last executing test programs:

1m1.516108396s ago: executing program 1 (id=670):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x120, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0xf4, 0x4, 0x0, 0x1, [{0xf0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xdc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_IMMEDIATE_DATA={0xc8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc4, 0x1, "850f3da1345f6d028a3249030acc4ed6a040200b5a083906eac076c8664db0a952c5750ba80795efd3f2f1f0e0078193539994bb3943d9f90b9cce8abdc337e43fe37093a2d9320933edb3523382fe63df3eefe24d8b637f11afb08abd8cffa716261ce6f6a23d0aaac4f98f3d0b60c53fa180c39b0c4e3a46a7ef54065fced3e8f4ae86be5649c034a3e563702c439d4d3db7a8271ed03ef9249c5c5d835c8907d553347483c4169d3912a847dbc491efdc41b6ab9b4e05e19a01f5b0089b45"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x148}}, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1) (async)
unshare(0x22020600) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=<r4=>r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="02"], 0x10) (async, rerun: 32)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) (rerun: 32)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)

1m1.455929473s ago: executing program 1 (id=671):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={<r1=>r0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x3, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x502}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000370410000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83450500010000004000128008000100736974003400028008000300ffffffff06001000060000000500040000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000002b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000002b40)='syzkaller\x00'}, 0x94)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r0, r0, 0x3, 0x4a, &(0x7f0000000140)="84ff578b4c554e124bdb7637e1d79606b28610646afed10933e60a137ce09f665be05b2a226b3711076b5ba5294d57fe2370c8d7f8c8d5d1d9e7bc3002ccf723aa3b112f7ac80495b063", 0x6, 0x5, 0xe5, 0x3, 0x8, 0x3, 0x800, 'syz0\x00'})
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff2"], 0x20}], 0x1}, 0x300)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0xfffffffffffffff7)

1m1.185598217s ago: executing program 1 (id=674):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="2900000000000000000000000000000063010800000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x1}, 0x50)
r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e)
accept4$unix(r1, &(0x7f0000001240), &(0x7f0000000140)=0x6e, 0x80000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x20}, 0x94)
socket(0x23, 0x6, 0x10)

53.432385897s ago: executing program 1 (id=674):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="2900000000000000000000000000000063010800000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x1}, 0x50)
r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e)
accept4$unix(r1, &(0x7f0000001240), &(0x7f0000000140)=0x6e, 0x80000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x20}, 0x94)
socket(0x23, 0x6, 0x10)

47.373477739s ago: executing program 1 (id=674):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="2900000000000000000000000000000063010800000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x1}, 0x50)
r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e)
accept4$unix(r1, &(0x7f0000001240), &(0x7f0000000140)=0x6e, 0x80000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x20}, 0x94)
socket(0x23, 0x6, 0x10)

17.311710865s ago: executing program 0 (id=1151):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x80000001, &(0x7f0000000200)=[0x0], 0x13, 0x0, 0xfffffffffffffffd, 0x0, 0x0}, 0x61)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
accept4(r2, 0x0, 0x0, 0x80000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000104000000000300000000000000", @ANYRES32, @ANYRES64=r3], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x80000001, &(0x7f0000000200)=[0x0], 0x13, 0x0, 0xfffffffffffffffd, 0x0, 0x0}, 0x61) (async)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
accept4(r2, 0x0, 0x0, 0x80000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000104000000000300000000000000", @ANYRES32, @ANYRES64=r3], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)

17.310027681s ago: executing program 0 (id=1152):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000000)="ba5d2604f02687b7a151a77b4b50064adf889c45586e99ae49b0b86b183dc8e00a2d7f2ae5040fd64a188e621ea0e3587f21bba4747db8029e782694729d55322d0709724e8a032206c5d0dd58293c8fd0cf5816c92a5e76a6d1e9cfdf10c2adab3d365376797cff61073a20aeb9cee78dd6af16c6c3b666185f3c1bbe88165bc3bb28c97a7b1452890d7bdd7ccd43346b24969a1bede0de5f29d58237559fef92a427f076800cf65d49f1baef4dc72f52de9393b724dfff65f551eb23a24366e3ba6ae824080d48417f8ab16c9886f8558a4cabb104f88fb1beb1be", 0xdc, 0x20040081, 0x0, 0x0)
r1 = accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000140)=0x1c, 0x800)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0xfa602000)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={<r2=>0x0, 0x3, 0x18, 0x8, 0xffffffffffff0001}, &(0x7f00000002c0)=0x18)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r2, 0x1000}, &(0x7f0000000340)=0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000380)={<r3=>r0, 0x80, 0x800, 0x6})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1c0, r4, 0x800, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x3df}, {0xc, 0x90, 0x1ba}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x401}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xe46}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xf}, {0xc, 0x90, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x5}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x24048011}, 0x41)
bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000006c0)={0x1, [0x0]}, &(0x7f0000000700)=0x6)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e21, 0x6, @empty, 0x7b2}, 0x1c)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000780), &(0x7f00000007c0)=0x4)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000880)={&(0x7f0000000800)=""/76, 0x4c})
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000008c0)={0x2d, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0xac}, @calipso={0x7, 0x18, {0x3, 0x4, 0x1b, 0xfff, [0x386c, 0x3]}}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x24}}, @pad1, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x58, {0x1, 0x14, 0x1, 0x4, [0x4, 0xa679, 0x0, 0x100, 0x0, 0x5, 0x6, 0x2, 0x7, 0x3]}}]}, 0xb0)
getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000980)=""/100, &(0x7f0000000a00)=0x64)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r3)
sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1d4, r5, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xef}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xe, @empty, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2760}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc189}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd3e}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4091}, 0x4001)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000d40)={{0x3a, @multicast2, 0x4e24, 0x0, 'lblc\x00', 0x12, 0x401, 0x44}, {@broadcast, 0x4e22, 0x2, 0x892, 0x6, 0xacc}}, 0x44)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000dc0))
getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000e00)={'filter\x00', 0x1000, "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"}, &(0x7f0000001e40)=0x1024)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001e80)={'wlan0\x00'})
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000001ec0)={0x3, 0x6})
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f40)={&(0x7f0000001f00)='initcall_level\x00', r3, 0x0, 0x9}, 0x18)
readv(r6, &(0x7f00000020c0)=[{&(0x7f0000001f80)=""/51, 0x33}, {&(0x7f0000001fc0)=""/204, 0xcc}], 0x2)
recvmmsg(r0, &(0x7f0000002400)=[{{&(0x7f0000002100)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/16, 0x10}, {&(0x7f00000021c0)=""/103, 0x67}, {&(0x7f0000002240)=""/49, 0x31}, {&(0x7f0000002280)=""/166, 0xa6}, {&(0x7f0000002340)=""/15, 0xf}], 0x5}, 0x8}], 0x1, 0x2003, &(0x7f0000002440)={0x0, 0x3938700})
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000002480)=0xa, 0x4)

17.042864512s ago: executing program 0 (id=1154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(r1, &(0x7f0000000040), 0x0, 0x810)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

13.489782663s ago: executing program 0 (id=1154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(r1, &(0x7f0000000040), 0x0, 0x810)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

7.402768337s ago: executing program 0 (id=1154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(r1, &(0x7f0000000040), 0x0, 0x810)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

3.090885529s ago: executing program 1 (id=674):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="2900000000000000000000000000000063010800000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x1}, 0x50)
r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e)
accept4$unix(r1, &(0x7f0000001240), &(0x7f0000000140)=0x6e, 0x80000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x20}, 0x94)
socket(0x23, 0x6, 0x10)

1.589878657s ago: executing program 2 (id=1219):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="08007ac587344af2", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008000000"], 0x40}, 0x24040090)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async)
close(0xffffffffffffffff) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x74, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b600000000001801000020756c2500000000002020207b9af8ff0000000048c600000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000800000b503000000002a33a4ae017e6fbaca6f41190000c500000085000000b700000000000000950000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
close(r2) (async)
write$cgroup_subtree(r2, 0x0, 0x32600)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x38, 0x19, 0x1, 0x70bd25, 0x25dfcbfb, {0xa, 0x80, 0x14, 0x0, 0xfd, 0x1, 0xfe, 0x4, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x40006}, @RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x24040884)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) (async, rerun: 64)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) (async, rerun: 64)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000001b40)={&(0x7f0000000740)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000007c0)="30b233c574e7a52f72c85486eaa6d0fe0ceb0c4fe1c1864bd5eaedc71abb056e9174a5664b4ed16863f8ac83a7a40fe72417073f0df461d6cff55c3dbbecd728847be8a49c12bfd78c1231a7484eb028f92c06aca87d1fa23a0a4a0a4592b10b189b5e0de67c257e16b88735dc2dadae17f105eb13c9481b81ea69c65fe89589d923699fc521f91c739f5ed6d5fbee92e6ee2a11505857f6302657cd313f94438495348772b2aadf4dd0f567790f507ca970872b59376bbd38d061c00c3b0dd4d95d84c1eaed8cb3489d2638df601daf0b1c6d80334c2d85d167485ef0d6b2bdaa0a24a44c1f2fe0d5b34bbd00a132995bd8cb35ec", 0xf5}, {0x0}, {&(0x7f0000001b80)="ed9b409047d6e24e842a4d5849630fa16a70cbc7570f7ecb6c0237034c3c4b51f2143b2de84dd20748676344f67f8d438b6607cff0db458beff990d8f9709d918d0e3f1b11d6e4", 0x47}, {&(0x7f0000001940)="a387eb4c479c1d29dfce0f4e1842ae25114e", 0x12}, {&(0x7f0000001980)="bc81a536c4adc2f586777c91d32615baae0fd895e4185a72930003bbb8fb6519ba18ef04b64522d896cc36317eb1bff4637c20fc13e6b519d70c8f1176781eae28df448d28cb9786044232e6e4eaab4db04363cb34b192bf46b8e6eed021eb20840319dd1f20e0a49188580761f39c27515834cd5d5808804eef121d080129fea4869c526bb4ec553ebf707203fd8efffac76d181ff15fb4318de2ffab058bf3ada57bd8d308572ede1959cc552e4280907edffd97cd04159a0c6750a9a60ca5f52b86d5d5803c0a3029909b8d548964e915bc477a9fc0c37c2e3ee58db3775d6875a5bde244c2da746d480263838da05f0ce8cd452dab06ff2a9f7b", 0xfc}, {&(0x7f0000001a80)="c0ad1e709caf", 0x6}], 0x6, &(0x7f00000074c0)=[{0x1010, 0x195, 0x7078, "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"}, {0x18, 0x113, 0x400, "ab30"}, {0x100, 0x6, 0x7, "dced319fb2f6ee9ee4aedd9d3b20d434a4f4dd1ccc59ff52eb7ec47de80d64faad01b270ad14fa94834f5949f54c5935998454b6732b1f9b0c403c59f4b4659e3235b0181e12a38d5511e1321b4eddc3746b89b1d94118adb42570a372fb47dcf5f5a2233e2ee59fcb22ca9e3a750599ece15e7239f206b41583d9237886e17c608224de6830233aed5676ac9685ea1a02bab45d5e8ab5b7ca1c1ff6edd830df685283abedad3a0addc6f93af99a64ce09549765efd309acd7c3c7f08d16aa9151c9bca0214cc438afcb1d447e0567cd88a7ceb7c9f56ec4422e9ef170de58ec4d22b11e71b6b4d67f"}, {0x1190, 0x1, 0x200, "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"}, {0x108, 0x10b, 0xb, "786f5a3d7385f825dc4022257e3c6082ce26520a497bad340a7ff2ee2194b1c81dd11b5120e3810e91db9fb41f9c6b8cc5b7ef5a9f0c8d73d87f9a39d4929d267856a533a3b13a9a5a102735cfbb83bbb93b4372440eec7d2fe2e26b81ec0934b92106d6089dffcdd88ea7e3f4685e6abe0125d4baba2076868226496bd70571fc91267b56a71cc45d1788029dd8cf8cee70e828b357c4daa2e205fd56056367215a67eb0e31eceb66d2f13eeb14e4bf66b93af7c1577c94f3c758a1992c195c7bf180098eb8e0cd0cfdf1dc9d69754fec3b7b3ff26cd2cc5a40d1f040726ea77ba302cc2208fa2fc639539a247a94f8f9fad366ab9e"}, {0x178, 0x118, 0x224, "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"}, {0x40, 0x1, 0xa, "de5792933bb32a87aab6004273556f5719a484689fd17fecc82b0fc9c7f348e838660f163dd741e267d4fe680a"}], 0x2578}, 0x40000) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x136}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
write$cgroup_devices(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
socket$phonet(0x23, 0x2, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0)

1.525552566s ago: executing program 2 (id=1220):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff2bbd700000000000000000004a3c93e558af4934f937e4b615dd6d1b89a5004b2f11701baa2944a7bc8f97b2141ce9714c47", @ANYRES32=0x0, @ANYBLOB="2300000002a5000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="9000020000000000"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@gettaction={0xec, 0x32, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xce}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe00000}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}]}]}, 0xec}}, 0x845)

1.525124858s ago: executing program 0 (id=1154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(r1, &(0x7f0000000040), 0x0, 0x810)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

642.365785ms ago: executing program 2 (id=1221):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000180))
sendfile(r0, r0, 0x0, 0x197)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a400000095", @ANYRESOCT], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000180)) (async)
sendfile(r0, r0, 0x0, 0x197) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a400000095", @ANYRESOCT], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async)

485.92872ms ago: executing program 2 (id=1222):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4040)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000200)}, 0x20) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, 0x0, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@deltfilter={0xb8c, 0x2d, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x3, 0xa}, {0xffff, 0x9}, {0x2, 0x14}}, [@TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @filter_kind_options=@f_route={{0xa}, {0xb2c, 0x2, [@TCA_ROUTE4_ACT={0x258, 0x6, [@m_xt={0x8c, 0xe, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xc, 0x6, "4270fd080a8cf01c"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xbc, 0xe, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xc}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x5f, 0x6, "7ae69113cc9da5f0ad610b9c0ab53accf915ec3022cf6c3c8ffad20dca658b577a46251e740680b81b359de82b035b766af01619d62bab1fb09e6a15c24a45ebe9ff44b51839aa2327c79622ecb7e109fd454d7c8e02cf6fb21a90"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x10c, 0xd, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x122e, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x4, 0x3, 0x6, 0x7fff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1525, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x270e, 0x703661e13786cf8b}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x101, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xad7f, 0xfffffff7, 0x6, 0x8, 0x101}}]}, {0x7f, 0x6, "6108a9d2f07caee5abf93cebb1f6c08dc75f7ec90cf806b697b588f078ef65efb128081685516084ea3caae4bd286bf49e485c7475300bb72cec33c939eea8043c45be814debf5a3c9137c2c166da1db7dbfb49701415f40db513d84facab5dd3879700306f17fb2797878e04198cf1de8a68359f2f0aff9965152"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x1, 0x7, 0x80000001, {0xf3, 0x2, 0xb, 0x583f, 0xe4a0, 0x5}, {0x9, 0x2, 0x2, 0x0, 0x5, 0x5}, 0x9, 0x8415, 0x8}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x65}, @TCA_ROUTE4_IIF={0x8, 0x4, r12}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xce}, @TCA_ROUTE4_POLICE={0x870, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xb4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x6, 0x2, 0x7, 0x5, {0x2, 0x1, 0x6, 0x64e8, 0x0, 0x7}, {0x7f, 0x1, 0x2128, 0x7, 0x0, 0x4}, 0xfffffffb, 0x6, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x9, 0x4, 0x471, 0x4b, 0x46f, 0x3, 0x6, 0x7, 0x401, 0x7, 0x2, 0x786a, 0x3, 0x252e, 0xfffffff7, 0x18, 0x30, 0x4, 0x80, 0xfffffffc, 0xd2, 0x1000, 0x1, 0x4, 0x4, 0x2, 0x5, 0x6, 0x0, 0x0, 0x819, 0x9678, 0x8, 0x1, 0x3, 0x3, 0x0, 0x5, 0x400, 0x1, 0xfffffffb, 0x9, 0x5, 0x6d0, 0x2, 0x101, 0x1, 0x7, 0x6, 0x8, 0x8000, 0x587be79, 0xf6, 0x0, 0x2, 0xc0000, 0x2, 0x7fffffff, 0x6, 0x8, 0x9, 0x8bca, 0x3, 0xcdff, 0x13, 0x5, 0x2, 0xff, 0x7fff, 0x3, 0xa, 0x5bb2, 0x7, 0x7, 0x0, 0x5, 0x0, 0x7ff, 0xffff, 0xfffffffe, 0x401, 0x7, 0x7, 0x1, 0x7, 0xffffff91, 0x6, 0x2, 0x6, 0x3ce, 0xffff, 0xfffffffe, 0x3, 0x0, 0xb, 0xffffff95, 0x9, 0x4, 0xe, 0x2, 0x9, 0xc0, 0x9b23, 0x7, 0xc9, 0xa8e, 0x5, 0x0, 0x0, 0x3, 0x6, 0xc912, 0x0, 0x6, 0x2, 0x4, 0x6754, 0x1, 0x101, 0x5, 0xe0, 0xc000000, 0x1, 0x5da, 0x10000, 0xb, 0x5, 0x2, 0x2000, 0x8001, 0x1, 0x5, 0x7, 0x5, 0x7, 0x3, 0x1, 0x0, 0x9, 0x7, 0x6a, 0x7c, 0x3ff, 0x8, 0x7, 0x24000000, 0x7, 0x8, 0x3, 0x4, 0x1b6800, 0x6229f1a0, 0x7, 0xfff, 0x5, 0xfffffffe, 0xffff7fff, 0x200, 0x4, 0x6, 0xabb, 0x3, 0xffff, 0x7, 0x6, 0x9, 0x8, 0x1, 0x9, 0x6, 0x4, 0x5, 0x4, 0x4, 0x1000, 0xe67, 0x4, 0x6, 0x7, 0x1000, 0x8, 0x7f, 0xfffffffd, 0x9, 0x1ff, 0x38000000, 0xfffffffd, 0x7, 0x8001, 0x401, 0x7, 0x2, 0x8, 0x4, 0xf, 0xd22, 0xf1aa, 0xfab, 0x7, 0x9, 0xfffffffe, 0x9, 0xffffffff, 0xc723, 0x1, 0x6, 0xfd, 0x7f, 0x3, 0x4, 0x6, 0x1, 0x1, 0x8, 0xfffffffc, 0x3ff, 0x5, 0x5, 0x7, 0x200, 0x5, 0xffffffcb, 0x3, 0x2, 0xfff, 0xffff, 0x7, 0xdaa1, 0x7, 0x5e, 0x1, 0x2, 0x6, 0x1, 0xfffffffd, 0x3, 0x6e8, 0x8d7, 0x9, 0xffff3f07, 0x5, 0xfffffffb, 0x5, 0x58ec, 0x27, 0x1000, 0x80000000, 0xfed1, 0x800, 0x1ff, 0x8, 0x5, 0x1d47f52e, 0x5, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x101, 0x77ba, 0x3, 0x7ff, 0x5, 0x1000, 0xffff, 0xfffffff6, 0xfffffff8, 0x400, 0x11f3, 0x6, 0xffff0000, 0x200, 0xfffffffe, 0x5, 0x7, 0xc, 0x5, 0x5, 0xe8, 0x976, 0xffffffff, 0x1ff, 0x2, 0x7ff, 0x4, 0x3de, 0x0, 0x0, 0x3, 0x10001, 0x0, 0x1000, 0x4, 0x5, 0x7fff, 0x8, 0x3, 0x400, 0x4, 0x1000, 0x40, 0x3, 0xfffffff9, 0x2, 0x4, 0x8, 0x9, 0x7, 0x3, 0x6, 0xfffffff7, 0x0, 0x6, 0x7fff, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x4, 0x10, 0x4, 0x5, 0x5, 0x20, 0x8, 0xd, 0x4, 0x5, 0xf34, 0xff66, 0x8, 0xf, 0x7, 0x43, 0x8, 0x80, 0xa, 0x0, 0x4, 0x6, 0xe, 0x7, 0x2, 0x7fff, 0x9, 0x3, 0x3, 0x2, 0x2, 0x1, 0x7d, 0x46, 0x4, 0x1ff, 0x7fffffff, 0x8, 0x400, 0x8001, 0x7, 0x5, 0xd, 0x38, 0x8, 0x10000, 0x6, 0x8, 0x3, 0x48000, 0x3, 0x7, 0xee4, 0x5, 0xfff, 0x0, 0x8000, 0x400, 0x1, 0x7, 0x58, 0x7, 0x7fff, 0xd2, 0x7, 0x516e96e3, 0x0, 0x8, 0x4, 0xf, 0x78570354, 0x81, 0x58, 0x0, 0x6, 0x8, 0x0, 0x0, 0x1, 0x7fff, 0x400, 0x2, 0x5, 0x3, 0x3e, 0x4, 0x1, 0x9, 0x9, 0x8, 0xffffffff, 0x1, 0x5b8c, 0x8, 0x8000, 0x9, 0x3ab, 0x0, 0xe, 0x40, 0x4000000, 0x2, 0xfffff70a, 0x800, 0x1, 0x9, 0xd75, 0x6, 0xfb, 0x6, 0x1, 0x9, 0x2, 0xd9a0, 0x3, 0x1800, 0x7f, 0x1, 0x60e, 0x7fff, 0x8, 0x7, 0x5, 0x5f54, 0x0, 0x7, 0x800, 0x200, 0x7, 0x81, 0x5, 0xfffffbff, 0x0, 0x1, 0x7fffffff, 0x2, 0x40, 0x200, 0x9, 0x6, 0x49, 0x8000, 0xfffffffd, 0x2, 0x0, 0xe689, 0x4, 0x141, 0x6, 0xfffffffe, 0xffffb375, 0x6, 0x0, 0x0, 0xfffffffc, 0x8, 0xe67, 0x911, 0xfffffffc, 0x1, 0x6, 0x6, 0x1ff, 0x5, 0x844, 0x80000000, 0x6, 0x4, 0x3, 0x3e4c639d, 0x5, 0x1, 0x8, 0x0, 0x7fff, 0x8, 0x3, 0x3d, 0x401, 0x6, 0x7, 0x3, 0x8, 0x1, 0x1, 0xc6d, 0x2, 0x5, 0xffffffff, 0x4, 0x8, 0x2, 0x8001, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xe3}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}]}, 0xb8c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async)
getsockname$unix(r11, &(0x7f0000000200)=@abs, &(0x7f0000000300)=0x6e) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xffffffffffffff58, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}}, 0x0)

200.638152ms ago: executing program 2 (id=1223):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc833f9fe80000000ffea0000000000000000aaff020000000000000000000000000001"], 0xffe)

0s ago: executing program 2 (id=1224):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0)
socket(0x25, 0x5, 0x6)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x14, r1, 0x1, 0x80000}, 0x14}}, 0x40000)
syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="94c2000090", @ANYRESOCT=0x0], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280050016000000000006000e"], 0x48}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x43)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[], 0x68}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x2c, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}, [{0x8, 0xb, 0x7f8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c000)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4647' (ED25519) to the list of known hosts.
syzkaller login: [   55.820510][ T5816] cgroup: Unknown subsys name 'net'
[   55.928034][ T5816] cgroup: Unknown subsys name 'cpuset'
[   55.932231][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.039924][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.918344][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.921192][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.921634][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.926696][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.927096][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.932001][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.934533][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.938351][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.940742][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.944218][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.985972][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.992731][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.996038][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.001853][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.005617][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.237303][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   63.282592][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   63.382074][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.395228][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.397901][ T5830] bridge_slave_0: entered allmulticast mode
[   63.400824][ T5830] bridge_slave_0: entered promiscuous mode
[   63.415999][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.418835][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.421097][ T5830] bridge_slave_1: entered allmulticast mode
[   63.423840][ T5830] bridge_slave_1: entered promiscuous mode
[   63.459854][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   63.478045][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.481141][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.483880][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.486976][ T5834] bridge_slave_0: entered allmulticast mode
[   63.489706][ T5834] bridge_slave_0: entered promiscuous mode
[   63.500420][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.503523][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.507195][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.509493][ T5834] bridge_slave_1: entered allmulticast mode
[   63.512260][ T5834] bridge_slave_1: entered promiscuous mode
[   63.572021][ T5830] team0: Port device team_slave_0 added
[   63.582047][ T5830] team0: Port device team_slave_1 added
[   63.586276][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.616903][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.668401][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.670633][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.679535][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.694302][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.697039][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.699739][ T5839] bridge_slave_0: entered allmulticast mode
[   63.703152][ T5839] bridge_slave_0: entered promiscuous mode
[   63.707618][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.709910][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.712208][ T5839] bridge_slave_1: entered allmulticast mode
[   63.716347][ T5839] bridge_slave_1: entered promiscuous mode
[   63.719618][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.721788][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.731225][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.739645][ T5834] team0: Port device team_slave_0 added
[   63.760989][ T5834] team0: Port device team_slave_1 added
[   63.793612][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.799926][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.822975][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.827779][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.837997][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.864033][ T5830] hsr_slave_0: entered promiscuous mode
[   63.868192][ T5830] hsr_slave_1: entered promiscuous mode
[   63.871454][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.874167][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.884306][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.893791][ T5839] team0: Port device team_slave_0 added
[   63.898243][ T5839] team0: Port device team_slave_1 added
[   63.935215][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.937483][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.945034][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.985868][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.988616][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.996734][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.061610][ T5834] hsr_slave_0: entered promiscuous mode
[   64.066501][ T5834] hsr_slave_1: entered promiscuous mode
[   64.069444][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.072475][ T5834] Cannot create hsr debugfs directory
[   64.097200][ T5839] hsr_slave_0: entered promiscuous mode
[   64.099511][ T5839] hsr_slave_1: entered promiscuous mode
[   64.101641][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.104306][ T5839] Cannot create hsr debugfs directory
[   64.328766][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.336495][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.354443][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.360473][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.421524][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.426965][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.432604][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.438143][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.506097][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.513372][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.522180][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.529304][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.572630][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.599868][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   64.618262][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.621316][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.633374][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.635743][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.682126][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.709350][ T5830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.712956][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.736327][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.762335][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   64.778773][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   64.792517][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.795480][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.800647][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.803544][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.817734][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.820020][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.830172][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.833105][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.975743][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.018225][ T5830] veth0_vlan: entered promiscuous mode
[   65.029761][ T5830] veth1_vlan: entered promiscuous mode
[   65.032096][ T5833] Bluetooth: hci1: command tx timeout
[   65.037049][ T5833] Bluetooth: hci2: command tx timeout
[   65.037079][   T54] Bluetooth: hci0: command tx timeout
[   65.050946][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.077931][ T5830] veth0_macvtap: entered promiscuous mode
[   65.084332][ T5830] veth1_macvtap: entered promiscuous mode
[   65.122828][ T5839] veth0_vlan: entered promiscuous mode
[   65.133103][ T5839] veth1_vlan: entered promiscuous mode
[   65.139056][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.150171][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.163227][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.168230][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.171172][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.173914][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.180369][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.221837][ T5839] veth0_macvtap: entered promiscuous mode
[   65.244507][ T5839] veth1_macvtap: entered promiscuous mode
[   65.258113][ T5834] veth0_vlan: entered promiscuous mode
[   65.279120][ T5834] veth1_vlan: entered promiscuous mode
[   65.309809][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.327225][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.333669][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.343567][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.351226][ T5834] veth0_macvtap: entered promiscuous mode
[   65.371516][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.378173][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.381638][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.386439][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.398847][ T5834] veth1_macvtap: entered promiscuous mode
[   65.407066][ T4062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.409589][ T4062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.468215][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.474551][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.478886][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.515382][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.518169][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.520852][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.523414][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.563242][ T5898] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.567080][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.567118][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.612851][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.616036][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.696347][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.704212][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.732272][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.747074][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.753853][ T5904] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   65.769871][ T5904] veth0_vlan: left promiscuous mode
[   65.777788][ T5904] veth0_vlan: entered promiscuous mode
[   65.784350][ T5904] team0: Device veth0_vlan failed to register rx_handler
[   65.876290][ T5907] warning: `syz.0.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.911869][ T5909] netlink: 'syz.2.3': attribute type 3 has an invalid length.
[   65.914530][ T5909] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   65.918855][ T5909] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.000637][ T5916] No such timeout policy "syz0"
[   66.169706][ T5920] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8'.
[   66.173372][ T5920] nbd: illegal input index 65508
[   66.346824][ T5922] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET)
[   66.443133][ T5924] nbd: must specify an index to disconnect
[   66.668451][ T5935] netlink: 188 bytes leftover after parsing attributes in process `syz.1.13'.
[   66.882958][ T5945] netlink: 'syz.0.18': attribute type 4 has an invalid length.
[   66.897591][ T5945] netlink: 'syz.0.18': attribute type 4 has an invalid length.
[   66.901167][ T5946] netlink: 'syz.0.18': attribute type 4 has an invalid length.
[   67.062684][ T5957] netlink: 'syz.2.20': attribute type 15 has an invalid length.
[   67.084130][ T5960] Cannot find set identified by id 32 to match
[   67.108025][   T54] Bluetooth: hci2: command tx timeout
[   67.108106][ T5833] Bluetooth: hci1: command tx timeout
[   67.109884][ T5835] Bluetooth: hci0: command tx timeout
[   67.144060][ T5957] Zero length message leads to an empty skb
[   67.509931][ T5974] IPv6: sit1: Disabled Multicast RS
[   67.513169][ T5974] sit1: entered allmulticast mode
[   68.015880][ T5995] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.039548][ T5996] 8021q: adding VLAN 0 to HW filter on device batadv1
[   68.043466][ T5996] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   68.047023][ T5996] team0: Failed to send options change via netlink (err -105)
[   68.049538][ T5996] team0: Port device batadv1 added
[   68.051725][ T5999] netlink: 'syz.1.35': attribute type 12 has an invalid length.
[   68.296305][ T5995] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.357773][ T5995] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.430604][ T5995] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.513474][ T6012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.41'.
[   68.546595][ T6012] xt_TPROXY: Can be used only with -p tcp or -p udp
[   68.552012][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'.
[   68.556186][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'.
[   68.558537][ T5995] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.564845][ T6012] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.41'.
[   68.572568][ T5995] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.581196][ T5995] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.592033][ T5995] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.730222][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'.
[   68.733414][ T6025] geneve2: entered promiscuous mode
[   68.783442][ T6025] geneve2: entered promiscuous mode
[   68.966056][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'.
[   68.972280][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'.
[   69.184896][   T54] Bluetooth: hci2: command tx timeout
[   69.187633][ T5835] Bluetooth: hci0: command tx timeout
[   69.187664][ T5833] Bluetooth: hci1: command tx timeout
[   69.207275][ T6049] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.284514][ T6051] netlink: 'syz.0.54': attribute type 1 has an invalid length.
[   69.517506][ T6061] netlink: 'syz.2.56': attribute type 2 has an invalid length.
[   69.524973][ T6057] block nbd0: server does not support multiple connections per device.
[   69.530212][ T6057] block nbd0: shutting down sockets
[   69.585683][    C1] Illegal XDP return value 16128 on prog  (id 7) dev veth0_to_bond, expect packet loss!
[   70.272163][ T6104] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   70.283803][ T6104] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   71.032059][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   71.036608][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.061391][ T6142] validate_nla: 2 callbacks suppressed
[   71.061426][ T6142] netlink: 'syz.0.83': attribute type 2 has an invalid length.
[   71.181449][ T6146] __nla_validate_parse: 7 callbacks suppressed
[   71.181469][ T6146] netlink: 56 bytes leftover after parsing attributes in process `syz.0.85'.
[   71.242502][ T6149] tipc: Started in network mode
[   71.244274][ T6149] tipc: Node identity 5a00eeb3d04b, cluster identity 4711
[   71.248036][ T6149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.252623][ T6149] syzkaller0: MTU too low for tipc bearer
[   71.254586][ T6149] tipc: Disabling bearer <eth:syzkaller0>
[   71.264948][ T5833] Bluetooth: hci1: command tx timeout
[   71.265035][ T5835] Bluetooth: hci0: command tx timeout
[   71.269352][   T54] Bluetooth: hci2: command tx timeout
[   71.459582][ T6159] netlink: 17 bytes leftover after parsing attributes in process `syz.0.89'.
[   71.505731][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.90'.
[   71.512148][ T3145] IPVS: starting estimator thread 0...
[   71.559017][ T6167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.563505][ T6168] syzkaller0: entered promiscuous mode
[   71.570091][ T6168] syzkaller0: entered allmulticast mode
[   71.597773][ T6168] tipc: Resetting bearer <eth:syzkaller0>
[   71.609242][ T6168] tipc: Disabling bearer <eth:syzkaller0>
[   71.616665][ T6165] IPVS: using max 36 ests per chain, 86400 per kthread
[   71.759616][ T6176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.832031][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[   71.835358][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'.
[   71.933098][ T6191] netlink: 'syz.0.98': attribute type 58 has an invalid length.
[   72.335513][ T6201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.102'.
[   72.863402][ T6205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.897159][ T6208] xt_ecn: cannot match TCP bits for non-tcp packets
[   72.944203][ T6211] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   73.022364][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.107'.
[   73.045594][ T6215] netlink: 152 bytes leftover after parsing attributes in process `syz.1.107'.
[   73.270369][ T6231] bridge_slave_0: left allmulticast mode
[   73.272249][ T6231] bridge_slave_0: left promiscuous mode
[   73.275204][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.288372][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'.
[   73.290204][ T6231] bridge_slave_1: left allmulticast mode
[   73.293826][ T6231] bridge_slave_1: left promiscuous mode
[   73.299196][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.306476][ T6231] bond0: (slave bond_slave_0): Releasing backup interface
[   73.311683][ T6231] bond0: (slave bond_slave_1): Releasing backup interface
[   73.325621][ T6231] team0: Port device team_slave_0 removed
[   73.333694][ T6231] team0: Port device team_slave_1 removed
[   73.338426][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.341518][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.345858][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.349165][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.623987][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'.
[   73.851916][ T6256] syzkaller0: entered allmulticast mode
[   74.373559][ T6291] Bluetooth: MGMT ver 1.23
[   74.586420][ T6313] ieee802154 phy0 wpan0: encryption failed: -90
[   74.588914][ T6310] netlink: 'syz.2.137': attribute type 20 has an invalid length.
[   74.591328][ T6310] netlink: 'syz.2.137': attribute type 21 has an invalid length.
[   74.690082][ T6324] netlink: 'syz.2.141': attribute type 5 has an invalid length.
[   74.862575][ T6337] xt_hashlimit: size too large, truncated to 1048576
[   75.033283][ T6349] dummy0: entered promiscuous mode
[   75.035843][ T6349] macsec1: entered promiscuous mode
[   75.037619][ T6349] macsec1: entered allmulticast mode
[   75.039159][ T6349] dummy0: entered allmulticast mode
[   75.110883][ T6349] dummy0: left allmulticast mode
[   75.112617][ T6349] dummy0: left promiscuous mode
[   75.908879][ T6375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.918919][ T6377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.198872][ T6388] netlink: 'syz.1.160': attribute type 4 has an invalid length.
[   76.378270][ T6397] __nla_validate_parse: 16 callbacks suppressed
[   76.378284][ T6397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.164'.
[   76.515362][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'.
[   76.565452][ T6406] xt_time: invalid argument - start or stop time greater than 23:59:59
[   76.572235][ T6406] 8021q: VLANs not supported on ipvlan1
[   77.184859][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[   77.613713][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'.
[   77.620053][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'.
[   77.668957][ T6446] batman_adv: batadv0: Adding interface: dummy0
[   77.675031][ T6446] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.691407][ T6446] batman_adv: batadv0: Interface activated: dummy0
[   78.257757][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'.
[   78.263802][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'.
[   78.279967][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.308758][ T6455] bridge_slave_1 (unregistering): left allmulticast mode
[   78.310981][ T6455] bridge_slave_1 (unregistering): left promiscuous mode
[   78.313199][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.317637][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'.
[   78.490560][ T6462] netlink: 256 bytes leftover after parsing attributes in process `syz.2.184'.
[   78.800750][ T6475] syz_tun: entered promiscuous mode
[   78.804147][ T6474] syz_tun: left promiscuous mode
[   79.138484][ T6484] ip6erspan0: tun_chr_ioctl cmd 2147767507
[   79.538094][ T6504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.199'.
[   79.572605][ T6507] xt_SECMARK: invalid mode: 0
[   79.800786][ T6521] netlink: 'syz.1.206': attribute type 12 has an invalid length.
[   79.803245][ T6521] netlink: 'syz.1.206': attribute type 29 has an invalid length.
[   79.806292][ T6521] netlink: 148 bytes leftover after parsing attributes in process `syz.1.206'.
[   80.009504][ T6527] vlan2: entered allmulticast mode
[   80.080163][ T6538] ip6tnl1: entered promiscuous mode
[   80.082611][ T6538] ip6tnl1: entered allmulticast mode
[   80.109374][ T6538] vlan2: entered allmulticast mode
[   80.267740][ T6547] netlink: 'syz.2.218': attribute type 1 has an invalid length.
[   80.362385][ T6548] bond1: (slave gretap1): making interface the new active one
[   80.366515][ T6548] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   80.919263][ T6583] openvswitch: netlink: Actions may not be safe on all matching packets
[   81.014279][ T6590] No such timeout policy "syz0"
[   81.327280][ T6604] vlan2: entered promiscuous mode
[   81.329337][ T6604] bond0: entered promiscuous mode
[   81.331039][ T6604] bond_slave_0: entered promiscuous mode
[   81.332643][ T6608] netlink: 'syz.2.239': attribute type 7 has an invalid length.
[   81.332936][ T6604] bond_slave_1: entered promiscuous mode
[   81.487013][ T6614] __nla_validate_parse: 9 callbacks suppressed
[   81.487024][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'.
[   81.491961][ T6614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.243'.
[   81.710479][ T6627] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.249'.
[   81.818429][ T5298] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   81.824126][ T5298] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   81.831475][ T5298] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   82.200551][ T6652] netlink: 'syz.0.251': attribute type 10 has an invalid length.
[   82.222273][ T6652] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   82.634210][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'.
[   82.709522][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'.
[   83.478354][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'.
[   83.484242][ T6692] netlink: 'syz.2.264': attribute type 1 has an invalid length.
[   83.495493][ T6692] netlink: 'syz.2.264': attribute type 2 has an invalid length.
[   84.409344][ T6711] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   84.607502][ T6718] Cannot find add_set index 3 as target
[   84.931309][ T6746] tipc: Trying to set illegal importance in message
[   85.171564][ T6752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.284'.
[   85.176360][ T6752] netlink: 'syz.0.284': attribute type 7 has an invalid length.
[   85.179390][ T6752] netlink: 'syz.0.284': attribute type 8 has an invalid length.
[   85.182411][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'.
[   85.488086][ T6765] netlink: 'syz.0.289': attribute type 2 has an invalid length.
[   85.744846][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   85.833190][ T6780] netlink: 200 bytes leftover after parsing attributes in process `syz.2.292'.
[   85.892662][ T6785] netlink: 'syz.0.291': attribute type 1 has an invalid length.
[   86.397821][    T9] cfg80211: failed to load regulatory.db
[   86.676113][ T6821] IPVS: set_ctl: invalid protocol: 195 100.1.1.1:19997
[   86.788490][ T6828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.302'.
[   86.926788][ T6834] netlink: 56 bytes leftover after parsing attributes in process `syz.0.305'.
[   86.930599][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'.
[   87.174436][ T6842] netlink: 'syz.1.309': attribute type 12 has an invalid length.
[   87.178440][ T6842] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.309'.
[   87.211493][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'.
[   87.222887][ T6842] netlink: 'syz.1.309': attribute type 6 has an invalid length.
[   87.235681][ T6842] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.309'.
[   87.399652][ T6855] netlink: 'syz.1.313': attribute type 15 has an invalid length.
[   87.414256][ T6855] syzkaller0: mtu less than device minimum
[   87.464008][ T6857] x_tables: duplicate underflow at hook 1
[   87.721985][ T6867] tipc: Can't bind to reserved service type 2
[   87.841566][ T6876] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   87.860687][ T6874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   87.936986][ T6882] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.323'.
[   88.074411][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'.
[   88.077973][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'.
[   88.081392][ T6886] netlink: 'syz.1.326': attribute type 13 has an invalid length.
[   88.084455][ T6886] netlink: 'syz.1.326': attribute type 11 has an invalid length.
[   88.284236][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'.
[   88.441656][ T6898] netlink: 'syz.1.330': attribute type 1 has an invalid length.
[   88.476677][ T6898] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   88.482207][ T6898] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   88.548884][ T6918] openvswitch: netlink: Multiple metadata blocks provided
[   88.556884][ T6903] macvlan2: entered promiscuous mode
[   88.558890][ T6903] macvlan2: entered allmulticast mode
[   88.560873][ T6903] bond1: entered promiscuous mode
[   88.562799][ T6903] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   88.569985][ T6903] bond1: left promiscuous mode
[   88.813906][ T6932] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   88.819062][ T6932] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   89.289019][ T6962] bond2 (unregistering): Released all slaves
[   89.628002][ T6977] x_tables: duplicate underflow at hook 2
[   90.578904][ T7035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.637514][ T7039] syzkaller0: entered promiscuous mode
[   90.639321][ T7039] syzkaller0: entered allmulticast mode
[   90.733080][ T7031] tipc: Resetting bearer <eth:syzkaller0>
[   90.752565][ T7031] tipc: Disabling bearer <eth:syzkaller0>
[   90.944359][ T7067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.949494][ T7067] syzkaller0: entered promiscuous mode
[   90.951664][ T7067] syzkaller0: entered allmulticast mode
[   90.997158][ T7067] tipc: Resetting bearer <eth:syzkaller0>
[   91.005774][ T7071] netlink: 'syz.1.382': attribute type 5 has an invalid length.
[   91.037330][ T7066] tipc: Resetting bearer <eth:syzkaller0>
[   91.057267][ T7066] tipc: Disabling bearer <eth:syzkaller0>
[   91.387971][ T7092] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   91.392315][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.396054][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.479425][ T7095] macvtap1: entered allmulticast mode
[   91.481178][ T7095] veth0_macvtap: entered allmulticast mode
[   91.497892][ T7095] netlink: 'syz.0.393': attribute type 1 has an invalid length.
[   91.500293][ T7095] netlink: 'syz.0.393': attribute type 4 has an invalid length.
[   91.653529][ T7114] netlink: 'syz.1.400': attribute type 9 has an invalid length.
[   91.669477][ T7114] hsr0: entered promiscuous mode
[   91.671540][ T7114] macvlan2: entered promiscuous mode
[   91.673294][ T7114] macvlan2: entered allmulticast mode
[   91.679406][ T7114] hsr0: entered allmulticast mode
[   91.680955][ T7114] hsr_slave_0: entered allmulticast mode
[   91.689557][ T7114] hsr_slave_1: entered allmulticast mode
[   91.786328][ T7124] netlink: zone id is out of range
[   91.788028][ T7124] netlink: zone id is out of range
[   91.789790][ T7124] netlink: zone id is out of range
[   91.791519][ T7124] netlink: zone id is out of range
[   91.793346][ T7124] netlink: zone id is out of range
[   91.796652][ T7124] netlink: zone id is out of range
[   91.799170][ T7124] netlink: zone id is out of range
[   91.801140][ T7124] netlink: zone id is out of range
[   91.832647][ T7124] __nla_validate_parse: 21 callbacks suppressed
[   91.832663][ T7124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.404'.
[   91.855866][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'.
[   91.884254][ T7124] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   93.048125][ T7195] validate_nla: 2 callbacks suppressed
[   93.048137][ T7195] netlink: 'syz.0.428': attribute type 1 has an invalid length.
[   93.095749][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[   93.098812][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'.
[   93.282318][ T7213] netlink: 184104 bytes leftover after parsing attributes in process `syz.1.434'.
[   93.380021][ T7223] batadv_slave_0: entered promiscuous mode
[   93.386348][ T7222] batadv_slave_0: left promiscuous mode
[   93.479824][ T7232] IPv6: sit1: Disabled Multicast RS
[   93.510903][ T7235] sctp: [Deprecated]: syz.0.440 (pid 7235) Use of int in maxseg socket option.
[   93.510903][ T7235] Use struct sctp_assoc_value instead
[   93.768082][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.443'.
[   93.793119][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   94.148191][ T7259] macsec1: entered allmulticast mode
[   94.232627][ T7265] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   95.151276][ T7286] netlink: 300 bytes leftover after parsing attributes in process `syz.1.451'.
[   95.362858][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'.
[   95.374009][ T7300] macvlan3: entered allmulticast mode
[   95.377418][ T7300] veth1_vlan: entered allmulticast mode
[   95.420106][ T7303] netlink: 'syz.1.455': attribute type 16 has an invalid length.
[   95.422734][ T7303] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.455'.
[   95.428704][ T7303] netlink: 'syz.1.455': attribute type 2 has an invalid length.
[   95.536980][ T7311] nbd: illegal input index 65508
[   97.611538][ T7331] No such timeout policy "syz0"
[   98.022466][ T7348] netlink: 'syz.1.469': attribute type 30 has an invalid length.
[   98.035059][ T7348] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   98.039172][ T7348] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   98.149080][ T7354] netlink: 'syz.1.473': attribute type 4 has an invalid length.
[   98.158169][ T7354] __nla_validate_parse: 2 callbacks suppressed
[   98.158184][ T7354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.473'.
[   98.217813][ T7357] trusted_key: syz.1.475 sent an empty control message without MSG_MORE.
[   98.356220][ T7365] netlink: 'syz.2.478': attribute type 21 has an invalid length.
[   98.359556][ T7365] netlink: 132 bytes leftover after parsing attributes in process `syz.2.478'.
[   98.368027][ T7365] netlink: 68 bytes leftover after parsing attributes in process `syz.2.478'.
[   98.747851][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'.
[   98.751409][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'.
[   98.882610][ T7384] netlink: 'syz.1.485': attribute type 14 has an invalid length.
[   98.892789][ T7384] netlink: 'syz.1.485': attribute type 14 has an invalid length.
[   98.964593][ T7388] netlink: 80 bytes leftover after parsing attributes in process `syz.1.487'.
[   99.474227][ T7421] netlink: 'syz.1.500': attribute type 4 has an invalid length.
[   99.478307][ T7421] netlink: 'syz.1.500': attribute type 17 has an invalid length.
[   99.636541][ T7436] netlink: 'syz.2.505': attribute type 2 has an invalid length.
[   99.657765][ T7438] bridge3: entered promiscuous mode
[   99.660053][ T7438] bridge3: entered allmulticast mode
[   99.676306][ T7438] team0: Port device bridge3 added
[   99.691629][ T7438] netlink: 40 bytes leftover after parsing attributes in process `syz.0.506'.
[   99.696975][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'.
[   99.850722][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'.
[   99.855342][ T7452] netlink: 'syz.1.511': attribute type 1 has an invalid length.
[   99.861631][ T7438] team0 (unregistering): Port device bridge3 removed
[  100.079845][ T7472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.517'.
[  100.372302][ T7488] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  101.748748][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  101.773991][ T7513] net_ratelimit: 75 callbacks suppressed
[  101.774002][ T7513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.928494][ T7524] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  102.298262][  T970] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  102.301231][  T970] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  102.314792][  T970] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  102.318545][  T970] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  102.321411][  T970] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  102.324260][  T970] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  102.328561][  T970] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3
[  102.334346][  T970] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  102.405308][ T7550] syz.0.545 (7550) used obsolete PPPIOCDETACH ioctl
[  102.518696][ T7559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.313990][   T33] audit: type=1107 audit(1752203927.219:2): pid=7612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',Y:^UF*)Y%EHtk'
[  103.317187][ T7613] __nla_validate_parse: 16 callbacks suppressed
[  103.317234][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'.
[  103.475674][ T7618] netlink: 'syz.2.569': attribute type 5 has an invalid length.
[  103.519456][ T7620] netlink: 'syz.0.570': attribute type 12 has an invalid length.
[  103.523575][ T7620] netlink: 132 bytes leftover after parsing attributes in process `syz.0.570'.
[  103.531332][ T7620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.570'.
[  103.919793][ T7642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.301325][ T7654] "syz.0.581" (7654) uses obsolete ecb(arc4) skcipher
[  104.638863][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.587'.
[  104.647190][ T7676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.587'.
[  104.663535][ T7677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.588'.
[  104.674816][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'.
[  104.678224][ T7677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.588'.
[  104.748443][ T7680] netlink: 'syz.1.589': attribute type 1 has an invalid length.
[  104.774566][ T7680] bond4: entered promiscuous mode
[  104.782430][ T7680] 8021q: adding VLAN 0 to HW filter on device bond4
[  104.829401][ T7687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.591'.
[  104.837739][ T7687] geneve1: entered promiscuous mode
[  104.851166][ T7692] xt_ecn: cannot match TCP bits for non-tcp packets
[  104.858446][ T7687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.869596][ T7692] netlink: 'syz.1.593': attribute type 13 has an invalid length.
[  104.872117][ T7692] netlink: 'syz.1.593': attribute type 17 has an invalid length.
[  104.887719][ T7687] syzkaller0: entered promiscuous mode
[  104.889443][ T7687] syzkaller0: entered allmulticast mode
[  104.891662][ T7687] tipc: Resetting bearer <eth:syzkaller0>
[  104.905118][ T7692] gretap0: refused to change device tx_queue_len
[  104.907522][ T7692] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  104.950527][ T7686] tipc: Resetting bearer <eth:syzkaller0>
[  105.942590][ T5884] tipc: Node number set to 2320232115
[  106.052281][ T7686] tipc: Disabling bearer <eth:syzkaller0>
[  106.061835][ T7711] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  106.068547][ T7711] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  106.142531][ T7723] No such timeout policy "syz0"
[  106.200649][ T7726] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[  106.218364][ T7726] nbd: must specify a device to reconfigure
[  106.365599][ T7734] x_tables: unsorted underflow at hook 3
[  106.561261][ T7752] netlink: 44 bytes leftover after parsing attributes in process `syz.1.610'.
[  106.613731][ T7754] bridge1: entered promiscuous mode
[  106.615552][ T7754] bridge1: entered allmulticast mode
[  106.618600][ T7754] netlink: 'syz.1.611': attribute type 4 has an invalid length.
[  106.635528][ T7754] netlink: 'syz.1.611': attribute type 4 has an invalid length.
[  106.713347][ T7758] openvswitch: netlink: Message has 1 unknown bytes.
[  106.715897][ T7758] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.722781][ T7758] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.782148][ T7758] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.793017][ T7761] batadv_slave_0: entered promiscuous mode
[  106.840862][ T7758] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.892362][ T7758] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.962437][ T7758] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.982221][ T7758] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.999265][ T7758] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.012093][ T7758] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.019674][ T7757] batadv_slave_0: left promiscuous mode
[  107.161884][ T7772] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  107.416752][ T7793] Bluetooth: MGMT ver 1.23
[  107.473503][ T7798] netlink: 'syz.2.630': attribute type 4 has an invalid length.
[  107.568445][ T7805] 8021q: adding VLAN 0 to HW filter on device bond2
[  107.583979][ T7805] 8021q: adding VLAN 0 to HW filter on device bond2
[  107.586884][ T7805] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  107.590870][ T7805] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  107.627757][ T7809] netlink: 'syz.2.632': attribute type 14 has an invalid length.
[  107.905863][ T7811] infiniband syz0: set down
[  107.911246][ T7811] infiniband syz0: added ipvlan1
[  108.005450][ T7811] RDS/IB: syz0: added
[  108.007764][ T7811] smc: adding ib device syz0 with port count 1
[  108.010251][ T7811] smc:    ib device syz0 port 1 has pnetid 
[  109.020230][ T7841] __nla_validate_parse: 7 callbacks suppressed
[  109.020244][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'.
[  109.123930][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.645'.
[  109.354387][ T7855] ip6gretap0: entered promiscuous mode
[  109.363637][ T7852] ip6gretap0: left promiscuous mode
[  109.470658][ T7861] netlink: 248 bytes leftover after parsing attributes in process `syz.1.652'.
[  109.473793][ T7861] netlink: 48 bytes leftover after parsing attributes in process `syz.1.652'.
[  109.522450][ T7861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.651211][ T7871] IPVS: Scheduler module ip_vs_sip not found
[  109.692459][ T7874] 8021q: adding VLAN 0 to HW filter on device bond3
[  109.748336][ T7880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.659'.
[  109.993155][ T7895] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2
[  110.014464][ T7897] netlink: 84 bytes leftover after parsing attributes in process `syz.0.667'.
[  110.020648][ T7897] netlink: 84 bytes leftover after parsing attributes in process `syz.0.667'.
[  110.298940][ T7912] syzkaller0: entered promiscuous mode
[  110.301348][ T7912] syzkaller0: entered allmulticast mode
[  110.900756][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.919505][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.925785][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.939688][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.950039][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  111.728125][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.899072][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.983397][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.068957][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.073294][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'.
[  112.091023][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'.
[  112.187819][ T7944] netlink: 'syz.0.680': attribute type 1 has an invalid length.
[  112.190924][ T7944] netlink: 'syz.0.680': attribute type 10 has an invalid length.
[  112.194059][ T7944] netlink: 236 bytes leftover after parsing attributes in process `syz.0.680'.
[  112.342868][   T13] bridge_slave_0: left promiscuous mode
[  112.351645][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.834472][ T7953] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  112.938578][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.941541][   T13] bond_slave_0: left promiscuous mode
[  112.946843][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.949662][   T13] bond_slave_1: left promiscuous mode
[  112.952330][   T13] bond0 (unregistering): Released all slaves
[  112.961307][   T13] bond1 (unregistering): Released all slaves
[  112.972954][   T13] bond2 (unregistering): Released all slaves
[  112.983487][   T13] bond3 (unregistering): Released all slaves
[  113.028025][ T5835] Bluetooth: hci0: command tx timeout
[  113.073479][   T13] bond4 (unregistering): Released all slaves
[  113.099355][ T7925] chnl_net:caif_netlink_parms(): no params data found
[  113.314577][ T7925] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.320114][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.323354][ T7925] bridge_slave_0: entered allmulticast mode
[  113.348698][ T7925] bridge_slave_0: entered promiscuous mode
[  113.390018][ T7925] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.392440][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.395362][ T7925] bridge_slave_1: entered allmulticast mode
[  113.398452][ T7925] bridge_slave_1: entered promiscuous mode
[  113.443020][ T7925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.449955][ T7925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.584147][ T7925] team0: Port device team_slave_0 added
[  113.606189][ T7925] team0: Port device team_slave_1 added
[  113.703989][ T7925] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.713253][ T7925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.726081][ T7925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.736346][ T7925] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.738720][ T7925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.770918][ T7925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.782663][ T7990] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  113.788777][ T7990] ipt_ECN: cannot use operation on non-tcp rule
[  113.800710][   T13] batman_adv: batadv0: Interface deactivated: dummy0
[  113.804114][   T13] batman_adv: batadv0: Removing interface: dummy0
[  113.815413][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.818400][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.827875][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.832555][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.865371][   T13] veth1_vlan: left allmulticast mode
[  113.867254][   T13] hsr0: left allmulticast mode
[  113.869253][   T13] veth1_macvtap: left promiscuous mode
[  113.871304][   T13] veth0_macvtap: left promiscuous mode
[  113.874306][   T13] veth1_vlan: left promiscuous mode
[  113.877036][   T13] veth0_vlan: left promiscuous mode
[  113.990510][ T7999] No such timeout policy "syz0"
[  114.249857][   T13] team0 (unregistering): Port device team_slave_1 removed
[  114.312249][   T13] team0 (unregistering): Port device team_slave_0 removed
[  114.683292][ T7994] __nla_validate_parse: 5 callbacks suppressed
[  114.683309][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'.
[  114.708138][ T5884] infiniband syz1: ib_query_port failed (-19)
[  114.801503][ T7925] hsr_slave_0: entered promiscuous mode
[  114.803951][ T7925] hsr_slave_1: entered promiscuous mode
[  115.106916][ T5835] Bluetooth: hci0: command tx timeout
[  115.113712][ T8025] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.696'.
[  115.159109][ T8025] ": renamed from bond_slave_0 (while UP)
[  115.229789][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'.
[  115.235108][ T8029] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  115.239053][ T8029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.310050][ T8031] netlink: 'syz.2.697': attribute type 1 has an invalid length.
[  115.313120][ T8031] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.697'.
[  115.567956][ T7925] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  115.578425][ T7925] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  115.592753][ T7925] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  115.613794][ T7925] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  115.661385][ T8052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.663796][ T8052] IPv6: NLM_F_CREATE should be set when creating new route
[  115.687627][ T8042] netlink: 'syz.2.700': attribute type 2 has an invalid length.
[  115.735236][ T8042] : entered promiscuous mode
[  115.808094][ T7925] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.836697][ T7925] 8021q: adding VLAN 0 to HW filter on device team0
[  115.858960][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.861659][ T4403] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.886964][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.889442][ T4403] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.943903][ T7925] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  115.947838][ T7925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  116.097233][ T8078] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  116.117621][ T7925] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.128381][ T5899] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  116.143167][ T7925] veth0_vlan: entered promiscuous mode
[  116.150656][ T7925] veth1_vlan: entered promiscuous mode
[  116.168674][ T7925] veth0_macvtap: entered promiscuous mode
[  116.172621][ T7925] veth1_macvtap: entered promiscuous mode
[  116.182672][ T7925] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.189433][ T7925] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.199575][ T7925] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.202302][ T7925] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.205402][ T7925] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.209721][ T7925] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.395496][ T5899] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  116.783210][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.790373][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.850428][ T4403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.853530][ T4403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.013652][ T8107] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  117.088009][ T8112] netlink: 666 bytes leftover after parsing attributes in process `syz.2.708'.
[  117.101101][ T8112] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2
[  117.290037][ T8125] syzkaller0: entered promiscuous mode
[  117.292243][ T8125] syzkaller0: entered allmulticast mode
[  117.298289][ T8124] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.316733][ T8124] tipc: Resetting bearer <eth:syzkaller0>
[  117.329635][ T8124] tipc: Disabling bearer <eth:syzkaller0>
[  117.664238][ T8140] No such timeout policy "syz0"
[  117.974333][ T8142] No such timeout policy "syz0"
[  118.212051][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'.
[  118.295571][ T5843] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.728509][ T8174] netlink: 'syz.2.729': attribute type 5 has an invalid length.
[  118.752208][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  118.759893][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  118.765245][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  118.770741][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  118.775683][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.014153][   T51] IPVS: starting estimator thread 0...
[  119.017129][ T8183] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  119.109327][ T8195] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  119.112776][ T8196] No such timeout policy "syz0"
[  119.116228][ T8175] chnl_net:caif_netlink_parms(): no params data found
[  119.119990][ T8190] IPVS: using max 62 ests per chain, 148800 per kthread
[  119.468191][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.471011][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.473848][ T8175] bridge_slave_0: entered allmulticast mode
[  119.480556][ T8175] bridge_slave_0: entered promiscuous mode
[  119.486726][ T8175] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.489608][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.492536][ T8175] bridge_slave_1: entered allmulticast mode
[  119.497151][ T8175] bridge_slave_1: entered promiscuous mode
[  119.535461][ T8175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.541597][ T8175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.571706][ T8175] team0: Port device team_slave_0 added
[  119.579643][ T8210] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  119.589352][ T8175] team0: Port device team_slave_1 added
[  119.619836][ T8175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.622568][ T8175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.632552][ T8175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.638678][ T8175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.641361][ T8175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.651745][ T8175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.675706][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.741'.
[  119.712966][ T8175] hsr_slave_0: entered promiscuous mode
[  119.716064][ T8175] hsr_slave_1: entered promiscuous mode
[  119.718204][ T8175] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  119.720441][ T8175] Cannot create hsr debugfs directory
[  119.811081][ T8219] : entered promiscuous mode
[  119.882183][ T8219] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  119.905647][ T5298] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  120.002935][ T5843] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.049481][ T5843] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.055291][ T5298] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  120.115873][ T5843] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.236733][ T8239] netlink: 9 bytes leftover after parsing attributes in process `syz.0.749'.
[  120.240793][ T8239] 0: renamed from hsr0 (while UP)
[  120.249841][ T8239] 0: entered allmulticast mode
[  120.254888][ T8239] hsr_slave_0: entered allmulticast mode
[  120.256752][ T8239] hsr_slave_1: entered allmulticast mode
[  120.258915][ T8239] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  120.314429][ T5843] bridge_slave_1: left allmulticast mode
[  120.318509][ T5843] bridge_slave_1: left promiscuous mode
[  120.320690][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.342907][ T5843] bridge_slave_0: left allmulticast mode
[  120.351019][ T5843] bridge_slave_0: left promiscuous mode
[  120.353668][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.639568][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.647028][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.652811][ T5843] bond0 (unregistering): Released all slaves
[  120.666227][ T8248] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.751'.
[  120.696533][ T8256] tap0: tun_chr_ioctl cmd 1074025677
[  120.699308][ T8256] tap0: linktype set to 823
[  120.703346][ T8245] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.751'.
[  120.865622][   T54] Bluetooth: hci0: command tx timeout
[  120.908026][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.910768][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.036122][ T8175] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  121.045967][ T8175] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  121.081571][ T8175] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  121.091364][ T8241] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  121.115770][ T8175] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  121.239605][ T5843] hsr_slave_0: left promiscuous mode
[  121.249444][ T5843] hsr_slave_1: left promiscuous mode
[  121.252235][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.274762][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.308613][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.311574][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.350363][ T5843] veth1_macvtap: left promiscuous mode
[  121.353188][ T5843] veth0_macvtap: left promiscuous mode
[  121.358022][ T5843] veth1_vlan: left promiscuous mode
[  121.360773][ T5843] veth0_vlan: left promiscuous mode
[  121.747960][ T5843] team0 (unregistering): Port device team_slave_1 removed
[  121.779921][ T5843] team0 (unregistering): Port device team_slave_0 removed
[  122.152521][ T8175] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.191199][ T8175] 8021q: adding VLAN 0 to HW filter on device team0
[  122.197741][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.761'.
[  122.210407][  T990] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.212979][  T990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.233152][  T990] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.235399][  T990] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.358997][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'.
[  122.361998][ T8307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.390218][ T8307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.519965][ T8175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.573169][ T8175] veth0_vlan: entered promiscuous mode
[  122.577330][ T8320] block nbd2: not configured, cannot reconfigure
[  122.598769][ T8175] veth1_vlan: entered promiscuous mode
[  122.617338][ T8175] veth0_macvtap: entered promiscuous mode
[  122.622612][ T8175] veth1_macvtap: entered promiscuous mode
[  122.638603][ T8323] netlink: 'syz.2.768': attribute type 15 has an invalid length.
[  122.647474][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.653094][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.660703][ T8175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.663987][ T8175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.669214][ T8175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.671858][ T8175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.674174][ T8325] netlink: 96 bytes leftover after parsing attributes in process `syz.0.770'.
[  122.753639][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.758243][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.793926][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.796614][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.963096][ T8348] No such timeout policy "syz0"
[  123.227194][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'.
[  123.474041][ T8361] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  123.859460][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'.
[  123.869417][ T8378] netlink: 'syz.0.789': attribute type 1 has an invalid length.
[  123.901680][ T8378] bond4: (slave gretap1): making interface the new active one
[  123.906213][ T8378] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  123.913656][ T8381] tipc: Started in network mode
[  123.915796][ T8381] tipc: Node identity 3ef00fd3d612, cluster identity 4711
[  123.918686][ T8381] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.921946][ T8381] syzkaller0: entered promiscuous mode
[  123.924008][ T8381] syzkaller0: entered allmulticast mode
[  123.937481][ T8381] netlink: 'syz.2.790': attribute type 6 has an invalid length.
[  123.961552][ T8381] tipc: Resetting bearer <eth:syzkaller0>
[  123.967251][ T8380] tipc: Resetting bearer <eth:syzkaller0>
[  123.986481][ T8380] tipc: Disabling bearer <eth:syzkaller0>
[  124.279360][ T8403] No such timeout policy "syz0"
[  124.373777][ T5862] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.388394][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.391364][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.439346][ T8408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.724366][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  124.730122][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  124.733917][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  124.737708][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  124.740998][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  125.142067][ T8417] chnl_net:caif_netlink_parms(): no params data found
[  125.256222][ T8417] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.259566][ T8417] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.262722][ T8417] bridge_slave_0: entered allmulticast mode
[  125.267357][ T8417] bridge_slave_0: entered promiscuous mode
[  125.272872][ T8417] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.275992][ T8417] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.279065][ T8417] bridge_slave_1: entered allmulticast mode
[  125.282871][ T8417] bridge_slave_1: entered promiscuous mode
[  125.324078][ T8417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.327898][ T8430] syzkaller1: entered promiscuous mode
[  125.330193][ T8430] syzkaller1: entered allmulticast mode
[  125.339801][ T8417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.406456][ T8417] team0: Port device team_slave_0 added
[  125.410252][ T8417] team0: Port device team_slave_1 added
[  125.456650][ T8417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.459295][ T8417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.485135][ T8417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.491244][ T8417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.493876][ T8417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.513326][ T8417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.632413][ T8417] hsr_slave_0: entered promiscuous mode
[  125.644329][ T8417] hsr_slave_1: entered promiscuous mode
[  125.753795][ T5862] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.795697][ T8440] netlink: 132 bytes leftover after parsing attributes in process `syz.0.810'.
[  125.875235][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.810'.
[  126.110923][ T8456] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.815'.
[  126.122591][ T5862] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.197700][ T5862] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.299170][ T5862] bridge_slave_1: left allmulticast mode
[  126.301304][ T5862] bridge_slave_1: left promiscuous mode
[  126.303333][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.308375][ T5862] bridge_slave_0: left allmulticast mode
[  126.310369][ T5862] bridge_slave_0: left promiscuous mode
[  126.312393][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.577374][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.582663][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.587586][ T5862] bond0 (unregistering): Released all slaves
[  126.689609][ T8466] No such timeout policy "syz0"
[  126.757070][ T8470] netlink: 36 bytes leftover after parsing attributes in process `syz.0.818'.
[  126.776769][ T8470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.787401][   T54] Bluetooth: hci0: command tx timeout
[  126.840851][ T8475] netlink: 'syz.0.819': attribute type 21 has an invalid length.
[  126.858758][ T8475] netlink: 'syz.0.819': attribute type 6 has an invalid length.
[  126.861721][ T8475] netlink: 64 bytes leftover after parsing attributes in process `syz.0.819'.
[  127.099782][ T5862] hsr_slave_0: left promiscuous mode
[  127.101902][ T5862] hsr_slave_1: left promiscuous mode
[  127.104530][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.107085][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.109959][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.112277][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.131512][ T5862] veth1_macvtap: left promiscuous mode
[  127.133179][ T5862] veth0_macvtap: left promiscuous mode
[  127.136043][ T5862] veth1_vlan: left promiscuous mode
[  127.137948][ T5862] veth0_vlan: left promiscuous mode
[  127.563989][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  127.598572][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  127.933280][ T8417] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  127.949914][ T8490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.953080][ T8492] syzkaller0: entered promiscuous mode
[  127.955633][ T8492] syzkaller0: entered allmulticast mode
[  127.998021][ T8500] tipc: Resetting bearer <eth:syzkaller0>
[  128.000908][ T8485] tipc: Resetting bearer <eth:syzkaller0>
[  128.020293][ T8485] tipc: Disabling bearer <eth:syzkaller0>
[  128.025801][ T8417] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  128.032430][ T8417] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  128.056805][ T8417] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  128.168488][ T8417] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.204141][ T8417] 8021q: adding VLAN 0 to HW filter on device team0
[  128.227300][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.230036][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.244201][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.246979][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.272717][ T8516] No such timeout policy "syz0"
[  128.504399][ T8417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.538355][ T8417] veth0_vlan: entered promiscuous mode
[  128.539809][ T8527] netlink: 'syz.0.830': attribute type 1 has an invalid length.
[  128.543397][ T8527] netlink: 224 bytes leftover after parsing attributes in process `syz.0.830'.
[  128.544022][ T8417] veth1_vlan: entered promiscuous mode
[  128.571448][ T8417] veth0_macvtap: entered promiscuous mode
[  128.578151][ T8417] veth1_macvtap: entered promiscuous mode
[  128.590438][ T8417] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.600989][ T8417] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.601584][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.831'.
[  128.608686][ T8417] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.611651][ T8417] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.614546][ T8417] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.618272][ T8417] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.624086][ T8529] netlink: 52 bytes leftover after parsing attributes in process `syz.0.831'.
[  128.632166][ T8529] netlink: 56 bytes leftover after parsing attributes in process `syz.0.831'.
[  128.677262][  T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.680069][  T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.701595][  T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.704092][  T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.729145][ T8531] tipc: New replicast peer: 255.255.255.255
[  128.731461][ T8531] tipc: Enabled bearer <udp:syz2>, priority 10
[  128.865391][ T5835] Bluetooth: hci0: command tx timeout
[  128.899894][ T8539] No such timeout policy "syz0"
[  129.334800][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.841'.
[  129.822026][ T8560] netlink: 'syz.0.844': attribute type 1 has an invalid length.
[  129.835259][ T8560] syzkaller0: entered promiscuous mode
[  129.837408][ T8560] syzkaller0: entered allmulticast mode
[  130.076318][ T8567] pim6reg: entered allmulticast mode
[  130.079407][ T8567] pim6reg: left allmulticast mode
[  130.210521][ T8577] No such timeout policy "syz0"
[  131.230091][ T8594] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  131.485687][ T8600] __nla_validate_parse: 3 callbacks suppressed
[  131.485700][ T8600] netlink: 14 bytes leftover after parsing attributes in process `syz.2.859'.
[  131.587297][ T8600] bond0 (unregistering): (slave "): Releasing backup interface
[  131.598783][ T8600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.607947][ T8600] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  131.620085][ T8600] bond0 (unregistering): Released all slaves
[  131.814124][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'.
[  131.817970][ T8605] netlink: 32 bytes leftover after parsing attributes in process `syz.2.861'.
[  131.821738][ T8605] netlink: 336 bytes leftover after parsing attributes in process `syz.2.861'.
[  131.826684][ T8605] netlink: 32 bytes leftover after parsing attributes in process `syz.2.861'.
[  132.004374][ T8612] SET target dimension over the limit!
[  132.429666][ T8634] No such timeout policy "syz0"
[  132.469674][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  132.471696][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  132.504526][ T8638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.871'.
[  132.508380][ T8638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.871'.
[  132.612431][ T8642] x_tables: duplicate underflow at hook 1
[  132.939165][ T8657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.878'.
[  132.977598][ T8659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.879'.
[  132.998526][ T8659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.879'.
[  133.275464][ T8673] netlink: 'syz.2.882': attribute type 1 has an invalid length.
[  133.507240][   T52] wlan1: Trigger new scan to find an IBSS to join
[  133.602902][ T8679] x_tables: unsorted entry at hook 3
[  134.163932][ T8712] No such timeout policy "syz0"
[  134.351279][ T8731] vlan5: entered promiscuous mode
[  134.352985][ T8731] vlan4: entered promiscuous mode
[  134.355354][ T8731] gretap0: entered promiscuous mode
[  134.459705][   T52] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[  134.508690][ T8738] netlink: 'syz.2.902': attribute type 9 has an invalid length.
[  134.566907][ T8740] No such timeout policy "syz0"
[  134.596768][ T8742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.599924][ T8742] syzkaller0: entered promiscuous mode
[  134.602141][ T8742] syzkaller0: entered allmulticast mode
[  134.656962][ T8742] tipc: Resetting bearer <eth:syzkaller0>
[  134.663607][ T8741] tipc: Resetting bearer <eth:syzkaller0>
[  134.681445][ T8741] tipc: Disabling bearer <eth:syzkaller0>
[  135.025069][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  135.030021][ T8757] No such timeout policy "syz0"
[  135.340432][ T8782] netlink: 'syz.0.917': attribute type 4 has an invalid length.
[  135.374234][ T8784] hsr_slave_0: left promiscuous mode
[  135.377071][ T8784] hsr_slave_1: left promiscuous mode
[  135.395099][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  135.426826][ T8787] No such timeout policy "syz0"
[  135.474060][ T8784] vxcan1: MTU too low for tipc bearer
[  135.480910][ T8784] tipc: Enabling of bearer <eth:vxcan1> rejected, failed to enable media
[  135.699695][ T8799] netlink: 'syz.2.923': attribute type 1 has an invalid length.
[  135.702690][ T8799] netlink: 'syz.2.923': attribute type 4 has an invalid length.
[  135.751563][ T8801] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  136.465049][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  136.473733][ T8811] No such timeout policy "syz0"
[  136.684184][ T8818] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  136.762434][ T8825] netlink: 'syz.0.932': attribute type 83 has an invalid length.
[  136.821586][ T8827] netlink: 'syz.2.933': attribute type 1 has an invalid length.
[  136.887161][ T8832] No such timeout policy "syz0"
[  136.890872][ T8832] __nla_validate_parse: 79 callbacks suppressed
[  136.890885][ T8832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'.
[  136.897546][ T8832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'.
[  137.162035][ T8851] ip6tnl2: entered promiscuous mode
[  137.176614][ T8855] netlink: 44 bytes leftover after parsing attributes in process `syz.2.943'.
[  137.265267][ T8863] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.371090][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'.
[  137.374451][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'.
[  137.457970][ T8876] IPv6: Can't replace route, no match found
[  137.553004][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'.
[  137.560792][ T8881] xt_CT: You must specify a L4 protocol and not use inversions on it
[  137.793189][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'.
[  137.836909][ T8887] netlink: 'syz.0.954': attribute type 10 has an invalid length.
[  137.928561][ T8896] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  137.971272][ T8898] netlink: 'syz.0.956': attribute type 12 has an invalid length.
[  137.974329][ T8898] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.956'.
[  138.188261][ T8911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.963'.
[  138.312561][ T8922] netlink: 104 bytes leftover after parsing attributes in process `syz.0.965'.
[  139.586873][ T8964] netlink: 'syz.2.977': attribute type 83 has an invalid length.
[  139.590496][ T8964] smc: net device bond0 applied user defined pnetid SYZ0
[  139.787495][ T5835] Bluetooth: hci2: link tx timeout
[  139.789455][ T5835] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  139.792505][ T5835] Bluetooth: hci2: link tx timeout
[  139.794088][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  139.829901][ T8982] sctp: [Deprecated]: syz.2.983 (pid 8982) Use of int in max_burst socket option.
[  139.829901][ T8982] Use struct sctp_assoc_value instead
[  140.102305][ T9000] No such timeout policy "syz0"
[  140.686623][ T5835] Bluetooth: hci2: link tx timeout
[  140.690284][ T5835] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  140.692747][ T5835] Bluetooth: hci2: link tx timeout
[  140.695677][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  140.789473][ T9038] netlink: 'syz.2.1000': attribute type 8 has an invalid length.
[  141.830503][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  141.920010][ T9073] netlink: 'syz.0.1011': attribute type 4 has an invalid length.
[  141.923104][ T9073] __nla_validate_parse: 3 callbacks suppressed
[  141.923116][ T9073] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1011'.
[  141.952756][ T9074] IPVS: length: 24 != 108386588376
[  141.960768][ T9073] wlan1: mtu less than device minimum
[  141.964839][ T9076] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1012'.
[  142.099147][ T9082] syz_tun: entered allmulticast mode
[  142.808638][ T9114] netlink: 'syz.0.1025': attribute type 5 has an invalid length.
[  143.100125][ T9130] IPv6: sit1: Disabled Multicast RS
[  143.104227][ T9132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1028'.
[  143.115802][ T9132] netlink: 'syz.2.1028': attribute type 7 has an invalid length.
[  143.118846][ T9132] netlink: 'syz.2.1028': attribute type 8 has an invalid length.
[  143.122013][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'.
[  143.129299][ T9132] erspan0: entered promiscuous mode
[  143.132105][ T9132] gretap0: entered promiscuous mode
[  143.139303][ T9132] erspan0: left promiscuous mode
[  143.144347][ T9132] gretap0: left promiscuous mode
[  143.158978][ T9135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.603706][ T9165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.660678][ T9165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.718496][ T9165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.771986][ T9165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.857536][ T9165] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.871576][ T9165] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.884943][ T9165] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.896324][ T9165] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.904941][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  144.459316][ T9185] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1044'.
[  145.079893][ T9189] No such timeout policy "syz0"
[  145.230233][ T9196] ieee802154 phy1 wpan1: encryption failed: -22
[  145.323666][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'.
[  145.327085][ T9200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1050'.
[  146.137647][ T9211] No such timeout policy "syz0"
[  146.323787][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'.
[  146.489380][ T9220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1056'.
[  146.558320][ T9231] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1059'.
[  146.713492][ T9240] tipc: Trying to set illegal importance in message
[  146.834940][ T9256] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  146.980232][ T9266] Cannot find add_set index 0 as target
[  147.237770][ T9278] __nla_validate_parse: 1 callbacks suppressed
[  147.237780][ T9278] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1072'.
[  147.243454][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'.
[  147.287391][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'.
[  147.615472][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  147.642416][ T9287] bond0: (slave wlan1): Releasing backup interface
[  147.673684][ T9287] bond4: (slave gretap1): Releasing active interface
[  148.170045][ T9291] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1075'.
[  148.175917][ T9291] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1075'.
[  148.235728][ T9294] xt_CT: You must specify a L4 protocol and not use inversions on it
[  148.255062][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  148.817252][ T9309] netlink: 'syz.0.1081': attribute type 29 has an invalid length.
[  148.820366][ T9309] netlink: 'syz.0.1081': attribute type 29 has an invalid length.
[  148.823961][ T9309] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1081'.
[  148.960657][ T9314] netlink: 'syz.0.1083': attribute type 1 has an invalid length.
[  149.062243][ T9323] rdma_rxe: rxe_newlink: failed to add lo
[  149.085607][ T9321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  149.363283][ T9343] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  150.497418][ T9366] netlink: 'syz.0.1100': attribute type 7 has an invalid length.
[  151.592964][ T9398] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1107'.
[  152.170056][ T9406] xt_hashlimit: size too large, truncated to 1048576
[  152.173092][ T9406] xt_hashlimit: max too large, truncated to 1048576
[  152.404368][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'.
[  152.407887][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'.
[  152.503187][ T9430] netlink: 'syz.2.1116': attribute type 1 has an invalid length.
[  152.507834][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'.
[  152.556725][ T9434] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  152.571388][ T9434] syzkaller1: entered promiscuous mode
[  152.573671][ T9434] syzkaller1: entered allmulticast mode
[  152.716453][ T9440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1119'.
[  152.719268][ T9440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1119'.
[  152.752842][ T9438] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1119'.
[  152.821107][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'.
[  152.870662][ T9450] netlink: 'syz.0.1124': attribute type 2 has an invalid length.
[  152.890264][ T9454] syzkaller0: entered promiscuous mode
[  152.892488][ T9454] syzkaller0: entered allmulticast mode
[  153.209864][ T9479] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  153.250194][ T9482] netlink: 'syz.2.1134': attribute type 1 has an invalid length.
[  153.253247][ T9482] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1134'.
[  154.063624][ T9504] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  154.121204][ T9506] netlink: 'syz.2.1142': attribute type 4 has an invalid length.
[  154.138971][ T9506] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1142'.
[  154.143539][ T9506] xt_l2tp: v2 sid > 0xffff: 4294901760
[  154.145546][ T9506] x_tables: duplicate underflow at hook 2
[  154.148318][ T9506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1142'.
[  154.179123][ T9506] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  154.425058][ T5839] syz_tun (unregistering): left allmulticast mode
[  154.829710][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  154.834410][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  154.838273][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  154.843332][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  154.849687][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  155.093553][ T9540] chnl_net:caif_netlink_parms(): no params data found
[  155.165253][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.169675][ T9540] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.172695][ T9540] bridge_slave_0: entered allmulticast mode
[  155.177255][ T9540] bridge_slave_0: entered promiscuous mode
[  155.181871][ T9540] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.185744][ T9540] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.188725][ T9540] bridge_slave_1: entered allmulticast mode
[  155.192609][ T9540] bridge_slave_1: entered promiscuous mode
[  155.228757][ T9540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.235773][ T9540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.271403][ T9540] team0: Port device team_slave_0 added
[  155.278524][ T9540] team0: Port device team_slave_1 added
[  155.311627][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.314394][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.324605][ T9540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.330502][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.333123][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.343488][ T9540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.389359][ T9540] hsr_slave_0: entered promiscuous mode
[  155.392331][ T9540] hsr_slave_1: entered promiscuous mode
[  155.395968][ T9540] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.398887][ T9540] Cannot create hsr debugfs directory
[  155.516716][ T9540] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.561281][ T9540] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.610964][ T9540] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.676234][ T9540] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.846420][ T9540] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  155.852830][ T9540] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  155.859913][ T9540] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  155.869194][ T9540] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  155.896021][ T9540] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.897993][ T9568] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  155.898527][ T9540] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.903182][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.905601][ T9540] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.913639][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.918187][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.957866][ T9540] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.969411][ T9540] 8021q: adding VLAN 0 to HW filter on device team0
[  155.979196][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.981475][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.985254][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.987551][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.123178][ T9540] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.175214][ T9540] veth0_vlan: entered promiscuous mode
[  156.181196][ T9540] veth1_vlan: entered promiscuous mode
[  156.205726][ T9540] veth0_macvtap: entered promiscuous mode
[  156.210048][ T9540] veth1_macvtap: entered promiscuous mode
[  156.220751][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.231156][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.239314][ T9540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.242782][ T9540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.247805][ T9540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.250876][ T9540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.314503][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.324213][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.348631][  T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.351118][  T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.202149][ T5862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.475765][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  158.480301][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  158.483968][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  158.488722][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  158.493464][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  158.735632][ T9594] __nla_validate_parse: 6 callbacks suppressed
[  158.735647][ T9594] netlink: 732 bytes leftover after parsing attributes in process `syz.2.1167'.
[  158.741647][ T9594] netlink: 732 bytes leftover after parsing attributes in process `syz.2.1167'.
[  158.834001][ T9584] chnl_net:caif_netlink_parms(): no params data found
[  158.863465][ T9604] netlink: 'syz.2.1169': attribute type 12 has an invalid length.
[  158.974970][ T9584] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.977860][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.986919][ T9584] bridge_slave_0: entered allmulticast mode
[  158.991061][ T9584] bridge_slave_0: entered promiscuous mode
[  159.011147][ T9584] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.014216][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.020387][ T9584] bridge_slave_1: entered allmulticast mode
[  159.024239][ T9584] bridge_slave_1: entered promiscuous mode
[  159.059050][ T9584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.065725][ T9584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.097831][ T9584] team0: Port device team_slave_0 added
[  159.102512][ T9584] team0: Port device team_slave_1 added
[  159.127081][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.129670][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.141044][ T9584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.147400][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.150137][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.159653][ T9584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.228346][ T9584] hsr_slave_0: entered promiscuous mode
[  159.230944][ T9584] hsr_slave_1: entered promiscuous mode
[  159.233177][ T9584] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.236522][ T9584] Cannot create hsr debugfs directory
[  159.638593][ T5862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.698905][ T5862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.742665][ T5862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.861902][ T5862] bridge_slave_1: left allmulticast mode
[  159.865956][ T5862] bridge_slave_1: left promiscuous mode
[  159.867941][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.871973][ T5862] bridge_slave_0: left allmulticast mode
[  159.873821][ T5862] bridge_slave_0: left promiscuous mode
[  159.876387][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.140113][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.147394][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.151573][ T5862] bond0 (unregistering): Released all slaves
[  160.554899][ T5835] Bluetooth: hci2: command tx timeout
[  160.657429][ T9584] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  160.682533][ T5862] hsr_slave_0: left promiscuous mode
[  160.685255][ T5862] hsr_slave_1: left promiscuous mode
[  160.687429][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.689780][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.692512][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.701255][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.712697][ T5862] veth1_macvtap: left promiscuous mode
[  160.716514][ T5862] veth0_macvtap: left promiscuous mode
[  160.719252][ T5862] veth1_vlan: left promiscuous mode
[  160.720953][ T5862] veth0_vlan: left promiscuous mode
[  161.139376][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  161.174388][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  161.584502][ T9584] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  161.606243][ T9584] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  161.629947][ T9584] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  161.884041][ T9584] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.919317][ T9584] 8021q: adding VLAN 0 to HW filter on device team0
[  161.931886][  T990] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.934808][  T990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.957037][  T990] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.959850][  T990] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.041987][ T9584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  162.048516][ T9584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  162.226513][ T9699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1184'.
[  162.241299][ T9704] syzkaller1: entered promiscuous mode
[  162.243888][ T9704] syzkaller1: entered allmulticast mode
[  162.290530][ T9584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.343552][ T9584] veth0_vlan: entered promiscuous mode
[  162.353990][ T9584] veth1_vlan: entered promiscuous mode
[  162.381981][ T9584] veth0_macvtap: entered promiscuous mode
[  162.388657][ T9584] veth1_macvtap: entered promiscuous mode
[  162.407469][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.420577][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.429097][ T9584] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.432591][ T9584] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.438771][ T9584] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.442188][ T9584] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.537986][  T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.541107][  T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.583364][  T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.587474][  T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.625839][ T5835] Bluetooth: hci2: command tx timeout
[  162.761009][ T9716] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  163.118633][ T9732] netlink: 'syz.2.1193': attribute type 10 has an invalid length.
[  163.121691][ T9732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1193'.
[  163.129164][ T9732] dummy0: entered promiscuous mode
[  163.131518][ T9732] bridge0: port 3(dummy0) entered blocking state
[  163.134266][ T9732] bridge0: port 3(dummy0) entered disabled state
[  163.137083][ T9732] dummy0: entered allmulticast mode
[  163.174344][ T9734] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1194'.
[  163.291645][ T9741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1196'.
[  164.289605][ T5862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.639986][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  164.643269][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  164.650189][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  164.653270][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  164.656515][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  164.990451][ T9773] netlink: 'syz.2.1203': attribute type 1 has an invalid length.
[  165.018846][ T9764] chnl_net:caif_netlink_parms(): no params data found
[  165.085077][ T9764] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.087614][ T9764] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.090424][ T9764] bridge_slave_0: entered allmulticast mode
[  165.093324][ T9764] bridge_slave_0: entered promiscuous mode
[  165.096694][ T9764] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.098890][ T9764] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.101246][ T9764] bridge_slave_1: entered allmulticast mode
[  165.104158][ T9764] bridge_slave_1: entered promiscuous mode
[  165.127492][ T9764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.132030][ T9764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.156345][ T9764] team0: Port device team_slave_0 added
[  165.160540][ T9764] team0: Port device team_slave_1 added
[  165.190441][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.192883][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.202639][ T9764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.212996][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.216774][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.229352][ T9764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.282994][ T9764] hsr_slave_0: entered promiscuous mode
[  165.290384][ T9764] hsr_slave_1: entered promiscuous mode
[  165.293268][ T9764] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.296801][ T9764] Cannot create hsr debugfs directory
[  165.640265][ T5862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.710066][ T5862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.781462][ T5862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.871912][ T9781] tipc: Failed to remove unknown binding: 66,1,1/0:2945284239/2945284241
[  165.882152][ T9781] tipc: Failed to remove unknown binding: 66,1,1/0:2945284239/2945284241
[  165.892127][ T9781] tipc: Failed to remove unknown binding: 66,1,1/0:2945284239/2945284241
[  165.902266][ T5862] bridge_slave_1: left allmulticast mode
[  165.904541][ T5862] bridge_slave_1: left promiscuous mode
[  165.911563][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.920886][ T5862] bridge_slave_0: left allmulticast mode
[  165.922714][ T5862] bridge_slave_0: left promiscuous mode
[  165.924702][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.950697][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'.
[  166.256087][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.261354][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.266482][ T5862] bond0 (unregistering): Released all slaves
[  166.706492][ T5833] Bluetooth: hci2: command tx timeout
[  166.821616][ T5862] hsr_slave_0: left promiscuous mode
[  166.823873][ T5862] hsr_slave_1: left promiscuous mode
[  166.832192][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.835041][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.838552][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.841530][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.855189][ T5862] veth1_macvtap: left promiscuous mode
[  166.857261][ T5862] veth0_macvtap: left promiscuous mode
[  166.859219][ T5862] veth1_vlan: left promiscuous mode
[  166.861137][ T5862] veth0_vlan: left promiscuous mode
[  167.226596][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  167.283755][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  167.637733][ T9764] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  167.648067][ T9808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.650709][ T9764] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  167.660712][ T9764] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  167.668326][ T9764] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  167.679125][ T9808] tipc: Disabling bearer <eth:syzkaller0>
[  167.756886][ T9764] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.771294][ T9764] 8021q: adding VLAN 0 to HW filter on device team0
[  167.781056][  T990] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.783337][  T990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.797390][  T990] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.799924][  T990] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.942663][ T9764] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.011023][ T9764] veth0_vlan: entered promiscuous mode
[  168.030396][ T9764] veth1_vlan: entered promiscuous mode
[  168.076182][ T9764] veth0_macvtap: entered promiscuous mode
[  168.082277][ T9764] veth1_macvtap: entered promiscuous mode
[  168.102483][ T9764] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.112808][ T9764] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.127401][ T9764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.130972][ T9764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.134282][ T9764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.141462][ T9764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.260750][ T4403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.263746][ T4403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.318270][ T4062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.322400][ T4062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.620598][ T8012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.740021][ T8012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.810251][ T8012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.887676][ T8012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.976110][ T8012] bridge_slave_1: left allmulticast mode
[  168.978222][ T8012] bridge_slave_1: left promiscuous mode
[  168.980269][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.987209][ T8012] bridge_slave_0: left allmulticast mode
[  168.989588][ T8012] bridge_slave_0: left promiscuous mode
[  168.991577][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.347196][ T8012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.352713][ T8012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.357330][ T8012] bond0 (unregistering): Released all slaves
[  169.499600][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  169.511769][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  169.515920][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  169.519749][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  169.522956][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  169.947892][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1218'.
[  169.974719][ T9854] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1218'.
[  170.053692][ T8012] hsr_slave_0: left promiscuous mode
[  170.060202][ T8012] hsr_slave_1: left promiscuous mode
[  170.065624][ T8012] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.067961][ T8012] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.086949][ T8012] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.089853][ T8012] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.107679][ T9867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1220'.
[  170.111247][ T8012] veth1_macvtap: left promiscuous mode
[  170.113143][ T8012] veth0_macvtap: left promiscuous mode
[  170.121334][ T8012] veth1_vlan: left promiscuous mode
[  170.123173][ T8012] veth0_vlan: left promiscuous mode
[  170.457478][ T8012] team0 (unregistering): Port device team_slave_1 removed
[  170.490291][ T8012] team0 (unregistering): Port device team_slave_0 removed
[  170.825543][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  170.836980][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  170.847624][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  170.858394][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  170.861762][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  171.068582][ T9837] chnl_net:caif_netlink_parms(): no params data found
[  171.266306][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.279383][ T9837] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.282398][ T9837] bridge_slave_0: entered allmulticast mode
[  171.297346][ T9837] bridge_slave_0: entered promiscuous mode
[  171.316045][ T9887] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1222'.
[  171.343691][ T9837] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.347800][ T9837] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.350857][ T9837] bridge_slave_1: entered allmulticast mode
[  171.358191][ T9837] bridge_slave_1: entered promiscuous mode
[  171.404430][ T9837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.418726][ T9837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.494386][ T9837] team0: Port device team_slave_0 added
[  171.522960][ T9837] team0: Port device team_slave_1 added
[  171.557689][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.560024][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.570820][ T9837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.581611][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.584069][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.596556][ T5833] Bluetooth: hci0: command tx timeout
[  171.603426][ T9837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.652948][ T8012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.682676][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'.
[  171.718284][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1224'.
[  171.849404][ T4062] smc: removing ib device syz0
[  171.919399][ T8012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.941345][ T5298] ==================================================================
[  171.944565][ T5298] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[  171.948098][ T5298] Read of size 8 at addr ffff8880308c62e8 by task kworker/0:3/5298
[  171.951606][ T5298] 
[  171.952985][ T5298] CPU: 0 UID: 0 PID: 5298 Comm: kworker/0:3 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  171.953004][ T5298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.953015][ T5298] Workqueue: events smc_ib_port_event_work
[  171.953042][ T5298] Call Trace:
[  171.953050][ T5298]  <TASK>
[  171.953078][ T5298]  dump_stack_lvl+0x189/0x250
[  171.953097][ T5298]  ? __virt_addr_valid+0x1c8/0x5c0
[  171.953116][ T5298]  ? rcu_is_watching+0x15/0xb0
[  171.953133][ T5298]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.953148][ T5298]  ? rcu_is_watching+0x15/0xb0
[  171.953162][ T5298]  ? lock_release+0x4b/0x3e0
[  171.953180][ T5298]  ? __virt_addr_valid+0x1c8/0x5c0
[  171.953196][ T5298]  ? __virt_addr_valid+0x4a5/0x5c0
[  171.953241][ T5298]  print_report+0xd2/0x2b0
[  171.953256][ T5298]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  171.953274][ T5298]  kasan_report+0x118/0x150
[  171.953294][ T5298]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  171.953315][ T5298]  __ethtool_get_link_ksettings+0x6e/0x190
[  171.953336][ T5298]  ib_get_eth_speed+0x15e/0x7b0
[  171.953358][ T5298]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  171.953380][ T5298]  ? do_raw_spin_unlock+0x4d/0x240
[  171.953403][ T5298]  rxe_query_port+0x93/0x3b0
[  171.953421][ T5298]  ib_query_port+0x170/0x830
[  171.953436][ T5298]  smc_ib_port_event_work+0x15a/0x940
[  171.953458][ T5298]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.953479][ T5298]  ? process_scheduled_works+0x9ef/0x17b0
[  171.953495][ T5298]  ? process_scheduled_works+0x9ef/0x17b0
[  171.953510][ T5298]  process_scheduled_works+0xae1/0x17b0
[  171.953536][ T5298]  ? __pfx_process_scheduled_works+0x10/0x10
[  171.953557][ T5298]  worker_thread+0x8a0/0xda0
[  171.953574][ T5298]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.953596][ T5298]  ? __kthread_parkme+0x7b/0x200
[  171.953616][ T5298]  kthread+0x711/0x8a0
[  171.953635][ T5298]  ? __pfx_worker_thread+0x10/0x10
[  171.953650][ T5298]  ? __pfx_kthread+0x10/0x10
[  171.953668][ T5298]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.953685][ T5298]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.953696][ T5298]  ? __pfx_kthread+0x10/0x10
[  171.953714][ T5298]  ret_from_fork+0x3fc/0x770
[  171.953731][ T5298]  ? __pfx_ret_from_fork+0x10/0x10
[  171.953747][ T5298]  ? __switch_to_asm+0x39/0x70
[  171.953764][ T5298]  ? __switch_to_asm+0x33/0x70
[  171.953780][ T5298]  ? __pfx_kthread+0x10/0x10
[  171.953798][ T5298]  ret_from_fork_asm+0x1a/0x30
[  171.953821][ T5298]  </TASK>
[  171.953826][ T5298] 
[  172.042152][ T5298] Allocated by task 5834:
[  172.043814][ T5298]  kasan_save_track+0x3e/0x80
[  172.045666][ T5298]  __kasan_kmalloc+0x93/0xb0
[  172.047502][ T5298]  __kvmalloc_node_noprof+0x30d/0x5f0
[  172.049642][ T5298]  alloc_netdev_mqs+0xa6/0x11e0
[  172.051581][ T5298]  rtnl_create_link+0x31f/0xd10
[  172.053510][ T5298]  rtnl_newlink_create+0x25c/0xb00
[  172.055520][ T5298]  rtnl_newlink+0x16d6/0x1c70
[  172.057343][ T5298]  rtnetlink_rcv_msg+0x7cf/0xb70
[  172.059250][ T5298]  netlink_rcv_skb+0x208/0x470
[  172.061053][ T5298]  netlink_unicast+0x75b/0x8d0
[  172.062928][ T5298]  netlink_sendmsg+0x805/0xb30
[  172.064801][ T5298]  __sock_sendmsg+0x21c/0x270
[  172.066611][ T5298]  __sys_sendto+0x3bd/0x520
[  172.068343][ T5298]  __x64_sys_sendto+0xde/0x100
[  172.069888][ T5298]  do_syscall_64+0xfa/0x3b0
[  172.071376][ T5298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.073183][ T5298] 
[  172.073943][ T5298] Freed by task 9900:
[  172.075133][ T5298]  kasan_save_track+0x3e/0x80
[  172.076734][ T5298]  kasan_save_free_info+0x46/0x50
[  172.078232][ T5298]  __kasan_slab_free+0x62/0x70
[  172.079647][ T5298]  kfree+0x18e/0x440
[  172.080841][ T5298]  device_release+0x9c/0x1c0
[  172.082281][ T5298]  kobject_put+0x22b/0x480
[  172.083840][ T5298]  netdev_run_todo+0xd2e/0xea0
[  172.085325][ T5298]  rtnl_dellink+0x537/0x710
[  172.086782][ T5298]  rtnetlink_rcv_msg+0x7cf/0xb70
[  172.088283][ T5298]  netlink_rcv_skb+0x208/0x470
[  172.090131][ T5298]  netlink_unicast+0x75b/0x8d0
[  172.091885][ T5298]  netlink_sendmsg+0x805/0xb30
[  172.093358][ T5298]  __sock_sendmsg+0x21c/0x270
[  172.094759][ T5298]  ____sys_sendmsg+0x505/0x830
[  172.096171][ T5298]  ___sys_sendmsg+0x21f/0x2a0
[  172.097556][ T5298]  __x64_sys_sendmsg+0x19b/0x260
[  172.099011][ T5298]  do_syscall_64+0xfa/0x3b0
[  172.100357][ T5298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.102119][ T5298] 
[  172.102890][ T5298] The buggy address belongs to the object at ffff8880308c6000
[  172.102890][ T5298]  which belongs to the cache kmalloc-cg-4k of size 4096
[  172.107197][ T5298] The buggy address is located 744 bytes inside of
[  172.107197][ T5298]  freed 4096-byte region [ffff8880308c6000, ffff8880308c7000)
[  172.111383][ T5298] 
[  172.112097][ T5298] The buggy address belongs to the physical page:
[  172.113997][ T5298] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x308c0
[  172.116627][ T5298] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  172.119737][ T5298] memcg:ffff888029f90d41
[  172.121347][ T5298] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  172.123874][ T5298] page_type: f5(slab)
[  172.125059][ T5298] raw: 00fff00000000040 ffff88801a44b500 0000000000000000 dead000000000001
[  172.127530][ T5298] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888029f90d41
[  172.130039][ T5298] head: 00fff00000000040 ffff88801a44b500 0000000000000000 dead000000000001
[  172.132703][ T5298] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888029f90d41
[  172.136025][ T5298] head: 00fff00000000003 ffffea0000c23001 00000000ffffffff 00000000ffffffff
[  172.139257][ T5298] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  172.142678][ T5298] page dumped because: kasan: bad access detected
[  172.145269][ T5298] page_owner tracks the page as allocated
[  172.147408][ T5298] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5834, tgid 5834 (syz-executor), ts 64134441557, free_ts 0
[  172.154874][ T5298]  post_alloc_hook+0x240/0x2a0
[  172.156769][ T5298]  get_page_from_freelist+0x21e4/0x22c0
[  172.158860][ T5298]  __alloc_frozen_pages_noprof+0x181/0x370
[  172.161082][ T5298]  alloc_pages_mpol+0x232/0x4a0
[  172.162677][ T5298]  allocate_slab+0x8a/0x3b0
[  172.164062][ T5298]  ___slab_alloc+0xbfc/0x1480
[  172.165452][ T5298]  __kmalloc_cache_noprof+0x296/0x3d0
[  172.167188][ T5298]  ipv6_add_dev+0x6ca/0x1370
[  172.168704][ T5298]  addrconf_notify+0x794/0x1010
[  172.170135][ T5298]  notifier_call_chain+0x1b6/0x3e0
[  172.171703][ T5298]  register_netdevice+0x1608/0x1ae0
[  172.173358][ T5298]  virt_wifi_newlink+0x428/0x860
[  172.174873][ T5298]  rtnl_newlink_create+0x310/0xb00
[  172.176449][ T5298]  rtnl_newlink+0x16d6/0x1c70
[  172.177892][ T5298]  rtnetlink_rcv_msg+0x7cf/0xb70
[  172.179499][ T5298]  netlink_rcv_skb+0x208/0x470
[  172.181103][ T5298] page_owner free stack trace missing
[  172.182817][ T5298] 
[  172.183727][ T5298] Memory state around the buggy address:
[  172.185452][ T5298]  ffff8880308c6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  172.187910][ T5298]  ffff8880308c6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  172.190516][ T5298] >ffff8880308c6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  172.193043][ T5298]                                                           ^
[  172.195503][ T5298]  ffff8880308c6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  172.198010][ T5298]  ffff8880308c6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  172.200534][ T5298] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  172.218659][ T5298] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  172.220901][ T5298] CPU: 0 UID: 0 PID: 5298 Comm: kworker/0:3 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  172.224627][ T5298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.227758][ T5298] Workqueue: events smc_ib_port_event_work
[  172.229487][ T5298] Call Trace:
[  172.230582][ T5298]  <TASK>
[  172.231487][ T5298]  dump_stack_lvl+0x99/0x250
[  172.233034][ T5298]  ? __asan_memcpy+0x40/0x70
[  172.234454][ T5298]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.236413][ T5298]  ? __pfx__printk+0x10/0x10
[  172.238107][ T5298]  panic+0x2db/0x790
[  172.239359][ T5298]  ? __pfx_panic+0x10/0x10
[  172.241101][ T5298]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  172.243317][ T5298]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  172.245422][ T5298]  ? print_memory_metadata+0x314/0x400
[  172.247623][ T5298]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  172.249992][ T5298]  check_panic_on_warn+0x89/0xb0
[  172.251971][ T5298]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  172.254343][ T5298]  end_report+0x78/0x160
[  172.256032][ T5298]  kasan_report+0x129/0x150
[  172.257812][ T5298]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  172.260122][ T5298]  __ethtool_get_link_ksettings+0x6e/0x190
[  172.262387][ T5298]  ib_get_eth_speed+0x15e/0x7b0
[  172.264310][ T5298]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  172.266436][ T5298]  ? do_raw_spin_unlock+0x4d/0x240
[  172.268468][ T5298]  rxe_query_port+0x93/0x3b0
[  172.270313][ T5298]  ib_query_port+0x170/0x830
[  172.272100][ T5298]  smc_ib_port_event_work+0x15a/0x940
[  172.274138][ T5298]  ? _raw_spin_unlock_irq+0x23/0x50
[  172.276173][ T5298]  ? process_scheduled_works+0x9ef/0x17b0
[  172.278452][ T5298]  ? process_scheduled_works+0x9ef/0x17b0
[  172.280654][ T5298]  process_scheduled_works+0xae1/0x17b0
[  172.282418][ T5298]  ? __pfx_process_scheduled_works+0x10/0x10
[  172.284556][ T5298]  worker_thread+0x8a0/0xda0
[  172.286438][ T5298]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  172.288939][ T5298]  ? __kthread_parkme+0x7b/0x200
[  172.290937][ T5298]  kthread+0x711/0x8a0
[  172.292515][ T5298]  ? __pfx_worker_thread+0x10/0x10
[  172.294449][ T5298]  ? __pfx_kthread+0x10/0x10
[  172.296177][ T5298]  ? _raw_spin_unlock_irq+0x23/0x50
[  172.298163][ T5298]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.300093][ T5298]  ? __pfx_kthread+0x10/0x10
[  172.301873][ T5298]  ret_from_fork+0x3fc/0x770
[  172.303695][ T5298]  ? __pfx_ret_from_fork+0x10/0x10
[  172.305602][ T5298]  ? __switch_to_asm+0x39/0x70
[  172.307477][ T5298]  ? __switch_to_asm+0x33/0x70
[  172.309388][ T5298]  ? __pfx_kthread+0x10/0x10
[  172.311166][ T5298]  ret_from_fork_asm+0x1a/0x30
[  172.313063][ T5298]  </TASK>
[  172.314964][ T5298] Kernel Offset: disabled
[  172.316748][ T5298] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:19:56  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000265f090
R8 =ffff888021828237 R9 =1ffff11004305046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af7905 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055aa9223f118 CR3=0000000106db2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=c6022ebd40e490b6 00000000000080fe XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=ffff000000000000 ffffffffffffff00 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4e920 RBX=ffff88813663b1c0 RCX=ffff88801f3a9cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900035df700 RSP=ffffc900035df5a0
R8 =ffffffff8fa1dff7 R9 =1ffffffff1f43bfe R10=dffffc0000000000 R11=fffffbfff1f43bff
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4e909 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff7e7ae7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007ff7e6f856a3 00007ff7e6f856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000555583ff6687 0000555583ff61c0
XMM06=0000000000000000 0000000000000000 XMM07=030c08000a10004a 100006016ffc0100
XMM08=010010000fffffff ffffff0401000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
