last executing test programs:

17.42386327s ago: executing program 2 (id=1593):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r1=>0x0}) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x42, &(0x7f00000000c0)=0x81a, 0x4) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r5, @ANYRES32=r6], 0x10) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001000000000000ec000007000000", @ANYRES32=r1, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (rerun: 32)

17.293896993s ago: executing program 2 (id=1594):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000})

17.192370691s ago: executing program 2 (id=1595):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000000000000000000000000086009078000000000000000088ff00000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

11.912082279s ago: executing program 2 (id=1595):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000000000000000000000000086009078000000000000000088ff00000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

11.734108832s ago: executing program 0 (id=1651):
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x819, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0xffff}, @window={0x3, 0x6, 0x4}, @mss={0x2, 0xb}, @timestamp, @window={0x3, 0x8, 0x7b5e}, @window={0x3, 0x80}, @sack_perm], 0x8) (async)
sendto$inet(r0, &(0x7f0000000780)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020de8ef96b6f08eec511ca0cf737fd0600a2096b5f14a6d8db8acc92b27792da1218207f9d66a832ffc838f7dc77a51e2647468af12c4365c4a4a673e9a96698f29f88134000f4fa8fcea5afe4d5fe8216acd42ac6a59564acbfa2db246a2b07cb7676eded1c4c825765498f4f952f4c54cd7332f089b14c4bfe7d869b1501761fc526c5b40080", 0xa0, 0x1, 0x0, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f0000000e80))

11.733300543s ago: executing program 0 (id=1652):
r0 = socket$kcm(0x2d, 0x2, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0xb, 0x4)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x205, 0x0, 0x2}, 0x10)
sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)
close(r5)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0200000002"], 0x10)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r8, r9, 0x2, 0x2}, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r10}, 0x10)
r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8)
close(r12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r14, r13, 0x2, 0x6, 0x4000}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000180a01010000000000000000020000000900010073797a30000000000c00054000000000000000020c000380fafc01400000000014000000000a"], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x0)

11.663995374s ago: executing program 0 (id=1653):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/103, 0x67}, {&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f0000000580)=""/93, 0x5d}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f0000000980)=""/129, 0x81}], 0x6}, 0x40000100)
sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b", 0x54}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f", 0x9d}, {&(0x7f0000000f00)}, {0x0}, {&(0x7f0000000480)="3b98c053d6287182fb77fa2573c0175eac0342191cae67c6aab799113bf6df72d6bae38ad4d70cf4923614c77b93f41a8de623711dbfe9124532ef0a290a9801ffac63d114b63603306210bd0ee6922a71edb08dc4d93aab9c40b4839e5cbaf0c4d28a016f64b1f07bdfba8f695191bd5d838b4395e9bbc0cab1184676af212a79208290e0a4e5de06f7ae089f225831692ec6b873fd77d10d2dad93fe6c91c512642975ee56", 0xa6}], 0x6}}], 0x1, 0xc0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

11.562665178s ago: executing program 0 (id=1654):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x1, {0x0, 0xff, 0x2}, 0xfe}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000602000000020000000000000e0300000000000000000061"], 0x0, 0x54, 0x0, 0x1}, 0x28)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)
r6 = socket(0x2a, 0x2, 0xfffffffc)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@ifindex=r3, 0xffffffffffffffff, 0x36, 0xc}, 0x20)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f00000002c0)={0x1d, r7, 0x3, {0x2, 0xf, 0x1}, 0xff}, 0x18, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0xd0)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f000000041000000800810d0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="bcc339424d1ababeb56d91d7db5a4a6ae88f6157bd8fe1a5cebc69113bdba6903134873de945990c58ee89e6bee1bde27554aa8f6bb52bf0bf1caea1fa17b4ff99d4e371be1ab6e0f64f746e3d4b3accf02ede72885b9bf6d5c257988216bf813f9b1dfdfbacd0cf9af0ee0d0b8868d633e4e94e4144b89b87c7f3be86d492f1fda9cfad1d3df376ca250537d3f566e6077fbbe129eae3ee4d4b6672dd2ad29c29d7161a6f016aa712d0cb27db19bb204356396d5eeea16efbf8f1dce5", @ANYRES64=0x0], 0x10)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000300)="1a00000002000000", 0x8)
r10 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r12)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r12, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYRESOCT=0x0, @ANYRES32=r14, @ANYBLOB="56a456dd95e9fefb4592a9289158b8d0fb54"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x8880)
sendmmsg$inet_sctp(r11, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4622, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c49", 0x2}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x2, 0x7f, 0x7}}, @init={0x18, 0x84, 0x0, {0x5, 0x0, 0x4, 0xfff}}], 0x38, 0x48060}], 0x1, 0x200000d0)

5.645839223s ago: executing program 2 (id=1595):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000000000000000000000000086009078000000000000000088ff00000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

5.462443081s ago: executing program 0 (id=1654):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x1, {0x0, 0xff, 0x2}, 0xfe}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000602000000020000000000000e0300000000000000000061"], 0x0, 0x54, 0x0, 0x1}, 0x28)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)
r6 = socket(0x2a, 0x2, 0xfffffffc)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@ifindex=r3, 0xffffffffffffffff, 0x36, 0xc}, 0x20)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f00000002c0)={0x1d, r7, 0x3, {0x2, 0xf, 0x1}, 0xff}, 0x18, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0xd0)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f000000041000000800810d0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="bcc339424d1ababeb56d91d7db5a4a6ae88f6157bd8fe1a5cebc69113bdba6903134873de945990c58ee89e6bee1bde27554aa8f6bb52bf0bf1caea1fa17b4ff99d4e371be1ab6e0f64f746e3d4b3accf02ede72885b9bf6d5c257988216bf813f9b1dfdfbacd0cf9af0ee0d0b8868d633e4e94e4144b89b87c7f3be86d492f1fda9cfad1d3df376ca250537d3f566e6077fbbe129eae3ee4d4b6672dd2ad29c29d7161a6f016aa712d0cb27db19bb204356396d5eeea16efbf8f1dce5", @ANYRES64=0x0], 0x10)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000300)="1a00000002000000", 0x8)
r10 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r12)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r12, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYRESOCT=0x0, @ANYRES32=r14, @ANYBLOB="56a456dd95e9fefb4592a9289158b8d0fb54"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x8880)
sendmmsg$inet_sctp(r11, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4622, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c49", 0x2}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x2, 0x7f, 0x7}}, @init={0x18, 0x84, 0x0, {0x5, 0x0, 0x4, 0xfff}}], 0x38, 0x48060}], 0x1, 0x200000d0)

343.461481ms ago: executing program 1 (id=1708):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1100000000001f00"/21, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000200)}, 0x20) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0)

342.900496ms ago: executing program 1 (id=1709):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800008e7a368ad4182000"/20, @ANYRES32=r0, @ANYBLOB="000000000000000091000000000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000380))

342.610864ms ago: executing program 1 (id=1710):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000600000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x18, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r6=>0x0})
recvfrom$packet(r5, &(0x7f00000003c0)=""/146, 0x92, 0x40000040, &(0x7f0000000300)={0x11, 0x1a, r6, 0x1, 0x8, 0x6, @random="8608c93edd7a"}, 0x14)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x18)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000700)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0x7a, &(0x7f0000000840)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xf, 0xf, &(0x7f0000000500)=@raw=[@alu={0x7, 0x1, 0x0, 0x4, 0xa, 0x18, 0x8}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @alu={0x2, 0x5ca263a09756ccaa, 0xe, 0x3, 0xa, 0xfffffffffffffff4, 0x10}, @map_fd={0x18, 0x4, 0x1, 0x0, r7}, @generic={0x80, 0x6, 0x0, 0x7fff}, @generic={0x1, 0x9, 0xd, 0x5, 0x10}, @ldst={0x1, 0x3, 0x2, 0x9, 0x6, 0x50, 0xfffffffffffffff0}], &(0x7f0000000580)='GPL\x00', 0x9, 0xa1, &(0x7f00000005c0)=""/161, 0x40f00, 0x40, '\x00', r6, @cgroup_device=0x6, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x2, 0x0, 0x3, 0xe}, 0x10, r9, r0, 0x1, &(0x7f0000000980)=[r2, r2, r1], &(0x7f0000000b00)=[{0x3, 0x2, 0x8, 0x6}], 0x10, 0x3ff}, 0x94)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

243.71725ms ago: executing program 1 (id=1711):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffffcc040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c02"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38)
syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) (async)
syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
socket$inet(0x2, 0x4000000805, 0x0) (async)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
listen(r6, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x1000000000000005, 0x0) (async)
r7 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x0)
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000180), &(0x7f0000000380)=0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x2, {0x1, 0xf0}}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

243.613156ms ago: executing program 2 (id=1595):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000000000000000000000000086009078000000000000000088ff00000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

53.250377ms ago: executing program 0 (id=1654):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x1, {0x0, 0xff, 0x2}, 0xfe}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000602000000020000000000000e0300000000000000000061"], 0x0, 0x54, 0x0, 0x1}, 0x28)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0)
r6 = socket(0x2a, 0x2, 0xfffffffc)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@ifindex=r3, 0xffffffffffffffff, 0x36, 0xc}, 0x20)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f00000002c0)={0x1d, r7, 0x3, {0x2, 0xf, 0x1}, 0xff}, 0x18, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0xd0)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f000000041000000800810d0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="bcc339424d1ababeb56d91d7db5a4a6ae88f6157bd8fe1a5cebc69113bdba6903134873de945990c58ee89e6bee1bde27554aa8f6bb52bf0bf1caea1fa17b4ff99d4e371be1ab6e0f64f746e3d4b3accf02ede72885b9bf6d5c257988216bf813f9b1dfdfbacd0cf9af0ee0d0b8868d633e4e94e4144b89b87c7f3be86d492f1fda9cfad1d3df376ca250537d3f566e6077fbbe129eae3ee4d4b6672dd2ad29c29d7161a6f016aa712d0cb27db19bb204356396d5eeea16efbf8f1dce5", @ANYRES64=0x0], 0x10)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000300)="1a00000002000000", 0x8)
r10 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r12)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r12, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYRESOCT=0x0, @ANYRES32=r14, @ANYBLOB="56a456dd95e9fefb4592a9289158b8d0fb54"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x8880)
sendmmsg$inet_sctp(r11, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4622, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c49", 0x2}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x2, 0x7f, 0x7}}, @init={0x18, 0x84, 0x0, {0x5, 0x0, 0x4, 0xfff}}], 0x38, 0x48060}], 0x1, 0x200000d0)

1.796626ms ago: executing program 1 (id=1712):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in=@multicast2, 0x4e21, 0x0, 0x4e22, 0x7, 0x2, 0xa0, 0x20, 0x2f}, {0x3, 0x3, 0x4607, 0x81, 0x6, 0x8, 0x3, 0x9}, {0x80000000000, 0x0, 0x4, 0x4}, 0x7ff, 0x0, 0x2, 0x0, 0x2}, {{@in6=@private1, 0x4d6, 0x32}, 0x2, @in6=@remote, 0x3501, 0x4, 0x0, 0x5, 0x1800000, 0xa3, 0x2}}, 0xe8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003004000070000c603000000fdffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x6}, 0x28)

0s ago: executing program 1 (id=1713):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @empty, 'sit0\x00'}}, 0x1e) (async)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @empty, 'sit0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @empty, 'geneve1\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth1_virt_wifi\x00'}}, 0x1e)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$igmp6(0xa, 0x3, 0x2) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=<r4=>0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private=0xa010101, @in=@multicast2, 0x4e20, 0x5, 0x4e22, 0x8, 0x2, 0x80, 0x30, 0x38, 0x0, r4}, {0xc8, 0x7, 0xff, 0x5, 0x7, 0x0, 0x9, 0x21}, {0x4, 0x6, 0x8551, 0xee6}, 0x400, 0x6e6bb2, 0x2, 0x1, 0x1, 0x3}, {{@in=@multicast1, 0x4d4, 0x33}, 0x2, @in6=@mcast1, 0x34ff, 0x0, 0x2, 0x2, 0xff, 0xf6f, 0xfffffff3}}, 0xe8)
close(r0) (async)
close(r0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000000)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x70}}, 0x20000000) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x70}}, 0x20000000)

kernel console output (not intermixed with test programs):

341] bridge_slave_1: left allmulticast mode
[   54.617388][ T6341] bridge_slave_1: left promiscuous mode
[   54.622117][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.626836][ T6341] bond0: (slave bond_slave_0): Releasing backup interface
[   54.636591][ T6341] bond0: (slave bond_slave_1): Releasing backup interface
[   54.649516][ T6341] team0: Port device team_slave_0 removed
[   54.656728][ T6341] team0: Port device team_slave_1 removed
[   54.660355][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.662804][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.665964][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.671438][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.681227][ T6341] bond1: (slave gretap1): Releasing active interface
[   54.695050][ T6341] syz.1.156 (6341) used greatest stack depth: 19928 bytes left
[   54.845786][ T6352] xt_CT: No such helper "pptp"
[   54.851122][ T6352] Cannot find add_set index 0 as target
[   55.112039][ T6393] xt_TPROXY: Can be used only with -p tcp or -p udp
[   55.203760][ T6400] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   55.353447][ T6416] netlink: 'syz.1.175': attribute type 1 has an invalid length.
[   55.374814][ T6412] bond2: entered promiscuous mode
[   55.376616][ T6412] bond2: entered allmulticast mode
[   55.378834][ T6412] 8021q: adding VLAN 0 to HW filter on device bond2
[   55.549099][ T6428] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.575171][ T6435] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   55.597737][ T6428] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.654635][ T6428] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.679445][  T790] IPVS: starting estimator thread 0...
[   55.682023][ T6442] netem: invalid attributes len -16
[   55.696793][ T6442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.710206][ T6428] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.779104][ T6443] IPVS: using max 81 ests per chain, 194400 per kthread
[   55.785397][ T6428] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.792642][ T6428] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.801603][ T6428] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.809270][ T6428] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.286247][ T6472] netlink: 'syz.2.194': attribute type 32 has an invalid length.
[   56.488677][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.491709][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.494900][ T6490] bridge0: entered allmulticast mode
[   56.500289][ T6490] bridge_slave_1: left allmulticast mode
[   56.502499][ T6490] bridge_slave_1: left promiscuous mode
[   56.504552][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.510150][ T6490] bridge_slave_0: left allmulticast mode
[   56.512063][ T6490] bridge_slave_0: left promiscuous mode
[   56.514239][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.746006][ T6503] netlink: 'syz.0.205': attribute type 32 has an invalid length.
[   56.923892][ T6521] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   56.926719][ T6521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.123925][ T6532] gtp0: entered promiscuous mode
[   57.125637][ T6532] gtp0: entered allmulticast mode
[   57.209129][ T6541] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   57.726635][ T6572] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[   57.888417][ T6590] netlink: 'syz.2.234': attribute type 5 has an invalid length.
[   57.963975][ T6599] GUP no longer grows the stack in syz.0.238 (6599): 200000006000-20000000a000 (200000005000)
[   57.967728][ T6599] CPU: 1 UID: 0 PID: 6599 Comm: syz.0.238 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   57.967740][ T6599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   57.967745][ T6599] Call Trace:
[   57.967749][ T6599]  <TASK>
[   57.967753][ T6599]  dump_stack_lvl+0x189/0x250
[   57.967769][ T6599]  ? __pfx_dump_stack_lvl+0x10/0x10
[   57.967780][ T6599]  ? __pfx__printk+0x10/0x10
[   57.967787][ T6599]  ? find_vma+0xe7/0x160
[   57.967799][ T6599]  __get_user_pages+0x2a60/0x30b0
[   57.967823][ T6599]  ? __pfx___get_user_pages+0x10/0x10
[   57.967833][ T6599]  ? __gup_longterm_locked+0xbf7/0x15b0
[   57.967843][ T6599]  ? down_read_killable+0x1d1/0x350
[   57.967851][ T6599]  ? try_get_folio+0x633/0x660
[   57.967859][ T6599]  __gup_longterm_locked+0xd66/0x15b0
[   57.967872][ T6599]  ? try_grab_folio_fast+0x1be/0x4f0
[   57.967886][ T6599]  ? gup_fast_fallback+0x1afc/0x2260
[   57.967898][ T6599]  gup_fast_fallback+0x1cd4/0x2260
[   57.967943][ T6599]  ? __pfx_gup_fast_fallback+0x10/0x10
[   57.967954][ T6599]  ? trace_contention_end+0x39/0x120
[   57.967962][ T6599]  ? __mutex_lock+0x330/0xe80
[   57.967973][ T6599]  ? futex_unqueue+0x22/0x240
[   57.968004][ T6599]  ? futex_unqueue+0x22/0x240
[   57.968011][ T6599]  ? futex_unqueue+0x22/0x240
[   57.968017][ T6599]  ? is_valid_gup_args+0x11f/0x200
[   57.968029][ T6599]  ? get_user_pages_fast+0x4d/0xb0
[   57.968040][ T6599]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   57.968051][ T6599]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   57.968058][ T6599]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   57.968068][ T6599]  ? wait_for_space+0x24d/0x2d0
[   57.968077][ T6599]  iov_iter_get_pages2+0x5e/0xa0
[   57.968096][ T6599]  __se_sys_vmsplice+0x548/0x10d0
[   57.968112][ T6599]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   57.968120][ T6599]  ? __pfx_futex_wait+0x10/0x10
[   57.968157][ T6599]  ? do_syscall_64+0xbe/0x3b0
[   57.968166][ T6599]  do_syscall_64+0xfa/0x3b0
[   57.968177][ T6599]  ? lockdep_hardirqs_on+0x9c/0x150
[   57.968187][ T6599]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.968194][ T6599]  ? exc_page_fault+0x9f/0xf0
[   57.968205][ T6599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.968213][ T6599] RIP: 0033:0x7f1f4cb8e929
[   57.968220][ T6599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.968227][ T6599] RSP: 002b:00007f1f4d9e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   57.968235][ T6599] RAX: ffffffffffffffda RBX: 00007f1f4cdb5fa0 RCX: 00007f1f4cb8e929
[   57.968241][ T6599] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c
[   57.968245][ T6599] RBP: 00007f1f4cc10b39 R08: 0000000000000000 R09: 0000000000000000
[   57.968250][ T6599] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   57.968255][ T6599] R13: 0000000000000000 R14: 00007f1f4cdb5fa0 R15: 00007ffc766ba858
[   57.968267][ T6599]  </TASK>
[   58.155149][ T6600] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   58.160290][ T6600] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   58.281840][ T6602] __nla_validate_parse: 27 callbacks suppressed
[   58.281850][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'.
[   58.297276][ T6602] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.303264][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'.
[   58.488291][ T6616] netlink: 'syz.0.245': attribute type 11 has an invalid length.
[   58.575950][ T6621] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   58.796936][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'.
[   58.799854][ T6625] openvswitch: netlink: Unknown nsh attribute 0
[   58.801821][ T6625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.827421][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'.
[   58.845748][ T6628] netlink: 'syz.2.248': attribute type 1 has an invalid length.
[   58.870920][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.249'.
[   59.293166][ T6644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.251'.
[   59.385343][ T6647] netlink: 124 bytes leftover after parsing attributes in process `syz.0.252'.
[   59.886686][ T6651] No such timeout policy "syz0"
[   60.126067][ T6676] netlink: 312 bytes leftover after parsing attributes in process `syz.1.257'.
[   60.168872][ T6679] ieee802154 phy0 wpan0: encryption failed: -22
[   60.172433][ T6682] ieee802154 phy0 wpan0: encryption failed: -22
[   60.176562][ T6683] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   60.315586][ T6702] netlink: 'syz.1.260': attribute type 53 has an invalid length.
[   60.319627][ T6689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.343674][ T6706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.264'.
[   60.357746][ T6706] bond2: entered promiscuous mode
[   60.361625][ T6706] 8021q: adding VLAN 0 to HW filter on device bond2
[   60.375099][ T6702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.411614][ T6706] bond2 (unregistering): Released all slaves
[   60.434771][ T6702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.517014][ T6721] netlink: 224 bytes leftover after parsing attributes in process `syz.2.268'.
[   60.797450][ T6738] netlink: 'syz.2.274': attribute type 4 has an invalid length.
[   60.835742][ T6740] xt_CT: You must specify a L4 protocol and not use inversions on it
[   60.862752][ T6740] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.876568][ T6740] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.879981][ T6740] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[   60.884698][ T6740] bond1: (slave vti0): Error -95 calling set_mac_address
[   61.040153][ T6752] bond0: entered promiscuous mode
[   61.041855][ T6752] bond_slave_0: entered promiscuous mode
[   61.044080][ T6752] bond_slave_1: entered promiscuous mode
[   61.565978][ T6803] netlink: 'syz.0.294': attribute type 7 has an invalid length.
[   61.568610][ T6803] netlink: 'syz.0.294': attribute type 8 has an invalid length.
[   61.575134][ T6805] netlink: 'syz.1.295': attribute type 1 has an invalid length.
[   61.595038][ T6808] netlink: 'syz.0.296': attribute type 21 has an invalid length.
[   61.597748][ T6808] netlink: 'syz.0.296': attribute type 21 has an invalid length.
[   61.600827][ T6808] netlink: 'syz.0.296': attribute type 21 has an invalid length.
[   61.613599][ T6810] !: renamed from dummy0 (while UP)
[   62.043587][ T6852] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[   62.457712][ T6889] bridge_slave_1: entered promiscuous mode
[   62.463602][ T6889] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   62.468541][ T6889] SET target dimension over the limit!
[   62.607709][ T6898] tipc: Invalid UDP bearer configuration
[   62.607735][ T6898] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   62.695191][ T6906] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   62.699921][ T6906] openvswitch: netlink: Message has 1 unknown bytes.
[   63.628697][ T6922] __nla_validate_parse: 119 callbacks suppressed
[   63.628707][ T6922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.329'.
[   63.752534][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'.
[   63.755264][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'.
[   63.759570][ T6936] validate_nla: 33 callbacks suppressed
[   63.759576][ T6936] netlink: 'syz.0.334': attribute type 15 has an invalid length.
[   63.763641][ T6936] netlink: 'syz.0.334': attribute type 18 has an invalid length.
[   63.834189][ T6944] macvlan0: entered promiscuous mode
[   63.841508][ T6944] netlink: 'syz.1.337': attribute type 1 has an invalid length.
[   63.848106][ T6944] netlink: 'syz.1.337': attribute type 2 has an invalid length.
[   63.956150][ T6959] vlan2: entered allmulticast mode
[   63.959237][ T6959] bridge_slave_0: entered allmulticast mode
[   64.117769][ T6964] netlink: 'syz.1.344': attribute type 12 has an invalid length.
[   64.150152][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'.
[   64.615788][ T6994] netlink: 'syz.1.351': attribute type 32 has an invalid length.
[   64.929542][ T7038] netlink: 'syz.0.364': attribute type 13 has an invalid length.
[   64.939898][ T7038] gretap0: refused to change device tx_queue_len
[   64.942018][ T7038] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   65.006529][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'.
[   65.095238][ T7062] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535)
[   65.120700][ T7067] sctp: [Deprecated]: syz.2.373 (pid 7067) Use of int in max_burst socket option.
[   65.120700][ T7067] Use struct sctp_assoc_value instead
[   65.279869][ T7083] veth1_to_team: entered promiscuous mode
[   65.282234][ T7083] macsec1: entered promiscuous mode
[   65.283963][ T7083] macsec1: entered allmulticast mode
[   65.285663][ T7083] veth1_to_team: entered allmulticast mode
[   65.291408][ T7083] veth1_to_team: left allmulticast mode
[   65.293275][ T7083] veth1_to_team: left promiscuous mode
[   65.519503][ T7102] netlink: 'syz.2.382': attribute type 10 has an invalid length.
[   65.539872][ T7102] team0: Port device geneve1 added
[   65.710065][ T7110] xt_hashlimit: size too large, truncated to 1048576
[   65.712551][ T7110] xt_hashlimit: max too large, truncated to 1048576
[   65.739672][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'.
[   65.919294][ T7126] 8021q: VLANs not supported on caif0
[   66.095948][ T7146] x_tables: duplicate underflow at hook 2
[   66.129987][ T7148] Driver unsupported XDP return value 0 on prog  (id 254) dev N/A, expect packet loss!
[   66.156444][ T7154] netlink: 'syz.0.402': attribute type 1 has an invalid length.
[   66.162335][ T7154] netlink: 228 bytes leftover after parsing attributes in process `syz.0.402'.
[   66.203816][ T7151] sctp: [Deprecated]: syz.1.401 (pid 7151) Use of struct sctp_assoc_value in delayed_ack socket option.
[   66.203816][ T7151] Use struct sctp_sack_info instead
[   66.244154][ T7160] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.404'.
[   66.269587][ T7162] netlink: 'syz.1.405': attribute type 32 has an invalid length.
[   66.396371][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'.
[   66.469346][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.410'.
[   66.598861][ T7194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.912975][ T7227] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   66.915806][ T7227] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[   66.979307][ T7236] atomic_op ffff888038ee3198 conn xmit_atomic 0000000000000000
[   67.983006][ T7311] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   68.155195][ T7327] macvtap0: entered promiscuous mode
[   68.157744][ T7327] macvtap0: refused to change device tx_queue_len
[   68.181228][ T7325] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   68.581434][ T7374] IPv6: NLM_F_REPLACE set, but no existing node found!
[   68.615270][ T7366] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.626728][ T7366] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.699326][ T7366] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.702229][ T7366] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.705168][ T7366] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.708160][ T7366] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.819725][ T7377] __nla_validate_parse: 12 callbacks suppressed
[   68.819735][ T7377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.464'.
[   68.851490][ T7379] validate_nla: 11 callbacks suppressed
[   68.851500][ T7379] netlink: 'syz.1.465': attribute type 32 has an invalid length.
[   68.875282][ T7383] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.466'.
[   69.054174][ T7399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.471'.
[   69.057359][ T7398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.471'.
[   69.094972][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'.
[   69.111106][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'.
[   69.147089][ T7417] netlink: 'syz.1.476': attribute type 32 has an invalid length.
[   69.642437][ T7438] raw_sendmsg: syz.2.480 forgot to set AF_INET. Fix it!
[   69.649736][ T7439] syzkaller1: entered promiscuous mode
[   69.651690][ T7439] syzkaller1: entered allmulticast mode
[   69.760911][ T7447] netlink: 'syz.2.484': attribute type 32 has an invalid length.
[   69.766871][ T7439] netlink: 48 bytes leftover after parsing attributes in process `syz.1.481'.
[   69.907911][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'.
[   69.912010][ T7456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.485'.
[   69.914863][ T7456] netlink: 336 bytes leftover after parsing attributes in process `syz.2.485'.
[   70.040526][ T7465] nft_compat: unsupported protocol 0
[   70.253593][ T7480] trusted_key: syz.2.491 sent an empty control message without MSG_MORE.
[   70.263411][ T7480] pim6reg1: entered promiscuous mode
[   70.265354][ T7480] pim6reg1: entered allmulticast mode
[   70.287911][ T7485] netlink: 'syz.0.492': attribute type 32 has an invalid length.
[   70.352810][ T7493] openvswitch: netlink: Flow actions attr not present in new flow.
[   70.406608][ T7498] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   70.410580][ T7498] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.420816][ T7498] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   70.425222][ T7500] netlink: 'syz.2.496': attribute type 3 has an invalid length.
[   70.464861][ T7505] sctp: [Deprecated]: syz.0.498 (pid 7505) Use of struct sctp_assoc_value in delayed_ack socket option.
[   70.464861][ T7505] Use struct sctp_sack_info instead
[   70.528747][ T7509] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3
[   70.610545][ T7516] netlink: 'syz.1.502': attribute type 32 has an invalid length.
[   70.842644][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.322089][ T7534] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20000
[   71.690039][ T7577] : entered promiscuous mode
[   71.973789][ T7605] vlan2: entered promiscuous mode
[   71.975493][ T7605] syz_tun: entered promiscuous mode
[   72.216927][ T7631] netlink: 'syz.1.532': attribute type 32 has an invalid length.
[   72.220851][ T7631] netlink: 'syz.1.532': attribute type 32 has an invalid length.
[   72.223587][ T7631] netlink: 'syz.1.532': attribute type 32 has an invalid length.
[   72.226248][ T7631] netlink: 'syz.1.532': attribute type 32 has an invalid length.
[   72.353639][ T7642] syzkaller1: entered promiscuous mode
[   72.355526][ T7642] syzkaller1: entered allmulticast mode
[   72.408938][ T7646] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   72.411659][ T7646] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   72.522535][ T7652] ip6gre1: entered allmulticast mode
[   73.630893][  T790] IPVS: starting estimator thread 0...
[   73.718035][ T7694] IPVS: using max 80 ests per chain, 192000 per kthread
[   73.720924][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.726490][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.773711][ T7688] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.776519][ T7688] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.780414][ T7688] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.783156][ T7688] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.966214][ T7720] __nla_validate_parse: 78 callbacks suppressed
[   73.966225][ T7720] netlink: 36 bytes leftover after parsing attributes in process `syz.2.562'.
[   73.984171][ T7722] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   73.990787][ T7722] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[   74.055707][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.565'.
[   74.194174][ T7739] ipt_REJECT: ECHOREPLY no longer supported.
[   74.220620][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'.
[   74.270226][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.574'.
[   74.358704][ T5822] Bluetooth: hci2: command 0x0405 tx timeout
[   74.462080][ T7751] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   74.706617][ T7771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.991086][ T7790] validate_nla: 30 callbacks suppressed
[   74.991100][ T7790] netlink: 'syz.2.586': attribute type 1 has an invalid length.
[   74.996743][ T7790] netlink: 'syz.2.586': attribute type 2 has an invalid length.
[   75.001454][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'.
[   75.004774][ T7791] netlink: 'syz.2.586': attribute type 1 has an invalid length.
[   75.007642][ T7791] netlink: 'syz.2.586': attribute type 2 has an invalid length.
[   75.011946][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'.
[   75.116302][ T7800] netlink: 'syz.2.589': attribute type 3 has an invalid length.
[   75.235573][ T7803] veth5: entered promiscuous mode
[   75.566918][ T7805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.591'.
[   75.576817][ T5843] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   75.579672][ T5843] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   75.579820][ T7805] netlink: 64 bytes leftover after parsing attributes in process `syz.1.591'.
[   75.598104][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   75.810168][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   75.878223][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   76.030210][ T7814] netlink: 'syz.2.595': attribute type 9 has an invalid length.
[   76.142526][ T7816] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.149813][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'.
[   76.165718][ T7826] siw: device registration error -23
[   76.239747][ T7834] xt_HMARK: proto mask must be zero with L3 mode
[   76.266012][ T7836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.602'.
[   76.545553][ T7847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.989614][ T7877] netlink: 'syz.1.614': attribute type 32 has an invalid length.
[   77.184879][ T7900] gtp0: entered promiscuous mode
[   77.187048][ T7900] gtp0: entered allmulticast mode
[   77.479055][ T7937] netlink: 'syz.2.622': attribute type 32 has an invalid length.
[   77.725504][ T7968] xfrm1: entered promiscuous mode
[   77.732946][ T7968] xfrm1: entered allmulticast mode
[   77.754258][ T7968] xt_hashlimit: size too large, truncated to 1048576
[   79.478117][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   80.823969][ T8038] netlink: 'syz.1.636': attribute type 1 has an invalid length.
[   80.826573][ T8038] __nla_validate_parse: 17 callbacks suppressed
[   80.826580][ T8038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.636'.
[   80.844938][ T8041] x_tables: duplicate underflow at hook 3
[   80.887094][ T8041] x_tables: duplicate underflow at hook 2
[   80.914572][ T8051] netlink: 76 bytes leftover after parsing attributes in process `syz.1.639'.
[   80.916529][ T8053] netlink: 120 bytes leftover after parsing attributes in process `syz.2.640'.
[   80.966344][ T8057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.641'.
[   80.971691][ T8059] netlink: 'syz.0.643': attribute type 32 has an invalid length.
[   80.971887][ T8057] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   81.032007][ T8066] netlink: 'syz.2.641': attribute type 1 has an invalid length.
[   81.081503][   T95] cfg80211: failed to load regulatory.db
[   81.910219][ T8079] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20001
[   82.726076][ T8091] netlink: 'syz.2.651': attribute type 1 has an invalid length.
[   82.728803][ T8091] netlink: 68 bytes leftover after parsing attributes in process `syz.2.651'.
[   82.866620][ T8102] af_packet: tpacket_rcv: packet too big, clamped from 59478 to 4294967272. macoff=96
[   82.923387][ T8104] batadv_slave_0: entered promiscuous mode
[   82.925676][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'.
[   82.935860][ T8105] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   82.938138][ T8105] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   82.955658][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'.
[   83.185916][ T8123] batman_adv: batadv0: Adding interface: gretap2
[   83.188068][ T8123] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.196186][ T8123] batman_adv: batadv0: Interface activated: gretap2
[   83.287868][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'.
[   83.316063][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'.
[   83.320287][ T8133] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   83.322990][ T8133] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (281462092005383)
[   83.331527][   T32] wlan1: Trigger new scan to find an IBSS to join
[   83.348451][ T8135] syzkaller0: entered promiscuous mode
[   83.350315][ T8135] syzkaller0: entered allmulticast mode
[   83.390414][ T8137] IPv6: NLM_F_REPLACE set, but no existing node found!
[   83.434187][ T8139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.666'.
[   83.743303][ T8160] netlink: 'syz.1.674': attribute type 32 has an invalid length.
[   84.022851][ T8189] netlink: 'syz.1.681': attribute type 32 has an invalid length.
[   84.210701][ T5822] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   84.770242][ T8205] wg2: entered promiscuous mode
[   84.772547][ T8205] wg2: entered allmulticast mode
[   84.785583][ T8208] netlink: 'syz.1.684': attribute type 39 has an invalid length.
[   84.838879][ T8212] netlink: 'syz.0.686': attribute type 1 has an invalid length.
[   84.883647][ T8216] netlink: 'syz.2.688': attribute type 32 has an invalid length.
[   84.897574][ T8218] openvswitch: netlink: Message has 4 unknown bytes.
[   85.823945][ T8255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.871694][ T8259] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20004
[   85.879478][ T8255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.899681][ T8261] __nla_validate_parse: 13 callbacks suppressed
[   85.899691][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'.
[   85.933919][ T8265] netlink: 56 bytes leftover after parsing attributes in process `syz.0.702'.
[   86.002256][ T8275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.054357][ T8280] bond0: (slave bond_slave_0): Releasing backup interface
[   86.057569][ T8280] bond0: (slave bond_slave_1): Releasing backup interface
[   86.062898][ T8280] team0: Port device team_slave_0 removed
[   86.066097][ T8280] team0: Port device team_slave_1 removed
[   86.068127][ T8280] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.070848][ T8280] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.076122][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'.
[   86.125128][ T8284] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.708'.
[   86.159233][ T8288] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[   86.162238][ T8287] IPVS: stopping backup sync thread 8288 ...
[   86.196664][ T8292] netlink: 'syz.0.710': attribute type 21 has an invalid length.
[   86.199352][ T8292] netlink: 128 bytes leftover after parsing attributes in process `syz.0.710'.
[   86.202227][ T8292] netlink: 'syz.0.710': attribute type 4 has an invalid length.
[   86.202359][ T8291] xt_l2tp: missing protocol rule (udp|l2tpip)
[   86.204651][ T8292] netlink: 'syz.0.710': attribute type 5 has an invalid length.
[   86.209176][ T8292] netlink: 3 bytes leftover after parsing attributes in process `syz.0.710'.
[   86.278170][  T986] wlan1: Trigger new scan to find an IBSS to join
[   86.288907][ T8295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.429040][ T8307] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   86.476502][ T8311] syzkaller1: tun_chr_ioctl cmd 1074025672
[   86.478966][ T8311] syzkaller1: ignored: set checksum enabled
[   86.557112][ T8314] openvswitch: netlink: Flow key attr not present in new flow.
[   86.579185][ T8316] netlink: 'syz.0.720': attribute type 32 has an invalid length.
[   86.797231][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'.
[   86.815060][ T8340] netlink: 'syz.0.723': attribute type 9 has an invalid length.
[   86.820417][ T8343] netlink: 'syz.0.723': attribute type 9 has an invalid length.
[   86.882292][ T8354] netlink: 104 bytes leftover after parsing attributes in process `syz.2.726'.
[   86.894416][ T8356] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   86.897430][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'.
[   86.913339][ T8358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.972288][ T8362] bond0: left promiscuous mode
[   86.973855][ T8362] bond_slave_0: left promiscuous mode
[   86.975753][ T8362] bond_slave_1: left promiscuous mode
[   86.977531][ T8362] bridge_slave_1: left promiscuous mode
[   86.981936][ T8362] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.984408][ T8362] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   87.014792][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'.
[   87.058498][ T8373] xt_l2tp: v2 sid > 0xffff: 4294901760
[   87.087284][ T8380] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   87.091935][ T8380] openvswitch: netlink: Message has 1 unknown bytes.
[   87.103455][ T8382] netlink: 'syz.0.737': attribute type 32 has an invalid length.
[   87.246078][ T6645] hid-generic 0005:0B57:0007.0001: collection stack underflow
[   87.254152][ T6645] hid-generic 0005:0B57:0007.0001: item 0 0 0 12 parsing failed
[   87.261411][ T6645] hid-generic 0005:0B57:0007.0001: probe with driver hid-generic failed with error -22
[   87.478499][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   87.551097][ T8432] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   87.592275][ T8438] x_tables: duplicate underflow at hook 1
[   87.623516][ T8442] netlink: 'syz.0.755': attribute type 32 has an invalid length.
[   88.151336][ T8475] netlink: 'syz.0.762': attribute type 32 has an invalid length.
[   88.593947][ T8503] dvmrp0: entered allmulticast mode
[   88.630454][ T8511] netlink: 'syz.2.771': attribute type 32 has an invalid length.
[   88.642814][ T8514] xt_nat: multiple ranges no longer supported
[   88.826004][ T8534] sctp: [Deprecated]: syz.2.776 (pid 8534) Use of struct sctp_assoc_value in delayed_ack socket option.
[   88.826004][ T8534] Use struct sctp_sack_info instead
[   89.001632][ T8551] hsr_slave_0: left promiscuous mode
[   89.163977][ T8563] x_tables: duplicate underflow at hook 3
[   89.318232][ T1089] wlan1: Trigger new scan to find an IBSS to join
[   89.593443][ T8607] syzkaller0: entered allmulticast mode
[   90.228445][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.539460][ T8642] x_tables: duplicate underflow at hook 1
[   91.325805][ T8698] validate_nla: 7 callbacks suppressed
[   91.325815][ T8698] netlink: 'syz.0.820': attribute type 1 has an invalid length.
[   91.340896][ T8698] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.346595][ T8698] ipvlan2: entered allmulticast mode
[   91.348916][ T8701] xt_hashlimit: size too large, truncated to 1048576
[   91.353362][ T8698] bond3: entered allmulticast mode
[   91.360158][ T8701] syz.0.820: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[   91.361307][ T8699] bond3: (slave gretap1): making interface the new active one
[   91.365795][ T8701] CPU: 1 UID: 0 PID: 8701 Comm: syz.0.820 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   91.365807][ T8701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   91.365812][ T8701] Call Trace:
[   91.365815][ T8701]  <TASK>
[   91.365818][ T8701]  dump_stack_lvl+0x189/0x250
[   91.365833][ T8701]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.365844][ T8701]  ? __pfx__printk+0x10/0x10
[   91.365859][ T8701]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   91.365867][ T8701]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   91.365875][ T8701]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   91.365883][ T8701]  warn_alloc+0x214/0x310
[   91.365894][ T8701]  ? __pfx_warn_alloc+0x10/0x10
[   91.365905][ T8701]  ? __get_vm_area_node+0x28f/0x300
[   91.365912][ T8701]  ? htable_create+0xfc/0x7a0
[   91.365924][ T8701]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   91.365942][ T8701]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   91.365952][ T8701]  ? rcu_is_watching+0x15/0xb0
[   91.365963][ T8701]  ? htable_create+0xfc/0x7a0
[   91.365971][ T8701]  ? htable_create+0xfc/0x7a0
[   91.365979][ T8701]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   91.365987][ T8701]  ? htable_create+0xfc/0x7a0
[   91.365995][ T8701]  ? hashlimit_pernet+0x23/0x240
[   91.366007][ T8701]  htable_create+0xfc/0x7a0
[   91.366019][ T8701]  hashlimit_mt_check_common+0x719/0xa10
[   91.366032][ T8701]  hashlimit_mt_check_v1+0x221/0x360
[   91.366042][ T8701]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[   91.366053][ T8701]  ? xt_find_match+0x1f7/0x250
[   91.366065][ T8701]  xt_check_match+0x3d1/0xab0
[   91.366073][ T8701]  ? __pfx___mutex_lock+0x10/0x10
[   91.366085][ T8701]  ? __pfx_xt_check_match+0x10/0x10
[   91.366095][ T8701]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[   91.366106][ T8701]  ? xt_find_match+0x1f7/0x250
[   91.366117][ T8701]  translate_table+0x1553/0x2040
[   91.366134][ T8701]  ? __pfx_translate_table+0x10/0x10
[   91.366143][ T8701]  ? __might_fault+0xb0/0x130
[   91.366156][ T8701]  ? _copy_from_user+0x94/0xb0
[   91.366166][ T8701]  do_ip6t_set_ctl+0x970/0xce0
[   91.366177][ T8701]  ? rcu_is_watching+0x15/0xb0
[   91.366187][ T8701]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[   91.366202][ T8701]  ? __pfx___mutex_lock+0x10/0x10
[   91.366212][ T8701]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   91.366227][ T8701]  ? __pfx_futex_wake+0x10/0x10
[   91.366238][ T8701]  nf_setsockopt+0x26f/0x290
[   91.366249][ T8701]  rawv6_setsockopt+0x23b/0x5b0
[   91.366258][ T8701]  ? __lock_acquire+0xab9/0xd20
[   91.366268][ T8701]  ? __pfx_rawv6_setsockopt+0x10/0x10
[   91.366278][ T8701]  ? aa_sock_opt_perm+0x74/0x110
[   91.366288][ T8701]  ? sock_common_setsockopt+0x36/0xc0
[   91.366294][ T8701]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   91.366306][ T8701]  do_sock_setsockopt+0x25a/0x3e0
[   91.366316][ T8701]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   91.366325][ T8701]  ? __fget_files+0x2a/0x420
[   91.366336][ T8701]  __x64_sys_setsockopt+0x18b/0x220
[   91.366346][ T8701]  do_syscall_64+0xfa/0x3b0
[   91.366353][ T8701]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.366362][ T8701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.366369][ T8701]  ? exc_page_fault+0x9f/0xf0
[   91.366379][ T8701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.366386][ T8701] RIP: 0033:0x7f1f4cb8e929
[   91.366393][ T8701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.366399][ T8701] RSP: 002b:00007f1f4d9a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   91.366406][ T8701] RAX: ffffffffffffffda RBX: 00007f1f4cdb6160 RCX: 00007f1f4cb8e929
[   91.366412][ T8701] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000a
[   91.366416][ T8701] RBP: 00007f1f4cc10b39 R08: 00000000000004c0 R09: 0000000000000000
[   91.366420][ T8701] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[   91.366424][ T8701] R13: 0000000000000000 R14: 00007f1f4cdb6160 R15: 00007ffc766ba858
[   91.366435][ T8701]  </TASK>
[   91.366438][ T8701] Mem-Info:
[   91.367733][ T8699] gretap1: entered allmulticast mode
[   91.368361][ T8699] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   91.372515][ T8701] active_anon:12477 inactive_anon:0 isolated_anon:0
[   91.372515][ T8701]  active_file:1025 inactive_file:38220 isolated_file:0
[   91.372515][ T8701]  unevictable:1768 dirty:67 writeback:0
[   91.372515][ T8701]  slab_reclaimable:9450 slab_unreclaimable:55010
[   91.372515][ T8701]  mapped:17923 shmem:2442 pagetables:890
[   91.372515][ T8701]  sec_pagetables:0 bounce:0
[   91.372515][ T8701]  kernel_misc_reclaimable:0
[   91.372515][ T8701]  free:290670 free_pcp:18422 free_cma:0
[   91.513047][ T8701] Node 0 active_anon:10056kB inactive_anon:0kB active_file:3136kB inactive_file:128124kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31300kB dirty:236kB writeback:0kB shmem:5096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8568kB pagetables:2444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   91.528819][ T8701] Node 1 active_anon:39784kB inactive_anon:0kB active_file:964kB inactive_file:24756kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40188kB dirty:32kB writeback:0kB shmem:4672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2844kB pagetables:1456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   91.539230][ T8701] Node 0 DMA free:14400kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:640kB local_pcp:320kB free_cma:0kB
[   91.548788][ T8701] lowmem_reserve[]: 0 815 815 815 815
[   91.550486][ T8701] Node 0 DMA32 free:271492kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10328kB inactive_anon:0kB active_file:3204kB inactive_file:128124kB unevictable:3536kB writepending:236kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:28432kB local_pcp:17372kB free_cma:0kB
[   91.561372][ T8701] lowmem_reserve[]: 0 0 0 0 0
[   91.563050][ T8701] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   91.573488][ T8701] lowmem_reserve[]: 0 0 854 854 854
[   91.576260][ T8701] Node 1 Normal free:416784kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39784kB inactive_anon:0kB active_file:964kB inactive_file:24756kB unevictable:3536kB writepending:32kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:44996kB local_pcp:24024kB free_cma:0kB
[   91.586421][ T8701] lowmem_reserve[]: 0 0 0 0 0
[   91.590491][ T8708] __nla_validate_parse: 20 callbacks suppressed
[   91.590498][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'.
[   91.604613][ T8701] Node 0 DMA: 0*4kB 0*8kB 0*16kB 24*32kB (U) 15*64kB (U) 5*128kB (U) 3*256kB (U) 2*512kB (U) 4*1024kB (U) 3*2048kB (UM) 0*4096kB = 14400kB
[   91.613986][ T8701] Node 0 DMA32: 368*4kB (UME) 67*8kB (UE) 460*16kB (UME) 1001*32kB (UME) 404*64kB (UM) 164*128kB (UM) 98*256kB (UME) 46*512kB (UM) 25*1024kB (UM) 7*2048kB (UM) 23*4096kB (UM) = 271032kB
[   91.619999][ T8701] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   91.624950][ T8701] Node 1 Normal: 25*4kB (U) 759*8kB (UE) 541*16kB (UME) 160*32kB (UE) 208*64kB (UME) 84*128kB (UE) 44*256kB (UME) 12*512kB (UME) 7*1024kB (UM) 2*2048kB (UM) 84*4096kB (UM) = 416748kB
[   91.634305][ T8716] netlink: 388 bytes leftover after parsing attributes in process `syz.2.826'.
[   91.645624][ T8701] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   91.648861][ T8701] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   91.651808][ T8701] 41721 total pagecache pages
[   91.653249][ T8701] 0 pages in swap cache
[   91.654531][ T8701] Free swap  = 124996kB
[   91.655826][ T8701] Total swap = 124996kB
[   91.657271][ T8719] netlink: 32 bytes leftover after parsing attributes in process `syz.1.827'.
[   91.662312][ T8701] 786301 pages RAM
[   91.663882][ T8701] 0 pages HighMem/MovableOnly
[   91.665374][ T8701] 240368 pages reserved
[   91.666654][ T8701] 0 pages cma reserved
[   91.705392][ T8723] netlink: 'syz.1.830': attribute type 4 has an invalid length.
[   91.709651][ T8723] netlink: 'syz.1.830': attribute type 17 has an invalid length.
[   91.721035][ T8727] netlink: 'syz.2.831': attribute type 32 has an invalid length.
[   91.742248][ T8731] netlink: 'syz.0.832': attribute type 3 has an invalid length.
[   91.781497][ T8737] netlink: 'syz.0.834': attribute type 10 has an invalid length.
[   91.951202][ T8760] netlink: 'syz.0.840': attribute type 11 has an invalid length.
[   91.953625][ T8760] netlink: 'syz.0.840': attribute type 11 has an invalid length.
[   91.966277][ T8760] netlink: 224 bytes leftover after parsing attributes in process `syz.0.840'.
[   91.972072][ T8760] netlink: 168 bytes leftover after parsing attributes in process `syz.0.840'.
[   92.082039][ T8774] netlink: 'syz.2.845': attribute type 10 has an invalid length.
[   92.084743][ T8774] netlink: 40 bytes leftover after parsing attributes in process `syz.2.845'.
[   92.087728][ T8774] dummy0: entered promiscuous mode
[   92.089651][ T8774] dummy0: entered allmulticast mode
[   92.093020][ T8774] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   92.098371][ T8774] netlink: 1300 bytes leftover after parsing attributes in process `syz.2.845'.
[   92.125791][ T8777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.846'.
[   92.209298][ T8784] @: renamed from bond_slave_0
[   92.254027][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'.
[   92.366947][ T8794] vxcan1: entered allmulticast mode
[   92.441206][ T8811] netlink: 68 bytes leftover after parsing attributes in process `syz.1.857'.
[   92.562021][ T8822] netlink: 'syz.1.860': attribute type 1 has an invalid length.
[   92.586035][ T8825] netlink: 'syz.1.861': attribute type 1 has an invalid length.
[   92.589375][ T8825] netlink: 'syz.1.861': attribute type 2 has an invalid length.
[   93.015496][ T8831] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   93.130106][ T8837] netlink: del zone limit has 4 unknown bytes
[   93.204782][ T8846] pim6reg0: tun_chr_ioctl cmd 1074025694
[   93.293818][ T8815] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   93.538261][ T8886] IPVS: set_ctl: invalid protocol: 47 172.20.20.24:20004
[   93.634306][ T8892] tipc: Started in network mode
[   93.636112][ T8892] tipc: Node identity d6612d2a707d, cluster identity 4711
[   93.639413][ T8892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.644369][ T8891] tipc: Resetting bearer <eth:syzkaller0>
[   94.420044][ T8891] tipc: Disabling bearer <eth:syzkaller0>
[   94.427465][ T8900] dvmrp0: entered allmulticast mode
[   94.515995][ T8913] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   94.520588][ T8913] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   94.526605][ T8904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.050338][ T8936] 8021q: adding VLAN 0 to HW filter on device team0
[   95.053062][ T8936] dummy0: left promiscuous mode
[   95.054749][ T8936] dummy0: left allmulticast mode
[   95.059541][ T8936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.073736][ T8936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.172784][ T8944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.224719][ T8946] batman_adv: batadv0: Interface deactivated: gretap2
[   95.226998][ T8946] batman_adv: batadv0: Removing interface: gretap2
[   95.248443][ T6645] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   95.478130][ T6645] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   95.762028][ T8933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.299590][ T8978] SET target dimension over the limit!
[   96.326502][ T8983] @: renamed from veth0_vlan
[   96.384205][ T8989] validate_nla: 4 callbacks suppressed
[   96.384215][ T8989] netlink: 'syz.1.915': attribute type 4 has an invalid length.
[   96.394018][ T8989] netlink: 'syz.1.915': attribute type 4 has an invalid length.
[   96.433491][ T8991] tipc: Started in network mode
[   96.435171][ T8991] tipc: Node identity 9275a5be535f, cluster identity 4711
[   96.437456][ T8991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.441996][ T8991] syzkaller0: entered promiscuous mode
[   96.443694][ T8991] syzkaller0: entered allmulticast mode
[   96.456596][ T8991] tipc: Resetting bearer <eth:syzkaller0>
[   96.463961][ T8990] tipc: Resetting bearer <eth:syzkaller0>
[   96.471560][ T8990] tipc: Disabling bearer <eth:syzkaller0>
[   96.623386][ T9004] netlink: 'syz.2.921': attribute type 10 has an invalid length.
[   96.627764][ T9004] team0: Device ipvlan1 failed to register rx_handler
[   96.760439][ T9014] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   96.816858][ T9014] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   96.904808][ T9029] __nla_validate_parse: 15 callbacks suppressed
[   96.904817][ T9029] netlink: 212316 bytes leftover after parsing attributes in process `syz.2.926'.
[   97.009110][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'.
[   97.030934][ T9040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.929'.
[   97.030946][ T9039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.929'.
[   97.063000][ T9044] syzkaller1: entered promiscuous mode
[   97.064811][ T9044] syzkaller1: entered allmulticast mode
[   97.070104][ T9044] netlink: 830 bytes leftover after parsing attributes in process `syz.2.930'.
[   97.145337][ T9046] veth0: entered promiscuous mode
[   97.182455][ T9045] veth0: left promiscuous mode
[   97.235952][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'.
[   97.284845][ T9066] netlink: 236 bytes leftover after parsing attributes in process `syz.0.938'.
[   97.315792][ T9071] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   97.368272][ T9075] netlink: 84 bytes leftover after parsing attributes in process `syz.0.941'.
[   97.504709][ T9089] netlink: 'syz.2.946': attribute type 21 has an invalid length.
[   97.508194][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.946'.
[   97.527822][ T9089] ieee802154 phy1 wpan1: encryption failed: -22
[   97.554034][ T9099] netlink: 'syz.2.946': attribute type 21 has an invalid length.
[   97.554616][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.946'.
[   97.595360][ T9095] netlink: 'syz.1.949': attribute type 21 has an invalid length.
[   97.639776][ T9110] openvswitch: netlink: Key 6 has unexpected len 18 expected 2
[   97.894306][ T9144] batadv_slave_0: entered promiscuous mode
[   97.897603][ T9143] batadv_slave_0: left promiscuous mode
[   97.930254][ T9150] netlink: 'syz.2.965': attribute type 1 has an invalid length.
[   97.944318][ T9150] 8021q: adding VLAN 0 to HW filter on device bond2
[   97.951923][ T9150] ipvlan3: entered allmulticast mode
[   97.953588][ T9150] bond2: entered allmulticast mode
[   97.963524][ T9150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.124378][ T9177] netlink: get zone limit has 4 unknown bytes
[   98.163803][ T9185] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   98.173351][ T9189] set match dimension is over the limit!
[   98.345949][ T9218] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   98.443042][ T9231] vlan4: entered promiscuous mode
[   98.444866][ T9231] vlan4: entered allmulticast mode
[   98.446572][ T9231] hsr_slave_1: entered allmulticast mode
[   98.467704][ T9234] netlink: 'syz.0.994': attribute type 83 has an invalid length.
[   98.471237][ T9234] netlink: 'syz.0.994': attribute type 8 has an invalid length.
[   98.547889][ T9240] syzkaller1: entered promiscuous mode
[   98.550580][ T9240] syzkaller1: entered allmulticast mode
[   98.553286][ T9240] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[   98.556773][ T9240] netlink: 'syz.0.996': attribute type 9 has an invalid length.
[   98.562692][ T9240] macvlan2: entered allmulticast mode
[   98.564428][ T9240] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   98.716823][ T9268] sctp: [Deprecated]: syz.2.1005 (pid 9268) Use of int in max_burst socket option deprecated.
[   98.716823][ T9268] Use struct sctp_assoc_value instead
[   98.961791][ T9300] sctp: [Deprecated]: syz.2.1016 (pid 9300) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.961791][ T9300] Use struct sctp_sack_info instead
[   99.318099][   T32] wlan1: Trigger new scan to find an IBSS to join
[   99.772104][ T9349] openvswitch: netlink: Message has 20 unknown bytes.
[   99.774882][ T9349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.919791][ T9351] vlan2: entered allmulticast mode
[  100.178288][ T9411] ipt_ECN: cannot use operation on non-tcp rule
[  100.213909][ T9413] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  100.217018][ T9413] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  100.260086][ T9423] veth0_to_batadv: entered allmulticast mode
[  100.295026][ T9427] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.298111][ T9427] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.300840][ T9427] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.303587][ T9427] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.324660][ T9429] vlan2: entered promiscuous mode
[  100.326250][ T9429] dummy0: entered promiscuous mode
[  100.532657][ T9455] syzkaller1: tun_chr_ioctl cmd 1074025677
[  100.535067][ T9455] syzkaller1: Linktype set failed because interface is up
[  100.572100][ T9460] ip6gretap1: entered promiscuous mode
[  100.573829][ T9460] ip6gretap1: entered allmulticast mode
[  100.742818][ T9481] xt_ecn: cannot match TCP bits for non-tcp packets
[  100.806539][ T9497] tipc: Started in network mode
[  100.808352][ T9497] tipc: Node identity 080211000001, cluster identity 4711
[  100.810672][ T9497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.813114][ T9498] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  100.815954][ T9496] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  100.819206][ T9497] tipc: Resetting bearer <eth:syzkaller0>
[  100.965243][ T9504] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  101.805961][ T9546] sctp: [Deprecated]: syz.1.1076 (pid 9546) Use of int in maxseg socket option.
[  101.805961][ T9546] Use struct sctp_assoc_value instead
[  101.811472][ T6645] tipc: Node number set to 134418688
[  101.959896][ T9561] __nla_validate_parse: 28 callbacks suppressed
[  101.959905][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'.
[  101.970228][ T9556] syzkaller1: entered promiscuous mode
[  101.972142][ T9556] syzkaller1: entered allmulticast mode
[  101.975260][ T9556] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1080'.
[  101.981049][ T9556] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1080'.
[  101.984114][ T9556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1080'.
[  101.989151][ T9563] Cannot find del_set index 4 as target
[  101.989160][ T9567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1080'.
[  102.133439][ T9582] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1086'.
[  102.137120][ T9582] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  102.265185][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'.
[  102.279539][ T9398] wlan1: Trigger new scan to find an IBSS to join
[  102.313546][ T9598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.320247][ T9598] syzkaller0: entered promiscuous mode
[  102.322422][ T9598] syzkaller0: entered allmulticast mode
[  102.332379][ T9600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1092'.
[  102.345272][ T9600] 8021q: adding VLAN 0 to HW filter on device bond4
[  102.349212][ T9596] tipc: Resetting bearer <eth:syzkaller0>
[  102.359495][ T9596] tipc: Disabling bearer <eth:syzkaller0>
[  102.367277][ T9601] macvlan3: entered promiscuous mode
[  102.369990][ T9601] macvlan3: entered allmulticast mode
[  102.372234][ T9601] bond4: (slave macvlan3): Opening slave failed
[  102.380895][ T9600] macvlan3: entered promiscuous mode
[  102.382679][ T9600] macvlan3: entered allmulticast mode
[  102.385313][ T9600] bond4: (slave macvlan3): Opening slave failed
[  102.452331][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1093'.
[  102.465630][ T9605] sch_tbf: burst 88 is lower than device veth11 mtu (1514) !
[  102.567766][ T9617] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1097'.
[  102.658170][ T9629] bond0: entered promiscuous mode
[  102.660556][ T9629] bond_slave_0: entered promiscuous mode
[  102.662967][ T9629] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  102.666004][ T9629] hsr1: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network
[  102.670948][ T9629] hsr1: entered promiscuous mode
[  102.721973][ T9635] validate_nla: 13 callbacks suppressed
[  102.721983][ T9635] netlink: 'syz.1.1104': attribute type 1 has an invalid length.
[  102.821529][ T9643] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  102.835994][ T9643] 8021q: adding VLAN 0 to HW filter on device bond5
[  102.849565][ T9643] 8021q: adding VLAN 0 to HW filter on device bond5
[  102.851917][ T9643] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[  102.855498][ T9643] bond5: (slave vti0): Error -95 calling set_mac_address
[  102.992148][ T9664] netlink: 'syz.0.1113': attribute type 1 has an invalid length.
[  103.184438][ T9693] tls_set_device_offload_rx: netdev not found
[  103.189151][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.193364][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.195416][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.198552][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.200745][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.202900][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.205044][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.209492][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.211706][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.214806][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.217972][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.220216][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.222426][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.224685][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.226884][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.229320][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.231641][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.234682][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.236796][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.239132][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.241352][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.243409][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.245481][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.247671][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.251683][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.253777][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.255835][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.258498][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.260842][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.263002][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.265933][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.273130][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.275262][ T9693] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001
[  103.318361][ T9404] wlan0: Trigger new scan to find an IBSS to join
[  103.339368][ T9708] netlink: 'syz.2.1122': attribute type 11 has an invalid length.
[  103.364218][ T9712] ieee802154 phy1 wpan1: encryption failed: -22
[  103.478052][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  103.651738][ T9750] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20004
[  103.656359][ T9753] netlink: 'syz.2.1132': attribute type 2 has an invalid length.
[  103.762474][ T9770] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  103.790263][ T9774] tipc: Cannot configure node identity twice
[  103.792653][ T9772] tipc: Cannot configure node identity twice
[  103.844974][ T9772] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  103.847794][ T9772] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  103.850671][ T9772] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  103.853410][ T9772] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  103.871498][ T9772] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.939268][ T9772] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.969330][ T9791] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  103.999068][ T9772] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.055881][ T9772] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.114776][ T9772] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.134710][ T9772] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.145268][ T9772] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.153469][ T9772] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.620763][ T9829] tls_set_device_offload: netdev not found
[  105.314936][ T9875] netlink: 'syz.1.1168': attribute type 32 has an invalid length.
[  105.318148][ T9398] wlan1: Trigger new scan to find an IBSS to join
[  105.631226][ T9916] netlink: 'syz.0.1179': attribute type 32 has an invalid length.
[  105.855068][ T9935] netlink: 'syz.0.1184': attribute type 2 has an invalid length.
[  105.882715][ T9937] netlink: 'syz.0.1185': attribute type 21 has an invalid length.
[  105.885353][ T9937] netlink: 'syz.0.1185': attribute type 4 has an invalid length.
[  105.887908][ T9937] netlink: 'syz.0.1185': attribute type 3 has an invalid length.
[  105.950040][ T9944] xt_TCPMSS: Only works on TCP SYN packets
[  106.260416][ T9401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.359035][   T32] wlan0: Trigger new scan to find an IBSS to join
[  106.689345][ T9962] 8021q: adding VLAN 0 to HW filter on device bond3
[  106.697528][ T9962] macvlan2: entered promiscuous mode
[  106.700389][ T9962] macvlan2: entered allmulticast mode
[  106.702858][ T9962] bond3: (slave macvlan2): Opening slave failed
[  106.759336][ T9966] syzkaller1: entered promiscuous mode
[  106.761417][ T9966] syzkaller1: entered allmulticast mode
[  106.827602][ T9971] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.835550][ T9971] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.838233][ T9971] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.840752][ T9971] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.843318][ T9971] geneve2: entered promiscuous mode
[  106.917504][ T9980] netlink: 'syz.2.1200': attribute type 11 has an invalid length.
[  106.992515][ T9988] __nla_validate_parse: 25 callbacks suppressed
[  106.992524][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'.
[  107.001397][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1201'.
[  107.005854][ T9988] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1201'.
[  107.010038][ T9988] nbd: socks must be embedded in a SOCK_ITEM attr
[  107.024761][ T9988] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1201'.
[  107.164870][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1205'.
[  107.996832][T10059] syzkaller1: entered promiscuous mode
[  108.004726][T10059] syzkaller1: entered allmulticast mode
[  108.030014][T10063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1218'.
[  108.032970][T10063] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1218'.
[  108.036046][T10063] tipc: Invalid UDP bearer configuration
[  108.036074][T10063] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  108.198861][T10069] !: renamed from dummy0
[  108.206975][T10070] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1221'.
[  108.298828][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'.
[  108.390801][T10078] validate_nla: 4 callbacks suppressed
[  108.390811][T10078] netlink: 'syz.1.1224': attribute type 32 has an invalid length.
[  108.433599][T10084] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  108.607613][T10111] netlink: 'syz.0.1233': attribute type 1 has an invalid length.
[  108.634371][T10114] netlink: 'syz.0.1234': attribute type 32 has an invalid length.
[  108.872024][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'.
[  108.945397][T10136] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  108.950268][T10136] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  108.953067][T10136] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  109.053611][T10148] x_tables: duplicate underflow at hook 1
[  109.081676][T10150] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  109.136281][ T5822] Bluetooth: hci2: link tx timeout
[  109.138526][ T5822] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  109.319439][   T32] wlan0: Trigger new scan to find an IBSS to join
[  109.384883][T10162] vlan4: entered promiscuous mode
[  109.387155][T10162] bond0: entered promiscuous mode
[  109.622578][T10169] sctp: [Deprecated]: syz.1.1253 (pid 10169) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.622578][T10169] Use struct sctp_sack_info instead
[  109.720401][T10178] netlink: 'syz.1.1255': attribute type 10 has an invalid length.
[  109.727195][T10178] bridge_slave_1: entered promiscuous mode
[  109.729991][T10178] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  110.010931][T10212] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000
[  110.169087][T10240] syzkaller1: tun_chr_ioctl cmd 1074025672
[  110.172312][T10240] syzkaller1: ignored: set checksum enabled
[  110.175409][T10239] netlink: 'syz.1.1273': attribute type 11 has an invalid length.
[  110.240329][ T9401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.496682][T10261] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  110.609651][T10271] netlink: 'syz.2.1287': attribute type 21 has an invalid length.
[  110.612694][T10271] blkio.reset_stats is deprecated
[  110.666402][T10277] syzkaller1: entered promiscuous mode
[  110.668370][T10277] syzkaller1: entered allmulticast mode
[  110.992751][T10299] netlink: 'syz.0.1297': attribute type 32 has an invalid length.
[  111.073276][T10311] netlink: 'syz.2.1300': attribute type 10 has an invalid length.
[  111.076836][T10311] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  111.115626][T10319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  111.159992][ T5200] Bluetooth: hci2: command 0x0405 tx timeout
[  111.196469][T10329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.199664][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.202841][T10329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.207218][T10329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.210899][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.215340][T10329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.219316][T10329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.248258][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.346403][T10332] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.349841][T10332] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.352808][T10332] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.356036][T10332] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.366117][T10332] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.369323][T10332] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.372168][T10332] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.374975][T10332] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.543080][T10346] ip6tnl1: entered promiscuous mode
[  111.544864][T10346] ip6tnl1: entered allmulticast mode
[  111.548484][T10346] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[  112.035120][T10364] __nla_validate_parse: 20 callbacks suppressed
[  112.035130][T10364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1317'.
[  112.060055][T10368] netlink: 'syz.2.1319': attribute type 32 has an invalid length.
[  112.125342][T10378] bridge0: port 1(erspan0) entered blocking state
[  112.127888][T10378] bridge0: port 1(erspan0) entered disabled state
[  112.132428][T10378] erspan0: entered allmulticast mode
[  112.136695][T10378] erspan0: left allmulticast mode
[  112.140313][T10379] bridge0: port 1(erspan0) entered blocking state
[  112.143061][T10379] bridge0: port 1(erspan0) entered disabled state
[  112.145363][T10379] erspan0: entered allmulticast mode
[  112.150557][T10379] erspan0: left allmulticast mode
[  112.156178][T10378] SET target dimension over the limit!
[  112.421375][T10404] netlink: 'syz.1.1326': attribute type 14 has an invalid length.
[  112.840377][T10410] vlan2: entered promiscuous mode
[  112.842092][T10410] veth0_to_hsr: entered promiscuous mode
[  112.907631][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'.
[  112.911414][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'.
[  113.390116][T10435] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1335'.
[  113.799481][T10438] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1336'.
[  113.847413][T10442] netlink: 'syz.0.1338': attribute type 1 has an invalid length.
[  113.851841][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1338'.
[  113.893636][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1339'.
[  114.045239][T10457] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1341'.
[  114.049040][T10457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1341'.
[  114.242816][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1344'.
[  114.249456][T10463] : renamed from pim6reg1
[  114.338646][T10467] netlink: 'syz.0.1345': attribute type 1 has an invalid length.
[  114.503622][T10489] xt_cgroup: invalid path, errno=-2
[  114.637097][T10501] netlink: 'syz.0.1356': attribute type 1 has an invalid length.
[  114.650739][T10501] 8021q: adding VLAN 0 to HW filter on device bond7
[  114.661054][T10501] 8021q: adding VLAN 0 to HW filter on device bond7
[  114.663326][T10501] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  114.667189][T10501] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  114.709426][T10503] gretap2: entered promiscuous mode
[  114.712665][T10503] bond7: (slave gretap2): making interface the new active one
[  114.715762][T10503] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  114.790817][T10505] lo speed is unknown, defaulting to 1000
[  114.793386][T10505] lo speed is unknown, defaulting to 1000
[  114.795614][T10505] lo speed is unknown, defaulting to 1000
[  114.879882][   T95] lo speed is unknown, defaulting to 1000
[  114.879954][T10505] infiniband syz0: set down
[  114.883518][T10505] infiniband syz0: added lo
[  114.885751][T10505] syz0: rxe_create_cq: returned err = -12
[  114.887688][T10505] infiniband syz0: Couldn't create ib_mad CQ
[  114.889919][T10505] infiniband syz0: Couldn't open port 1
[  114.901103][T10505] RDS/IB: syz0: added
[  114.902570][T10505] smc: adding ib device syz0 with port count 1
[  114.904538][T10505] smc:    ib device syz0 port 1 has pnetid 
[  114.907429][  T790] lo speed is unknown, defaulting to 1000
[  114.909841][T10505] lo speed is unknown, defaulting to 1000
[  114.996448][T10505] lo speed is unknown, defaulting to 1000
[  115.081625][T10505] lo speed is unknown, defaulting to 1000
[  115.254055][T10516] netlink: 'syz.0.1360': attribute type 32 has an invalid length.
[  115.332451][T10533] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  115.374143][T10530] netlink: 'syz.1.1363': attribute type 23 has an invalid length.
[  115.442403][T10548] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  115.593048][T10566] netlink: 'syz.0.1372': attribute type 32 has an invalid length.
[  115.717339][T10576] lo speed is unknown, defaulting to 1000
[  116.076987][T10585] SET target dimension over the limit!
[  116.226812][T10593] netlink: 'syz.0.1379': attribute type 32 has an invalid length.
[  116.327665][T10607] netlink: 'syz.2.1381': attribute type 3 has an invalid length.
[  116.420266][T10622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  116.918182][    C0] net_ratelimit: 25 callbacks suppressed
[  116.918193][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.923316][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.253892][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.257035][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.284064][T10643] __nla_validate_parse: 10 callbacks suppressed
[  117.284073][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'.
[  117.301581][T10643] macsec1: entered allmulticast mode
[  117.303437][T10643] veth1: entered allmulticast mode
[  117.311697][T10643] veth1: left allmulticast mode
[  117.496918][T10667] Unknown options in mask 700
[  117.525031][T10674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1397'.
[  117.532197][T10675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1397'.
[  117.668878][T10685] netlink: 'syz.1.1400': attribute type 2 has an invalid length.
[  117.787514][T10696] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  117.979351][T10719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1412'.
[  118.052266][ T9397] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  118.081216][T10736] Unsupported ieee802154 address type: 0
[  118.117799][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1419'.
[  118.121891][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1419'.
[  118.183648][T10747] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1422'.
[  118.186004][T10750] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1423'.
[  118.191245][T10749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1423'.
[  118.286161][T10768] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1429'.
[  118.294670][T10768] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  118.371291][T10775] syzkaller1: entered promiscuous mode
[  118.374304][T10775] syzkaller1: entered allmulticast mode
[  118.502632][T10784] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  118.505252][T10784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.537120][T10788] netlink: 'syz.0.1437': attribute type 12 has an invalid length.
[  118.838586][  T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.841447][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.108592][T10809] netlink: 'syz.1.1443': attribute type 9 has an invalid length.
[  119.111238][T10809] netlink: 'syz.1.1443': attribute type 6 has an invalid length.
[  119.232290][T10814] netlink: 'syz.1.1445': attribute type 2 has an invalid length.
[  119.322375][   T33] audit: type=1800 audit(1751949414.797:2): pid=10822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1449" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2311 res=0 errno=0
[  119.330470][   T33] audit: type=1800 audit(1751949414.807:3): pid=10822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1449" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2311 res=0 errno=0
[  119.398149][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.491827][T10833] @: renamed from vlan0 (while UP)
[  119.580945][T10846] 8021q: VLANs not supported on team0
[  119.635932][T10857] atomic_op ffff88803982b998 conn xmit_atomic 0000000000000000
[  119.710387][T10868] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  119.774834][T10879] lo speed is unknown, defaulting to 1000
[  119.863357][T10883] netlink: 'syz.0.1472': attribute type 4 has an invalid length.
[  120.200537][T10894] pim6reg: entered allmulticast mode
[  120.206593][T10895] IPVS: set_ctl: invalid protocol: 59 172.30.1.2:20001
[  120.358171][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.469334][T10920] netlink: 'syz.1.1482': attribute type 32 has an invalid length.
[  120.495406][T10924] netlink: 'syz.0.1483': attribute type 6 has an invalid length.
[  120.597132][T10942] netlink: 'syz.1.1488': attribute type 4 has an invalid length.
[  123.078946][  T790] page_pool_release_retry() stalled pool shutdown: id 18, 1 inflight 60 sec
[  125.888280][  T790] net_ratelimit: 2 callbacks suppressed
[  125.888294][  T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.893854][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.518236][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.521252][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.801673][  T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.804538][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.999002][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.281167][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.918703][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.921655][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.478125][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  136.936836][T10954] macvlan0: left promiscuous mode
[  136.961047][T10954] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.963649][T10954] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.966193][T10954] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.968775][T10954] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.975142][T10954] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  136.980660][T10954] vlan2: left promiscuous mode
[  136.982347][T10954] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  136.988407][T10954] bond2: left promiscuous mode
[  136.990051][T10954] bond2: left allmulticast mode
[  136.993417][T10954] gtp0: left promiscuous mode
[  136.994998][T10954] gtp0: left allmulticast mode
[  137.012487][T10954] vlan4: left promiscuous mode
[  137.014144][T10954] bond0: left promiscuous mode
[  137.015679][T10954] bridge_slave_1: left promiscuous mode
[  137.052329][T10966] netlink: 'syz.2.1496': attribute type 32 has an invalid length.
[  137.365949][T10998] __nla_validate_parse: 19 callbacks suppressed
[  137.365958][T10998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1505'.
[  137.425688][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'.
[  137.430772][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'.
[  137.433610][T11003] netlink: 'syz.2.1505': attribute type 14 has an invalid length.
[  137.440924][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1506'.
[  137.470855][T11008] netlink: 'syz.2.1507': attribute type 5 has an invalid length.
[  137.506814][T11012] netlink: 'syz.2.1509': attribute type 1 has an invalid length.
[  137.523340][T11012] 8021q: adding VLAN 0 to HW filter on device bond4
[  137.538886][T11012] bond4: (slave veth9): Enslaving as an active interface with a down link
[  137.547218][T11018] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1511'.
[  137.612528][T11024] syzkaller1: entered allmulticast mode
[  137.679520][T11029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1514'.
[  137.725837][T11037] gre2: entered allmulticast mode
[  137.751006][T11039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1517'.
[  137.896023][T11054] netlink: 'syz.2.1521': attribute type 1 has an invalid length.
[  137.900723][T11054] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1521'.
[  137.924130][T11056] netlink: 'syz.2.1522': attribute type 1 has an invalid length.
[  137.937402][T11056] 8021q: adding VLAN 0 to HW filter on device bond5
[  137.995969][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'.
[  137.999957][T11058] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  138.002548][T11058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.594880][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'.
[  138.678242][ T9398] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  138.782925][T11086] lo speed is unknown, defaulting to 1000
[  138.811557][T11090] netlink: 'syz.2.1531': attribute type 24 has an invalid length.
[  140.312484][T11116] xt_connbytes: Forcing CT accounting to be enabled
[  140.315226][T11116] set match dimension is over the limit!
[  140.362871][T11120] dvmrp0: left allmulticast mode
[  140.414694][T11125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.660671][T11141] macvlan0: entered allmulticast mode
[  140.670909][T11141] macvlan0 (unregistering): left allmulticast mode
[  140.671078][T11143] netlink: 'syz.1.1547': attribute type 32 has an invalid length.
[  140.908217][T11171] erspan0: left promiscuous mode
[  140.919916][T11171] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.923057][T11171] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  140.931785][T11171] bridge_slave_1: default FDB implementation only supports local addresses
[  141.375095][T11212] netlink: 'syz.0.1567': attribute type 3 has an invalid length.
[  141.985396][T11228] veth7: entered promiscuous mode
[  142.161701][T11242] netlink: 'syz.2.1577': attribute type 9 has an invalid length.
[  142.168703][T11242] netlink: 'syz.2.1577': attribute type 9 has an invalid length.
[  142.491767][T11263] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  142.495434][T11264] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  142.501522][T11263] __nla_validate_parse: 21 callbacks suppressed
[  142.501531][T11263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1584'.
[  142.506639][T11264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1584'.
[  142.542235][T11266] vlan2: entered promiscuous mode
[  142.544067][T11266] vlan2: entered allmulticast mode
[  142.545704][T11266] hsr_slave_1: entered allmulticast mode
[  142.553198][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'.
[  142.622916][T11271] xfrm1: entered allmulticast mode
[  142.625418][T11271] netlink: 'syz.0.1587': attribute type 21 has an invalid length.
[  142.629125][T11271] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1587'.
[  142.998713][ T5200] Bluetooth: hci2: command 0x0405 tx timeout
[  143.253518][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.256433][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.259692][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.262555][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.265342][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.268310][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.271172][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.274131][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.277090][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.281176][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.284103][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.287135][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.290950][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.293960][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.296876][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.299946][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.303005][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.305848][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.308807][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.311642][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.314603][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.317601][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.320924][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.323825][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.326732][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.329770][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.332658][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.335565][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.339282][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.342195][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.345119][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.348201][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.351376][T11293] bridge_slave_1: default FDB implementation only supports local addresses
[  143.634069][T11296] netlink: 'syz.0.1596': attribute type 21 has an invalid length.
[  143.791516][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.799394][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.802148][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.807893][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.811584][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.954050][ T5863] dvmrp0 (unregistering): left allmulticast mode
[  143.977014][ T5863] team0: Port device geneve1 removed
[  144.281967][ T5863] bond0 (unregistering): (slave 1@): Releasing backup interface
[  144.285573][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.289181][ T5863] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  144.292822][ T5863] bond0 (unregistering): Released all slaves
[  144.348888][ T5863] bond1 (unregistering): Released all slaves
[  144.404878][ T5863] bond2 (unregistering): Released all slaves
[  144.458637][ T5863] bond3 (unregistering): Released all slaves
[  144.510532][ T5863] bond4 (unregistering): (slave veth9): Releasing active interface
[  144.514284][ T5863] bond4 (unregistering): Released all slaves
[  144.566476][ T5863] bond5 (unregistering): Released all slaves
[  144.590436][T11308] lo speed is unknown, defaulting to 1000
[  144.617400][T11327] netlink: 'syz.1.1604': attribute type 1 has an invalid length.
[  144.663663][ T5863] : left promiscuous mode
[  144.724157][ T5863] tipc: Left network mode
[  144.726702][T11337] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  144.825850][T11343] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1609'.
[  144.967315][T11343] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  144.971713][T11343] bond0 (unregistering): Released all slaves
[  145.173610][T11308] chnl_net:caif_netlink_parms(): no params data found
[  145.205510][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.208387][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.430957][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  145.452029][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  145.713885][T11383] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1617'.
[  145.723967][T11308] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.727694][T11308] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.731491][T11308] bridge_slave_0: entered allmulticast mode
[  145.739076][T11308] bridge_slave_0: entered promiscuous mode
[  145.745527][T11308] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.748631][T11308] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.751092][T11308] bridge_slave_1: entered allmulticast mode
[  145.753998][T11308] bridge_slave_1: entered promiscuous mode
[  145.773964][T11384] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1617'.
[  145.786295][T11308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.799034][T11308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.823283][T11308] team0: Port device team_slave_0 added
[  145.826635][T11308] team0: Port device team_slave_1 added
[  145.844700][T11308] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.847012][T11308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.859863][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1618'.
[  145.862726][T11308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.864534][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1618'.
[  145.866982][T11308] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.872495][T11308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.880604][ T5200] Bluetooth: hci2: command tx timeout
[  145.883336][T11308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.907610][T11308] hsr_slave_0: entered promiscuous mode
[  145.910097][T11308] hsr_slave_1: entered promiscuous mode
[  145.912148][T11308] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.914536][T11308] Cannot create hsr debugfs directory
[  145.930433][ T5863] IPVS: stop unused estimator thread 0...
[  146.060775][T11386] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1618'.
[  146.111018][T11392] batadv_slave_1: entered allmulticast mode
[  146.113752][T11391] batadv_slave_1: left allmulticast mode
[  146.116563][T11397] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999
[  146.122861][T11394] vlan0: entered promiscuous mode
[  146.124557][T11394] bridge0: entered promiscuous mode
[  146.126340][T11394] vlan0: entered allmulticast mode
[  146.128212][T11394] bridge0: entered allmulticast mode
[  146.148492][T11400] netlink: 'syz.0.1621': attribute type 11 has an invalid length.
[  146.274307][T11308] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  146.278632][T11308] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  146.282694][T11308] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  146.287020][T11308] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  146.314334][T11308] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.316698][T11308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.319103][T11308] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.321437][T11308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.363724][T11308] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.374300][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.377287][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.391831][T11308] 8021q: adding VLAN 0 to HW filter on device team0
[  146.399504][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.401783][ T9401] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.412323][ T9401] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.414546][ T9401] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.425882][T11431] macsec1: entered promiscuous mode
[  146.427697][T11431] macsec1: entered allmulticast mode
[  146.452865][T11308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  146.513674][T11442] xt_l2tp: v2 doesn't support IP mode
[  146.530430][T11442] pim6reg1: entered promiscuous mode
[  146.532208][T11442] pim6reg1: entered allmulticast mode
[  146.536179][T11308] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.581454][T11308] veth0_vlan: entered promiscuous mode
[  146.586467][T11308] veth1_vlan: entered promiscuous mode
[  146.601636][T11308] veth0_macvtap: entered promiscuous mode
[  146.605338][T11308] veth1_macvtap: entered promiscuous mode
[  146.616717][T11308] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.622809][T11308] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.627594][T11308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.631784][T11308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.634503][T11308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.637329][T11308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.682629][ T9401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.685243][ T9401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.704736][ T9398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.707472][ T9398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.776397][T11446] bridge_slave_0: invalid flags given to default FDB implementation
[  146.781735][T11446] netlink: 'syz.0.1632': attribute type 2 has an invalid length.
[  147.707262][T11463] __nla_validate_parse: 6 callbacks suppressed
[  147.707272][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1638'.
[  147.712841][T11463] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1638'.
[  147.715904][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1638'.
[  147.720278][T11464] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1638'.
[  148.309023][T11479] netlink: 'syz.1.1644': attribute type 4 has an invalid length.
[  148.389828][T11484] netlink: 'syz.1.1646': attribute type 11 has an invalid length.
[  148.392742][T11484] netlink: 'syz.1.1646': attribute type 4 has an invalid length.
[  148.395451][T11484] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1646'.
[  148.399609][T11484] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1646'.
[  148.424400][T11486] openvswitch: netlink: Duplicate or invalid key (type 0).
[  148.426863][T11486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.749583][T11489] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1648'.
[  148.830719][ T5825] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.845426][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1650'.
[  148.856494][T11493] macsec2: entered allmulticast mode
[  148.858482][T11493] !: entered allmulticast mode
[  148.861479][T11493] !: left allmulticast mode
[  148.992538][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'.
[  149.094809][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  149.099930][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  149.103550][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  149.108621][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  149.112376][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  149.135677][T11502] lo speed is unknown, defaulting to 1000
[  149.310887][T11502] chnl_net:caif_netlink_parms(): no params data found
[  149.386155][T11502] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.391239][T11502] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.393589][T11502] bridge_slave_0: entered allmulticast mode
[  149.396209][T11502] bridge_slave_0: entered promiscuous mode
[  149.401807][ T5200] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  149.404730][ T5200] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  149.408766][ T5200] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  149.412182][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1655'.
[  149.415239][T11502] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.418148][ T5200] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  149.420982][ T5200] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  149.428681][T11502] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.433487][T11502] bridge_slave_1: entered allmulticast mode
[  149.436459][T11502] bridge_slave_1: entered promiscuous mode
[  149.470618][T11502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.475932][T11502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.480789][T11521] lo speed is unknown, defaulting to 1000
[  149.511273][T11502] team0: Port device team_slave_0 added
[  149.514624][T11502] team0: Port device team_slave_1 added
[  149.551307][T11502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.553587][T11502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.578206][T11502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.582314][T11502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.584468][T11502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.608010][T11502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.642883][T11502] hsr_slave_0: entered promiscuous mode
[  149.645063][T11502] hsr_slave_1: entered promiscuous mode
[  149.647597][T11502] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.650407][T11502] Cannot create hsr debugfs directory
[  149.773171][T11521] chnl_net:caif_netlink_parms(): no params data found
[  149.823746][T11521] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.826383][T11521] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.829069][T11521] bridge_slave_0: entered allmulticast mode
[  149.831726][T11521] bridge_slave_0: entered promiscuous mode
[  149.834865][T11521] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.837210][T11521] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.839902][T11521] bridge_slave_1: entered allmulticast mode
[  149.842521][T11521] bridge_slave_1: entered promiscuous mode
[  149.859849][T11521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.864225][T11521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.884497][T11521] team0: Port device team_slave_0 added
[  149.887683][T11521] team0: Port device team_slave_1 added
[  149.903021][T11521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.905231][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.913869][T11521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.918481][T11521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.920644][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.929135][T11521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.952468][T11521] hsr_slave_0: entered promiscuous mode
[  149.954689][T11521] hsr_slave_1: entered promiscuous mode
[  149.956815][T11521] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.959369][T11521] Cannot create hsr debugfs directory
[  150.136760][T11557] netlink: 'syz.1.1656': attribute type 15 has an invalid length.
[  150.322114][ T5825] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.357624][ T5825] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.407220][ T5825] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.474694][ T5825] bridge_slave_1: left allmulticast mode
[  150.477036][ T5825] bridge_slave_1: left promiscuous mode
[  150.480153][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.486005][ T5825] bridge_slave_0: left allmulticast mode
[  150.489919][ T5825] bridge_slave_0: left promiscuous mode
[  150.491871][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.702176][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.706456][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.710670][ T5825] bond0 (unregistering): Released all slaves
[  151.008757][ T5825] hsr_slave_0: left promiscuous mode
[  151.011358][ T5825] hsr_slave_1: left promiscuous mode
[  151.013451][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.015784][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.018615][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.020949][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.033768][ T5825] veth1_macvtap: left promiscuous mode
[  151.035704][ T5825] veth0_macvtap: left promiscuous mode
[  151.037677][ T5825] veth1_vlan: left promiscuous mode
[  151.039871][ T5825] veth0_vlan: left promiscuous mode
[  151.158144][   T54] Bluetooth: hci1: command tx timeout
[  151.295715][ T5825] team0 (unregistering): Port device team_slave_1 removed
[  151.315341][ T5825] team0 (unregistering): Port device team_slave_0 removed
[  151.479336][   T54] Bluetooth: hci2: command tx timeout
[  151.517884][T11521] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.567395][T11578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.595611][T11521] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.643103][T11580] lo speed is unknown, defaulting to 1000
[  151.656849][T11521] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.685422][T11582] netlink: 'syz.1.1663': attribute type 13 has an invalid length.
[  151.687840][T11582] netlink: 'syz.1.1663': attribute type 17 has an invalid length.
[  151.726952][T11521] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.838891][T11502] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  151.844928][T11502] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  151.856393][T11502] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  151.862297][T11502] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  151.896883][T11521] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  151.906296][T11521] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  151.911628][T11521] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  151.919666][T11521] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  152.083251][ T5825] bond3 (unregistering): (slave gretap1): Releasing active interface
[  152.085735][ T5825] gretap1 (unregistering): left allmulticast mode
[  152.093764][ T5825] bond7 (unregistering): (slave gretap2): Releasing active interface
[  152.479977][ T5825] bond0 (unregistering): left promiscuous mode
[  152.482442][ T5825] bond0 (unregistering): Released all slaves
[  152.545134][ T5825] bond1 (unregistering): Released all slaves
[  152.551387][ T5825] bond2 (unregistering): Released all slaves
[  152.609537][ T5825] bond3 (unregistering): Released all slaves
[  152.663811][ T5825] bond4 (unregistering): Released all slaves
[  152.714971][ T5825] bond5 (unregistering): Released all slaves
[  152.721388][ T5825] bond6 (unregistering): Released all slaves
[  152.775777][ T5825] bond7 (unregistering): Released all slaves
[  152.784358][T11596] __nla_validate_parse: 6 callbacks suppressed
[  152.784367][T11596] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1666'.
[  152.883206][ T5825] : left promiscuous mode
[  152.898544][T11502] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.913921][T11502] 8021q: adding VLAN 0 to HW filter on device team0
[  152.921687][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.924031][ T9397] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.931400][T11521] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.935101][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.937367][ T9397] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.956189][ T5825] tipc: Disabling bearer <eth:syzkaller0>
[  152.974873][ T5825] tipc: Left network mode
[  152.991724][T11521] 8021q: adding VLAN 0 to HW filter on device team0
[  153.006868][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.009268][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.018426][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.020775][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.146474][T11521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.174143][ T5825] mac80211_hwsim hwsim4 wlan0 (unregistering): left allmulticast mode
[  153.196512][T11521] veth0_vlan: entered promiscuous mode
[  153.203018][T11521] veth1_vlan: entered promiscuous mode
[  153.214119][T11502] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.226537][T11521] veth0_macvtap: entered promiscuous mode
[  153.231082][T11521] veth1_macvtap: entered promiscuous mode
[  153.241033][   T54] Bluetooth: hci1: command tx timeout
[  153.252542][T11521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.260352][T11521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.264697][T11521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.267625][T11521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.273561][T11521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.276467][T11521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.303676][T11502] veth0_vlan: entered promiscuous mode
[  153.316448][T11502] veth1_vlan: entered promiscuous mode
[  153.381751][T11502] veth0_macvtap: entered promiscuous mode
[  153.391531][T11502] veth1_macvtap: entered promiscuous mode
[  153.424891][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.428837][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.468660][ T5825] bond_slave_0: left promiscuous mode
[  153.473019][ T5825] hsr_slave_0: left promiscuous mode
[  153.571126][   T54] Bluetooth: hci2: command tx timeout
[  153.862698][ T9397] smc: removing ib device syz0
[  153.874602][T11502] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.883773][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.886191][T11502] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.897136][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.908681][T11502] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.918356][T11502] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.925015][T11502] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.930060][T11502] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.046314][ T9404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.049081][ T9404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.149124][ T9398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.160096][ T9398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.265199][T11636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.267489][T11636] IPv6: NLM_F_CREATE should be set when creating new route
[  154.346878][ T5825] IPVS: stop unused estimator thread 0...
[  154.473867][T11646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.480645][T11646] netlink: 'syz.1.1677': attribute type 7 has an invalid length.
[  154.483312][T11646] netlink: 'syz.1.1677': attribute type 3 has an invalid length.
[  154.485745][T11646] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1677'.
[  155.045081][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.054584][T11650] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1679'.
[  155.219916][T11660] netlink: 'syz.1.1682': attribute type 1 has an invalid length.
[  155.269253][ T5200] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  155.272443][ T5200] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  155.274996][ T5200] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  155.277820][ T5200] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  155.280981][ T5200] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  155.368995][T11661] chnl_net:caif_netlink_parms(): no params data found
[  155.421569][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  155.422086][T11661] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.424567][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  155.426186][T11661] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.429376][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  155.430577][T11661] bridge_slave_0: entered allmulticast mode
[  155.433458][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  155.435311][T11661] bridge_slave_0: entered promiscuous mode
[  155.437022][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  155.440984][T11661] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.443349][T11661] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.448012][T11661] bridge_slave_1: entered allmulticast mode
[  155.450597][T11661] bridge_slave_1: entered promiscuous mode
[  155.475028][T11661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.481352][T11661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.511260][T11661] team0: Port device team_slave_0 added
[  155.516404][T11661] team0: Port device team_slave_1 added
[  155.539585][T11661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.541847][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.550211][T11661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.556252][T11661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.558596][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.566551][T11661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.594101][T11661] hsr_slave_0: entered promiscuous mode
[  155.596357][T11661] hsr_slave_1: entered promiscuous mode
[  155.599393][T11661] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.602467][T11661] Cannot create hsr debugfs directory
[  155.679400][T11671] chnl_net:caif_netlink_parms(): no params data found
[  155.730452][T11671] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.732837][T11671] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.735338][T11671] bridge_slave_0: entered allmulticast mode
[  155.738483][T11671] bridge_slave_0: entered promiscuous mode
[  155.742091][T11671] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.744664][T11671] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.747095][T11671] bridge_slave_1: entered allmulticast mode
[  155.750366][T11671] bridge_slave_1: entered promiscuous mode
[  155.768806][T11671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.773184][T11671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.793766][T11671] team0: Port device team_slave_0 added
[  155.797096][T11671] team0: Port device team_slave_1 added
[  155.812994][T11671] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.815149][T11671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.823849][T11671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.827886][T11671] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.830266][T11671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.838798][T11671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.861995][T11671] hsr_slave_0: entered promiscuous mode
[  155.864238][T11671] hsr_slave_1: entered promiscuous mode
[  155.866320][T11671] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.869224][T11671] Cannot create hsr debugfs directory
[  156.094125][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.182701][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1684'.
[  156.185980][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1684'.
[  156.216763][T11689] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  156.250449][T11692] netlink: 'syz.1.1686': attribute type 13 has an invalid length.
[  156.252951][T11692] netlink: 'syz.1.1686': attribute type 17 has an invalid length.
[  156.264725][T11692] 8021q: adding VLAN 0 to HW filter on device team0
[  156.269800][T11692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.442085][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.491421][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.567237][T11698] bridge0: port 1(erspan0) entered blocking state
[  156.573801][T11698] bridge0: port 1(erspan0) entered disabled state
[  156.576726][T11698] erspan0: entered allmulticast mode
[  156.582893][T11698] erspan0: left allmulticast mode
[  156.585316][   T13] bridge_slave_1: left allmulticast mode
[  156.587191][   T13] bridge_slave_1: left promiscuous mode
[  156.589724][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.593324][   T13] bridge_slave_0: left allmulticast mode
[  156.595187][   T13] bridge_slave_0: left promiscuous mode
[  156.597782][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.645950][T11699] SET target dimension over the limit!
[  156.806859][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.812707][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.816378][   T13] bond0 (unregistering): Released all slaves
[  156.851701][T11701] nbd: must specify at least one socket
[  156.875821][T11703] netlink: 'syz.1.1689': attribute type 3 has an invalid length.
[  157.080206][   T13] hsr_slave_0: left promiscuous mode
[  157.082501][   T13] hsr_slave_1: left promiscuous mode
[  157.084450][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.086791][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.089497][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.091759][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.102066][   T13] veth1_macvtap: left promiscuous mode
[  157.103817][   T13] veth0_macvtap: left promiscuous mode
[  157.105579][   T13] veth1_vlan: left promiscuous mode
[  157.107329][   T13] veth0_vlan: left promiscuous mode
[  157.318561][ T5200] Bluetooth: hci1: command tx timeout
[  157.349352][   T13] team0 (unregistering): Port device team_slave_1 removed
[  157.371879][   T13] team0 (unregistering): Port device team_slave_0 removed
[  157.478048][ T5200] Bluetooth: hci2: command tx timeout
[  157.604425][T11671] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.693507][T11671] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.776886][T11671] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.851616][T11671] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.858864][T11715] netlink: 'syz.1.1693': attribute type 4 has an invalid length.
[  157.861423][T11715] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1693'.
[  157.971202][T11661] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  157.977155][T11661] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  157.993351][T11661] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  158.004026][T11661] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  158.025847][   T13] bridge_slave_1: left allmulticast mode
[  158.027751][   T13] bridge_slave_1: left promiscuous mode
[  158.030866][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.035188][   T13] bridge_slave_0: left allmulticast mode
[  158.037067][   T13] bridge_slave_0: left promiscuous mode
[  158.041103][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.223734][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.228061][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.232640][   T13] bond0 (unregistering): Released all slaves
[  158.244148][T11671] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  158.249592][T11671] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  158.273163][T11671] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  158.274284][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'.
[  158.283491][T11738] delete_channel: no stack
[  158.292288][T11671] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  158.316344][T11661] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.373297][T11661] 8021q: adding VLAN 0 to HW filter on device team0
[  158.385359][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.387876][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.415827][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.418429][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.444183][T11661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  158.451002][T11661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.457345][T11671] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.478351][   T13] hsr_slave_0: left promiscuous mode
[  158.480603][   T13] hsr_slave_1: left promiscuous mode
[  158.482734][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.485170][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.487917][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.492081][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.501954][   T13] veth1_macvtap: left promiscuous mode
[  158.503799][   T13] veth0_macvtap: left promiscuous mode
[  158.505760][   T13] veth1_vlan: left promiscuous mode
[  158.507531][   T13] veth0_vlan: left promiscuous mode
[  158.739214][   T13] team0 (unregistering): Port device team_slave_1 removed
[  158.759499][   T13] team0 (unregistering): Port device team_slave_0 removed
[  158.971548][T11671] 8021q: adding VLAN 0 to HW filter on device team0
[  158.977222][ T9402] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.979555][ T9402] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.986928][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.989257][ T9402] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.048256][T11661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.073670][T11661] veth0_vlan: entered promiscuous mode
[  159.079960][T11661] veth1_vlan: entered promiscuous mode
[  159.101081][T11661] veth0_macvtap: entered promiscuous mode
[  159.105181][T11661] veth1_macvtap: entered promiscuous mode
[  159.117748][T11661] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.129447][T11661] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.135826][T11661] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.140498][T11661] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.143393][T11661] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.146292][T11661] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.167583][T11671] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.194642][ T9398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.201939][ T9398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.221581][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.223324][T11671] veth0_vlan: entered promiscuous mode
[  159.226091][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.231294][T11671] veth1_vlan: entered promiscuous mode
[  159.252949][T11671] veth0_macvtap: entered promiscuous mode
[  159.256965][T11671] veth1_macvtap: entered promiscuous mode
[  159.284380][T11671] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.290584][T11671] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.295337][T11671] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.305429][T11671] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.308318][T11671] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.311721][T11671] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.350647][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.353228][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.371999][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.375082][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.467762][T11777] netlink: 'syz.1.1707': attribute type 3 has an invalid length.
[  159.470694][T11777] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1707'.
[  160.452327][ T5843] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.553215][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'.
[  160.740258][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1713'.
[  160.788525][T11808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.793081][T11808] syzkaller0: entered promiscuous mode
[  160.796858][T11808] syzkaller0: entered allmulticast mode
[  160.797757][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  160.802442][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  160.805453][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  160.814497][T11808] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] SMP KASAN PTI
[  160.814668][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  160.818275][T11808] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef]
[  160.818289][T11808] CPU: 1 UID: 0 PID: 11808 Comm: syz.1.1714 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  160.818299][T11808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.818304][T11808] RIP: 0010:hfsc_qlen_notify+0x2e/0x160
[  160.818320][T11808] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 90 ef 45 f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 a9
[  160.818328][T11808] RSP: 0018:ffffc9000482f070 EFLAGS: 00010203
[  160.818337][T11808] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000
[  160.818343][T11808] RDX: ffffc90003b02000 RSI: 0000000000000344 RDI: 0000000000000345
[  160.818348][T11808] RBP: dffffc0000000000 R08: ffff88810698d640 R09: 0000000000000002
[  160.818354][T11808] R10: 00000000ffffffff R11: ffffffff897a5ec0 R12: dffffc0000000000
[  160.818360][T11808] R13: ffff88811cd31000 R14: 00000000000002ec R15: ffff88811cd31000
[  160.821621][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  160.824160][T11808] FS:  00007f7d8286b6c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  160.860154][T11808] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  160.862195][T11808] CR2: 00007f43aefc3170 CR3: 000000003a4ba000 CR4: 00000000000006f0
[  160.864718][T11808] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  160.867207][T11808] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  160.869672][T11808] Call Trace:
[  160.870746][T11808]  <TASK>
[  160.871740][T11808]  qdisc_tree_reduce_backlog+0x29c/0x480
[  160.873583][T11808]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  160.875433][T11808]  fq_codel_change+0xa96/0xef0
[  160.877002][T11808]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  160.878809][T11808]  ? __pfx_fq_codel_change+0x10/0x10
[  160.880543][T11808]  ? __sock_sendmsg+0x21c/0x270
[  160.882141][T11808]  fq_codel_init+0x355/0x960
[  160.883659][T11808]  ? lockdep_rtnl_is_held+0x26/0x40
[  160.885370][T11808]  ? __pfx_fq_codel_init+0x10/0x10
[  160.887039][T11808]  qdisc_create+0x7ac/0xea0
[  160.888557][T11808]  tc_modify_qdisc+0x1426/0x2010
[  160.890142][T11808]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  160.891859][T11808]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  160.893553][T11808]  rtnetlink_rcv_msg+0x77c/0xb70
[  160.895163][T11808]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  160.896853][T11808]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  160.898626][T11808]  ? ref_tracker_free+0x63a/0x7d0
[  160.900278][T11808]  ? __copy_skb_header+0xa7/0x550
[  160.901936][T11808]  ? __pfx_ref_tracker_free+0x10/0x10
[  160.903692][T11808]  ? __skb_clone+0x63/0x7a0
[  160.905190][T11808]  netlink_rcv_skb+0x208/0x470
[  160.906752][T11808]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  160.908513][T11808]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  160.910232][T11808]  ? netlink_deliver_tap+0x2e/0x1b0
[  160.911935][T11808]  ? netlink_deliver_tap+0x2e/0x1b0
[  160.913637][T11808]  netlink_unicast+0x75b/0x8d0
[  160.915235][T11808]  netlink_sendmsg+0x805/0xb30
[  160.916820][T11808]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.918555][T11808]  ? aa_sock_msg_perm+0x94/0x160
[  160.920185][T11808]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  160.921915][T11808]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.923653][T11808]  __sock_sendmsg+0x21c/0x270
[  160.925207][T11808]  ____sys_sendmsg+0x505/0x830
[  160.926773][T11808]  ? __pfx_____sys_sendmsg+0x10/0x10
[  160.928506][T11808]  ? import_iovec+0x74/0xa0
[  160.929958][T11808]  ___sys_sendmsg+0x21f/0x2a0
[  160.931433][T11808]  ? __pfx____sys_sendmsg+0x10/0x10
[  160.933147][T11808]  ? __fget_files+0x2a/0x420
[  160.934665][T11808]  ? __fget_files+0x3a0/0x420
[  160.936231][T11808]  __x64_sys_sendmsg+0x19b/0x260
[  160.937861][T11808]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  160.939647][T11808]  ? rcu_is_watching+0x15/0xb0
[  160.941217][T11808]  ? do_syscall_64+0xbe/0x3b0
[  160.942753][T11808]  do_syscall_64+0xfa/0x3b0
[  160.944242][T11808]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.945941][T11808]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.947921][T11808]  ? exc_page_fault+0x9f/0xf0
[  160.949478][T11808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.951403][T11808] RIP: 0033:0x7f7d8198e929
[  160.952811][T11808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.958663][T11808] RSP: 002b:00007f7d8286b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  160.961248][T11808] RAX: ffffffffffffffda RBX: 00007f7d81bb5fa0 RCX: 00007f7d8198e929
[  160.963658][T11808] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000006
[  160.966081][T11808] RBP: 00007f7d81a10b39 R08: 0000000000000000 R09: 0000000000000000
[  160.968659][T11808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.971183][T11808] R13: 0000000000000000 R14: 00007f7d81bb5fa0 R15: 00007ffffb02b2a8
[  160.973746][T11808]  </TASK>
[  160.974789][T11808] Modules linked in:
[  160.976366][T11808] ---[ end trace 0000000000000000 ]---
[  160.978203][T11808] RIP: 0010:hfsc_qlen_notify+0x2e/0x160
[  160.978342][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  160.980002][T11808] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 90 ef 45 f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 a9
[  160.982528][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  160.988513][T11808] RSP: 0018:ffffc9000482f070 EFLAGS: 00010203
[  160.988525][T11808] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000
[  160.988531][T11808] RDX: ffffc90003b02000 RSI: 0000000000000344 RDI: 0000000000000345
[  160.991332][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  160.992773][T11808] RBP: dffffc0000000000 R08: ffff88810698d640 R09: 0000000000000002
[  160.995617][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  160.997820][T11808] R10: 00000000ffffffff R11: ffffffff897a5ec0 R12: dffffc0000000000
[  161.000463][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  161.002675][T11808] R13: ffff88811cd31000 R14: 00000000000002ec R15: ffff88811cd31000
[  161.012110][T11808] FS:  00007f7d8286b6c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  161.014865][T11808] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  161.016896][T11808] CR2: 00007f43aefc3170 CR3: 000000003a4ba000 CR4: 00000000000006f0
[  161.019425][T11808] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  161.021915][T11808] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  161.024460][T11808] Kernel panic - not syncing: Fatal exception in interrupt
[  161.027412][T11808] Kernel Offset: disabled
[  161.028760][T11808] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:37:36  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000067 RBX=0000000000000067 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000291a1 RDI=00000000000291a2 RBP=00000000000003f8 RSP=ffffc900007cf0b0
R8 =ffff8880218d8237 R9 =1ffff1100431b046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac4901 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f43ad5f6d00 CR3=000000010865c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f43af184478 00007f43af184450 XMM03=00007f43af184488 00007f43af184480
XMM04=00007f43afced100 00007f43af184440 XMM05=00007f43af184458 00007f43af1844a0
XMM06=00007f43af184498 00007f43af184490 XMM07=00007f43af184488 00007f43af184480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33b9205 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000023b8b RDI=0000000000023b8c RBP=ffffc9000482e9f0 RSP=ffffc9000482e818
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff85474540
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff854745b7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7d8286b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f43aefc3170 CR3=000000003a4ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffff00000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f7d826ed100 00007f7d81b84440 XMM05=00007f7d81b84458 00007f7d81b844a0
XMM06=00007f7d81b84498 00007f7d81b84490 XMM07=00007f7d81b84488 00007f7d81b84480
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f7d81a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
