last executing test programs:

3.821354767s ago: executing program 1 (id=2986):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfecc}, 0x40000002)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

3.761185758s ago: executing program 0 (id=2987):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffecb, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x52, 0x1, 0x3, 0x0, {0x1c}, [@typed={0x8, 0x160, 0x0, 0x0, @u32=0xf7}]}, 0x1c}}, 0x80)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001180), r0)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000001680)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001640)={&(0x7f0000001440)={0x1e0, r2, 0xd8cbd7c2c2f0c0d7, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x2000c}, 0x4)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001300))
readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/4090, 0xffa}, {&(0x7f0000001080)=""/182, 0xb6}, {&(0x7f0000001340)=""/224, 0xe0}], 0x3)
syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffc, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff, 0xffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x441e}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000011c0)=0x1, &(0x7f0000001200)=0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r6, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x6000004}, 0x2400a040)
close(0x4)

3.642751485s ago: executing program 0 (id=2988):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000a340)=ANY=[@ANYBLOB="300000004100070128bd7000f6ffffff000180060006000a0000000c00028005"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xffffffffffffff40}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3, 0x1a2, 0x1, 0x0, 0x8, 0x1}}, {0x4}}]}]}, 0x54}}, 0x20040084)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

3.542841661s ago: executing program 0 (id=2989):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x11c, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x109, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7ad7c1b", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xd0}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x40004}, 0x0)

3.507265086s ago: executing program 0 (id=2992):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x1a9ed426}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840)
connect(r0, &(0x7f0000000200)=@nfc={0x27, r5, 0x401, 0x3}, 0x80)

2.9089937s ago: executing program 1 (id=3001):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_TABLE(r0, 0x29, 0xd1, 0x0, 0x4)
write(0xca, &(0x7f0000000040)="040e0c01031000ffffffffff40ffff", 0xf)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
connect(r1, &(0x7f0000000200)=@un=@file={0x1f, '\x00\x00\x00\x00\x00\x00\x01\x00'}, 0xa)

2.771755975s ago: executing program 2 (id=3002):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000054000000060000005d93000000000000b50302000000000085000000b8000000b7000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x64, 0x2, [@TCA_CGROUP_EMATCHES={0x60, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x50, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x25, 0x5, "36ed201e8271eed272650579f8a32bfd8156dc7095c6b6cc4c22c477b1015c0e2f"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x40010)

2.770303997s ago: executing program 1 (id=3003):
syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (async)

2.770018488s ago: executing program 2 (id=3004):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@migrate={0x160, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@mcast1, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x6e6bb2}, [@algo_aead={0x10e, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x610, 0x40, "9b059687c1cd6df77d00827d411bf730a1cfdbb8d0cc05eb6a9a3ef7ae1561266acd73fae7988d102711f530c13b3db8b55eb8f02afdef9d2ac2b90d682920dca4eb573d36ec03e5b4e02fc56a1c1e9322169f3e04c9d02e6c04a6f7baa1a45379b0ca921e190b21680e7ddffb6ad641b2087e60895046615f716d9ec6e485787d362f66aecbe6802be6c7ebcf686821e5f6a65430dcd02ef5bed62921e40ed75d1b205d962416996aa915cbb96257ca37e925a61dd0862170f39b955333cfa0cd2a"}}]}, 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0xffffffffffffffcf, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x80)
r7 = socket$kcm(0x29, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, 0x0, &(0x7f0000000680))
recvmmsg$unix(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd3f, 0x10bd2d, 0x25dedbfd, {0x0, 0x0, 0x0, r3, {0x3, 0xfff3}, {}, {0x2, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12000000040000000400000011"], 0x50)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000daa000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r9, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x546}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000002a00)=""/4096, 0x1000}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r8, &(0x7f0000000440), 0x0}, 0x20)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f0000000080)={0x0, 0x0}, 0x10)

2.67258965s ago: executing program 1 (id=3005):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000055000500000000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES64=r0, @ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={<r3=>r0, 0x7fff, 0xed, 0x4})
accept4$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80800)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {0x0, 0xfff3}, {0xe, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7ff}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x82}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
listen(r7, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c0018000dac0f0006ac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4)

402.878829ms ago: executing program 2 (id=3006):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c80), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000)

401.936449ms ago: executing program 0 (id=3007):
sendmsg(0xffffffffffffffff, 0x0, 0x48800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x44000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4)

401.574756ms ago: executing program 1 (id=3008):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090001000000fedbdf250a80200004030007"], 0x1c}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@fallback=r2, r3, 0x2f, 0x2030, 0x4}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x4, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}, @enum={0x9, 0xa, 0x0, 0x6, 0x4, [{0x1, 0x5}, {0x10, 0x8}, {0x2, 0x1}, {0x2, 0x8}, {0xc, 0x9}, {0xb, 0x5}, {0x4, 0x5}, {0xb}, {0x0, 0x3ff}, {0x5, 0x6}]}, @enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0x8, 0x3ff800}, {0x3, 0x8}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x4, 0x5}, {0x5, 0x2}, {0x10, 0x3}, {0x8, 0x2}]}, @ptr={0x4, 0x0, 0x0, 0x2, 0x5}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x3}, {0x6}]}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000340)=""/243, 0xf8, 0xf3, 0x1, 0x7}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x5, '\x00', r5, r6, 0x3, 0x1, 0x4}, 0x50)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
setsockopt(r7, 0xc8, 0x16, 0x0, 0x62)

330.165918ms ago: executing program 2 (id=3009):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884)

234.813288ms ago: executing program 2 (id=3010):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
connect(r0, &(0x7f0000000000)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x80)

77.967636ms ago: executing program 1 (id=3011):
write(0xca, &(0x7f0000000040)="040e0c01031000ffffffffff40ffff", 0xf) (async)
write(0xca, &(0x7f0000000040)="040e0c01031000ffffffffff40ffff", 0xf)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000104010100000000000000000000000805000100037b4cf12f75d6646c00000008000440000000c80008000440000000ff0a000200fffff4580200000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
connect(r1, &(0x7f0000000200)=@un=@file={0x1f, '\x00\x00\x00\x00\x00\x00\x01\x00'}, 0xa) (async)
connect(r1, &(0x7f0000000200)=@un=@file={0x1f, '\x00\x00\x00\x00\x00\x00\x01\x00'}, 0xa)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x100})

77.684486ms ago: executing program 2 (id=3012):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@enum64={0x6, 0x2, 0x0, 0x13, 0x1, 0x8, [{0x9, 0x8000008, 0x2b6}, {0x8, 0x2, 0x80000000}]}]}, {0x0, [0x0, 0x30, 0x0, 0x0, 0x2e, 0x61, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x47, 0xff9, 0x8}, 0x28)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r3)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESOCT=r2, @ANYRES64=r2, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES8=r2, @ANYRES16=r0], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r6, &(0x7f0000000340), 0x0}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r11, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a00"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4)
r12 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r12, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100))
r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r14, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68)
getsockopt$CAN_RAW_JOIN_FILTERS(r14, 0x65, 0x6, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
setsockopt$inet6_mreq(r14, 0x29, 0x14, &(0x7f00000003c0)={@loopback}, 0x14)
connect(r0, &(0x7f0000000200)=@un=@file={0x1f, '\x00\x00\x00\x00\x00\x00\x01\x00'}, 0xa)

0s ago: executing program 0 (id=3013):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000640)=@ethtool_link_settings={0x4c, 0x400000, 0x30, 0x9, 0x0, 0x3, 0x5, 0x1, 0x2, 0x5, [0x1, 0x6a, 0x4, 0x30, 0xdb4, 0x9, 0xe4f8, 0x76d], [0x40, 0x0]}})

kernel console output (not intermixed with test programs):

new route
[  113.085400][ T8645] netlink: 452 bytes leftover after parsing attributes in process `syz.2.731'.
[  113.190070][ T8658] Bluetooth: hci0: unsupported parameter 5161
[  113.190088][ T8658] Bluetooth: hci0: unsupported parameter 8192
[  113.190096][ T8658] Bluetooth: hci0: unsupported parameter 5161
[  113.190104][ T8658] Bluetooth: hci0: unsupported parameter 8192
[  113.295149][ T8660] netlink: 'syz.2.735': attribute type 10 has an invalid length.
[  113.329088][ T8660] 8021q: adding VLAN 0 to HW filter on device team0
[  113.333621][ T8660] bond0: (slave team0): Enslaving as an active interface with an up link
[  113.404637][ T8678] xt_l2tp: missing protocol rule (udp|l2tpip)
[  113.685345][ T8694] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  113.685367][ T8694] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  113.956614][ T8712] Cannot find del_set index 4 as target
[  113.959774][ T8712] team0: No ports can be present during mode change
[  114.242958][ T8727] netlink: 'syz.1.755': attribute type 16 has an invalid length.
[  114.242971][ T8727] netlink: 'syz.1.755': attribute type 17 has an invalid length.
[  114.246155][ T8727] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  114.249838][ T8727] netlink: del zone limit has 4 unknown bytes
[  114.319258][ T8733] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20000
[  114.572563][ T8761] veth5: entered allmulticast mode
[  114.933844][ T8800] __nla_validate_parse: 6 callbacks suppressed
[  114.933856][ T8800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.780'.
[  114.933866][ T8800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.780'.
[  114.933873][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'.
[  114.978803][ T8804] nbd3: detected capacity change from 0 to 63
[  114.980859][   T56] block nbd3: Receive control failed (result -104)
[  115.053336][ T8816] netlink: 68 bytes leftover after parsing attributes in process `syz.0.786'.
[  115.343506][ T8838] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  115.379271][ T8843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'.
[  115.602895][ T8856] syzkaller1: entered promiscuous mode
[  115.602914][ T8856] syzkaller1: entered allmulticast mode
[  115.925848][ T8884] bond4: entered promiscuous mode
[  115.925881][ T8884] bond4: entered allmulticast mode
[  115.927258][ T8884] 8021q: adding VLAN 0 to HW filter on device bond4
[  115.998715][ T8884] netlink: 'syz.0.806': attribute type 2 has an invalid length.
[  115.998734][ T8884] netlink: 132 bytes leftover after parsing attributes in process `syz.0.806'.
[  116.228568][ T8904] netlink: 56 bytes leftover after parsing attributes in process `syz.1.810'.
[  116.322265][ T8914] netlink: 'syz.1.812': attribute type 3 has an invalid length.
[  116.322281][ T8914] netlink: 3 bytes leftover after parsing attributes in process `syz.1.812'.
[  116.461609][ T8908] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.811'.
[  116.462360][ T8922] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.811'.
[  116.773137][ T8940] ip_tables: iptables: counters copy to user failed while replacing table
[  116.999814][ T8949] syzkaller0: entered promiscuous mode
[  116.999836][ T8949] syzkaller0: entered allmulticast mode
[  117.140332][ T8958] netlink: 'syz.0.827': attribute type 1 has an invalid length.
[  117.229717][ T8965] sctp: [Deprecated]: syz.1.830 (pid 8965) Use of int in max_burst socket option.
[  117.229717][ T8965] Use struct sctp_assoc_value instead
[  118.057056][ T8976] netlink: 'syz.2.834': attribute type 4 has an invalid length.
[  118.233496][ T8999] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  118.239082][ T8999] sctp: [Deprecated]: syz.2.845 (pid 8999) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.239082][ T8999] Use struct sctp_sack_info instead
[  118.278548][ T9005] veth1: entered promiscuous mode
[  118.278561][ T9005] veth1: entered allmulticast mode
[  118.278914][ T9005] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  118.296017][ T5599] Bluetooth: hci2: unexpected event for opcode 0x1003
[  121.342076][ T9011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  121.344525][ T9036] netlink: 'syz.2.859': attribute type 11 has an invalid length.
[  121.437177][ T9049] __nla_validate_parse: 7 callbacks suppressed
[  121.437197][ T9049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.862'.
[  121.444390][ T9053] netlink: 'syz.0.864': attribute type 5 has an invalid length.
[  121.487140][ T9056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.866'.
[  121.487155][ T9056] netlink: 11 bytes leftover after parsing attributes in process `syz.2.866'.
[  121.487164][ T9056] netlink: 11 bytes leftover after parsing attributes in process `syz.2.866'.
[  121.487172][ T9056] netlink: 52 bytes leftover after parsing attributes in process `syz.2.866'.
[  121.559828][ T9053] netlink: 224 bytes leftover after parsing attributes in process `syz.0.864'.
[  121.560666][ T9053] tipc: New replicast peer: 127.0.0.1
[  121.560968][ T9053] tipc: Enabled bearer <udp:syz0>, priority 10
[  121.705568][ T9082] bridge0: port 4(bond0) entered blocking state
[  121.705695][ T9082] bridge0: port 4(bond0) entered disabled state
[  121.705930][ T9082] bond0: entered allmulticast mode
[  121.705945][ T9082] bond_slave_0: entered allmulticast mode
[  121.705972][ T9082] team0: entered allmulticast mode
[  121.705982][ T9082] team_slave_0: entered allmulticast mode
[  121.705994][ T9082] team_slave_1: entered allmulticast mode
[  121.714918][ T9082] bond0: entered promiscuous mode
[  121.714937][ T9082] bond_slave_0: entered promiscuous mode
[  121.715098][ T9082] team0: entered promiscuous mode
[  121.715109][ T9082] team_slave_0: entered promiscuous mode
[  121.715234][ T9082] team_slave_1: entered promiscuous mode
[  122.568523][ T1229] tipc: Node number set to 7405569
[  122.748967][ T5599] Bluetooth: hci2: link tx timeout
[  122.748979][ T5599] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  122.774587][ T9117] syzkaller0: entered promiscuous mode
[  122.774605][ T9117] syzkaller0: entered allmulticast mode
[  124.621684][ T9074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  124.623754][ T9107] netlink: 136 bytes leftover after parsing attributes in process `syz.2.880'.
[  124.734042][ T9123] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  124.903223][ T9129] netlink: 84 bytes leftover after parsing attributes in process `syz.1.887'.
[  125.136575][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'.
[  125.822428][ T9182] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000
[  125.926336][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'.
[  126.065993][ T9220] netlink: 'syz.2.918': attribute type 3 has an invalid length.
[  126.097109][ T9223] netlink: 'syz.1.919': attribute type 7 has an invalid length.
[  126.099965][ T9223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.099977][ T9223] IPv6: NLM_F_CREATE should be set when creating new route
[  126.100007][ T9223] IPv6: NLM_F_CREATE should be set when creating new route
[  126.100024][ T9223] IPv6: NLM_F_CREATE should be set when creating new route
[  126.464634][ T5599] Bluetooth: hci2: unexpected event for opcode 0x1003
[  126.473523][ T9252] __nla_validate_parse: 5 callbacks suppressed
[  126.473538][ T9252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.927'.
[  126.480854][ T9253] netlink: 140 bytes leftover after parsing attributes in process `syz.2.928'.
[  126.522359][ T9252] hsr_slave_1 (unregistering): left promiscuous mode
[  126.641937][ T9259] syzkaller1: entered promiscuous mode
[  126.641954][ T9259] syzkaller1: entered allmulticast mode
[  126.775167][ T9270] netlink: 68 bytes leftover after parsing attributes in process `syz.0.933'.
[  126.775179][ T9272] netlink: 68 bytes leftover after parsing attributes in process `syz.0.933'.
[  126.854861][ T9281] syzkaller0: entered promiscuous mode
[  126.854880][ T9281] syzkaller0: entered allmulticast mode
[  126.861557][ T9281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.206259][ T9303] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  127.206559][ T9303] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  127.207855][ T9303] netlink: 68 bytes leftover after parsing attributes in process `syz.0.945'.
[  127.211988][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.943'.
[  127.215770][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.943'.
[  127.344872][ T9311] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  128.018918][ T3278] tipc: Node number set to 657608935
[  128.125939][ T9319] netlink: 48 bytes leftover after parsing attributes in process `syz.0.951'.
[  128.323532][ T9323] netlink: 68 bytes leftover after parsing attributes in process `syz.2.952'.
[  128.361856][ T9330] syzkaller0: left promiscuous mode
[  128.361933][ T9330] syzkaller0: left allmulticast mode
[  128.463316][ T9336] netlink: 220 bytes leftover after parsing attributes in process `syz.0.956'.
[  128.555492][ T9336] netlink: 'syz.0.956': attribute type 3 has an invalid length.
[  128.572177][ T9346] syzkaller0: entered promiscuous mode
[  128.572196][ T9346] syzkaller0: entered allmulticast mode
[  128.789674][ T9359] xt_socket: unknown flags 0x4
[  128.802767][ T9362] syzkaller0: left promiscuous mode
[  128.802785][ T9362] syzkaller0: left allmulticast mode
[  128.851029][ T9370] netlink: 'syz.0.968': attribute type 1 has an invalid length.
[  128.882172][ T9370] 8021q: adding VLAN 0 to HW filter on device bond5
[  129.132694][ T9397] openvswitch: netlink: Flow key attr not present in new flow.
[  129.664913][ T9453] tipc: Invalid UDP bearer configuration
[  129.664945][ T9453] tipc: Enabling of bearer <udp:s	> rejected, failed to enable media
[  130.059699][ T9477] netlink: 'syz.2.1000': attribute type 1 has an invalid length.
[  130.085569][ T9477] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.105027][ T9477] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.105298][ T9477] bond2: (slave gre1): The slave device specified does not support setting the MAC address
[  130.107164][ T9477] bond2: (slave gre1): Error -95 calling set_mac_address
[  130.143090][ T9480] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.664739][ T9495] geneve1: entered promiscuous mode
[  130.838859][ T9506] IPVS: length: 179 != 24
[  130.838885][ T9506] IPVS: length: 179 != 24
[  130.838901][ T9506] IPVS: length: 179 != 24
[  130.838916][ T9506] IPVS: length: 179 != 24
[  130.838931][ T9506] IPVS: length: 179 != 24
[  130.838945][ T9506] IPVS: length: 179 != 24
[  130.838960][ T9506] IPVS: length: 179 != 24
[  130.838975][ T9506] IPVS: length: 179 != 24
[  130.838991][ T9506] IPVS: length: 179 != 24
[  130.839005][ T9506] IPVS: length: 179 != 24
[  130.839020][ T9506] IPVS: length: 179 != 24
[  130.839035][ T9506] IPVS: length: 179 != 24
[  130.839050][ T9506] IPVS: length: 179 != 24
[  130.839065][ T9506] IPVS: length: 179 != 24
[  130.839079][ T9506] IPVS: length: 179 != 24
[  130.839376][ T9506] IPVS: length: 179 != 24
[  130.839394][ T9506] IPVS: length: 179 != 24
[  130.839409][ T9506] IPVS: length: 179 != 24
[  130.839425][ T9506] IPVS: length: 179 != 24
[  130.839439][ T9506] IPVS: length: 179 != 24
[  130.839454][ T9506] IPVS: length: 179 != 24
[  130.839469][ T9506] IPVS: length: 179 != 24
[  130.839484][ T9506] IPVS: length: 179 != 24
[  130.839498][ T9506] IPVS: length: 179 != 24
[  130.839514][ T9506] IPVS: length: 179 != 24
[  130.839646][ T9506] IPVS: length: 179 != 24
[  130.839663][ T9506] IPVS: length: 179 != 24
[  130.839684][ T9506] IPVS: length: 179 != 24
[  130.839700][ T9506] IPVS: length: 179 != 24
[  130.839715][ T9506] IPVS: length: 179 != 24
[  130.839729][ T9506] IPVS: length: 179 != 24
[  130.839744][ T9506] IPVS: length: 179 != 24
[  130.839760][ T9506] IPVS: length: 179 != 24
[  130.839775][ T9506] IPVS: length: 179 != 24
[  130.839789][ T9506] IPVS: length: 179 != 24
[  130.839804][ T9506] IPVS: length: 179 != 24
[  130.839819][ T9506] IPVS: length: 179 != 24
[  130.839835][ T9506] IPVS: length: 179 != 24
[  130.839849][ T9506] IPVS: length: 179 != 24
[  130.839864][ T9506] IPVS: length: 179 != 24
[  130.839879][ T9506] IPVS: length: 179 != 24
[  130.839894][ T9506] IPVS: length: 179 != 24
[  130.839909][ T9506] IPVS: length: 179 != 24
[  130.839923][ T9506] IPVS: length: 179 != 24
[  130.839939][ T9506] IPVS: length: 179 != 24
[  130.839954][ T9506] IPVS: length: 179 != 24
[  130.839968][ T9506] IPVS: length: 179 != 24
[  130.839983][ T9506] IPVS: length: 179 != 24
[  130.839998][ T9506] IPVS: length: 179 != 24
[  130.840013][ T9506] IPVS: length: 179 != 24
[  130.840027][ T9506] IPVS: length: 179 != 24
[  130.840042][ T9506] IPVS: length: 179 != 24
[  130.840057][ T9506] IPVS: length: 179 != 24
[  130.840073][ T9506] IPVS: length: 179 != 24
[  130.840087][ T9506] IPVS: length: 179 != 24
[  130.840102][ T9506] IPVS: length: 179 != 24
[  130.840117][ T9506] IPVS: length: 179 != 24
[  130.840133][ T9506] IPVS: length: 179 != 24
[  130.840147][ T9506] IPVS: length: 179 != 24
[  130.840162][ T9506] IPVS: length: 179 != 24
[  130.840177][ T9506] IPVS: length: 179 != 24
[  130.840191][ T9506] IPVS: length: 179 != 24
[  130.840206][ T9506] IPVS: length: 179 != 24
[  130.840220][ T9506] IPVS: length: 179 != 24
[  130.840235][ T9506] IPVS: length: 179 != 24
[  131.164749][ T9523] syzkaller0: entered promiscuous mode
[  131.164765][ T9523] syzkaller0: entered allmulticast mode
[  131.190193][ T9523] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.194954][ T9522] tipc: Resetting bearer <eth:syzkaller0>
[  131.212542][ T9522] tipc: Disabling bearer <eth:syzkaller0>
[  131.605399][ T9556] __nla_validate_parse: 15 callbacks suppressed
[  131.605411][ T9556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1021'.
[  131.764183][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1023'.
[  131.914143][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'.
[  131.914161][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'.
[  132.021935][ T9586] tc_dump_action: action bad kind
[  132.168648][ T9590] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  132.316423][ T9603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1032'.
[  132.316445][ T9603] netlink: 'syz.1.1032': attribute type 6 has an invalid length.
[  132.419449][ T9607] syzkaller0: entered promiscuous mode
[  132.419462][ T9607] syzkaller0: entered allmulticast mode
[  132.627736][ T9615] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1038'.
[  132.652830][ T9615] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1038'.
[  132.724500][ T9624] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  132.824945][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'.
[  132.929844][ T9635] ip_tables: iptables: counters copy to user failed while replacing table
[  132.941381][ T9635] netlink: 'syz.1.1044': attribute type 1 has an invalid length.
[  132.973453][ T9635] 8021q: adding VLAN 0 to HW filter on device bond5
[  132.999571][ T9635] bond5: (slave gretap1): making interface the new active one
[  133.000947][ T9635] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  133.348403][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  133.348439][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  133.375963][   T11] block nbd2: Possible stuck request ffff88810a780000: control (read@0,1024B). Runtime 30 seconds
[  133.377281][   T11] block nbd2: Possible stuck request ffff88810a780200: control (read@1024,1024B). Runtime 30 seconds
[  133.377303][   T11] block nbd2: Possible stuck request ffff88810a780400: control (read@2048,2048B). Runtime 30 seconds
[  134.153060][ T5599] Bluetooth: hci2: unexpected event for opcode 0x1003
[  134.154310][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1053'.
[  134.154320][ T9656] openvswitch: netlink: Flow key attr not present in new flow.
[  134.155919][ T9656] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1053'.
[  134.155929][ T9656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.228155][ T9658] syzkaller0: left promiscuous mode
[  134.228171][ T9658] syzkaller0: left allmulticast mode
[  134.249715][ T9660] ip_tables: iptables: counters copy to user failed while replacing table
[  134.489840][ T9682] veth0: entered promiscuous mode
[  134.492616][ T9682] macvlan2: entered promiscuous mode
[  134.494796][ T9682] veth0: left promiscuous mode
[  134.511375][ T9685] syzkaller0: Caught tx_queue_len zero misconfig
[  134.661261][ T9698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.663324][ T9700] sch_fq: defrate 4294967293 ignored.
[  134.841993][ T9712] syzkaller0: entered promiscuous mode
[  134.842005][ T9712] syzkaller0: entered allmulticast mode
[  134.844434][ T9712] simple: /dev/video#_3
[  134.844443][ T9712] simple: /dev/video#_6
[  134.844446][ T9712] simple: /dev/video#_9
[  134.844449][ T9712] simple: /dev/video#_12
[  134.844453][ T9712] simple: /dev/video#_15
[  134.844456][ T9712] simple: /dev/video#_18
[  134.844460][ T9712] simple: /dev/video#_21
[  134.844463][ T9712] simple: /dev/video#_24
[  134.844466][ T9712] simple: /dev/video#_27
[  134.844469][ T9712] simple: /dev/video#_30
[  134.844473][ T9712] simple: /dev/video#_33
[  134.844476][ T9712] simple: /dev/video#_36
[  134.844479][ T9712] simple: /dev/video#_39
[  134.844483][ T9712] simple: /dev/video#_42
[  134.844486][ T9712] simple: /dev/video#_45
[  134.844489][ T9712] simple: /dev/video#_48
[  134.844492][ T9712] simple: /dev/video#_51
[  134.844496][ T9712] simple: /dev/video#_54
[  134.844499][ T9712] simple: /dev/video#_57
[  134.844502][ T9712] simple: /dev/video#_60
[  134.844505][ T9712] simple: /dev/video#_63
[  134.844509][ T9712] simple: /dev/video#_66
[  134.844512][ T9712] simple: /dev/video#_69
[  134.844516][ T9712] simple: /dev/video#_72
[  134.844519][ T9712] simple: /dev/video#_75
[  134.844522][ T9712] simple: /dev/video#_78
[  134.844526][ T9712] simple: /dev/video#_81
[  134.844529][ T9712] simple: /dev/video#_84
[  134.844532][ T9712] simple: /dev/video#_87
[  134.844536][ T9712] simple: /dev/video#_90
[  134.844539][ T9712] simple: /dev/video#_93
[  134.844542][ T9712] simple: /dev/video#_96
[  134.844546][ T9712] TC_ACT_REPEAT abuse ?
[  134.956651][ T9714] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  134.963700][ T9714] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  134.979785][ T9714] 8021q: adding VLAN 0 to HW filter on device bond6
[  134.989935][ T9714] bond6: entered promiscuous mode
[  134.991080][ T9714] bond6: entered allmulticast mode
[  135.045997][ T9717] ip_tables: iptables: counters copy to user failed while replacing table
[  135.178627][ T9726] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  135.194970][ T9726] netlink: 'syz.0.1079': attribute type 1 has an invalid length.
[  135.217090][ T9726] 8021q: adding VLAN 0 to HW filter on device bond7
[  135.431388][ T9739] netlink: 'syz.1.1084': attribute type 1 has an invalid length.
[  135.443912][ T5599] Bluetooth: hci2: unexpected event for opcode 0x1003
[  135.540700][ T9753] syzkaller1: entered promiscuous mode
[  135.540718][ T9753] syzkaller1: entered allmulticast mode
[  135.542900][ T9757] team0: entered promiscuous mode
[  135.542911][ T9757] team_slave_0: entered promiscuous mode
[  135.543003][ T9757] team_slave_1: entered promiscuous mode
[  135.543241][ T9757] team0: entered allmulticast mode
[  135.543248][ T9757] team_slave_0: entered allmulticast mode
[  135.543254][ T9757] team_slave_1: entered allmulticast mode
[  135.543631][ T9757] team0: Cannot enslave team device to itself
[  136.487418][ T5599] Bluetooth: hci2: unexpected event for opcode 0x1003
[  137.109730][ T9811] netlink: 'syz.0.1105': attribute type 1 has an invalid length.
[  137.123448][ T9811] bond8: entered promiscuous mode
[  137.123712][ T9811] 8021q: adding VLAN 0 to HW filter on device bond8
[  137.148536][ T9811] 8021q: adding VLAN 0 to HW filter on device bond9
[  137.155222][ T9811] bond8: (slave bond9): making interface the new active one
[  137.155242][ T9811] bond9: entered promiscuous mode
[  137.155910][ T9811] bond8: (slave bond9): Enslaving as an active interface with an up link
[  137.293454][ T9826] __nla_validate_parse: 10 callbacks suppressed
[  137.293470][ T9826] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1110'.
[  137.448275][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'.
[  137.448301][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'.
[  137.533574][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'.
[  137.540658][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'.
[  137.549670][ T9839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1116'.
[  137.549691][ T9839] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1116'.
[  137.550465][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'.
[  137.551380][ T9839] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1116'.
[  137.551390][ T9839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1116'.
[  137.795615][ T9853] openvswitch: netlink: IPv4 frag type 228 is out of range max 2
[  137.912833][ T9868] syzkaller0: entered promiscuous mode
[  137.912851][ T9868] syzkaller0: entered allmulticast mode
[  138.114988][ T9882] openvswitch: netlink: IPv4 frag type 228 is out of range max 2
[  138.274319][ T9895] pim6reg1: entered promiscuous mode
[  138.274337][ T9895] pim6reg1: entered allmulticast mode
[  138.454114][ T9912] pimreg: entered allmulticast mode
[  138.455413][ T9912] pimreg: left allmulticast mode
[  138.515939][ T9913] bridge: RTM_NEWNEIGH with invalid ether address
[  138.629563][ T9921] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  138.740053][ T9924] 0: reclassify loop, rule prio 0, protocol 03
[  138.910818][ T9928] netlink: 'syz.1.1147': attribute type 5 has an invalid length.
[  139.091122][ T9938] netlink: 'syz.1.1150': attribute type 1 has an invalid length.
[  139.104510][ T9938] 8021q: adding VLAN 0 to HW filter on device bond6
[  139.174403][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bca5d800: rx timeout, send abort
[  139.176142][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881bca5d800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  139.368470][ T9962] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  139.403440][ T9961] vlan2: entered allmulticast mode
[  139.403465][ T9961] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  139.477155][ T9968] bond_slave_0: entered promiscuous mode
[  139.477195][ T9968] bond_slave_0: entered allmulticast mode
[  139.481575][ T9968] bond0: (slave bond_slave_0): Releasing backup interface
[  139.483115][ T9968] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  139.556658][ T9975] xt_policy: neither incoming nor outgoing policy selected
[  139.782772][ T9985] netlink: 'syz.2.1165': attribute type 4 has an invalid length.
[  139.810460][ T9985] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  139.906488][ T5599] Bluetooth: hci2: command 0x0405 tx timeout
[  140.487011][T10021] sctp: [Deprecated]: syz.2.1179 (pid 10021) Use of int in max_burst socket option.
[  140.487011][T10021] Use struct sctp_assoc_value instead
[  141.123804][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  141.555807][T10116] 8021q: VLANs not supported on lo
[  141.704665][T10127] IPVS: length: 137 != 24
[  141.765756][T10135] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  142.967308][T10191] __nla_validate_parse: 24 callbacks suppressed
[  142.967319][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'.
[  143.024913][T10193] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1230'.
[  143.024927][T10193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  143.030572][T10193] Bluetooth: hci0: unsupported parameter 5135
[  143.030590][T10193] Bluetooth: hci0: unsupported parameter 8192
[  143.030600][T10193] Bluetooth: hci0: unsupported parameter 5135
[  143.030607][T10193] Bluetooth: hci0: unsupported parameter 8192
[  145.170168][T10177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  145.347364][T10213] netlink: 'syz.1.1234': attribute type 10 has an invalid length.
[  145.432033][T10213] team0 (unregistering): Port device team_slave_0 removed
[  145.479205][T10213] team0 (unregistering): Port device team_slave_1 removed
[  145.503681][T10213] team0 (unregistering): Port device netdevsim1 removed
[  145.511401][   T11] block nbd3: Possible stuck request ffff88810a7e8000: control (read@0,1024B). Runtime 30 seconds
[  145.511433][   T11] block nbd3: Possible stuck request ffff88810a7e8200: control (read@1024,1024B). Runtime 30 seconds
[  145.511449][   T11] block nbd3: Possible stuck request ffff88810a7e8400: control (read@2048,1024B). Runtime 30 seconds
[  145.511466][   T11] block nbd3: Possible stuck request ffff88810a7e8600: control (read@3072,1024B). Runtime 30 seconds
[  145.530668][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  145.615414][T10227] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1239'.
[  145.857896][T10241] bridge0: port 4(bond0) entered blocking state
[  145.857985][T10241] bridge0: port 4(bond0) entered forwarding state
[  145.860195][T10241] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.860315][T10241] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.860475][T10241] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.860560][T10241] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.884947][T10241] bridge0: left promiscuous mode
[  145.950712][T10253] bridge_slave_0: left allmulticast mode
[  145.950736][T10253] bridge_slave_0: left promiscuous mode
[  145.950919][T10253] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.149379][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1249'.
[  146.149401][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'.
[  146.727139][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  146.747020][T10290] netlink: 'syz.1.1259': attribute type 4 has an invalid length.
[  147.153245][T10315] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1266'.
[  147.159072][T10315] bridge_slave_0: left allmulticast mode
[  147.159120][T10315] bridge_slave_0: left promiscuous mode
[  147.159276][T10315] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.193639][T10346] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  148.211889][T10346] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  148.294939][T10348] xt_l2tp: v2 tid > 0xffff: 4294901760
[  148.933126][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'.
[  148.933146][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'.
[  148.979419][T10375] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  149.033525][T10382] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1292'.
[  149.187582][T10387] xt_TCPMSS: Only works on TCP SYN packets
[  149.325544][T10395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.861044][T10433] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1311'.
[  149.872601][T10439] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1311'.
[  150.002006][T10451] IPv6: Can't replace route, no match found
[  150.052594][   T33] audit: type=1800 audit(1791195512.834:4): pid=10451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1315" name=CB dev="tmpfs" ino=2132 res=0 errno=0
[  150.169147][T10462] sctp: [Deprecated]: syz.2.1319 (pid 10462) Use of int in maxseg socket option.
[  150.169147][T10462] Use struct sctp_assoc_value instead
[  150.173588][T10462] netlink: 'syz.2.1319': attribute type 39 has an invalid length.
[  150.524204][T10486] netlink: 'syz.0.1325': attribute type 8 has an invalid length.
[  150.789691][T10493] netlink: 'syz.2.1329': attribute type 10 has an invalid length.
[  150.789708][T10493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1329'.
[  150.791626][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'.
[  150.888411][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  150.916982][T10508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1335'.
[  151.011088][T10515] Bluetooth: hci0: unsupported parameter 5135
[  151.011107][T10515] Bluetooth: hci0: invalid length 2, exp 1 for type 31
[  151.398141][T10554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1354'.
[  151.416644][T10554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1354'.
[  151.447185][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  151.469631][T10560] tc_dump_action: action bad kind
[  151.538227][T10571] netlink: 'syz.1.1361': attribute type 10 has an invalid length.
[  151.539726][T10563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.990304][T10615] netlink: 'syz.0.1374': attribute type 3 has an invalid length.
[  152.326016][T10640] bridge_slave_1: left allmulticast mode
[  152.326060][T10640] bridge_slave_1: left promiscuous mode
[  152.332995][T10640] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.031615][T10695] Bluetooth: hci0: invalid length 0, exp 2 for type 15
[  153.419204][T10710] netlink: 'syz.2.1393': attribute type 11 has an invalid length.
[  153.419221][T10710] netlink: 'syz.2.1393': attribute type 4 has an invalid length.
[  153.666070][T10742] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  153.862748][T10770] x_tables: duplicate underflow at hook 1
[  153.901792][T10776] macsec1: entered promiscuous mode
[  153.901804][T10776] macsec1: entered allmulticast mode
[  154.053065][T10793] __nla_validate_parse: 17 callbacks suppressed
[  154.053076][T10793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1425'.
[  154.143234][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'.
[  154.164728][T10802] ip_tables: iptables: counters copy to user failed while replacing table
[  155.013970][T10827] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.014077][T10827] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.014256][T10827] bridge_slave_0: entered allmulticast mode
[  155.015783][T10827] bridge_slave_0: entered promiscuous mode
[  155.019226][T10827] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.019308][T10827] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.247357][T10808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  157.333821][T10834] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1437'.
[  157.426968][T10846] ip_tables: iptables: counters copy to user failed while replacing table
[  157.548178][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  157.560146][T10855] SET target dimension over the limit!
[  157.571570][T10858] SET target dimension over the limit!
[  157.589171][T10860] 8021q: VLANs not supported on syzkaller0
[  157.590643][T10860] syzkaller0: left promiscuous mode
[  157.590660][T10860] syzkaller0: left allmulticast mode
[  158.511870][T10871] netlink: 'syz.2.1449': attribute type 3 has an invalid length.
[  158.511888][T10871] netlink: 'syz.2.1449': attribute type 1 has an invalid length.
[  158.511895][T10871] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1449'.
[  158.511906][T10871] NCSI netlink: No device for ifindex 0
[  158.634467][T10883] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1454'.
[  158.655363][   T56] block nbd4: Receive control failed (result -32)
[  158.738182][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'.
[  158.927470][T10906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1462'.
[  158.994844][T10911] netlink: 'syz.1.1463': attribute type 1 has an invalid length.
[  158.994863][T10911] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1463'.
[  159.022615][T10917] xt_IDLETIMER: timeout value is too big
[  159.141091][T10924] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1469'.
[  159.204136][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1473'.
[  159.211107][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1473'.
[  159.354646][T10943] bridge0: port 5(syz_tun) entered blocking state
[  159.354768][T10943] bridge0: port 5(syz_tun) entered disabled state
[  159.354885][T10943] syz_tun: entered allmulticast mode
[  159.431496][T10950] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1479'.
[  159.535726][T10955] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1481'.
[  159.545214][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1481'.
[  159.616103][T10955] veth1: left promiscuous mode
[  159.642928][T10955] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  159.644360][T10955] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  159.666877][T10955] bond1: left promiscuous mode
[  159.667525][T10955] 8021q: adding VLAN 0 to HW filter on device bond1
[  159.674252][T10955] bond2: left promiscuous mode
[  159.688871][T10955] 8021q: adding VLAN 0 to HW filter on device bond4
[  159.709374][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'.
[  159.881451][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  159.894727][T10984] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1494'.
[  159.950887][T10982] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1493'.
[  160.088309][T10996] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1496'.
[  160.188540][ T5462] tipc: Subscription rejected, illegal request
[  160.454031][ T5595] Bluetooth: hci1: ACL packet too small
[  160.884232][T11053] vxlan: RTM_NEWNEIGH with invalid state 0x9
[  160.894412][T11053] team0: left promiscuous mode
[  160.894431][T11053] team_slave_0: left promiscuous mode
[  160.894507][T11053] team_slave_1: left promiscuous mode
[  160.895637][T11053] dummy0: left promiscuous mode
[  160.916522][ T8452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.917355][T11054] sctp: [Deprecated]: syz.1.1516 (pid 11054) Use of struct sctp_assoc_value in delayed_ack socket option.
[  160.917355][T11054] Use struct sctp_sack_info instead
[  160.922219][T11053] bond_slave_0: left promiscuous mode
[  160.934365][T11053] geneve1: left promiscuous mode
[  160.936861][T11053] bond1: left promiscuous mode
[  160.937578][T11053] macsec1: left promiscuous mode
[  160.939617][T11053] bond4: left promiscuous mode
[  160.940476][T11053] bond6: left promiscuous mode
[  160.940872][T11053] bond8: left promiscuous mode
[  160.940883][T11053] bond9: left promiscuous mode
[  160.954348][T11054] 8021q: VLANs not supported on sit0
[  161.269042][T11077] Bluetooth: MGMT ver 1.23
[  161.347235][ T1229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.470102][T11083] ip_tables: iptables: counters copy to user failed while replacing table
[  161.943131][T11065] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  162.127282][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.127305][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.127318][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.127332][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.187286][T11109] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002
[  162.521022][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  162.522055][T11128] netlink: 'syz.0.1543': attribute type 3 has an invalid length.
[  162.522197][T11128] netlink: 'syz.0.1543': attribute type 3 has an invalid length.
[  162.525208][T11127] tc action pedit unable to extract header offset for header type (0x4)
[  162.525217][T11127] tc action pedit unable to extract header offset for header type (0x4)
[  162.525221][T11127] tc action pedit unable to extract header offset for header type (0x4)
[  162.525225][T11127] tc action pedit unable to extract header offset for header type (0x4)
[  162.525229][T11127] tc action pedit unable to extract header offset for header type (0x4)
[  162.525233][T11127] tc action pedit unable to extract header offset for header type (0x4)
[  162.525237][T11127] tc action pedit unable to extract header offset for header type (0x4)
[  162.525241][T11127] tc action pedit unable to extract header offset for header type (0x4)
[  162.525245][T11127] tc action pedit unable to extract header offset for header type (0x4)
[  162.525249][T11127] tc action pedit unable to extract header offset for header type (0x4)
[  162.525258][T11127] 0: reclassify loop, rule prio 0, protocol 800
[  162.592659][T11133] 8021q: adding VLAN 0 to HW filter on device bond10
[  162.622214][T11133] bond10: (slave geneve3): Enslaving as an active interface with an up link
[  162.636561][T11133] bond10 (unregistering): (slave geneve3): Releasing backup interface
[  162.639376][T11133] bond10 (unregistering): Released all slaves
[  162.695302][T11138] veth0: entered promiscuous mode
[  162.774133][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  162.822153][T11137] veth0: left promiscuous mode
[  162.878694][T11143] xt_CT: No such helper "snmp"
[  162.945569][T11152] netlink: 'syz.0.1549': attribute type 1 has an invalid length.
[  163.131885][T11174] openvswitch: netlink: Message has 8 unknown bytes.
[  163.131912][T11174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.149160][T11170] lo speed is unknown, defaulting to 1000
[  163.174188][T11170] lo speed is unknown, defaulting to 1000
[  163.202694][T11178] sctp: [Deprecated]: syz.1.1556 (pid 11178) Use of int in maxseg socket option.
[  163.202694][T11178] Use struct sctp_assoc_value instead
[  163.240851][T11170] lo speed is unknown, defaulting to 1000
[  163.431031][   T11] block nbd2: Possible stuck request ffff88810a780000: control (read@0,1024B). Runtime 60 seconds
[  163.431053][   T11] block nbd2: Possible stuck request ffff88810a780200: control (read@1024,1024B). Runtime 60 seconds
[  163.431063][   T11] block nbd2: Possible stuck request ffff88810a780400: control (read@2048,2048B). Runtime 60 seconds
[  163.503892][ T2308] lo speed is unknown, defaulting to 1000
[  163.511400][T11170] infiniband syz0: set down
[  163.511412][T11170] infiniband syz0: added lo
[  163.561896][T11170] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  163.561950][T11170] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  163.561975][T11170] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  163.609346][T11170] RDS/IB: syz0: added
[  163.609653][T11170] smc: adding ib device syz0 with port count 1
[  163.609730][T11170] smc:    ib device syz0 port 1 has no pnetid
[  163.611294][ T8452] lo speed is unknown, defaulting to 1000
[  163.627217][T11170] lo speed is unknown, defaulting to 1000
[  163.877320][T11170] lo speed is unknown, defaulting to 1000
[  164.164380][T11170] lo speed is unknown, defaulting to 1000
[  164.214179][T11224] ip_tables: iptables: counters copy to user failed while replacing table
[  164.685453][T11239] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  164.686801][T11239] __nla_validate_parse: 28 callbacks suppressed
[  164.686812][T11239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1580'.
[  164.740087][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'.
[  164.740976][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'.
[  164.870961][T11263] syzkaller0: entered promiscuous mode
[  164.870973][T11263] syzkaller0: entered allmulticast mode
[  165.062719][T11277] netlink: 'syz.0.1588': attribute type 13 has an invalid length.
[  165.062736][T11277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1588'.
[  165.068281][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'.
[  165.132376][T11279] can: request_module (can-proto-0) failed.
[  165.221689][T11291] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1594'.
[  165.221706][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1594'.
[  165.224488][T11295] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1594'.
[  165.224502][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1594'.
[  165.331092][T11304] 8021q: adding VLAN 0 to HW filter on device bond11
[  165.337591][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'.
[  165.340923][T11304] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.345186][T11304] bond11: (slave bond0): making interface the new active one
[  165.357637][T11304] bond11: (slave bond0): Enslaving as an active interface with an up link
[  165.435336][T11316] netlink: 'syz.0.1601': attribute type 1 has an invalid length.
[  165.462164][T11319] bond11: option mode: unable to set because the bond device has slaves
[  165.557513][   T12] bond11: (slave bond0): link status definitely down, disabling slave
[  165.560352][   T12] bond11: now running without any active interface!
[  165.613328][T11337] rdma_rxe: rxe_newlink: failed to add lo
[  165.990074][T11439] bond12: option lacp_active: invalid value (5)
[  165.991211][T11439] bond12 (unregistering): Released all slaves
[  166.170736][T11501] netlink: 'syz.0.1614': attribute type 13 has an invalid length.
[  167.021855][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  167.237252][T11582] netlink: 'syz.2.1627': attribute type 1 has an invalid length.
[  167.313156][T11582] bond5: entered promiscuous mode
[  167.319638][T11582] 8021q: adding VLAN 0 to HW filter on device bond5
[  167.380978][T11584] bond5: (slave bridge2): making interface the new active one
[  167.380992][T11584] bridge2: entered promiscuous mode
[  167.381671][T11584] bond5: (slave bridge2): Enslaving as an active interface with an up link
[  167.516063][T11598] Bluetooth: hci0: unsupported parameter 5135
[  167.516083][T11598] Bluetooth: hci0: unsupported parameter 8192
[  167.516092][T11598] Bluetooth: hci0: unsupported parameter 5135
[  167.516102][T11598] Bluetooth: hci0: unsupported parameter 8192
[  167.780046][T11615] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  167.842693][T11626] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.843918][T11626] syzkaller0: mtu less than device minimum
[  167.936009][T11633] xt_TPROXY: Can be used only with -p tcp or -p udp
[  168.552477][T11662] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  168.552501][T11662] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.805913][T11678] netlink: 'syz.1.1666': attribute type 4 has an invalid length.
[  169.053995][T11700] sctp: [Deprecated]: syz.0.1675 (pid 11700) Use of int in maxseg socket option.
[  169.053995][T11700] Use struct sctp_assoc_value instead
[  169.208065][T11718] sctp: [Deprecated]: syz.0.1682 (pid 11718) Use of int in maxseg socket option.
[  169.208065][T11718] Use struct sctp_assoc_value instead
[  169.273526][T11725] netlink: 'syz.2.1684': attribute type 1 has an invalid length.
[  169.330121][T11725] bridge3: entered promiscuous mode
[  169.335532][T11725] bond6: (slave bridge3): making interface the new active one
[  169.342500][T11725] bond6: (slave bridge3): Enslaving as an active interface with an up link
[  169.580427][T11746] syzkaller1: entered promiscuous mode
[  169.580530][T11746] syzkaller1: entered allmulticast mode
[  170.087957][T11774] __nla_validate_parse: 20 callbacks suppressed
[  170.087972][T11774] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1700'.
[  170.096627][T11776] netlink: 'syz.0.1700': attribute type 2 has an invalid length.
[  170.137987][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'.
[  170.366642][ T5044] udevd[5044]: worker [8125] /devices/virtual/block/nbd2 is taking a long time
[  171.088889][T11795] syzkaller0: left promiscuous mode
[  171.088905][T11795] syzkaller0: left allmulticast mode
[  171.110418][T11793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1706'.
[  171.136566][T11793] netlink: 'syz.2.1706': attribute type 2 has an invalid length.
[  171.178319][T11802] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1709'.
[  171.178339][T11802] openvswitch: netlink: Flow key attr not present in new flow.
[  171.198244][T11804] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1711'.
[  171.376665][T11823] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.1716'.
[  171.397228][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1715'.
[  171.434351][T11824] bond12: entered promiscuous mode
[  171.434369][T11824] bond12: entered allmulticast mode
[  171.503785][T11832] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1719'.
[  171.575097][T11838] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.1720'.
[  171.702630][T11850] netlink: 'syz.0.1726': attribute type 1 has an invalid length.
[  171.702646][T11850] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1726'.
[  171.732003][T11856] netlink: 'syz.2.1728': attribute type 1 has an invalid length.
[  171.732025][T11856] netlink: 'syz.2.1728': attribute type 1 has an invalid length.
[  171.808288][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  171.813649][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  172.130635][T11897] tc_dump_action: action bad kind
[  172.134243][T11898] tc_dump_action: action bad kind
[  172.276323][T11904] syzkaller1: entered promiscuous mode
[  172.276337][T11904] syzkaller1: entered allmulticast mode
[  172.398705][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  172.400428][T11918] netlink: 'syz.2.1746': attribute type 12 has an invalid length.
[  172.844764][T11953] bridge0: port 4(bond0) entered disabled state
[  172.845314][T11953] bond0: left allmulticast mode
[  172.845325][T11953] bond_slave_0: left allmulticast mode
[  172.845333][T11953] team0: left allmulticast mode
[  172.845340][T11953] team_slave_0: left allmulticast mode
[  172.845348][T11953] team_slave_1: left allmulticast mode
[  172.845401][T11953] bond0: left promiscuous mode
[  172.845408][T11953] bond_slave_0: left promiscuous mode
[  172.845559][T11953] team0: left promiscuous mode
[  172.845566][T11953] team_slave_0: left promiscuous mode
[  172.845747][T11953] team_slave_1: left promiscuous mode
[  172.846044][T11953] bridge0: port 4(bond0) entered disabled state
[  172.875906][T11955] tc action pedit offset must be on 32 bit boundaries
[  173.316490][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  173.528868][T12025] netlink: 'syz.2.1791': attribute type 1 has an invalid length.
[  173.648668][T12039] syzkaller1: entered promiscuous mode
[  173.648685][T12039] syzkaller1: entered allmulticast mode
[  174.141658][T12078] netlink: 'syz.1.1810': attribute type 4 has an invalid length.
[  174.188952][T12080] netlink: 'syz.1.1811': attribute type 29 has an invalid length.
[  174.821467][T12088] netlink: 'syz.2.1813': attribute type 4 has an invalid length.
[  174.861233][T12090] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  174.939889][T12094] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  174.939918][T12094] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  174.939942][T12094] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  174.950530][T12094] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  174.961840][T12094] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  175.139940][T12107] __nla_validate_parse: 20 callbacks suppressed
[  175.139958][T12107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1821'.
[  175.182357][T12105] netlink: 'syz.1.1821': attribute type 8 has an invalid length.
[  175.373860][T12113] syzkaller0: entered promiscuous mode
[  175.373877][T12113] syzkaller0: entered allmulticast mode
[  175.465712][T12124] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1828'.
[  175.510469][T12128] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1830'.
[  175.575476][T12132] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1830'.
[  175.586613][   T11] block nbd3: Possible stuck request ffff88810a7e8000: control (read@0,1024B). Runtime 60 seconds
[  175.586650][   T11] block nbd3: Possible stuck request ffff88810a7e8200: control (read@1024,1024B). Runtime 60 seconds
[  175.586669][   T11] block nbd3: Possible stuck request ffff88810a7e8400: control (read@2048,1024B). Runtime 60 seconds
[  175.586685][   T11] block nbd3: Possible stuck request ffff88810a7e8600: control (read@3072,1024B). Runtime 60 seconds
[  176.014303][T12182] openvswitch: netlink: Missing key (keys=40, expected=100)
[  176.327929][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'.
[  176.824202][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1853'.
[  176.911393][ T5599] Bluetooth: hci2: unexpected event for opcode 0x1003
[  176.913529][ T5599] Bluetooth: hci2: unexpected event for opcode 0x1003
[  176.971016][T12212] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1858'.
[  176.983058][T12214] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1
[  177.193168][T12237] netlink: 'syz.1.1861': attribute type 62 has an invalid length.
[  177.220345][T12239] ip6gre1: entered promiscuous mode
[  177.220357][T12239] ip6gre1: entered allmulticast mode
[  177.334044][T12254] ip_tables: iptables: counters copy to user failed while replacing table
[  177.361017][T12256] ip6gre1: entered promiscuous mode
[  177.361036][T12256] ip6gre1: entered allmulticast mode
[  177.435894][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1872'.
[  177.495677][T12261] ip_tables: iptables: counters copy to user failed while replacing table
[  177.501891][T12259] ip_tables: iptables: counters copy to user failed while replacing table
[  177.550558][T12272] SET target dimension over the limit!
[  177.616973][T12284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1878'.
[  177.785751][T12299] netlink: 'syz.0.1885': attribute type 2 has an invalid length.
[  177.785853][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1885'.
[  177.943873][ T7857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.943890][ T7857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.970471][ T8119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.970484][ T8119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.194104][T12326] syzkaller0: left promiscuous mode
[  178.194122][T12326] syzkaller0: left allmulticast mode
[  178.325331][T12334] netlink: 'syz.1.1899': attribute type 8 has an invalid length.
[  178.793968][ T5599] Bluetooth: hci2: unexpected event for opcode 0x1003
[  178.843695][ T5599] Bluetooth: hci2: unexpected event for opcode 0x1003
[  178.850538][ T5599] Bluetooth: hci2: unexpected event for opcode 0x1003
[  178.952508][T12362] netlink: 'syz.0.1906': attribute type 1 has an invalid length.
[  178.979528][T12365] netlink: zone id is out of range
[  178.979542][T12365] netlink: zone id is out of range
[  178.979547][T12365] netlink: zone id is out of range
[  178.979552][T12365] netlink: zone id is out of range
[  179.011666][T12362] bond13: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  179.025697][T12362] veth7: entered promiscuous mode
[  179.029576][T12362] bond13: (slave veth7): Enslaving as a backup interface with a down link
[  179.037567][T12362] 8021q: adding VLAN 0 to HW filter on device bond13
[  179.061220][T12367] netlink: 'syz.2.1908': attribute type 3 has an invalid length.
[  179.061238][T12367] netlink: 'syz.2.1908': attribute type 2 has an invalid length.
[  179.125074][T12371] netlink: 'syz.2.1910': attribute type 7 has an invalid length.
[  179.125096][T12371] netlink: 'syz.2.1910': attribute type 5 has an invalid length.
[  179.268421][ T5599] Bluetooth: hci2: unexpected event for opcode 0x1003
[  179.281905][T12384] syzkaller1: entered allmulticast mode
[  179.710007][T12405] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  180.175543][T12416] __nla_validate_parse: 10 callbacks suppressed
[  180.175556][T12416] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1925'.
[  180.232320][T12421] netlink: 'syz.2.1926': attribute type 7 has an invalid length.
[  180.236038][T12421] net_ratelimit: 10 callbacks suppressed
[  180.236049][T12421] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  180.371593][ T5599] Bluetooth: hci2: unexpected event for opcode 0x1003
[  180.373993][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1931'.
[  180.444260][T12438] xt_LOG: prefix is not null-terminated
[  180.585960][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'.
[  180.589001][T12447] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1937'.
[  180.691535][T12456] syzkaller0: entered promiscuous mode
[  180.691554][T12456] syzkaller0: entered allmulticast mode
[  180.693807][T12443] syzkaller1: entered promiscuous mode
[  180.693823][T12443] syzkaller1: entered allmulticast mode
[  180.722699][ T5599] Bluetooth: hci1: unexpected event for opcode 0x1003
[  181.275606][T12499] syzkaller0: entered promiscuous mode
[  181.275623][T12499] syzkaller0: entered allmulticast mode
[  181.287185][T12499] tc action pedit 'at' offset 5 out of bounds
[  181.703977][T12527] sctp: [Deprecated]: syz.0.1966 (pid 12527) Use of int in max_burst socket option deprecated.
[  181.703977][T12527] Use struct sctp_assoc_value instead
[  181.883760][T12542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1971'.
[  181.931282][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  182.003270][T12551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1973'.
[  182.610373][T12589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1977'.
[  182.631540][T12589] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1977'.
[  182.965952][T12613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1985'.
[  182.974181][T12615] : renamed from lo (while UP)
[  182.988360][T12618] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0
[  183.035212][T12623] SET target dimension over the limit!
[  183.048654][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  183.088416][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  183.088740][T12626] bond7: option arp_interval: invalid value (18446744073709551615)
[  183.088756][T12626] bond7: option arp_interval: allowed values 0 - 2147483647
[  183.090127][T12626] bond7 (unregistering): Released all slaves
[  183.107517][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  183.285685][T12647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1995'.
[  183.323970][T12647] 8021q: adding VLAN 0 to HW filter on device macsec2
[  183.324418][ T1229] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  183.377535][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  183.432685][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  183.498606][T12668] netlink: 'syz.1.1996': attribute type 3 has an invalid length.
[  183.520982][T12670] netlink: 'syz.2.2002': attribute type 15 has an invalid length.
[  183.741802][T12689] netlink: 'syz.0.2011': attribute type 15 has an invalid length.
[  183.760906][T12688] syzkaller0: entered promiscuous mode
[  183.760923][T12688] syzkaller0: entered allmulticast mode
[  183.814824][T12691] netlink: 'syz.0.2012': attribute type 3 has an invalid length.
[  184.305357][T12707] SET target dimension over the limit!
[  184.529986][ T5044] udevd[5044]: worker [8145] /devices/virtual/block/nbd3 is taking a long time
[  184.857554][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  184.932125][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  185.105775][T12736] veth9: entered allmulticast mode
[  187.830552][T12757] __nla_validate_parse: 9 callbacks suppressed
[  187.830568][T12757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2036'.
[  187.830580][T12757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2036'.
[  187.932054][T12760] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  188.122799][T12740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  188.563514][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  188.659789][T12805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2052'.
[  188.703600][T12808] netlink: 'syz.0.2054': attribute type 1 has an invalid length.
[  188.725897][T12808] bond14: entered promiscuous mode
[  188.731101][T12808] 8021q: adding VLAN 0 to HW filter on device bond14
[  188.776780][T12812] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.781326][T12817] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) !
[  188.796994][T12812] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) !
[  188.817679][T12817] syzkaller0: mtu less than device minimum
[  188.995144][T12830] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20000
[  188.995341][T12829] netlink: 'syz.0.2058': attribute type 7 has an invalid length.
[  188.995352][T12829] netlink: 'syz.0.2058': attribute type 8 has an invalid length.
[  189.005643][T12829] sctp: [Deprecated]: syz.0.2058 (pid 12829) Use of int in max_burst socket option.
[  189.005643][T12829] Use struct sctp_assoc_value instead
[  189.120476][T12835] xt_nfacct: accounting object `' does not exist
[  189.283127][T12840] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2060'.
[  189.391149][ T5593] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  189.391167][ T5593] CPU: 1 UID: 0 PID: 5593 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  189.391177][ T5593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.391181][ T5593] Call Trace:
[  189.391184][ T5593]  <TASK>
[  189.391188][ T5593]  dump_stack_lvl+0xe8/0x150
[  189.391203][ T5593]  dump_header+0xd3/0x4b0
[  189.391215][ T5593]  oom_kill_process+0x3ab/0x9e0
[  189.391226][ T5593]  out_of_memory+0x1064/0x1480
[  189.391235][ T5593]  ? try_charge_memcg+0xc32/0x15e0
[  189.391249][ T5593]  ? __pfx_out_of_memory+0x10/0x10
[  189.391258][ T5593]  ? do_raw_spin_unlock+0x4d/0x200
[  189.391272][ T5593]  try_charge_memcg+0xcdf/0x15e0
[  189.391288][ T5593]  ? __pfx_try_charge_memcg+0x10/0x10
[  189.391296][ T5593]  ? lock_acquire+0x115/0x350
[  189.391311][ T5593]  ? charge_memcg+0x47/0x310
[  189.391322][ T5593]  charge_memcg+0x1dd/0x310
[  189.391331][ T5593]  __mem_cgroup_charge+0x25/0x80
[  189.391340][ T5593]  filemap_add_folio+0x140/0x4e0
[  189.391352][ T5593]  __filemap_get_folio_mpol+0x4ff/0x1000
[  189.391365][ T5593]  filemap_fault+0xa84/0x13b0
[  189.391377][ T5593]  ? filemap_map_pages+0x1d1/0x2170
[  189.391388][ T5593]  ? __pfx_filemap_fault+0x10/0x10
[  189.391399][ T5593]  ? __pfx_filemap_map_pages+0x10/0x10
[  189.391408][ T5593]  ? lock_acquire+0x115/0x350
[  189.391420][ T5593]  __do_fault+0x138/0x2a0
[  189.391427][ T5593]  ? do_pte_missing+0x140c/0x34b0
[  189.391438][ T5593]  do_pte_missing+0x2215/0x34b0
[  189.391454][ T5593]  ? handle_mm_fault+0xf1/0x3750
[  189.391465][ T5593]  handle_mm_fault+0x1a53/0x3750
[  189.391479][ T5593]  ? handle_mm_fault+0xf1/0x3750
[  189.391493][ T5593]  ? __pfx_handle_mm_fault+0x10/0x10
[  189.391501][ T5593]  ? lock_vma_under_rcu+0x45a/0x500
[  189.391522][ T5593]  do_user_addr_fault+0xa4f/0x1340
[  189.391534][ T5593]  ? trace_page_fault_user+0x84/0x1e0
[  189.391543][ T5593]  exc_page_fault+0x6a/0xc0
[  189.391552][ T5593]  asm_exc_page_fault+0x26/0x30
[  189.391560][ T5593] RIP: 0033:0x7fec3f46c011
[  189.391568][ T5593] Code: 85 65 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a3 97 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 9c 96 ee 00 48 01 d1
[  189.391574][ T5593] RSP: 002b:00007ffff741faf0 EFLAGS: 00010206
[  189.391583][ T5593] RAX: 0000001b32324000 RBX: 0000000000000791 RCX: 000000000002e248
[  189.391588][ T5593] RDX: 00000000026fff58 RSI: 00007ffff741fb80 RDI: 0000000000000001
[  189.391593][ T5593] RBP: 00007ffff741fb2c R08: 00000000094c5c81 R09: 3fffffffffffffff
[  189.391598][ T5593] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  189.391603][ T5593] R13: 00000000000927c0 R14: 000000000002e138 R15: 00007ffff741fb80
[  189.391615][ T5593]  </TASK>
[  189.391618][ T5593] memory: usage 307200kB, limit 307200kB, failcnt 1693
[  189.391623][ T5593] memory+swap: usage 307348kB, limit 9007199254740988kB, failcnt 0
[  189.391628][ T5593] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[  189.391633][ T5593] Memory cgroup stats for /syz1:
[  189.391721][ T5593] cache 0
[  189.391725][ T5593] rss 0
[  189.391728][ T5593] rss_huge 0
[  189.391730][ T5593] shmem 0
[  189.391733][ T5593] mapped_file 0
[  189.391735][ T5593] dirty 0
[  189.391738][ T5593] writeback 0
[  189.391740][ T5593] workingset_refault_anon 10
[  189.391743][ T5593] workingset_refault_file 0
[  189.391746][ T5593] swap 151552
[  189.391748][ T5593] swapcached 221184
[  189.391751][ T5593] pgpgin 50929
[  189.391753][ T5593] pgpgout 50923
[  189.391756][ T5593] pgfault 112889
[  189.391758][ T5593] pgmajfault 5
[  189.391761][ T5593] inactive_anon 16384
[  189.391763][ T5593] active_anon 8192
[  189.391766][ T5593] inactive_file 0
[  189.391768][ T5593] active_file 0
[  189.391771][ T5593] unevictable 0
[  189.391773][ T5593] hierarchical_memory_limit 314572800
[  189.391776][ T5593] hierarchical_memsw_limit 9223372036854771712
[  189.391779][ T5593] total_cache 0
[  189.391782][ T5593] total_rss 0
[  189.391784][ T5593] total_rss_huge 0
[  189.391787][ T5593] total_shmem 0
[  189.391789][ T5593] total_mapped_file 0
[  189.391792][ T5593] total_dirty 0
[  189.391794][ T5593] total_writeback 0
[  189.391797][ T5593] total_workingset_refault_anon 10
[  189.391800][ T5593] total_workingset_refault_file 0
[  189.391802][ T5593] total_swap 151552
[  189.391805][ T5593] total_swapcached 221184
[  189.391808][ T5593] total_pgpgin 50931
[  189.391810][ T5593] total_pgpgout 50925
[  189.391813][ T5593] total_pgfault 112892
[  189.391816][ T5593] total_pgmajfault 5
[  189.391818][ T5593] total_inactive_anon 16384
[  189.391821][ T5593] total_active_anon 8192
[  189.391823][ T5593] total_inactive_file 0
[  189.391826][ T5593] total_active_file 0
[  189.391829][ T5593] total_unevictable 0
[  189.391831][ T5593] anon_cost 0
[  189.391834][ T5593] file_cost 0
[  189.391836][ T5593] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2053,pid=12799,uid=0
[  189.392904][ T5593] Memory cgroup out of memory: Killed process 12799 (syz.1.2053) total-vm:99072kB, anon-rss:1252kB, file-rss:21724kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  189.812831][T12848] netlink: 'syz.1.2063': attribute type 5 has an invalid length.
[  189.863187][T12851] bridge: RTM_NEWNEIGH with invalid state 0x20
[  189.863846][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  190.023162][T12859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2068'.
[  190.117464][T12863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2070'.
[  190.235382][T12873] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2074'.
[  190.235548][T12874] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2074'.
[  190.321364][T12878] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2078'.
[  190.373667][T12883] Bluetooth: MGMT ver 1.23
[  190.686894][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  191.192613][T12907] syzkaller0: entered promiscuous mode
[  191.192661][T12907] syzkaller0: entered allmulticast mode
[  191.309567][T12922] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2095'.
[  192.733052][T12944] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20001
[  192.799182][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  192.841175][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'.
[  192.843745][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'.
[  193.115968][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'.
[  193.115997][T12973] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2114'.
[  193.130952][T12973] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  193.274342][T12982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2118'.
[  193.328511][T12984] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2119'.
[  193.363042][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'.
[  193.505509][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  193.510735][   T11] block nbd2: Possible stuck request ffff88810a780000: control (read@0,1024B). Runtime 90 seconds
[  193.510753][   T11] block nbd2: Possible stuck request ffff88810a780200: control (read@1024,1024B). Runtime 90 seconds
[  193.510763][   T11] block nbd2: Possible stuck request ffff88810a780400: control (read@2048,2048B). Runtime 90 seconds
[  193.608552][T13020] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2131'.
[  193.930210][T13045] syzkaller0: left promiscuous mode
[  193.930228][T13045] syzkaller0: left allmulticast mode
[  194.020854][T13052] batman_adv: batadv0: Adding interface: veth0
[  194.020869][T13052] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  194.020889][T13052] batman_adv: batadv0: Interface activated: veth0
[  194.025728][T13052] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.025746][T13052] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.053122][T13052] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.053142][T13052] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.053983][T13052] batman_adv: batadv0: Interface deactivated: veth0
[  194.053996][T13052] batman_adv: batadv0: Removing interface: veth0
[  194.119808][T13059] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2145'.
[  194.237535][T13064] ip_tables: iptables: counters copy to user failed while replacing table
[  194.494522][T13077] netlink: 'syz.0.2151': attribute type 2 has an invalid length.
[  194.494539][T13077] netlink: 'syz.0.2151': attribute type 1 has an invalid length.
[  194.494547][T13077] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2151'.
[  194.789626][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.790527][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  194.790562][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  194.979411][T13090] syzkaller0: left promiscuous mode
[  194.979428][T13090] syzkaller0: left allmulticast mode
[  195.059823][T13094] netlink: 'syz.1.2157': attribute type 16 has an invalid length.
[  195.059841][T13094] netlink: 'syz.1.2157': attribute type 17 has an invalid length.
[  195.078363][T13094] veth1: left allmulticast mode
[  195.124328][T13094] geneve2: left allmulticast mode
[  195.125129][T13094] bond1: left allmulticast mode
[  195.125730][T13094] bond2: left allmulticast mode
[  195.522937][T13116] netlink: 'syz.0.2164': attribute type 9 has an invalid length.
[  195.792231][T13138] netlink: 'syz.1.2172': attribute type 9 has an invalid length.
[  195.988973][T13144] netlink: 'syz.2.2174': attribute type 5 has an invalid length.
[  196.579375][T13175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.579748][T13175] syzkaller0: entered promiscuous mode
[  196.579761][T13175] syzkaller0: entered allmulticast mode
[  196.585734][T13176] tipc: Resetting bearer <eth:syzkaller0>
[  196.639959][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  196.724387][T13185] openvswitch: netlink: IPv4 frag type 228 is out of range max 2
[  196.821895][T13194] syzkaller0: left promiscuous mode
[  196.821913][T13194] syzkaller0: left allmulticast mode
[  196.873075][T13200] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  197.140034][T13227] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  197.224290][T13236] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  197.696456][ T3278] tipc: Node number set to 982830430
[  197.920153][T13264] __nla_validate_parse: 12 callbacks suppressed
[  197.920171][T13264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2214'.
[  198.851901][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  198.934926][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  198.950356][T13282] sch_tbf: burst 173 is lower than device syzkaller0 mtu (313) !
[  199.087149][T13295] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2224'.
[  199.154644][T13300] tipc: Enabling <eth:lo> not permitted
[  199.154670][T13300] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  199.352755][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  199.426832][T13326] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2238'.
[  199.447480][T13327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2237'.
[  199.472605][T13331] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2236'.
[  199.547453][T13336] syzkaller0: entered promiscuous mode
[  199.547464][T13336] syzkaller0: entered allmulticast mode
[  199.555112][T13336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  199.628406][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  199.635660][T13343] vcan0: tx address claim with dest, not broadcast
[  199.842063][T13354] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2248'.
[  200.440306][T13382] sctp: [Deprecated]: syz.2.2258 (pid 13382) Use of int in maxseg socket option.
[  200.440306][T13382] Use struct sctp_assoc_value instead
[  201.178447][T13392] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2262'.
[  201.211967][T13394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.212443][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  201.263675][T13398] syzkaller0: entered promiscuous mode
[  201.263691][T13398] syzkaller0: entered allmulticast mode
[  201.460068][T13425] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2273'.
[  201.495677][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  201.621358][T13437] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2279'.
[  201.645928][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'.
[  202.330667][T13488] xt_limit: Overflow, try lower: 268435456/134217728
[  202.510393][T13500] block nbd6: server does not support multiple connections per device.
[  202.512337][T13500] block nbd6: shutting down sockets
[  202.568424][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  202.620634][T13504] team0: entered promiscuous mode
[  202.620652][T13504] team_slave_0: entered promiscuous mode
[  202.620778][T13504] team_slave_1: entered promiscuous mode
[  202.620961][T13504] team0: Cannot enslave team device to itself
[  202.669384][T13508] netlink: 'syz.0.2304': attribute type 1 has an invalid length.
[  202.709107][T13508] 8021q: adding VLAN 0 to HW filter on device bond15
[  202.768376][T13508] 8021q: adding VLAN 0 to HW filter on device bond15
[  202.768654][T13508] bond15: (slave gre2): The slave device specified does not support setting the MAC address
[  202.785901][T13508] bond15: (slave gre2): Error -95 calling set_mac_address
[  202.931397][T13520] __nla_validate_parse: 4 callbacks suppressed
[  202.931418][T13520] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2308'.
[  202.935244][T13520] A link change request failed with some changes committed already. Interface 04 may have been left with an inconsistent configuration, please check.
[  202.998120][T13525] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2310'.
[  203.073129][T13529] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2314'.
[  203.090788][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  203.259898][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  203.263090][T13547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2319'.
[  203.358836][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  203.376956][T13556] lo: MTU too low for tipc bearer
[  203.376983][T13556] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  203.584646][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2329'.
[  204.417268][T13575] bridge0: port 5(syz_tun) entered blocking state
[  204.417368][T13575] bridge0: port 5(syz_tun) entered forwarding state
[  204.423073][T13575] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.451306][T13575] bridge0: port 3(batadv1) entered blocking state
[  204.451416][T13575] bridge0: port 3(batadv1) entered forwarding state
[  204.453100][T13575] 8021q: adding VLAN 0 to HW filter on device batadv1
[  204.489913][T13575] 8021q: adding VLAN 0 to HW filter on device bond3
[  204.491487][T13575] 8021q: adding VLAN 0 to HW filter on device bond4
[  204.505986][T13575] virt_wifi0: entered promiscuous mode
[  204.506004][T13575] virt_wifi0: entered allmulticast mode
[  204.526666][T13575] 8021q: adding VLAN 0 to HW filter on device bond6
[  204.530018][T13575] 8021q: adding VLAN 0 to HW filter on device bond7
[  204.538273][T13575] 8021q: adding VLAN 0 to HW filter on device bond8
[  204.548840][T13575] 8021q: adding VLAN 0 to HW filter on device bond9
[  204.556055][T13575] 8021q: adding VLAN 0 to HW filter on device bond10
[  204.567054][ T1229] lo speed is unknown, defaulting to 1000
[  204.567067][ T1229] syz0: Port: 1 Link ACTIVE
[  204.571975][ T1229] lo speed is unknown, defaulting to 1000
[  204.663206][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  204.761139][T13608] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2338'.
[  204.761223][T13608] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2338'.
[  204.971957][T13635] netlink: 'syz.0.2343': attribute type 13 has an invalid length.
[  205.202445][T13651] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2347'.
[  205.334402][T13664] syzkaller0: left promiscuous mode
[  205.334421][T13664] syzkaller0: left allmulticast mode
[  205.584910][T13678] openvswitch: netlink: Unknown key attributes 1
[  205.585284][T13677] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  205.585641][T13677] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2356'.
[  205.667812][   T11] block nbd3: Possible stuck request ffff88810a7e8000: control (read@0,1024B). Runtime 90 seconds
[  205.667845][   T11] block nbd3: Possible stuck request ffff88810a7e8200: control (read@1024,1024B). Runtime 90 seconds
[  205.667864][   T11] block nbd3: Possible stuck request ffff88810a7e8400: control (read@2048,1024B). Runtime 90 seconds
[  205.667881][   T11] block nbd3: Possible stuck request ffff88810a7e8600: control (read@3072,1024B). Runtime 90 seconds
[  205.682506][T13687] netlink: 'syz.0.2359': attribute type 2 has an invalid length.
[  205.682522][T13687] netlink: 'syz.0.2359': attribute type 1 has an invalid length.
[  205.682531][T13687] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2359'.
[  205.860406][T13695] syzkaller0: entered promiscuous mode
[  205.860425][T13695] syzkaller0: entered allmulticast mode
[  206.124169][T13713] bond11: (slave bond0): Releasing active interface
[  206.134667][T13713] bond0: (slave bond_slave_1): Releasing backup interface
[  206.141860][T13713] team_slave_0: left promiscuous mode
[  206.141980][T13713] team_slave_0: left allmulticast mode
[  206.153751][T13713] team0: Port device team_slave_0 removed
[  206.154463][T13713] team_slave_1: left promiscuous mode
[  206.154587][T13713] team_slave_1: left allmulticast mode
[  206.155631][T13713] team0: Port device team_slave_1 removed
[  206.157612][T13713] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  206.202441][T13717] bridge_slave_0: left allmulticast mode
[  206.202460][T13717] bridge_slave_0: left promiscuous mode
[  206.202617][T13717] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.208305][T13717] bridge_slave_1: left allmulticast mode
[  206.208331][T13717] bridge_slave_1: left promiscuous mode
[  206.208447][T13717] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.223157][T13717] bond0: (slave bond_slave_0): Releasing backup interface
[  206.233922][T13717] bond0: (slave bond_slave_1): Releasing backup interface
[  206.251568][T13717] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.251589][T13717] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.253744][T13717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.253756][T13717] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.254846][T13717] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  206.404195][T13726] netlink: 'syz.0.2375': attribute type 8 has an invalid length.
[  206.776679][T13755] bridge0: port 5(syz_tun) entered disabled state
[  206.776775][T13755] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.777250][T13755] bridge0: port 3(batadv1) entered disabled state
[  206.777317][T13755] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.900410][T13758] batman_adv: batadv0: Adding interface: syzkaller0
[  206.900738][T13758] batman_adv: batadv0: Interface activated: syzkaller0
[  206.919950][ T5340] veth0_macvtap: left promiscuous mode
[  207.222864][T13787] x_tables: duplicate underflow at hook 2
[  207.230504][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  207.809703][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  207.927967][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  208.200994][T13864] __nla_validate_parse: 11 callbacks suppressed
[  208.201010][T13864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2419'.
[  208.201026][T13864] gre0: left promiscuous mode
[  208.296114][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  208.505005][T13883] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  208.979317][T13907] netlink: 4384 bytes leftover after parsing attributes in process `syz.1.2434'.
[  209.025577][T13909] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2435'.
[  209.298440][T13925] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2443'.
[  209.337835][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  209.463420][T13940] batman_adv: batadv0: Adding interface: syzkaller0
[  209.463435][T13940] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  209.463484][T13940] batman_adv: batadv0: Interface activated: syzkaller0
[  209.692723][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  209.844797][T13980] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2463'.
[  209.845393][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  209.926793][T13984] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.2465'.
[  209.926811][T13984] netlink: 'syz.1.2465': attribute type 1 has an invalid length.
[  209.927540][T13984] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2465'.
[  210.036808][T13992] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2469'.
[  210.036989][T13993] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2469'.
[  210.040785][T13992] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2469'.
[  210.059126][T13995] openvswitch: netlink: Missing key (keys=c0, expected=10000000)
[  210.211338][T14007] netlink: 'syz.0.2476': attribute type 5 has an invalid length.
[  210.257314][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  210.361411][T14018] netlink: 'syz.1.2479': attribute type 1 has an invalid length.
[  210.412378][T14018] bond7 (unregistering): Released all slaves
[  210.632072][T14034] debugfs: '!' already exists in 'ieee80211'
[  210.641690][T14035] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  210.641699][T14035] CPU: 1 UID: 0 PID: 14035 Comm: syz.0.2485 Not tainted syzkaller #0 PREEMPT(full) 
[  210.641709][T14035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.641714][T14035] Call Trace:
[  210.641717][T14035]  <TASK>
[  210.641720][T14035]  dump_stack_lvl+0xe8/0x150
[  210.641736][T14035]  sysfs_warn_dup+0x8e/0xa0
[  210.641749][T14035]  sysfs_do_create_link_sd+0xc0/0x110
[  210.641761][T14035]  device_add_class_symlinks+0x1cf/0x240
[  210.641772][T14035]  device_add+0x467/0xb80
[  210.641781][T14035]  wiphy_register+0x1fc8/0x2ff0
[  210.641800][T14035]  ? __pfx_wiphy_register+0x10/0x10
[  210.641811][T14035]  ? __pfx_netdev_run_todo+0x10/0x10
[  210.641822][T14035]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  210.641854][T14035]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  210.641869][T14035]  ieee80211_register_hw+0x3d3d/0x4a50
[  210.641882][T14035]  ? ieee80211_register_hw+0x1971/0x4a50
[  210.641901][T14035]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  210.641911][T14035]  ? __asan_memset+0x22/0x50
[  210.641923][T14035]  ? __hrtimer_setup+0x1b7/0x260
[  210.641933][T14035]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  210.641945][T14035]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  210.641965][T14035]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  210.641973][T14035]  ? kstrndup+0xbd/0x160
[  210.641984][T14035]  ? kstrndup+0xbd/0x160
[  210.641992][T14035]  hwsim_new_radio_nl+0xd8b/0xf90
[  210.642006][T14035]  genl_family_rcv_msg_doit+0x233/0x340
[  210.642019][T14035]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  210.642033][T14035]  ? bpf_lsm_capable+0x9/0x20
[  210.642039][T14035]  ? security_capable+0x7e/0x2c0
[  210.642051][T14035]  genl_rcv_msg+0x614/0x7a0
[  210.642062][T14035]  ? __pfx_genl_rcv_msg+0x10/0x10
[  210.642070][T14035]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  210.642084][T14035]  netlink_rcv_skb+0x226/0x4a0
[  210.642095][T14035]  ? __pfx_genl_rcv_msg+0x10/0x10
[  210.642104][T14035]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  210.642121][T14035]  ? down_read+0x2be/0x330
[  210.642132][T14035]  genl_rcv+0x28/0x40
[  210.642140][T14035]  netlink_unicast+0x7bd/0x940
[  210.642154][T14035]  netlink_sendmsg+0x813/0xb40
[  210.642169][T14035]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.642183][T14035]  ? apparmor_socket_sendmsg+0x98/0x360
[  210.642192][T14035]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.642203][T14035]  sock_sendmsg_nosec+0x13a/0x180
[  210.642216][T14035]  ____sys_sendmsg+0x54e/0x850
[  210.642228][T14035]  ? __pfx_____sys_sendmsg+0x10/0x10
[  210.642241][T14035]  ? import_iovec+0x73/0xa0
[  210.642258][T14035]  ___sys_sendmsg+0x2a5/0x360
[  210.642267][T14035]  ? __lock_acquire+0x747/0x2de0
[  210.642277][T14035]  ? __pfx____sys_sendmsg+0x10/0x10
[  210.642288][T14035]  ? futex_wake+0x51b/0x5f0
[  210.642311][T14035]  ? __fget_files+0x2a/0x420
[  210.642321][T14035]  ? __fget_files+0x3a2/0x420
[  210.642335][T14035]  __x64_sys_sendmsg+0x1b1/0x290
[  210.642346][T14035]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  210.642364][T14035]  do_syscall_64+0x166/0x520
[  210.642372][T14035]  ? trace_irq_disable+0x3b/0x140
[  210.642380][T14035]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.642390][T14035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.642398][T14035] RIP: 0033:0x7fcf6939e159
[  210.642406][T14035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  210.642413][T14035] RSP: 002b:00007fcf6a20e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  210.642422][T14035] RAX: ffffffffffffffda RBX: 00007fcf69626090 RCX: 00007fcf6939e159
[  210.642449][T14035] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000006
[  210.642456][T14035] RBP: 00007fcf6943506b R08: 0000000000000000 R09: 0000000000000000
[  210.642460][T14035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.642465][T14035] R13: 00007fcf69626128 R14: 00007fcf69626090 R15: 00007ffc7e938ee8
[  210.642478][T14035]  </TASK>
[  210.756953][T14039] ip_vti0: left promiscuous mode
[  210.764317][T14039] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  210.816732][T14043] IPVS: rr: UDP [::1]:8080 - no destination available
[  211.341740][T14073] syzkaller1: entered promiscuous mode
[  211.341757][T14073] syzkaller1: entered allmulticast mode
[  211.458085][ T4994] Bluetooth: hci2: link tx timeout
[  211.458097][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458180][ T4994] Bluetooth: hci2: link tx timeout
[  211.458185][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458223][ T4994] Bluetooth: hci2: link tx timeout
[  211.458228][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458264][ T4994] Bluetooth: hci2: link tx timeout
[  211.458268][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458304][ T4994] Bluetooth: hci2: link tx timeout
[  211.458308][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458364][ T4994] Bluetooth: hci2: link tx timeout
[  211.458369][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458405][ T4994] Bluetooth: hci2: link tx timeout
[  211.458409][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458472][ T4994] Bluetooth: hci2: link tx timeout
[  211.458478][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458516][ T4994] Bluetooth: hci2: link tx timeout
[  211.458520][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458556][ T4994] Bluetooth: hci2: link tx timeout
[  211.458561][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458597][ T4994] Bluetooth: hci2: link tx timeout
[  211.458601][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458636][ T4994] Bluetooth: hci2: link tx timeout
[  211.458641][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458677][ T4994] Bluetooth: hci2: link tx timeout
[  211.458682][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458717][ T4994] Bluetooth: hci2: link tx timeout
[  211.458721][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458757][ T4994] Bluetooth: hci2: link tx timeout
[  211.458762][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.458820][ T4994] Bluetooth: hci2: link tx timeout
[  211.458825][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461218][ T4994] Bluetooth: hci2: link tx timeout
[  211.461227][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461288][ T4994] Bluetooth: hci2: link tx timeout
[  211.461293][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461350][ T4994] Bluetooth: hci2: link tx timeout
[  211.461354][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461390][ T4994] Bluetooth: hci2: link tx timeout
[  211.461395][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461457][ T4994] Bluetooth: hci2: link tx timeout
[  211.461462][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461501][ T4994] Bluetooth: hci2: link tx timeout
[  211.461505][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461540][ T4994] Bluetooth: hci2: link tx timeout
[  211.461545][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461580][ T4994] Bluetooth: hci2: link tx timeout
[  211.461585][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461620][ T4994] Bluetooth: hci2: link tx timeout
[  211.461624][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461660][ T4994] Bluetooth: hci2: link tx timeout
[  211.461664][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461699][ T4994] Bluetooth: hci2: link tx timeout
[  211.461704][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461739][ T4994] Bluetooth: hci2: link tx timeout
[  211.461744][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461779][ T4994] Bluetooth: hci2: link tx timeout
[  211.461783][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461819][ T4994] Bluetooth: hci2: link tx timeout
[  211.461823][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461858][ T4994] Bluetooth: hci2: link tx timeout
[  211.461862][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461904][ T4994] Bluetooth: hci2: link tx timeout
[  211.461909][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461944][ T4994] Bluetooth: hci2: link tx timeout
[  211.461949][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.461997][ T4994] Bluetooth: hci2: link tx timeout
[  211.462002][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.462037][ T4994] Bluetooth: hci2: link tx timeout
[  211.462041][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.462562][ T4994] Bluetooth: hci2: link tx timeout
[  211.462567][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.462607][ T4994] Bluetooth: hci2: link tx timeout
[  211.462611][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.462647][ T4994] Bluetooth: hci2: link tx timeout
[  211.462652][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.462687][ T4994] Bluetooth: hci2: link tx timeout
[  211.462692][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.462728][ T4994] Bluetooth: hci2: link tx timeout
[  211.462732][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.462768][ T4994] Bluetooth: hci2: link tx timeout
[  211.462772][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.462808][ T4994] Bluetooth: hci2: link tx timeout
[  211.462813][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.462848][ T4994] Bluetooth: hci2: link tx timeout
[  211.462853][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.462898][ T4994] Bluetooth: hci2: link tx timeout
[  211.462902][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.462938][ T4994] Bluetooth: hci2: link tx timeout
[  211.462943][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.462978][ T4994] Bluetooth: hci2: link tx timeout
[  211.462983][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.463018][ T4994] Bluetooth: hci2: link tx timeout
[  211.463022][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.463057][ T4994] Bluetooth: hci2: link tx timeout
[  211.463062][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.463097][ T4994] Bluetooth: hci2: link tx timeout
[  211.463102][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.463137][ T4994] Bluetooth: hci2: link tx timeout
[  211.463142][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.463177][ T4994] Bluetooth: hci2: link tx timeout
[  211.463181][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.463216][ T4994] Bluetooth: hci2: link tx timeout
[  211.463221][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.463256][ T4994] Bluetooth: hci2: link tx timeout
[  211.463261][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.463296][ T4994] Bluetooth: hci2: link tx timeout
[  211.463301][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.463336][ T4994] Bluetooth: hci2: link tx timeout
[  211.463340][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465300][ T4994] Bluetooth: hci2: link tx timeout
[  211.465307][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465367][ T4994] Bluetooth: hci2: link tx timeout
[  211.465371][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465414][ T4994] Bluetooth: hci2: link tx timeout
[  211.465419][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465485][ T4994] Bluetooth: hci2: link tx timeout
[  211.465489][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465525][ T4994] Bluetooth: hci2: link tx timeout
[  211.465529][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465565][ T4994] Bluetooth: hci2: link tx timeout
[  211.465569][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465604][ T4994] Bluetooth: hci2: link tx timeout
[  211.465608][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465643][ T4994] Bluetooth: hci2: link tx timeout
[  211.465648][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465696][ T4994] Bluetooth: hci2: link tx timeout
[  211.465700][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465736][ T4994] Bluetooth: hci2: link tx timeout
[  211.465741][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465776][ T4994] Bluetooth: hci2: link tx timeout
[  211.465780][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465815][ T4994] Bluetooth: hci2: link tx timeout
[  211.465819][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465854][ T4994] Bluetooth: hci2: link tx timeout
[  211.465859][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465900][ T4994] Bluetooth: hci2: link tx timeout
[  211.465904][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465940][ T4994] Bluetooth: hci2: link tx timeout
[  211.465945][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.465980][ T4994] Bluetooth: hci2: link tx timeout
[  211.465984][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.466019][ T4994] Bluetooth: hci2: link tx timeout
[  211.466024][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.466059][ T4994] Bluetooth: hci2: link tx timeout
[  211.466063][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.466098][ T4994] Bluetooth: hci2: link tx timeout
[  211.466103][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.466137][ T4994] Bluetooth: hci2: link tx timeout
[  211.466142][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.540468][ T4994] Bluetooth: hci2: link tx timeout
[  211.540483][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.552929][ T4994] Bluetooth: hci2: link tx timeout
[  211.552938][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.617938][ T4994] Bluetooth: hci2: link tx timeout
[  211.617948][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.637406][ T4994] Bluetooth: hci2: link tx timeout
[  211.637447][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.666098][ T4994] Bluetooth: hci2: link tx timeout
[  211.666108][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.878034][ T4994] Bluetooth: hci2: link tx timeout
[  211.878052][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.878874][ T4994] Bluetooth: hci2: link tx timeout
[  211.878882][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.878948][ T4994] Bluetooth: hci2: link tx timeout
[  211.878955][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.879020][ T4994] Bluetooth: hci2: link tx timeout
[  211.879027][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.879088][ T4994] Bluetooth: hci2: link tx timeout
[  211.879095][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.879159][ T4994] Bluetooth: hci2: link tx timeout
[  211.879166][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.879228][ T4994] Bluetooth: hci2: link tx timeout
[  211.879234][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.879304][ T4994] Bluetooth: hci2: link tx timeout
[  211.879312][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.879382][ T4994] Bluetooth: hci2: link tx timeout
[  211.879391][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.879519][ T4994] Bluetooth: hci2: link tx timeout
[  211.879528][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  213.022326][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad8f000: rx timeout, send abort
[  213.022499][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad8e800: rx timeout, send abort
[  213.022666][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ad8f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  213.022793][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ad8e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  213.072307][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  213.255348][T14118] netlink: 'syz.2.2515': attribute type 362 has an invalid length.
[  213.373231][T14126] xt_NETMAP: bad MAP_IPS.
[  213.381180][T14126] xt_NETMAP: bad MAP_IPS.
[  213.385847][T14126] xt_NETMAP: bad MAP_IPS.
[  213.397569][T14126] xt_NETMAP: bad MAP_IPS.
[  213.402295][T14133] netlink: 'syz.1.2519': attribute type 1 has an invalid length.
[  213.402843][T14126] xt_NETMAP: bad MAP_IPS.
[  213.430292][T14126] xt_NETMAP: bad MAP_IPS.
[  213.435032][T14126] xt_NETMAP: bad MAP_IPS.
[  213.455625][T14126] xt_NETMAP: bad MAP_IPS.
[  213.478546][T14126] xt_NETMAP: bad MAP_IPS.
[  213.499823][T14126] xt_NETMAP: bad MAP_IPS.
[  213.668924][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  213.673150][T14146] netlink: 'syz.0.2525': attribute type 1 has an invalid length.
[  213.673165][T14146] nbd: error processing sock list
[  213.673426][T14146] block nbd6: shutting down sockets
[  213.978711][T14169] netlink: 'syz.2.2533': attribute type 1 has an invalid length.
[  214.155873][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  214.253091][T14186] netlink: 'syz.1.2540': attribute type 11 has an invalid length.
[  214.373248][T14200] __nla_validate_parse: 12 callbacks suppressed
[  214.373266][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2543'.
[  214.418229][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2545'.
[  214.418258][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2545'.
[  214.436514][   T13] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0
[  214.436552][   T13] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0
[  214.436575][   T13] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0
[  214.436597][   T13] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0
[  214.439739][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2545'.
[  214.439764][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2545'.
[  214.585487][T14220] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2550'.
[  214.633687][T14226] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2553'.
[  214.986944][T14246] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  215.279058][T14269] xt_CONNSECMARK: invalid mode: 254
[  215.422948][T14271] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2566'.
[  215.673631][T14291] netlink: 'syz.0.2574': attribute type 1 has an invalid length.
[  215.688184][T14291] 8021q: adding VLAN 0 to HW filter on device bond16
[  215.692846][T14291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2574'.
[  215.742580][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2574'.
[  215.990981][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  216.052572][T14305] xt_cgroup: invalid path, errno=-2
[  216.221872][T14316] netlink: 'syz.1.2583': attribute type 12 has an invalid length.
[  216.223401][T14316] openvswitch: netlink: Missing key (keys=c0, expected=880)
[  216.313204][ T4994] Bluetooth: hci2: ISO packet for unknown connection handle 3684
[  216.565400][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  216.631855][T14344] bridge5: entered promiscuous mode
[  216.631874][T14344] bridge5: entered allmulticast mode
[  216.831438][T14369] bond11: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  216.832522][T14369] bond11 (unregistering): Released all slaves
[  216.871432][T14371] bond7: invalid ARP target 0.0.0.0 specified for addition
[  216.871515][T14371] bond7: option arp_ip_target: invalid value (0)
[  216.873183][T14371] bond7 (unregistering): Released all slaves
[  216.916626][T14377] batadv_slave_0: entered promiscuous mode
[  216.960883][T14375] netlink: 'syz.0.2604': attribute type 1 has an invalid length.
[  216.988090][T14375] 8021q: adding VLAN 0 to HW filter on device bond17
[  216.993953][T14371] netlink: 'syz.1.2602': attribute type 1 has an invalid length.
[  217.009473][T14367] batadv_slave_0: left promiscuous mode
[  217.185654][T14400] Cannot find map_set index 2 as target
[  217.245107][T14412] netlink: 'syz.2.2613': attribute type 1 has an invalid length.
[  217.292558][T14412] 8021q: adding VLAN 0 to HW filter on device bond11
[  217.343140][T14412] 8021q: adding VLAN 0 to HW filter on device bond12
[  217.352054][T14412] bond11: (slave bond12): Enslaving as an active interface with a down link
[  217.363404][T14412] bond11 (unregistering): (slave bond12): Releasing active interface
[  217.365034][T14412] bond11 (unregistering): Released all slaves
[  217.381666][T14426] IPv6: Can't replace route, no match found
[  217.491246][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  217.618074][T14437] netlink: 'syz.2.2620': attribute type 10 has an invalid length.
[  217.631283][T14437] bond0: (slave team0): Releasing backup interface
[  217.654634][T14437] team0 (unregistering): Port device team_slave_0 removed
[  217.672305][T14437] team0 (unregistering): Port device team_slave_1 removed
[  218.395087][ T4994] Bluetooth: hci2: link tx timeout
[  218.395104][ T4994] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  218.627598][ T4994] Bluetooth: hci2: command 0x0405 tx timeout
[  218.822583][T14517] netlink: 'syz.2.2638': attribute type 1 has an invalid length.
[  218.839841][T14517] 8021q: adding VLAN 0 to HW filter on device bond11
[  220.573140][T14442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  220.684835][T14556] __nla_validate_parse: 28 callbacks suppressed
[  220.684852][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2641'.
[  220.695420][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2641'.
[  220.746873][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  220.774421][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  220.871965][T14572] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.924628][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'.
[  221.247859][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2648'.
[  221.343134][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343180][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343213][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343247][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343280][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343312][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343371][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343407][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343439][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343472][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343506][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343541][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343573][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343605][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343641][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343674][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343738][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343771][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343804][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343836][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343874][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343906][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343938][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.343969][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.344003][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.344034][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.344066][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.344099][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.344134][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.344166][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.344200][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.346832][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.346886][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.346921][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.346954][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.346987][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347021][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347055][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347088][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347120][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347152][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347184][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347220][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347604][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347645][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347678][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347769][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347804][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347839][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347876][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347909][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347941][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.347974][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.348006][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.348039][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.348071][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.348107][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.348140][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.348172][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.348205][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.348237][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.348270][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.348578][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.348615][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.348647][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  221.713901][T14601] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2652'.
[  221.714112][T14601] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2652'.
[  221.714214][T14601] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2652'.
[  221.771178][T14601] syz_tun: left allmulticast mode
[  221.771277][T14601] bridge0: port 5(syz_tun) entered disabled state
[  221.781485][T14601] bridge_slave_0: left allmulticast mode
[  221.781499][T14601] bridge_slave_0: left promiscuous mode
[  221.781593][T14601] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.795606][T14601] bridge_slave_1: left allmulticast mode
[  221.795690][T14601] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.805702][T14601] bond0: (slave bond_slave_0): Releasing backup interface
[  221.808717][T14605] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2653'.
[  221.822141][T14601] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.822159][T14601] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.823636][T14601] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.823646][T14601] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.825000][T14601] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  222.152997][T14633] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2659'.
[  222.163550][T14639] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2659'.
[  222.236720][T14648] netlink: 'syz.0.2662': attribute type 2 has an invalid length.
[  222.236739][T14648] netlink: 'syz.0.2662': attribute type 1 has an invalid length.
[  223.251534][T14712] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  223.364501][T14721] netlink: 'syz.0.2687': attribute type 2 has an invalid length.
[  223.364519][T14721] netlink: 'syz.0.2687': attribute type 1 has an invalid length.
[  223.586640][   T11] block nbd2: Possible stuck request ffff88810a780000: control (read@0,1024B). Runtime 120 seconds
[  223.586661][   T11] block nbd2: Possible stuck request ffff88810a780200: control (read@1024,1024B). Runtime 120 seconds
[  223.586671][   T11] block nbd2: Possible stuck request ffff88810a780400: control (read@2048,2048B). Runtime 120 seconds
[  223.612472][ T5595] Bluetooth: hci2: ISO packet for unknown connection handle 3684
[  223.701149][T14749] batman_adv: batadv0: Adding interface: veth0
[  223.701168][T14749] batman_adv: batadv0: Interface activated: veth0
[  223.705025][T14749] batman_adv: batadv0: Interface deactivated: syzkaller0
[  223.705042][T14749] batman_adv: batadv0: Removing interface: syzkaller0
[  223.705820][T14749] batman_adv: batadv0: Interface deactivated: veth0
[  223.705832][T14749] batman_adv: batadv0: Removing interface: veth0
[  223.851531][T14759] smc: net device lo applied user defined pnetid SYZ0
[  223.924249][T14764] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2
[  223.951172][T14768] netlink: 'syz.1.2702': attribute type 5 has an invalid length.
[  224.168189][T14783] A link change request failed with some changes committed already. Interface 04 may have been left with an inconsistent configuration, please check.
[  224.287499][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  224.464784][T14822] ip_tables: iptables: counters copy to user failed while replacing table
[  224.468442][T14822] ip_tables: iptables: counters copy to user failed while replacing table
[  224.559635][T14828] xt_connbytes: Forcing CT accounting to be enabled
[  225.055170][T14866] netlink: 'syz.2.2732': attribute type 2 has an invalid length.
[  225.055188][T14866] netlink: 'syz.2.2732': attribute type 1 has an invalid length.
[  225.673130][T14889] netlink: 'syz.1.2739': attribute type 8 has an invalid length.
[  225.693225][T14885] __nla_validate_parse: 14 callbacks suppressed
[  225.693246][T14885] netlink: 976 bytes leftover after parsing attributes in process `syz.0.2738'.
[  225.698773][T14889] netlink: 'syz.1.2739': attribute type 8 has an invalid length.
[  225.698813][T14889] netlink: 63 bytes leftover after parsing attributes in process `syz.1.2739'.
[  225.769123][T14896] netlink: 'syz.0.2740': attribute type 3 has an invalid length.
[  225.980772][T14914] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2746'.
[  226.109364][T14916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.112314][T14926] TC_ACT_REPEAT abuse ?
[  226.112518][T14926] syzkaller0: left promiscuous mode
[  226.112526][T14926] syzkaller0: left allmulticast mode
[  226.373319][T14944] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2755'.
[  226.588082][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  226.783527][T14975] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2761'.
[  226.820388][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  226.835509][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  229.413805][T14957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  229.433910][T14949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  229.491943][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  230.418786][T15022] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  230.441506][T15022] team0: Mode changed to "broadcast"
[  230.549342][T15030] xt_IDLETIMER: timeout value is zero
[  231.048819][T15060] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2786'.
[  231.049056][T15058] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2786'.
[  231.105216][T15067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2789'.
[  231.122102][T15064] geneve3: entered promiscuous mode
[  231.162912][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2790'.
[  231.174862][T15072] openvswitch: netlink: Geneve option length err (len 283, max 255).
[  231.364606][T15082] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2793'.
[  231.532195][T15097] bridge0: port 1(batadv0) entered blocking state
[  231.532361][T15097] bridge0: port 1(batadv0) entered disabled state
[  231.532461][T15097] batadv0: entered allmulticast mode
[  231.533972][T15097] batadv0: entered promiscuous mode
[  231.550390][T15101] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2800'.
[  231.551905][T15098] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2800'.
[  231.651066][T15111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2804'.
[  231.651080][T15111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2804'.
[  231.651087][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2804'.
[  232.035110][T15157] pim6reg: entered allmulticast mode
[  232.036613][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  232.036626][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  232.044449][T15159] syzkaller0: entered promiscuous mode
[  232.044462][T15159] syzkaller0: entered allmulticast mode
[  232.052150][T15157] pim6reg: left allmulticast mode
[  232.350941][T15174] netlink: 'syz.0.2824': attribute type 11 has an invalid length.
[  233.026066][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  233.073860][T15217] xt_time: invalid argument - start or stop time greater than 23:59:59
[  233.117383][T15219] xt_time: invalid argument - start or stop time greater than 23:59:59
[  233.630651][T15255] netlink: 'syz.0.2839': attribute type 1 has an invalid length.
[  233.650526][T15255] 8021q: adding VLAN 0 to HW filter on device bond18
[  233.667912][T15255] bond18: (slave macvlan0): Enslaving as a backup interface with an up link
[  233.774699][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  233.774739][T15261] netlink: 'syz.2.2842': attribute type 5 has an invalid length.
[  233.794793][T15262] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  233.916071][T15276] netlink: 'syz.0.2846': attribute type 2 has an invalid length.
[  233.918371][T15276] netlink: 'syz.0.2846': attribute type 1 has an invalid length.
[  233.960209][T15278] sctp: [Deprecated]: syz.2.2847 (pid 15278) Use of int in max_burst socket option deprecated.
[  233.960209][T15278] Use struct sctp_assoc_value instead
[  234.076515][T15286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  234.233337][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  234.307251][T15299] virt_wifi0 (unregistering): left allmulticast mode
[  234.455286][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  234.646754][T15311] syzkaller0: default FDB implementation only supports local addresses
[  234.715663][T15313] netlink: 'syz.1.2860': attribute type 2 has an invalid length.
[  235.535974][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  235.668855][T15332] netlink: 'syz.2.2866': attribute type 1 has an invalid length.
[  235.749329][   T11] block nbd3: Possible stuck request ffff88810a7e8000: control (read@0,1024B). Runtime 120 seconds
[  235.749361][   T11] block nbd3: Possible stuck request ffff88810a7e8200: control (read@1024,1024B). Runtime 120 seconds
[  235.749377][   T11] block nbd3: Possible stuck request ffff88810a7e8400: control (read@2048,1024B). Runtime 120 seconds
[  235.749394][   T11] block nbd3: Possible stuck request ffff88810a7e8600: control (read@3072,1024B). Runtime 120 seconds
[  235.833124][T15345] netlink: 'syz.1.2870': attribute type 1 has an invalid length.
[  235.976957][T15361] openvswitch: netlink: Missing key (keys=c0, expected=40300)
[  236.031092][T15366] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  236.085588][T15366] netlink: 'syz.0.2877': attribute type 49 has an invalid length.
[  236.142882][T15374] netlink: 'syz.1.2880': attribute type 49 has an invalid length.
[  236.278038][T15384] __nla_validate_parse: 19 callbacks suppressed
[  236.278055][T15384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2883'.
[  236.278662][T15384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2883'.
[  236.425735][T15392] bond13: entered promiscuous mode
[  236.425757][T15392] bond13: entered allmulticast mode
[  236.426126][T15392] 8021q: adding VLAN 0 to HW filter on device bond13
[  236.427340][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2887'.
[  236.534880][T15405] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  236.569952][T15406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2890'.
[  236.882040][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  237.102271][T15458] syzkaller0: entered promiscuous mode
[  237.102292][T15458] syzkaller0: entered allmulticast mode
[  237.140054][T15454] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2907'.
[  237.203254][T15461] ip_tables: iptables: counters copy to user failed while replacing table
[  237.635693][T15496] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2916'.
[  237.689878][T15507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2918'.
[  237.794410][T15518] nbd: nbd1 already in use
[  238.070108][ T5649] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x2c
[  238.144178][T15565] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  238.145243][T15556] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2927'.
[  238.218310][T15570] netlink: 57923 bytes leftover after parsing attributes in process `syz.2.2933'.
[  238.234977][T15574] openvswitch: netlink: Duplicate or invalid key (type 0).
[  238.304910][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  238.319866][T15584] netlink: 'syz.1.2936': attribute type 2 has an invalid length.
[  238.319878][T15584] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2936'.
[  238.555344][T15601] SET target dimension over the limit!
[  239.233599][T15628] syzkaller0: entered promiscuous mode
[  239.233617][T15628] syzkaller0: entered allmulticast mode
[  239.302500][T15632] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  239.438978][T15637] openvswitch: netlink: Missing key (keys=c0, expected=480)
[  239.453321][T15639] Bluetooth: hci0: unsupported parameter 5135
[  239.453338][T15639] Bluetooth: hci0: unsupported parameter 8192
[  239.453346][T15639] Bluetooth: hci0: unsupported parameter 5135
[  239.453354][T15639] Bluetooth: hci0: unsupported parameter 8192
[  240.395068][T15692] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  242.640917][T15696] validate_nla: 1 callbacks suppressed
[  242.640943][T15696] netlink: 'syz.1.2962': attribute type 1 has an invalid length.
[  242.641356][T15696] __nla_validate_parse: 6 callbacks suppressed
[  242.641366][T15696] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2962'.
[  242.843861][T15724] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2971'.
[  242.915271][T15729] lo speed is unknown, defaulting to 1000
[  242.944652][T15731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2973'.
[  242.991235][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  243.490559][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2980'.
[  243.635988][T15761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2981'.
[  243.824136][ T4994] Bluetooth: hci1: ISO packet for unknown connection handle 3684
[  244.088734][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  244.093818][T15785] netlink: 'syz.0.2989': attribute type 2 has an invalid length.
[  244.093838][T15785] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2989'.
[  244.135281][T15787] tipc: New replicast peer: 172.20.20.187
[  244.136004][T15787] tipc: Enabled bearer <udp:syz0>, priority 10
[  244.220339][ T4994] Bluetooth: hci2: unexpected event for opcode 0x1003
[  244.220845][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'.
[  244.480665][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2997'.
[  244.594152][T15810] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2998'.
[  244.672441][T15813] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  244.672473][T15813] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.792516][T15816] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3000'.
[  244.795107][T15820] netlink: 'syz.2.3000': attribute type 101 has an invalid length.
[  247.154758][T15789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  247.521630][ T5340] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  247.695699][ T4994] Bluetooth: hci1: unexpected event for opcode 0x1003
[  247.719978][T15861] ------------[ cut here ]------------
[  247.719991][T15861] !chanctx_conf
[  247.719996][T15861] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#1: syz.2.3012/15861
[  247.728864][T15861] Modules linked in:
[  247.731129][T15861] CPU: 1 UID: 0 PID: 15861 Comm: syz.2.3012 Not tainted syzkaller #0 PREEMPT(full) 
[  247.735195][T15861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  247.739967][T15861] RIP: 0010:rate_control_rate_init+0x5a6/0x630
[  247.742674][T15861] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bc d5 91 00 cc e8 06 87 71 f6 90 0f 0b 90 eb e1 e8 fb 86 71 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00
[  247.750830][T15861] RSP: 0018:ffffc90007506fe8 EFLAGS: 00010283
[  247.753511][T15861] RAX: ffffffff8b5643b5 RBX: ffff8881b9ef8050 RCX: 0000000000080000
[  247.757088][T15861] RDX: ffffc90020402000 RSI: 00000000000003b8 RDI: 00000000000003b9
[  247.760516][T15861] RBP: dffffc0000000000 R08: ffffffff8b563f27 R09: 0000000000000000
[  247.763984][T15861] R10: dffffc0000000000 R11: ffffed10373df031 R12: ffffffff8b563f27
[  247.768229][T15861] R13: ffff88810d330f40 R14: 0000000000000001 R15: 0000000000000000
[  247.772078][T15861] FS:  00007f7c5b1226c0(0000) GS:ffff8882a8cd1000(0000) knlGS:0000000000000000
[  247.776484][T15861] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  247.779499][T15861] CR2: 00007ffffffff000 CR3: 0000000192814000 CR4: 00000000000006f0
[  247.783036][T15861] Call Trace:
[  247.784646][T15861]  <TASK>
[  247.786038][T15861]  rate_control_rate_init_all_links+0xf4/0x190
[  247.788831][T15861]  sta_apply_auth_flags+0x1bc/0x430
[  247.790943][T15861]  sta_apply_parameters+0x1291/0x1b50
[  247.793260][T15861]  ieee80211_add_station+0x3de/0x700
[  247.795589][T15861]  rdev_add_station+0xfc/0x290
[  247.797824][T15861]  nl80211_new_station+0x1b4e/0x1fd0
[  247.800135][T15861]  ? trace_contention_end+0x3d/0x140
[  247.802491][T15861]  ? __pfx_nl80211_new_station+0x10/0x10
[  247.804931][T15861]  ? __rtnl_unlock+0xc8/0xf0
[  247.807868][T15861]  ? nl80211_pre_doit+0x53d/0x890
[  247.810098][T15861]  genl_family_rcv_msg_doit+0x233/0x340
[  247.812484][T15861]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  247.815135][T15861]  ? bpf_lsm_capable+0x9/0x20
[  247.817293][T15861]  ? security_capable+0x7e/0x2c0
[  247.819371][T15861]  genl_rcv_msg+0x614/0x7a0
[  247.821294][T15861]  ? __pfx_genl_rcv_msg+0x10/0x10
[  247.823486][T15861]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  247.825742][T15861]  ? __pfx_nl80211_new_station+0x10/0x10
[  247.828470][T15861]  ? __pfx_nl80211_post_doit+0x10/0x10
[  247.830841][T15861]  netlink_rcv_skb+0x226/0x4a0
[  247.832939][T15861]  ? __pfx_genl_rcv_msg+0x10/0x10
[  247.835109][T15861]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  247.837456][T15861]  ? down_read+0x2be/0x330
[  247.839323][T15861]  genl_rcv+0x28/0x40
[  247.841069][T15861]  netlink_unicast+0x7bd/0x940
[  247.843201][T15861]  netlink_sendmsg+0x813/0xb40
[  247.845279][T15861]  ? __pfx_netlink_sendmsg+0x10/0x10
[  247.847612][T15861]  ? apparmor_socket_sendmsg+0x98/0x360
[  247.849904][T15861]  ? __pfx_netlink_sendmsg+0x10/0x10
[  247.852327][T15861]  sock_sendmsg_nosec+0x13a/0x180
[  247.854530][T15861]  ____sys_sendmsg+0x54e/0x850
[  247.856675][T15861]  ? __pfx_____sys_sendmsg+0x10/0x10
[  247.858956][T15861]  ? import_iovec+0x73/0xa0
[  247.860936][T15861]  ___sys_sendmsg+0x2a5/0x360
[  247.862960][T15861]  ? __lock_acquire+0x747/0x2de0
[  247.865131][T15861]  ? __pfx____sys_sendmsg+0x10/0x10
[  247.867435][T15861]  ? futex_wait+0x2a2/0x390
[  247.869476][T15861]  ? __fget_files+0x2a/0x420
[  247.871493][T15861]  ? __fget_files+0x3a2/0x420
[  247.873560][T15861]  __x64_sys_sendmsg+0x1b1/0x290
[  247.875711][T15861]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  247.878138][T15861]  do_syscall_64+0x166/0x520
[  247.880200][T15861]  ? trace_irq_disable+0x3b/0x140
[  247.882369][T15861]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.884957][T15861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.887549][T15861] RIP: 0033:0x7f7c5a19e159
[  247.889500][T15861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.897629][T15861] RSP: 002b:00007f7c5b122028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  247.901226][T15861] RAX: ffffffffffffffda RBX: 00007f7c5a425fa0 RCX: 00007f7c5a19e159
[  247.904615][T15861] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008
[  247.908401][T15861] RBP: 00007f7c5a23506b R08: 0000000000000000 R09: 0000000000000000
[  247.911743][T15861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.915101][T15861] R13: 00007f7c5a426038 R14: 00007f7c5a425fa0 R15: 00007ffe6c537a58
[  247.918478][T15861]  </TASK>
[  247.919835][T15861] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  247.922831][T15861] CPU: 1 UID: 0 PID: 15861 Comm: syz.2.3012 Not tainted syzkaller #0 PREEMPT(full) 
[  247.926614][T15861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  247.930678][T15861] Call Trace:
[  247.932076][T15861]  <TASK>
[  247.933341][T15861]  vpanic+0x56d/0xa60
[  247.935024][T15861]  ? __pfx__printk+0x10/0x10
[  247.936978][T15861]  ? __pfx_vpanic+0x10/0x10
[  247.938877][T15861]  ? is_bpf_text_address+0x292/0x2b0
[  247.941075][T15861]  ? is_bpf_text_address+0x26/0x2b0
[  247.943216][T15861]  panic+0xc5/0xd0
[  247.944780][T15861]  ? __pfx_panic+0x10/0x10
[  247.946674][T15861]  __warn+0x315/0x4c0
[  247.948337][T15861]  ? rate_control_rate_init+0x5a6/0x630
[  247.950443][T15861]  ? rate_control_rate_init+0x5a6/0x630
[  247.952657][T15861]  __report_bug+0x276/0x570
[  247.954559][T15861]  ? rate_control_rate_init+0x5a6/0x630
[  247.956857][T15861]  ? __pfx___report_bug+0x10/0x10
[  247.958952][T15861]  ? __lock_acquire+0x747/0x2de0
[  247.960994][T15861]  ? __lock_acquire+0x747/0x2de0
[  247.963077][T15861]  ? rate_control_rate_init+0x5a6/0x630
[  247.965358][T15861]  report_bug+0x16b/0x220
[  247.967184][T15861]  ? rate_control_rate_init+0x5a6/0x630
[  247.969485][T15861]  ? rate_control_rate_init+0x5a8/0x630
[  247.971790][T15861]  handle_bug+0x9c/0x200
[  247.973581][T15861]  exc_invalid_op+0x1a/0x50
[  247.975469][T15861]  asm_exc_invalid_op+0x1a/0x20
[  247.977502][T15861] RIP: 0010:rate_control_rate_init+0x5a6/0x630
[  247.980066][T15861] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bc d5 91 00 cc e8 06 87 71 f6 90 0f 0b 90 eb e1 e8 fb 86 71 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00
[  247.987875][T15861] RSP: 0018:ffffc90007506fe8 EFLAGS: 00010283
[  247.990378][T15861] RAX: ffffffff8b5643b5 RBX: ffff8881b9ef8050 RCX: 0000000000080000
[  247.993664][T15861] RDX: ffffc90020402000 RSI: 00000000000003b8 RDI: 00000000000003b9
[  247.996894][T15861] RBP: dffffc0000000000 R08: ffffffff8b563f27 R09: 0000000000000000
[  248.000140][T15861] R10: dffffc0000000000 R11: ffffed10373df031 R12: ffffffff8b563f27
[  248.003378][T15861] R13: ffff88810d330f40 R14: 0000000000000001 R15: 0000000000000000
[  248.006628][T15861]  ? rate_control_rate_init+0x117/0x630
[  248.008921][T15861]  ? rate_control_rate_init+0x117/0x630
[  248.011204][T15861]  ? rate_control_rate_init+0x5a5/0x630
[  248.013490][T15861]  ? rate_control_rate_init+0x5a5/0x630
[  248.015777][T15861]  rate_control_rate_init_all_links+0xf4/0x190
[  248.018340][T15861]  sta_apply_auth_flags+0x1bc/0x430
[  248.020418][T15861]  sta_apply_parameters+0x1291/0x1b50
[  248.022582][T15861]  ieee80211_add_station+0x3de/0x700
[  248.024715][T15861]  rdev_add_station+0xfc/0x290
[  248.026731][T15861]  nl80211_new_station+0x1b4e/0x1fd0
[  248.028915][T15861]  ? trace_contention_end+0x3d/0x140
[  248.031132][T15861]  ? __pfx_nl80211_new_station+0x10/0x10
[  248.033485][T15861]  ? __rtnl_unlock+0xc8/0xf0
[  248.035525][T15861]  ? nl80211_pre_doit+0x53d/0x890
[  248.037628][T15861]  genl_family_rcv_msg_doit+0x233/0x340
[  248.039915][T15861]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  248.042436][T15861]  ? bpf_lsm_capable+0x9/0x20
[  248.044386][T15861]  ? security_capable+0x7e/0x2c0
[  248.046467][T15861]  genl_rcv_msg+0x614/0x7a0
[  248.048356][T15861]  ? __pfx_genl_rcv_msg+0x10/0x10
[  248.050424][T15861]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  248.052608][T15861]  ? __pfx_nl80211_new_station+0x10/0x10
[  248.054911][T15861]  ? __pfx_nl80211_post_doit+0x10/0x10
[  248.057189][T15861]  netlink_rcv_skb+0x226/0x4a0
[  248.059143][T15861]  ? __pfx_genl_rcv_msg+0x10/0x10
[  248.061218][T15861]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  248.063417][T15861]  ? down_read+0x2be/0x330
[  248.065288][T15861]  genl_rcv+0x28/0x40
[  248.066946][T15861]  netlink_unicast+0x7bd/0x940
[  248.068909][T15861]  netlink_sendmsg+0x813/0xb40
[  248.070877][T15861]  ? __pfx_netlink_sendmsg+0x10/0x10
[  248.073129][T15861]  ? apparmor_socket_sendmsg+0x98/0x360
[  248.075410][T15861]  ? __pfx_netlink_sendmsg+0x10/0x10
[  248.077599][T15861]  sock_sendmsg_nosec+0x13a/0x180
[  248.079689][T15861]  ____sys_sendmsg+0x54e/0x850
[  248.081681][T15861]  ? __pfx_____sys_sendmsg+0x10/0x10
[  248.083873][T15861]  ? import_iovec+0x73/0xa0
[  248.085783][T15861]  ___sys_sendmsg+0x2a5/0x360
[  248.087746][T15861]  ? __lock_acquire+0x747/0x2de0
[  248.089800][T15861]  ? __pfx____sys_sendmsg+0x10/0x10
[  248.091955][T15861]  ? futex_wait+0x2a2/0x390
[  248.093875][T15861]  ? __fget_files+0x2a/0x420
[  248.095790][T15861]  ? __fget_files+0x3a2/0x420
[  248.097766][T15861]  __x64_sys_sendmsg+0x1b1/0x290
[  248.099843][T15861]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  248.102135][T15861]  do_syscall_64+0x166/0x520
[  248.104072][T15861]  ? trace_irq_disable+0x3b/0x140
[  248.106172][T15861]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.108677][T15861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.111147][T15861] RIP: 0033:0x7f7c5a19e159
[  248.112998][T15861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.120834][T15861] RSP: 002b:00007f7c5b122028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  248.124278][T15861] RAX: ffffffffffffffda RBX: 00007f7c5a425fa0 RCX: 00007f7c5a19e159
[  248.127495][T15861] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008
[  248.130760][T15861] RBP: 00007f7c5a23506b R08: 0000000000000000 R09: 0000000000000000
[  248.134036][T15861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  248.137306][T15861] R13: 00007f7c5a426038 R14: 00007f7c5a425fa0 R15: 00007ffe6c537a58
[  248.140568][T15861]  </TASK>
[  248.142645][T15861] Kernel Offset: disabled
[  248.144339][T15861] Rebooting in 86400 seconds..
