17219]        do_one_initcall+0x250/0x870
[  263.567596][T17219]        do_initcall_level+0x10a/0x1a0
[  263.569784][T17219]        do_initcalls+0x59/0xa0
[  263.571467][T17219]        kernel_init_freeable+0x29d/0x3e0
[  263.573466][T17219]        kernel_init+0x22/0x1d0
[  263.575331][T17219]        ret_from_fork+0x514/0xb70
[  263.577413][T17219]        ret_from_fork_asm+0x1a/0x30
[  263.579579][T17219] 
[  263.579579][T17219] -> #7 (cpuhp_state_mutex){+.+.}-{4:4}:
[  263.582705][T17219] 
[  263.582705][T17219] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  263.585750][T17219]        cpus_read_lock+0x42/0x160
[  263.587800][T17219]        static_key_slow_inc+0x12/0x30
[  263.590011][T17219]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  263.592530][T17219]        nbd_genl_foreach_sock+0x265/0x450
[  263.594892][T17219]        nbd_genl_reconfigure+0xbbb/0x1040
[  263.597246][T17219]        genl_family_rcv_msg_doit+0x233/0x340
[  263.599380][T17219]        genl_rcv_msg+0x614/0x7a0
[  263.601411][T17219]        netlink_rcv_skb+0x226/0x4a0
[  263.603491][T17219]        genl_rcv+0x28/0x40
[  263.605279][T17219]        netlink_unicast+0x7bd/0x940
[  263.607335][T17219]        netlink_sendmsg+0x813/0xb40
[  263.609396][T17219]        sock_sendmsg_nosec+0x13a/0x180
[  263.611550][T17219]        ____sys_sendmsg+0x54e/0x850
[  263.613608][T17219]        ___sys_sendmsg+0x2a5/0x360
[  263.615643][T17219]        __x64_sys_sendmsg+0x1b1/0x290
[  263.617766][T17219]        do_syscall_64+0x166/0x520
[  263.619771][T17219]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.622274][T17219] 
[  263.622274][T17219] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  263.625233][T17219]        __mutex_lock+0x19d/0x1550
[  263.627238][T17219]        nbd_queue_rq+0x373/0xff0
[  263.629212][T17219]        blk_mq_dispatch_rq_list+0x499/0x1990
[  263.631554][T17219]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  263.634188][T17219]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  263.636691][T17219]        blk_mq_run_work_fn+0x16c/0x300
[  263.638863][T17219]        process_scheduled_works+0xc3d/0x1630
[  263.641243][T17219]        worker_thread+0xa47/0xfb0
[  263.643006][T17219]        kthread+0x38b/0x480
[  263.644557][T17219]        ret_from_fork+0x514/0xb70
[  263.646229][T17219]        ret_from_fork_asm+0x1a/0x30
[  263.647941][T17219] 
[  263.647941][T17219] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  263.650407][T17219]        __mutex_lock+0x19d/0x1550
[  263.652411][T17219]        nbd_queue_rq+0xc1/0xff0
[  263.654440][T17219]        blk_mq_dispatch_rq_list+0x499/0x1990
[  263.656919][T17219]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  263.659258][T17219]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  263.661280][T17219]        blk_mq_run_work_fn+0x16c/0x300
[  263.663079][T17219]        process_scheduled_works+0xc3d/0x1630
[  263.665089][T17219]        worker_thread+0xa47/0xfb0
[  263.666729][T17219]        kthread+0x38b/0x480
[  263.668229][T17219]        ret_from_fork+0x514/0xb70
[  263.669859][T17219]        ret_from_fork_asm+0x1a/0x30
[  263.671577][T17219] 
[  263.671577][T17219] -> #3 (set->srcu){.+.+}-{0:0}:
[  263.673927][T17219]        __synchronize_srcu+0xc9/0x2f0
[  263.675692][T17219]        elevator_switch+0x1e8/0x7b0
[  263.677440][T17219]        elevator_change+0x2fa/0x480
[  263.679138][T17219]        elevator_set_default+0x375/0x440
[  263.681261][T17219]        blk_register_queue+0x3f3/0x4e0
[  263.683471][T17219]        __add_disk+0x6b8/0xdb0
[  263.685445][T17219]        add_disk_fwnode+0x100/0x3a0
[  263.687603][T17219]        nbd_dev_add+0x733/0xb60
[  263.689594][T17219]        nbd_init+0x168/0x1f0
[  263.691498][T17219]        do_one_initcall+0x250/0x870
[  263.693628][T17219]        do_initcall_level+0x10a/0x1a0
[  263.695840][T17219]        do_initcalls+0x59/0xa0
[  263.697809][T17219]        kernel_init_freeable+0x29d/0x3e0
[  263.700139][T17219]        kernel_init+0x22/0x1d0
[  263.702102][T17219]        ret_from_fork+0x514/0xb70
[  263.704155][T17219]        ret_from_fork_asm+0x1a/0x30
[  263.706288][T17219] 
[  263.706288][T17219] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  263.709416][T17219]        __mutex_lock+0x19d/0x1550
[  263.711495][T17219]        elevator_change+0x1af/0x480
[  263.713634][T17219]        elevator_set_none+0xb5/0x140
[  263.715798][T17219]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  263.718352][T17219]        nbd_start_device+0x189/0xb30
[  263.720510][T17219]        nbd_genl_connect+0x167d/0x1cd0
[  263.722723][T17219]        genl_family_rcv_msg_doit+0x233/0x340
[  263.724978][T17219]        genl_rcv_msg+0x614/0x7a0
[  263.726921][T17219]        netlink_rcv_skb+0x226/0x4a0
[  263.728983][T17219]        genl_rcv+0x28/0x40
[  263.730756][T17219]        netlink_unicast+0x7bd/0x940
[  263.732807][T17219]        netlink_sendmsg+0x813/0xb40
[  263.734580][T17219]        sock_sendmsg_nosec+0x13a/0x180
[  263.736379][T17219]        ____sys_sendmsg+0x54e/0x850
[  263.738080][T17219]        ___sys_sendmsg+0x2a5/0x360
[  263.739756][T17219]        __x64_sys_sendmsg+0x1b1/0x290
[  263.741532][T17219]        do_syscall_64+0x166/0x520
[  263.743178][T17219]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.745232][T17219] 
[  263.745232][T17219] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  263.747988][T17219]        blk_alloc_queue+0x544/0x690
[  263.749600][T17219]        __blk_mq_alloc_disk+0x194/0x390
[  263.751429][T17219]        nbd_dev_add+0x494/0xb60
[  263.753000][T17219]        nbd_init+0x168/0x1f0
[  263.754499][T17219]        do_one_initcall+0x250/0x870
[  263.756330][T17219]        do_initcall_level+0x10a/0x1a0
[  263.758107][T17219]        do_initcalls+0x59/0xa0
[  263.759670][T17219]        kernel_init_freeable+0x29d/0x3e0
[  263.761518][T17219]        kernel_init+0x22/0x1d0
[  263.763117][T17219]        ret_from_fork+0x514/0xb70
[  263.764777][T17219]        ret_from_fork_asm+0x1a/0x30
[  263.766485][T17219] 
[  263.766485][T17219] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  263.768756][T17219]        __lock_acquire+0x164c/0x2de0
[  263.770496][T17219]        lock_acquire+0x115/0x350
[  263.772127][T17219]        fs_reclaim_acquire+0x71/0x100
[  263.773893][T17219]        kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  263.775942][T17219]        alloc_inode+0xb8/0x1b0
[  263.777541][T17219]        iget_locked+0x131/0x6a0
[  263.779174][T17219]        kernfs_get_inode+0x4f/0x770
[  263.780908][T17219]        kernfs_iop_lookup+0x1fe/0x320
[  263.782643][T17219]        lookup_one_qstr_excl+0x12d/0x360
[  263.784468][T17219]        filename_create+0x20e/0x370
[  263.786177][T17219]        filename_mkdirat+0xd2/0x510
[  263.787964][T17219]        __se_sys_mkdirat+0x35/0x150
[  263.789670][T17219]        do_syscall_64+0x166/0x520
[  263.791413][T17219]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.793496][T17219] 
[  263.793496][T17219] other info that might help us debug this:
[  263.793496][T17219] 
[  263.796737][T17219] Chain exists of:
[  263.796737][T17219]   fs_reclaim --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  263.796737][T17219] 
[  263.801105][T17219]  Possible unsafe locking scenario:
[  263.801105][T17219] 
[  263.803498][T17219]        CPU0                    CPU1
[  263.805242][T17219]        ----                    ----
[  263.806952][T17219]   rlock(&root->kernfs_rwsem);
[  263.808504][T17219]                                lock(cpuhp_state_mutex);
[  263.810788][T17219]                                lock(&root->kernfs_rwsem);
[  263.813094][T17219]   lock(fs_reclaim);
[  263.814375][T17219] 
[  263.814375][T17219]  *** DEADLOCK ***
[  263.814375][T17219] 
[  263.816988][T17219] locks held by syz.0.3175/17219: 3, last CPU#0:
[  263.819076][T17219]  #0: ffff888175c34460 (sb_writers#10){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  263.822021][T17219]  #1: ffff888114286740 (&type->i_mutex_dir_key#7/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[  263.825355][T17219]  #2: ffff8881136b4180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_iop_lookup+0x5f/0x320
[  263.828585][T17219] 
[  263.828585][T17219] stack backtrace:
[  263.830527][T17219] CPU: 0 UID: 0 PID: 17219 Comm: syz.0.3175 Not tainted syzkaller #0 PREEMPT(full) 
[  263.833473][T17219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.836659][T17219] Call Trace:
[  263.837736][T17219]  <TASK>
[  263.838704][T17219]  dump_stack_lvl+0xe8/0x150
[  263.840221][T17219]  print_circular_bug+0x2e2/0x300
[  263.841780][T17219]  check_noncircular+0x12f/0x150
[  263.843353][T17219]  __lock_acquire+0x164c/0x2de0
[  263.844931][T17219]  ? __lock_acquire+0x747/0x2de0
[  263.846515][T17219]  lock_acquire+0x115/0x350
[  263.847992][T17219]  ? kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  263.849959][T17219]  ? lock_acquire+0x115/0x350
[  263.851499][T17219]  fs_reclaim_acquire+0x71/0x100
[  263.853105][T17219]  ? kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  263.855000][T17219]  kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  263.856812][T17219]  ? alloc_inode+0xb8/0x1b0
[  263.858283][T17219]  ? alloc_inode+0xb8/0x1b0
[  263.859779][T17219]  ? find_inode_fast+0xd2/0x740
[  263.861366][T17219]  alloc_inode+0xb8/0x1b0
[  263.862773][T17219]  iget_locked+0x131/0x6a0
[  263.864215][T17219]  kernfs_get_inode+0x4f/0x770
[  263.865733][T17219]  kernfs_iop_lookup+0x1fe/0x320
[  263.867313][T17219]  lookup_one_qstr_excl+0x12d/0x360
[  263.868977][T17219]  filename_create+0x20e/0x370
[  263.870548][T17219]  ? __pfx_filename_create+0x10/0x10
[  263.872255][T17219]  filename_mkdirat+0xd2/0x510
[  263.873793][T17219]  ? __pfx_filename_mkdirat+0x10/0x10
[  263.875571][T17219]  ? do_getname+0x151/0x250
[  263.877046][T17219]  __se_sys_mkdirat+0x35/0x150
[  263.878575][T17219]  do_syscall_64+0x166/0x520
[  263.880074][T17219]  ? trace_irq_disable+0x3b/0x140
[  263.881674][T17219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.883602][T17219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.885479][T17219] RIP: 0033:0x7fe4d959e159
[  263.886912][T17219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.892978][T17219] RSP: 002b:00007fe4da42d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  263.895740][T17219] RAX: ffffffffffffffda RBX: 00007fe4d9825fa0 RCX: 00007fe4d959e159
[  263.898239][T17219] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  263.900755][T17219] RBP: 00007fe4d963506b R08: 0000000000000000 R09: 0000000000000000
[  263.903262][T17219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.905755][T17219] R13: 00007fe4d9826038 R14: 00007fe4d9825fa0 R15: 00007ffc4fc5bf98
[  263.908279][T17219]  </TASK>
[  263.912760][ T4992] Bluetooth: hci2: unexpected cc 0x1003 length: 154 > 9
[  263.912774][ T4992] Bluetooth: hci2: unexpected event for opcode 0x1003
