last executing test programs:

1m26.067781026s ago: executing program 1 (id=492):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r0, 0x0)
r1 = accept(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000380)={0x0, 0xffffffffffffffff})
connect$inet(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00)
pipe(0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18)
connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18)
sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5e8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x14c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @mark={0xc, 0x15, {0x35075c, 0x10}}]}, 0x14c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00eb8530654e316056a3d6000065089a1012a5020010080001000100000022731d62997bb8c64460e702b7e2a14bac0c3c93becb6a6021a5ff43306d6da98c3bd4d9e4c3eef260d2b521f8431ee7ffcea2"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)

1m22.257126195s ago: executing program 1 (id=492):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r0, 0x0)
r1 = accept(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000380)={0x0, 0xffffffffffffffff})
connect$inet(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00)
pipe(0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18)
connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18)
sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5e8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x14c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @mark={0xc, 0x15, {0x35075c, 0x10}}]}, 0x14c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00eb8530654e316056a3d6000065089a1012a5020010080001000100000022731d62997bb8c64460e702b7e2a14bac0c3c93becb6a6021a5ff43306d6da98c3bd4d9e4c3eef260d2b521f8431ee7ffcea2"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)

38.461881451s ago: executing program 1 (id=492):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r0, 0x0)
r1 = accept(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000380)={0x0, 0xffffffffffffffff})
connect$inet(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00)
pipe(0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18)
connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18)
sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5e8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x14c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @mark={0xc, 0x15, {0x35075c, 0x10}}]}, 0x14c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00eb8530654e316056a3d6000065089a1012a5020010080001000100000022731d62997bb8c64460e702b7e2a14bac0c3c93becb6a6021a5ff43306d6da98c3bd4d9e4c3eef260d2b521f8431ee7ffcea2"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)

31.928919726s ago: executing program 1 (id=492):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r0, 0x0)
r1 = accept(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000380)={0x0, 0xffffffffffffffff})
connect$inet(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00)
pipe(0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18)
connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18)
sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5e8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x14c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @mark={0xc, 0x15, {0x35075c, 0x10}}]}, 0x14c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00eb8530654e316056a3d6000065089a1012a5020010080001000100000022731d62997bb8c64460e702b7e2a14bac0c3c93becb6a6021a5ff43306d6da98c3bd4d9e4c3eef260d2b521f8431ee7ffcea2"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)

26.031932426s ago: executing program 1 (id=492):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r0, 0x0)
r1 = accept(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000380)={0x0, 0xffffffffffffffff})
connect$inet(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00)
pipe(0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18)
connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18)
sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5e8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x14c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @mark={0xc, 0x15, {0x35075c, 0x10}}]}, 0x14c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00eb8530654e316056a3d6000065089a1012a5020010080001000100000022731d62997bb8c64460e702b7e2a14bac0c3c93becb6a6021a5ff43306d6da98c3bd4d9e4c3eef260d2b521f8431ee7ffcea2"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)

19.917053301s ago: executing program 1 (id=492):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r0, 0x0)
r1 = accept(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000380)={0x0, 0xffffffffffffffff})
connect$inet(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00)
pipe(0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18)
connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18)
sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5e8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x14c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @mark={0xc, 0x15, {0x35075c, 0x10}}]}, 0x14c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00eb8530654e316056a3d6000065089a1012a5020010080001000100000022731d62997bb8c64460e702b7e2a14bac0c3c93becb6a6021a5ff43306d6da98c3bd4d9e4c3eef260d2b521f8431ee7ffcea2"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)

1.570980965s ago: executing program 2 (id=1376):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000080)=0x40007, 0x18)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x6}, 0x66)

1.481513163s ago: executing program 2 (id=1377):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={&(0x7f0000000200)="26a48a353250b547791ad5b020a99d76460608391c2e73299af0d9bbb41d1487ecd5c9517d81c1f644572713d28e9fd94a1773f9bbb787c4edbb9c59e0219269801789556e83387f7d184b6937ba3a5a6283b21a0839e0ac2fa4d048b5fbfb03893ef64728000c28293a17c7b9b219b2f48b6de3141fe55d9321a58682dd8f509d6949549b2202eab9891d36abde6e07652206f4502e6187725f4126e9d4c78374ef5a211ecb5002615421f7a6928cf927649ce623cbe8e0eaa019a9b55183600b1372c0552e0672ebcef1fd40a71c46f8a9b10ba137f11e607c644616a4ffef9c7caedbb48f6205c6", &(0x7f0000000300)=""/250, &(0x7f0000000080)="ead42caf56770d85af3b955e2f48f9b909587d7b8cec3319a86a79369dae368bf6fa5ea341cabb231903408b51342f60b0b76571e24f044ad4ebacbd5292aa0d611b619246b1ea62bd44f282f1867ba9c1641379392acdf5d27a3710d68d9745bf46a5594a1a9ac57b5d", &(0x7f0000000400)="cb6fc38bb5d42b25020bfc03b1a0a502b5ae9c622e12b170c8669b21b295f600995fa757ef03e5f8852537630bcb94027d8908be3539876e99fe56e790ae262a66b2a0e2e2556621d7bee4b7baabe194b295b4fbdbeae00425365794d18fe8e2e439f5c1c5b39091e71c24a6bfee6e64cdd83786692a2a30bc8f1c82ff31089484c70ba9c2c7a36999b986d4858061acca7f1d33e23895c90fc446229b0c9cc78e3e6628e0321bc2e1fccec05e65e317a8e723bcd44d1541e4f0faf17e012fb5ce2dd59a041d53ff37c6885f142ceae33422914e3fbf", 0x8, r3, 0x4}, 0x38)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000640)={&(0x7f0000000100), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r4, 0x20, 0x70bd25, 0x3, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x68814}, 0x20004040)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$alg(0x26, 0x5, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={&(0x7f0000000200)="26a48a353250b547791ad5b020a99d76460608391c2e73299af0d9bbb41d1487ecd5c9517d81c1f644572713d28e9fd94a1773f9bbb787c4edbb9c59e0219269801789556e83387f7d184b6937ba3a5a6283b21a0839e0ac2fa4d048b5fbfb03893ef64728000c28293a17c7b9b219b2f48b6de3141fe55d9321a58682dd8f509d6949549b2202eab9891d36abde6e07652206f4502e6187725f4126e9d4c78374ef5a211ecb5002615421f7a6928cf927649ce623cbe8e0eaa019a9b55183600b1372c0552e0672ebcef1fd40a71c46f8a9b10ba137f11e607c644616a4ffef9c7caedbb48f6205c6", &(0x7f0000000300)=""/250, &(0x7f0000000080)="ead42caf56770d85af3b955e2f48f9b909587d7b8cec3319a86a79369dae368bf6fa5ea341cabb231903408b51342f60b0b76571e24f044ad4ebacbd5292aa0d611b619246b1ea62bd44f282f1867ba9c1641379392acdf5d27a3710d68d9745bf46a5594a1a9ac57b5d", &(0x7f0000000400)="cb6fc38bb5d42b25020bfc03b1a0a502b5ae9c622e12b170c8669b21b295f600995fa757ef03e5f8852537630bcb94027d8908be3539876e99fe56e790ae262a66b2a0e2e2556621d7bee4b7baabe194b295b4fbdbeae00425365794d18fe8e2e439f5c1c5b39091e71c24a6bfee6e64cdd83786692a2a30bc8f1c82ff31089484c70ba9c2c7a36999b986d4858061acca7f1d33e23895c90fc446229b0c9cc78e3e6628e0321bc2e1fccec05e65e317a8e723bcd44d1541e4f0faf17e012fb5ce2dd59a041d53ff37c6885f142ceae33422914e3fbf", 0x8, r3, 0x4}, 0x38) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000640)={&(0x7f0000000100), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r4, 0x20, 0x70bd25, 0x3, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x68814}, 0x20004040) (async)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)

1.480800859s ago: executing program 2 (id=1378):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f0000000cc0)=""/261, 0x105}, {&(0x7f0000002e00)=""/4093, 0xffd}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x22, 0x0)

1.408265918s ago: executing program 2 (id=1379):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000003c0)="dce531", 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xce)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000140)={0x3, @bcast, r4})
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)={0x9c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4, 0x54}, @nested={0x0, 0xfc, 0x0, 0x1, [@typed={0x0, 0x109, 0x0, 0x0, @uid=r4}, @typed={0x0, 0x12b, 0x0, 0x0, @u64=0x5}, @nested={0x0, 0x0, 0x0, 0x1, [@typed={0x0, 0x83, 0x0, 0x0, @str='\x00'}, @nested={0x0, 0x7}, @generic="02a552d202cb02542ba0307c9f3565f586df9de7006d781ce9468945da3720feca1e70e9f76a6894f91a3faf117932dbb403ba4674c5dfc21f3aa35701c0eea1e1abe43d8cc230e49cfa3593d8453441153c57001d288e3077623df71555f897e92c6a3559a08a562421f245db796bccdf8a845f5399741b81702cb0c9e259498c57e6b2167a8c41518158aa2d9db5dd6ea85c41146fb7c26c52cd18cf8ab4934c05aa144b2ac83931fc2e16eb"]}, @nested={0x0, 0x134, 0x0, 0x1, [@generic="26a4f5cdb6953946b48b622cc2f2cb29c1fcc0bf4e8656561de87091d627a2d828e45833c6ce64e12d7dc7622ba149a43261908ad768a3c0ec2d92979e4e604d44372c80f1a23cf157a2063c6fd30c3aec968f8a8f7ba52bb6cee249ce470cbf6d2602bedbe7a7aa427d7e97e1a224c6dbb00bf34076c5aa019fa9a37b1dc5922a3873f39907710039e0331990f52dcd52d002f0b3147d5f3b74d940e5e8ba3b340e15814955aaf773cd1ddfc3a308a3d6697c3789954db5a25866f0d5e5f8de542ecd6b372e0034ad52ebb72dbb472191cb45f83cb7ade3bf7854b4a8", @generic="fd98ca9edefd10337e0949bb4cf5a0336c0a8ae81649c65fb4a5fdf32564ec057fdfcb7e24b21c482f7fdd8afdeefff06e769f7e6602c6ff1f992e1c242b4e60fabe921510c15b07ac50d36e05a51584832efffeef8bda0e7a901c7d02627594b5f381cebff18f0c3a8b42a192a35d801f2ce1a7716c6c91a930a0eefa4f901c1155621dcd4ea08afa2dfdeb34ccac337748423fac6fa65bae3b8ef91ec05d3305dee2640333cf05ccf5d51953badea0e67ea4e7677126fabf8e6142a19d6af5e84e22b0f359674f6106772e6c851937da6a730a0728f292f7e14639c90a2c4d7e0e8a7a01a70636ad0c", @typed={0x0, 0x85, 0x0, 0x0, @u64=0xdc}, @generic="5f9f2251bae6dae89ceb6f82a83850a3f9dac243cd0cb41b541150a6977933f1329748c20221d243b3fbb954305417465732e1f84a185eae367b9bc9f3f80c6d1aafba51d0e80bbde879169926706da584f98e98737084b81d9c1c1b0795da57732e540de2934b"]}, @generic="55affe918b8026d3b61ff1a1508227657d2a0881832515fa983cabb3201d0b5d62e0c6785218d114b0a324a5be736abfd412d7a5d518cf7c090e1051d3d8769dba9a676590959568b9cda6f4bb325e8d7467b40823d712ff", @nested={0x0, 0xe, 0x0, 0x1, [@typed={0x0, 0x59, 0x0, 0x0, @fd=r3}, @generic="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", @nested={0x0, 0xa7}]}, @nested={0x0, 0x13d, 0x0, 0x1, [@generic="7efb05ba329d36f1dfa36c87020aac8c6038d94e9ff53daf5847fcfc260d512aba99cc8c28fea7729c48b54f5492f5ece35379207c38efde32e3733443b2117e102375e97de0388b12a224440f978ea2133de2bb63d1bad02c2c7c968b5148997e66e140d5e040b8a7fab3b3dc6d53fb9d2cf563cf6e9ecc24b6b309a461443919ce54a1394f5c83fd8122741041ea38487272c8f7519f537af48124b3c4a978ec15b522b14c2407c63a6fccb02ab115a850037cd0806e2e5453"]}, @typed={0x0, 0x8, 0x0, 0x0, @str='\x00'}, @typed={0x0, 0x121, 0x0, 0x0, @u32=0x798e}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000004)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x29, 0x2, 0x1, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @local}, @private1, 0x40, 0x20, 0x0, 0x1}})

1.407805951s ago: executing program 2 (id=1380):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000030601020000000000000000080500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32=0x0, @ANYBLOB="0a000100aaaa2ff99390ad14ca6424000000aaaaea19000011d659460d8f8bfc"], 0x68}}, 0x0)
ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000580)={'veth1_to_bridge\x00', 0x400})
close(r0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00', 0x28, 0xfff}, 0x2c)
bind$tipc(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x94)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x7800, 0xfffffffd, 0xfffffffd, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x4, 0x0, 0xfe, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101}}}})
bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81})
write$bt_hci(r8, &(0x7f0000000080)=ANY=[], 0x6)
r10 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmsg$unix(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0xfffffffffffffef2}], 0x1}}], 0x400000000000181, 0x9200000000000000)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r10, 0x10f, 0x83, &(0x7f0000000480), &(0x7f0000000300))
sendmsg$NL80211_CMD_GET_WOWLAN(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRES8=r7, @ANYRESOCT=r7, @ANYBLOB="00032bbd7000ffdbdf2549000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8001)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xe, 0x1, 0x1, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}]}}]}}]}, 0x54}}, 0x24040084)
socket$nl_generic(0x10, 0x3, 0x10)

569.05934ms ago: executing program 2 (id=1384):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x27, 0x0, 0x0, &(0x7f0000000700)=""/176, 0xb0}}], 0x40000000000012f, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x101)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0xc0000002})
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000080))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r5, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'b', ' *:* ', 'rm\x00'}, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x80004, 0x92, 0x6804, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x3}, 0x50)
r6 = socket$inet(0x2b, 0x801, 0x0)
ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000640)=@get={0x1, 0x0, 0x8001})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x5, 0xfffffffd, {{0xb, 0x4, 0x2, 0x7, 0x2c, 0x66, 0x0, 0x7, 0x2f, 0x0, @empty, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xf8, 0x0, 0x9, [0x50bb, 0x1, 0x6, 0xb64]}]}}}}})
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x5, 0x14e, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711043000000000095000000000000005ac827f3eb9b80cc643c1732bd62aa9a98bd56891a86b10a5d9471170606be49fbf92e2a726ea25cc80324a9cbe15aeda5248a46cb338eda95c7f0f41a9ff6d88818fecb291a4684c879229973a46217e5ed1989e5de7d231add362df1f13453847f75fb915f575b7aea81e4691984012e715881f6fb5aa52c1922463c8ee7b4d18d46f4482ef10e50978a0d032862fd113bac8d2f4bd8218d1dde528a56a3e1a2923105fca0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="1e6de2183e3fe758000000100003042cbd7000fcdbdf2500000400cb07caa8f1e6dfebc4952f43f4cefe00"/58, @ANYRES32=0x0, @ANYBLOB="2387040000000000300012800b000100697036746e6c0000200002801400030000000000000000000000ffffe0000002080007000600000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r10, 0x531, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0xfe1b, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x3c}}, 0xc040)
socket$inet6_tcp(0xa, 0x1, 0x0)

180.56166ms ago: executing program 0 (id=1387):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x3, 0x2)
r0 = socket(0x1, 0x803, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001408b59500000000000000000a00", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000011c0)={0x34, r6, 0x1, 0x1ffffe, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x48882)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r7], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

180.181121ms ago: executing program 0 (id=1388):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x18, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)

91.871955ms ago: executing program 0 (id=1389):
r0 = socket(0x29, 0x6, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
socket$igmp6(0xa, 0x3, 0x2) (async)
socket$igmp6(0xa, 0x3, 0x2)

90.53398ms ago: executing program 0 (id=1391):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba0000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x28}, 0x0, 0x220, 0x240, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x1, 0x338, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0xf, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6d12, 0x3ff, 0x6, 'netbios-ns\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3f0)
r2 = socket(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000700)="ac357da0033eba56b1401b3773fb1db54fc8df0b34c57cc84f8021ade03b429b8ff3bd77afa9c9cf61106cdfc170d91fb15f45695848c721bdd81363f439ba42a024b76e621cbc1351c7847bbbeb8e72ed33a3e8b58877c4539665b9648adaf472d60cee5d0ca5b5684a71d880f1c15d278fbc1daf50bff2344f9f3bd8c550aaf4bd69939fb6688dce2c2be229a984e3fac1d852ab28a08156cd4362daba16a8fa4f37cb18925d6fff5548a06b4bbba95e89f473accbcd3a4e80c081910a35e019b449b6dffa5c67ec700f8953da869c22f2bee506d6b62a9cf3a06e75f4f1d25d08e862dfc115361a928bcdf70d413905758d0318f2421c92c0d5f9c0612da37a405b358a93d9957430b72a069453051b7f1d6200c4fc606802b5c3f45ef96bf567f83605e2fe498a6b5ff5e571e9acb0cf34afde2d1eed691c0a65be06af3302052abe9a5b71f2c4fe0e8ea2ad9c3c97330b1d06b56094ec42a3eba7d1c1b98dc2fe05b7e14ec4d9621c28ed24bf95f13ab41f8e74276e75cb31d6843356773a6ab2d535a2e1323cdcd9634d955e1fdb028cc7dc5a8044b4156491c126d2542babb04b893a3054eed3d8f6a034570080c5326e60aed43a7d767a2827067bf6b47ec3901b23c112494ba9fc6dda85f0cdf92a13a43d6c21953712bafb121d793c31a9db335b5fcf1e20b6e0e528e9010a88bbb3cd7ad1dc46a85492f780a7912fea3302dd9942692e0d00772cc12d000eff14baf7687641052cc8f90ff8f8db9cc3bc66e19bba7bca724a1713f22ab5698adfcd5259b5e028508123215c29e39d101850ec2c03dc7e159fb567d21cf81872eca1eff1750d0e27b387e57167497114d40f5cc10b12d5077916e7c48611816cce32cb34a99e44fb0ffc642fc04e89aeb164c95844887fe1aaf3465e5207d780d40b1efdc49e0b5040cd9c08d7fe439271eee4996dd10c38901f7d5099c088ce9465d401fe84eb538d3c817b28cad68db38f7b06643c85ef4ffb19e863a386709b73e0da15f561e98782c1bd857aae378cc9ca0dca3b4dc1193b6480f5183b15835503d4ddb59c6182909afbd0e3514154d3462bead1318f48c0ddb329061a235de0ceabd391eaef8e918161a247b558b5f3b454d062b215b61bd496941acd5ba9c33d98c5576f6be1bf0c04c587be51edbe8e6890d073b41d783162962e592a1331422f49959d540f60179475963974a87635c886e93ec651ba1c387783c88f77d5d4592174148acb6e75e1307c797aa3d315c97d3309a3f0f56d4ddc711ebd5e9091e745ada58a4769f9f591550d023f6e678fef899c19dee27b39446f324fb078a4452d5a14b02438f13f09268286d34b4722c5d7e6077b7a6141101a048aac4204a275d908b6c5d32f70609e0e3945d116c10c52d23b4cd41720dc607d3afe69234a527e51b253db6236d521c3eb610d8f3428cb89745822c5f2fb50a884b0b4821b666847acb770c659aadd84deb379038fbd1ddc94ebfc6b07527040df6b5a3121766599c4cfb22ef20fd14b7736dd1f9d67e477254bc6e7f605cf107905bb396044d778c74715f9d8f4c5188c2cf1ca849978a39dcb3b21459583954d2fa0dfab0a8b1606c061b21413134785f559718ed4ece75ea1de609f9799075848f52dcaa9a6848bc7125196317981370d4bbc94c4c4c3453faf3b15eeaac7f9a32e60dc9cfeb050a1c453e282b583075f0c39b05703618ec70cfd78518b9351b99f7ff0c00ad2f504e0a9229099c8b6ee769a482bf4bbb2a90c318177381ee24463cfda5f18a21209e8dcef1e20f2ef29e302911c5eb7e2d2d02cfcf75def5751350e8eb8141e16b1d99eeebdd1dd5c132bbbe657eb5896a7d15929fd314d2051935318841f066317acbaf08200a7cda83668fb5dc326b3003332240a4be7cfcc3ab1fc530446f9b5e6c1b7da5711644d4be624317666c18725c922df0fe9766cfa9c9e158467322f4d9dc38c4adc4b41e4f4af0dbca1cc2294f7472fe16ef04833f137e54457c81daee2252755ebf417d75ebe9b1c5ba204f875e8c48ba49569507b062a6118d3a55644b0ac271e7070d8f7e6c5dbc4010abdfdcb654a44fbdd33665b256c8d2dfc3ced2df4ca063624ce68fd24caadc3ea722e8694ae572746805de0f5d17e021ca302c2d7843a5d51abf3be63fc3181f48421205e516fa367cd2830eb300fdb1ac41036227ae4c3a39957d4669f1c9a90131bae08c15c8a9f17ce30bf60a11e6ad641b9c80b6a93f26755606a565b52382fcc9751ff3aa636cc80ba7aae767a8f636a0845ce3648dd5c6edac8dc799e1c7bd8bc0882dbc119cf664c8d79221d314e7e730064ed9cef6f8a5abbf219522e9a55ef33cd2947a672056b15a781707e508606187b59a5cd67d1591c5d69a28e05a4e8f537cff0b05137a29513e4a3b7fdd169aedd17d08634d4147ecdfee40fc69bd93441744d104f830272dce28463bcd110deaccf3a544ec13b470ccb2f0b5cdc85c7fb234e2c519912a4a85575d63c095fff16e66472031521a4b916bdb257b8f06d9e7ede8cb18790bc144cd2454867a4d6e259cfb0a17e80334dbfd6e7183c61c2b5cb9d63238918de3994207a3a35ab48d1784a00395ffa247a134b2a9b58b9f2e7eeaef7c141b5780d68653b141eebb744ee6389395d9d193190494bbb5f61663526887eebea27eee7f22a78ba69958ee6dfefedd4b6be37e50fc9ee8a777ca44d853e3043880e7ac15630ffe88bd7efdb9ad27d0e6e622f3c5a82a4b1749151ff4b25df7e64245e62571f884fbc7e3f069b1c3c96756818fbd56bc88020b078975484cb22d2ea99e5ff2d32ac8a2824118cb63105fe91bf13a804195a0300f24d9d186e4686a77f9ed5e9ddee8203dbb2f03b258a10342e004a596e4b25cdeaa4ab4fb4ed093f83bd8cbc14f60865178c0feeb784974d6b8116568f4313cdee1bde360216fca3ecc17abb12d545312cc8ebef6bcb21aee28bfc7f92a8c0c95a9ff8becb5e1a55cca37d2fee2c5e2f3e2d44405aea80a5b1aa8e5dea5d357d3c27e75631b26a48ce280dab0d5bf282db4af9ca21d6bf51c60a81833e93697157ea707e06bc04761ed903799f304440880fe177a585a4f365d5148e5fcb80dcd72981d19efec8e811a5b6eae50fb9ba5f884828824e582c01d700739a610cc4011bc8b4eca2e203e13a1807b947f42015663344f3557d8eddb2382ec8879bbef54e5932283770143940842655a0601c7b4bf36a8040a0a205e94163ee82d6773baaa3a08c5d2ca54812a302573fb5d3ab027532838902880d81a19b83b0d03da68cda203e3b860a294d0579136154f27abe563285c45143b0b7f08518ef5b0d2c5017174105ddc6563801d3bc9b08c0df40046bc2e080bf0fe3612f86a71ccccebc0bd1f2e27a3cb9fe7cd4a551010c6096f697f7b0329e968dfef5c34abdb437a7e85cedabee9d8a5b2bfcbd733eb242cf3571b866b729f132242e15f7e9372776bdd839e73a1c00ce3b4fa37eb73821c68d0b0afc9ce11aa1ef01a645711fef8511c6136d764713f302792e03f79baae10ab689a26119e8f103079231c3996d9aa464887c64f75034e33717545f8b998f20d741969a9f5094c329d8ca31b21bc671d3e9e465fe045c08cab3aa00167ed7c7df3602c544a01d7e6c8277f02e6b0086405556749c6d0dafd3480dd8f44e33420b263dcd451dd2521fd31761464017d7c5780b6cd1e185a0ce749af336c01d8c3da151390cc6a0926f1ee269f3648b90b959cb1f037c9b9f75268f0c3458ddabc3568a30e5bdd0550c17b81ff0273eccf9aef3541e5f104811cb097bea7d239654270f59d12987dbbea57d3d99523b8e00d0d3bc83cd6f61135a742627646cb717c2b98decc68f2b25acd8fcf45f081cbebd75456a09274cfc5d98c74d6ae84f339dd3be3c529576400c98754e851b5f10738e1980f2ec6ba337d7714ba84f114ae92c6fcacc64c24203973136b41b60bfd5097fab45067ea9389184903b64eef322411166d505cfa32bc06f0231468cb3821905a77fb92438b3779705949f457a96d2e4524ea63c785be3cccd42a7666b4396510686a1f9a7bf3433dd923382570519ad71ba23e98f504a122ee163bd189acef7811f6aa2e9afd3b615f5d9bd14425b532d851e372225f6ccb3c032fde9fedc945933c349686d6bab9aae7e7151bd003704d6509660002616a83b953bd85905d5b00a2b5a985aad3e1dd956a750e05092cb662e9ee8bb7740f4e3703da9f93df547eb4364d176ade45c8a56a0146eef13dbf7081c10471a4dfff452443ddf8c7148977d9234b44b4ab81dba8d18772ab70ab2171a819a210e99c266274a322448709807b365c0bacf52fc42266bbb71ea994d340724eea9b174164d2b02619889255ad77efea7225b1ae33bfd1556e333ee9982c1b6697610059f3803cdf6fbc9358631de53ccba6e655c637ea702dd36a19a4acbd172f0e74fa403066b3c6a17b2cdc2ed9d3951619005a843f41b6013989f9ed62561a00121167c1a126bb7f8c13a35f17f30feea1ae6023e2426cc22b12c85e31c7fcfb2ebb18644ea5d29d1198a771e0afbf35cd6c5c7d2dd2a93119c519c9b787ac4a1a2a86a0f001c00540e6705a4c477c8ab98d28e3393332923b317404f7b8a969e0c9b56504e07c20e73ec3f19e819c205cb228ba76c4c395d9bcf733b37b1f1e49df3acba5deb34ae8479132b75f5c1487205797dea03bf110f00c42d603ebcae2f5b1900e4e000dbf4c1993164bdb6f71b5c6680c8d61fd4dbbbd0188b961c71e035434c70a36f6326da0525f98ddbc2b954b183ecf966c596994874e1ebfef02381bd2354b081897ca718f30363f68122b393f728ad4dd1ecb89d66185da95393d7915cc50e20089251c4d6899df8a696c05bf6b0e44f09466776ad4c63fccb2dc24d6e81ba78d2a953252da250b2ac451f33dd4a030b9b8b3c73066f550e223d3a83e06cab21153006f4864a4c30d9977c667f525c6f2dd92d9f28c9bb437b6ccad0783270c783567760a8bde735304d8b0ca80d4e3fc7e5c382a01a0e2f6b40605e64007121e967c6290b95e5ef0fbef39afc9bae7eff14b318fbe6ec35b52ce343237727f906fc536495a40e23193886fb2d6fd4f4dcd3fcdea9797f0ab5eb6ea1a3605447686c584d05ccd7e0d58e9bc35bc49b5b79163df586c01a9c75851f7cfcb51142d75e9e4dae349cbb50ed65a728dec59b1bd6b1af3de2ad146b986fdf9559c136732bc4369b0d3bb9c337cfd5a7b2a9410fa115137b4000aefe46cfc328edabad858f7846ca7a07d262289040f4705ff1196cf41ef79f9338025049269f19b41abe684e291140c1b79e27e67e78fbcdbeb9b4cedd19e7eb4e51f0139678ea095431680f1e1e58c8a55e626f08f49ffe9379b0db5a7d288c9a20e2d3cff606372058515ce28d9c0d6b063007333b8e9382be3a0461a285598692b828039b189b028d671a57dd72af98cd87bb17d657a14aad1d3ca3e01f3aac2fb48fd64a3532e367c81216c6c33c84d5d877150def99b2e237df9385b6bebb7dc93b562047f849e0f329686a7b81630e7aff9d6600742252d722cbadecf14aebac07668b09dfa190dc70e214fa98a430c7fef0a76c7895112efcdcc2322aac99f97a1c454a220d67e9a63b0c091cc36752f752b0215471441ed8ec27b578f8f6e3e5b394a5f1e96ec185e7225a96155ab5e4404f4c6786077606b4426ee9154a76b94243861cd5510b79a567b7e091e4124b0a", 0x1000}, {&(0x7f0000000400)="139a99dfbc6b825493d320afdd8aaf17d13dcdd509fdcedb39df4015b019fa11d2ab94c56352e3aa30a941b4e7a0e7b0a8b3c42e8aacefb6331d", 0x3a}], 0x2)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x20}, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000004a00010227bd7000fcdbdf250a000003"], 0x1c}}, 0x0)
write$bt_hci(r2, &(0x7f0000000040)={0x1, @create_conn={{0x405, 0xd}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xe, 0x78, 0x53, 0x10, 0x9}}}, 0x11)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x121, 0x70bd28, 0xffdfffff, {0xa, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x6}]}, 0x24}}, 0x0)

1.171476ms ago: executing program 0 (id=1392):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000000)="240000001a", 0x5)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x2})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4024}, 0x40880)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10, 0x0}, 0x10)

0s ago: executing program 0 (id=1398):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='batadv_slave_1\x00', 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r3=>0x0})
bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r3, 0x3f, r2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

kernel console output (not intermixed with test programs):

  63.895578][ T5822] Bluetooth: hci0: command tx timeout
[   63.974020][ T5822] Bluetooth: hci2: command tx timeout
[   64.054281][ T5822] Bluetooth: hci1: command tx timeout
[   64.101167][ T6130] ipvlan2: entered promiscuous mode
[   64.105093][ T6130] bridge0: port 3(ipvlan2) entered blocking state
[   64.107463][ T6130] bridge0: port 3(ipvlan2) entered disabled state
[   64.109663][ T6130] ipvlan2: entered allmulticast mode
[   64.111522][ T6130] bridge0: entered allmulticast mode
[   64.115805][ T6130] ipvlan2: left allmulticast mode
[   64.117828][ T6130] bridge0: left allmulticast mode
[   64.148618][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[   64.179928][ T6135] netlink: 132 bytes leftover after parsing attributes in process `syz.0.63'.
[   64.345250][ T6147] bridge_slave_0: left allmulticast mode
[   64.347267][ T6147] bridge_slave_0: left promiscuous mode
[   64.350282][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.357972][ T6147] bridge_slave_1: left allmulticast mode
[   64.360239][ T6147] bridge_slave_1: left promiscuous mode
[   64.368303][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.380632][ T6147] bond0: (slave bond_slave_0): Releasing backup interface
[   64.387640][ T6147] bond0: (slave bond_slave_1): Releasing backup interface
[   64.441441][ T6147] team0: Port device team_slave_0 removed
[   64.476707][ T6147] team0: Port device team_slave_1 removed
[   64.479176][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.482116][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.498614][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.503008][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.530446][ T6148] vlan0: entered promiscuous mode
[   64.568295][ T6148] team0: Port device vlan0 added
[   64.570594][ T6153] team0: No ports can be present during mode change
[   64.655891][ T6151] netlink: 'syz.1.68': attribute type 3 has an invalid length.
[   64.915283][ T6194] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   64.921496][ T6184] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.023422][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.029705][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.179339][ T6207] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[   65.182262][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'.
[   65.188568][ T6207] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   65.192236][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'.
[   65.201876][ T6211] x_tables: duplicate underflow at hook 1
[   65.208154][ T6211] x_tables: duplicate underflow at hook 1
[   65.250348][ T6218] Bluetooth: MGMT ver 1.23
[   65.326582][ T6221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.84'.
[   65.376405][ T6221] netlink: 1300 bytes leftover after parsing attributes in process `syz.1.84'.
[   66.054166][ T5822] Bluetooth: hci2: command 0x0405 tx timeout
[   66.131687][ T6230] netlink: 'syz.0.88': attribute type 64 has an invalid length.
[   66.146731][ T6230] 8021q: adding VLAN 0 to HW filter on device batadv1
[   66.155148][ T6230] team0: Port device batadv1 added
[   66.182561][ T6230] syz.0.88 (6230) used greatest stack depth: 20152 bytes left
[   66.249914][ T6246] netlink: 'syz.1.90': attribute type 1 has an invalid length.
[   66.259062][ T6248] delete_channel: no stack
[   66.283323][ T6235] bond2: (slave veth3): Enslaving as an active interface with a down link
[   66.299835][ T6235] bond2: (slave veth5): Enslaving as an active interface with a down link
[   66.480896][ T6264] batman_adv: batadv0: Adding interface: gretap1
[   66.483269][ T6264] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.492776][ T6264] batman_adv: batadv0: Interface activated: gretap1
[   67.725386][ T6296] syzkaller1: entered promiscuous mode
[   67.727697][ T6296] syzkaller1: entered allmulticast mode
[   67.850086][ T6307] vxcan2: entered promiscuous mode
[   68.346063][ T6336] netlink: 'syz.1.117': attribute type 7 has an invalid length.
[   68.348753][ T6336] netlink: 'syz.1.117': attribute type 8 has an invalid length.
[   68.388665][ T6338] xt_TCPMSS: Only works on TCP SYN packets
[   68.484772][ T6341] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   68.666776][ T6346] sctp: [Deprecated]: syz.0.121 (pid 6346) Use of int in maxseg socket option.
[   68.666776][ T6346] Use struct sctp_assoc_value instead
[   68.759440][ T6360] __nla_validate_parse: 6 callbacks suppressed
[   68.759452][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'.
[   68.765783][ T6360] netlink: 'syz.0.125': attribute type 7 has an invalid length.
[   68.768811][ T6360] netlink: 'syz.0.125': attribute type 8 has an invalid length.
[   68.771374][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'.
[   68.995850][ T6369] infiniband syz0: set down
[   68.997511][ T6369] infiniband syz0: added ipvlan1
[   69.022056][ T6369] RDS/IB: syz0: added
[   69.025884][ T6369] smc: adding ib device syz0 with port count 1
[   69.028349][ T6369] smc:    ib device syz0 port 1 has pnetid 
[   69.540229][ T6376] bond0: entered promiscuous mode
[   69.542668][ T6376] bond_slave_0: entered promiscuous mode
[   69.545854][ T6376] bond_slave_1: entered promiscuous mode
[   69.550242][ T6376] batadv0: entered promiscuous mode
[   69.553745][ T6376] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   69.558314][ T6376] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   69.563128][ T6376] 8021q: adding VLAN 0 to HW filter on device hsr1
[   69.568443][ T6376] bond0: left promiscuous mode
[   69.570570][ T6376] bond_slave_0: left promiscuous mode
[   69.573047][ T6376] bond_slave_1: left promiscuous mode
[   69.578893][ T6376] batadv0: left promiscuous mode
[   69.593443][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'.
[   69.697592][ T6383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.132'.
[   69.704299][ T6383] netlink: 'syz.1.132': attribute type 7 has an invalid length.
[   69.706799][ T6383] netlink: 'syz.1.132': attribute type 8 has an invalid length.
[   69.714506][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'.
[   69.790166][ T6390] ieee802154 phy0 wpan0: encryption failed: -22
[   69.794186][ T6390] netlink: 'syz.2.133': attribute type 2 has an invalid length.
[   69.838454][ T6394] netlink: 36 bytes leftover after parsing attributes in process `syz.0.137'.
[   69.862302][ T6385] netlink: 'syz.2.133': attribute type 2 has an invalid length.
[   69.869119][ T6385] netlink: 244 bytes leftover after parsing attributes in process `syz.2.133'.
[   69.955842][ T6402] netlink: 56 bytes leftover after parsing attributes in process `syz.0.139'.
[   69.976288][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'.
[   70.122197][ T6417] batman_adv: batadv0: Adding interface: dummy0
[   70.122258][ T6418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'.
[   70.128793][ T6417] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.148301][ T6417] batman_adv: batadv0: Interface activated: dummy0
[   70.231960][ T6421] syzkaller0: entered promiscuous mode
[   70.235674][ T6421] syzkaller0: entered allmulticast mode
[   70.400679][ T6428] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.468538][ T6428] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.523231][ T6428] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.565607][ T6428] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.625384][ T6428] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.640524][ T6428] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.661653][ T6428] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.677934][ T6428] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.681446][ T6430] netlink: 'syz.1.146': attribute type 10 has an invalid length.
[   70.681515][ T6431] netlink: 'syz.1.146': attribute type 10 has an invalid length.
[   70.684642][ T6430] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   70.704123][ T6431] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   70.938301][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.941651][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.951815][ T6443] netlink: 'syz.2.150': attribute type 7 has an invalid length.
[   70.965976][ T6443] netlink: 'syz.2.150': attribute type 8 has an invalid length.
[   71.142426][ T6457] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[   71.229895][ T6465] pim6reg1: entered promiscuous mode
[   71.237186][ T6465] pim6reg1: entered allmulticast mode
[   71.465773][ T6480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.477328][ T6479] vxcan1: tx address claim with dlc 2
[   71.693646][ T6491] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[   71.766056][ T6496] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.770088][ T6496] bond1: (slave bond2): making interface the new active one
[   71.772873][ T6496] bond1: (slave bond2): Enslaving as an active interface with an up link
[   71.789303][ T6496] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[   72.141785][ T6513] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20003
[   72.294223][ T6515] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   72.308853][ T6515] Illegal XDP return value 4294967262 on prog  (id 43) dev N/A, expect packet loss!
[   72.841180][ T6506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.977792][ T6548] xt_CT: No such helper "pptp"
[   73.333251][ T6583] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   73.515575][ T6592] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   73.518812][ T6592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.539247][ T6592] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   73.550699][ T6592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.662877][ T6605] lo: entered allmulticast mode
[   73.760237][ T6611] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   73.768112][ T6611] __nla_validate_parse: 31 callbacks suppressed
[   73.768127][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'.
[   73.774791][ T6611] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   73.861567][ T6613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.981036][ T6617] netlink: 240 bytes leftover after parsing attributes in process `syz.2.207'.
[   74.012408][ T6617] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   74.091184][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'.
[   74.096071][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'.
[   74.100778][ T6620] netlink: 18 bytes leftover after parsing attributes in process `syz.2.208'.
[   74.105747][ T6620] nbd: socks must be embedded in a SOCK_ITEM attr
[   74.350778][ T6634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.411095][ T6636] tipc: Failed to remove unknown binding: 66,3,3/0:2058598320/2058598321
[   74.462252][ T6638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.673746][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.217'.
[   74.677587][ T6642] netlink: 80 bytes leftover after parsing attributes in process `syz.1.217'.
[   75.073279][   T24] cfg80211: failed to load regulatory.db
[   75.177872][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   75.181745][ T6664] validate_nla: 12 callbacks suppressed
[   75.181760][ T6664] netlink: 'syz.2.225': attribute type 83 has an invalid length.
[   75.184312][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[   75.449200][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'.
[   75.631448][ T6704] netlink: 3 bytes leftover after parsing attributes in process `syz.2.237'.
[   75.641440][ T6704] 0X: renamed from caif0
[   75.658361][ T6704] 0X: entered allmulticast mode
[   75.660131][ T6704] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   75.748242][ T6715] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   75.947148][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'.
[   76.003009][ T6728] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   76.012392][ T6728] Cannot find del_set index 2 as target
[   76.034592][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   76.037943][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   76.069575][   T24] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   77.040600][ T6774] 8021q: VLANs not supported on ip_vti0
[   77.043224][ T6775] 8021q: VLANs not supported on ip_vti0
[   77.199918][  T789] IPVS: starting estimator thread 0...
[   77.271722][ T6784] vxcan1 speed is unknown, defaulting to 1000
[   77.276814][ T6784] vxcan1 speed is unknown, defaulting to 1000
[   77.280451][ T6784] vxcan1 speed is unknown, defaulting to 1000
[   77.294054][ T6782] IPVS: using max 81 ests per chain, 194400 per kthread
[   77.384911][ T6784] infiniband syz2: set active
[   77.386495][  T789] vxcan1 speed is unknown, defaulting to 1000
[   77.389145][ T6784] infiniband syz2: added vxcan1
[   77.416247][ T6784] RDS/IB: syz2: added
[   77.417607][ T6784] smc: adding ib device syz2 with port count 1
[   77.419902][ T6784] smc:    ib device syz2 port 1 has pnetid 
[   77.421861][  T789] vxcan1 speed is unknown, defaulting to 1000
[   77.426072][ T6784] vxcan1 speed is unknown, defaulting to 1000
[   77.523528][ T6784] vxcan1 speed is unknown, defaulting to 1000
[   77.646293][ T6784] vxcan1 speed is unknown, defaulting to 1000
[   77.808738][ T6793] xt_hashlimit: size too large, truncated to 1048576
[   77.864656][ T6795] : renamed from bridge_slave_0 (while UP)
[   77.945789][ T6797] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   78.146239][ T6799] vxcan1 speed is unknown, defaulting to 1000
[   78.741100][ T6813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.956937][ T6820] __nla_validate_parse: 8 callbacks suppressed
[   78.956952][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'.
[   79.226255][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.276'.
[   79.322765][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'.
[   79.343014][ T1086] smc: removing ib device syz0
[   79.396839][ T6857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.280'.
[   79.487193][ T6866] x_tables: duplicate underflow at hook 1
[   80.166970][ T6901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.289'.
[   80.213412][ T6905] netlink: 56 bytes leftover after parsing attributes in process `syz.1.290'.
[   80.584998][ T6927] netlink: 'syz.2.294': attribute type 31 has an invalid length.
[   80.605994][ T6928] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.295'.
[   80.612865][ T6925] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.295'.
[   80.634485][ T6925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.099714][ T6935] netlink: 'syz.1.297': attribute type 8 has an invalid length.
[   81.281103][ T6939] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.287377][ T6939] bond0: (slave bond3): Enslaving as an active interface with an up link
[   81.345969][ T6937] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   81.374552][ T6946] ieee802154 phy0 wpan0: encryption failed: -22
[   81.419531][ T6949] vxcan1 speed is unknown, defaulting to 1000
[   81.597006][ T6957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'.
[   81.608992][ T6957] netlink: 72 bytes leftover after parsing attributes in process `syz.0.303'.
[   81.743152][ T6962] delete_channel: no stack
[   81.747785][ T6962] delete_channel: no stack
[   82.679620][ T6976] delete_channel: no stack
[   82.830613][ T6989] x_tables: duplicate underflow at hook 1
[   82.868983][ T6992] raw_sendmsg: syz.1.314 forgot to set AF_INET. Fix it!
[   82.984538][ T6998] Cannot find del_set index 0 as target
[   83.609095][ T7024] wlan1: mtu greater than device maximum
[   84.067672][ T7046] tipc: Started in network mode
[   84.069389][ T7046] tipc: Node identity 4, cluster identity 4711
[   84.071421][ T7046] tipc: Node number set to 4
[   84.540379][ T7066] netlink: 'syz.2.331': attribute type 1 has an invalid length.
[   84.547591][ T7066] __nla_validate_parse: 5 callbacks suppressed
[   84.547606][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.331'.
[   84.558079][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'.
[   84.668059][ T7070] pim6reg1: entered allmulticast mode
[   84.768708][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'.
[   84.901108][ T7078] team0 (unregistering): Port device vlan0 removed
[   84.908260][ T7078] team0 (unregistering): Port device batadv1 removed
[   85.043133][ T7091] vxcan1 speed is unknown, defaulting to 1000
[   85.360492][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'.
[   85.363653][ T7106] netlink: 68 bytes leftover after parsing attributes in process `syz.1.343'.
[   85.461805][ T7112] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[   85.482213][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.345'.
[   85.546452][ T7116] xt_cgroup: path and classid specified
[   85.599321][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'.
[   85.662174][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'.
[   85.878228][ T7123] netlink: 'syz.0.348': attribute type 58 has an invalid length.
[   85.930156][ T7123] "syz.0.348" (7123) uses obsolete ecb(arc4) skcipher
[   86.096035][ T7136] openvswitch: netlink: Message has 4 unknown bytes.
[   86.098271][ T7136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.136666][ T7139] netlink: 104 bytes leftover after parsing attributes in process `syz.0.352'.
[   86.196117][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'.
[   86.612470][ T7167] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20067
[   86.748107][ T7178] lo speed is unknown, defaulting to 1000
[   86.750930][ T7178] lo speed is unknown, defaulting to 1000
[   86.755689][ T7178] lo speed is unknown, defaulting to 1000
[   86.762898][ T7178] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   86.778258][ T7178] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   86.840707][ T7178] lo speed is unknown, defaulting to 1000
[   86.854466][ T7178] lo speed is unknown, defaulting to 1000
[   86.862820][ T7178] lo speed is unknown, defaulting to 1000
[   86.959902][ T7194] xt_bpf: check failed: parse error
[   87.401585][ T7231] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.496047][ T7231] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.555309][ T7231] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.597470][ T7231] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.671500][ T7231] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.679645][ T7231] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.688111][ T7231] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.696646][ T7231] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.797057][ T7234] vxcan1 speed is unknown, defaulting to 1000
[   87.878329][ T7234] lo speed is unknown, defaulting to 1000
[   88.389289][ T7276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.396771][ T7278] netlink: 'syz.2.388': attribute type 10 has an invalid length.
[   88.405233][ T7278] netlink: 'syz.2.388': attribute type 4 has an invalid length.
[   88.436796][ T7278] netlink: 'syz.2.388': attribute type 4 has an invalid length.
[   88.440473][   T10] lo speed is unknown, defaulting to 1000
[   88.445132][   T10] syz1: Port: 1 Link DOWN
[   88.452063][   T10] lo speed is unknown, defaulting to 1000
[   88.456865][   T10] syz1: Port: 1 Link ACTIVE
[   88.461571][ T7280] team0: Device gtp1 is of different type
[   88.541456][ T7289] x_tables: duplicate underflow at hook 1
[   88.560742][ T7291] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   88.610901][ T7298] vxcan1 speed is unknown, defaulting to 1000
[   88.745202][ T7300] netlink: 'syz.0.395': attribute type 1 has an invalid length.
[   88.898246][ T7298] lo speed is unknown, defaulting to 1000
[   88.947359][ T7322] tipc: Can't bind to reserved service type 1
[   88.997928][ T7329] siw: device registration error -23
[   89.026028][ T7334] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   89.026046][ T7333] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   89.028463][ T7334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.036629][ T7333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.070604][ T7341] netlink: 'syz.0.408': attribute type 10 has an invalid length.
[   89.088087][ T7339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.103273][ T7341] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   89.201379][   T24] vxcan1 speed is unknown, defaulting to 1000
[   89.277659][ T7345] batman_adv: batadv0: Interface deactivated: dummy0
[   89.361813][ T7345] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.373888][ T7345] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.376697][ T7345] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.379418][ T7345] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.417760][ T5851] vxcan1 speed is unknown, defaulting to 1000
[   89.420297][ T5851] syz2: Port: 1 Link DOWN
[   89.422369][ T5851] vxcan1 speed is unknown, defaulting to 1000
[   89.626162][ T7354] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   89.633274][ T7354] __nla_validate_parse: 11 callbacks suppressed
[   89.633290][ T7354] netlink: 248 bytes leftover after parsing attributes in process `syz.2.412'.
[   89.721709][ T7361] openvswitch: netlink: IPv4 tun info is not correct
[   89.766980][ T7363] netlink: 'syz.0.416': attribute type 3 has an invalid length.
[   89.770178][ T7363] netlink: 'syz.0.416': attribute type 1 has an invalid length.
[   89.772838][ T7363] netlink: 220 bytes leftover after parsing attributes in process `syz.0.416'.
[   89.811809][ T7365] SET target dimension over the limit!
[   89.880158][ T7376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'.
[   89.883140][ T7376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'.
[   89.913577][ T7378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.420'.
[   90.001366][ T7380] x9: renamed from bridge_slave_0 (while UP)
[   90.059026][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'.
[   90.130524][ T7396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'.
[   90.136652][ T7396] netlink: 'syz.0.426': attribute type 7 has an invalid length.
[   90.139432][ T7396] netlink: 'syz.0.426': attribute type 8 has an invalid length.
[   90.142233][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'.
[   90.158425][ T7339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.192600][ T7400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.427'.
[   90.209910][ T7389] infiniband syz0: set down
[   90.211762][ T7389] infiniband syz0: added ipvlan1
[   90.218757][ T7389] syz0: rxe_create_cq: returned err = -12
[   90.220692][ T7389] infiniband syz0: Couldn't create ib_mad CQ
[   90.223276][ T7389] infiniband syz0: Couldn't open port 1
[   90.236334][ T7339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.240940][ T7389] RDS/IB: syz0: added
[   90.247223][ T7389] smc: adding ib device syz0 with port count 1
[   90.250604][ T7389] smc:    ib device syz0 port 1 has pnetid 
[   90.301358][ T7339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.403564][ T7339] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.422845][ T7339] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.433289][ T7339] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.450713][ T7339] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.677237][ T7420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.433'.
[   91.647139][ T7437] openvswitch: netlink: Multiple metadata blocks provided
[   91.715253][ T7442] validate_nla: 2 callbacks suppressed
[   91.715264][ T7442] netlink: 'syz.1.441': attribute type 7 has an invalid length.
[   91.719917][ T7442] netlink: 'syz.1.441': attribute type 8 has an invalid length.
[   91.841619][ T7459] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.906019][ T7475] netlink: 'syz.1.450': attribute type 7 has an invalid length.
[   91.910779][ T7475] netlink: 'syz.1.450': attribute type 8 has an invalid length.
[   91.958688][ T7482] netlink: 'syz.2.452': attribute type 1 has an invalid length.
[   92.071098][ T7493] netlink: 'syz.1.454': attribute type 10 has an invalid length.
[   92.078585][ T7493] bridge0: port 3(dummy0) entered blocking state
[   92.085147][ T7493] bridge0: port 3(dummy0) entered disabled state
[   92.092079][ T7493] dummy0: entered allmulticast mode
[   92.099494][ T7493] dummy0: entered promiscuous mode
[   92.138147][ T7493] vxcan1 speed is unknown, defaulting to 1000
[   92.276157][ T7493] lo speed is unknown, defaulting to 1000
[   92.311127][ T7501] vxcan1 speed is unknown, defaulting to 1000
[   92.477188][ T7501] lo speed is unknown, defaulting to 1000
[   92.657384][ T7509] netlink: 'syz.0.459': attribute type 9 has an invalid length.
[   92.660048][ T7509] netlink: 'syz.0.459': attribute type 6 has an invalid length.
[   93.064297][ T7532] ip6tnl2: entered promiscuous mode
[   93.074672][ T7532] ip6tnl2: entered allmulticast mode
[   93.098235][ T7532] veth0: entered promiscuous mode
[   93.106970][ T7530] veth0: left promiscuous mode
[   93.463086][ T7536] veth1_to_bond: entered allmulticast mode
[   93.513127][ T7540] veth1_to_bond (unregistering): left allmulticast mode
[   93.608365][ T7549] netlink: 'syz.0.471': attribute type 1 has an invalid length.
[   93.815376][ T7570] netlink: 'syz.0.476': attribute type 1 has an invalid length.
[   93.829729][ T7570] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.849940][ T7570] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.852286][ T7570] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   93.857111][ T7570] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   93.883778][ T7572] 8021q: adding VLAN 0 to HW filter on device team0
[   93.889513][ T7572] 0X: left allmulticast mode
[   93.891292][ T7572] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   93.918970][ T7570] bond1: (slave bridge2): Enslaving as an active interface with a down link
[   93.999591][ T7573] vlan2: entered allmulticast mode
[   94.001763][ T7573] batadv0: entered allmulticast mode
[   94.793478][ T7627] __nla_validate_parse: 36 callbacks suppressed
[   94.793489][ T7627] netlink: 60 bytes leftover after parsing attributes in process `syz.0.486'.
[   95.855798][ T5814] syz-executor (5814) used greatest stack depth: 20024 bytes left
[   96.046995][ T7660] batman_adv: batadv0: Removing interface: dummy0
[   96.050217][ T7660] bond0: (slave wlan1): Releasing backup interface
[   96.053488][ T7660] bond1: (slave bridge2): Releasing active interface
[   96.061231][ T7660] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   96.128201][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.496'.
[   96.217501][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   96.222675][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   96.227184][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   96.231515][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   96.237539][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   96.272509][ T7665] vxcan1 speed is unknown, defaulting to 1000
[   96.373008][ T7665] lo speed is unknown, defaulting to 1000
[   96.548559][ T7665] chnl_net:caif_netlink_parms(): no params data found
[   96.608647][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.611846][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.618721][ T7665] bridge_slave_0: entered allmulticast mode
[   96.622781][ T7665] bridge_slave_0: entered promiscuous mode
[   96.627060][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.629660][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.636827][ T7665] bridge_slave_1: entered allmulticast mode
[   96.644082][ T7665] bridge_slave_1: entered promiscuous mode
[   96.670351][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.675767][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.692097][ T7689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.502'.
[   96.699536][ T7665] team0: Port device team_slave_0 added
[   96.704473][ T7665] team0: Port device team_slave_1 added
[   96.732381][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.735259][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.743533][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.749868][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.752093][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.761265][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.790898][ T7665] hsr_slave_0: entered promiscuous mode
[   96.793260][ T7665] hsr_slave_1: entered promiscuous mode
[   96.796272][ T7665] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.798924][ T7665] Cannot create hsr debugfs directory
[   96.880064][ T7665] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.926115][ T7665] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.969394][ T7665] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.001822][ T7707] validate_nla: 3 callbacks suppressed
[   97.001835][ T7707] netlink: 'syz.0.509': attribute type 9 has an invalid length.
[   97.008922][ T7665] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.025783][ T7708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.509'.
[   97.085630][ T7709] delete_channel: no stack
[   97.122909][ T7665] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   97.142012][ T7665] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   97.154677][ T7665] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   97.161499][ T7665] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   97.252719][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.264922][ T7665] 8021q: adding VLAN 0 to HW filter on device team0
[   97.270888][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.273896][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.290085][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.293007][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.441232][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.470717][ T7665] veth0_vlan: entered promiscuous mode
[   97.478463][ T7665] veth1_vlan: entered promiscuous mode
[   97.508766][ T7665] veth0_macvtap: entered promiscuous mode
[   97.512483][ T7665] veth1_macvtap: entered promiscuous mode
[   97.521601][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.528387][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.533003][ T7665] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.536616][ T7665] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.539355][ T7665] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.542559][ T7665] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.603511][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.615332][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.641230][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.645714][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.694005][ T7749] netlink: 'syz.0.519': attribute type 4 has an invalid length.
[   97.708709][ T7749] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[   97.761994][ T7751] netlink: 'syz.0.520': attribute type 1 has an invalid length.
[   97.767278][ T7751] netlink: 'syz.0.520': attribute type 4 has an invalid length.
[   97.770472][ T7751] netlink: 188 bytes leftover after parsing attributes in process `syz.0.520'.
[   97.855056][ T7756] netlink: 64 bytes leftover after parsing attributes in process `syz.0.522'.
[   97.901021][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'.
[   98.193281][ T7775] smc: removing ib device syz2
[   99.739697][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.913751][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'.
[  100.093317][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  100.098446][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  100.104323][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  100.108600][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  100.109522][ T7808] netlink: 'syz.0.534': attribute type 3 has an invalid length.
[  100.113410][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  100.115280][ T7808] netlink: 666 bytes leftover after parsing attributes in process `syz.0.534'.
[  100.145398][ T7805] lo speed is unknown, defaulting to 1000
[  100.232123][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.535'.
[  100.238548][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'.
[  100.263419][ T7814] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.535'.
[  100.326835][ T7819] netlink: 'syz.0.536': attribute type 11 has an invalid length.
[  100.397776][ T7822] sch_fq: defrate 9 ignored.
[  100.445070][ T7826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'.
[  100.448812][ T7826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'.
[  100.452417][ T7826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'.
[  100.467464][ T7805] chnl_net:caif_netlink_parms(): no params data found
[  100.557604][ T7805] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.560082][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.562544][ T7805] bridge_slave_0: entered allmulticast mode
[  100.566079][ T7805] bridge_slave_0: entered promiscuous mode
[  100.569990][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.572553][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.576667][ T7805] bridge_slave_1: entered allmulticast mode
[  100.579921][ T7805] bridge_slave_1: entered promiscuous mode
[  100.612319][ T7805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.626706][ T7805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.668650][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'.
[  100.669126][ T7805] team0: Port device team_slave_0 added
[  100.680599][ T7805] team0: Port device team_slave_1 added
[  100.717183][ T7840] netlink: 'syz.0.543': attribute type 1 has an invalid length.
[  100.720624][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.723583][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.735040][ T7805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.742084][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.748826][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.773314][ T7805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.826222][ T7805] hsr_slave_0: entered promiscuous mode
[  100.829886][ T7805] hsr_slave_1: entered promiscuous mode
[  100.832849][ T7805] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.836434][ T7805] Cannot create hsr debugfs directory
[  101.058494][ T7851] netlink: 1 bytes leftover after parsing attributes in process `syz.0.547'.
[  101.136246][ T7853] lo speed is unknown, defaulting to 1000
[  101.467340][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.531458][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.595853][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.682832][   T12] bridge_slave_1: left allmulticast mode
[  101.686848][   T12] bridge_slave_1: left promiscuous mode
[  101.689181][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.696300][   T12] bridge_slave_0: left allmulticast mode
[  101.698256][   T12] bridge_slave_0: left promiscuous mode
[  101.700223][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.939239][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.943648][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.948701][   T12] bond0 (unregistering): Released all slaves
[  102.144095][ T5822] Bluetooth: hci0: command tx timeout
[  102.416003][   T12] hsr_slave_0: left promiscuous mode
[  102.418703][   T12] hsr_slave_1: left promiscuous mode
[  102.421011][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.423714][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.432235][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.434903][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.451637][   T12] veth1_macvtap: left promiscuous mode
[  102.453689][   T12] veth0_macvtap: left promiscuous mode
[  102.456682][   T12] veth1_vlan: left promiscuous mode
[  102.458451][   T12] veth0_vlan: left promiscuous mode
[  102.758750][   T12] team0 (unregistering): Port device team_slave_1 removed
[  102.788913][   T12] team0 (unregistering): Port device team_slave_0 removed
[  103.083642][ T7805] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  103.091165][ T7805] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  103.107658][ T7805] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  103.126444][ T7805] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  103.131763][ T7897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.134508][ T7897] IPv6: NLM_F_CREATE should be set when creating new route
[  103.136810][ T7898] netlink: 'syz.2.553': attribute type 1 has an invalid length.
[  103.137299][ T7897] IPv6: NLM_F_CREATE should be set when creating new route
[  103.142611][ T7897] IPv6: NLM_F_CREATE should be set when creating new route
[  103.150299][ T7897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.158548][ T7897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.161032][ T7897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.177400][ T7895] lo speed is unknown, defaulting to 1000
[  103.312812][ T7805] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.367245][ T7805] 8021q: adding VLAN 0 to HW filter on device team0
[  103.374526][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.377950][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.381864][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.384822][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.658075][ T7805] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.762226][ T7805] veth0_vlan: entered promiscuous mode
[  103.774962][ T7805] veth1_vlan: entered promiscuous mode
[  103.808462][ T7805] veth0_macvtap: entered promiscuous mode
[  103.813695][ T7805] veth1_macvtap: entered promiscuous mode
[  103.829995][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.849585][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.860248][ T7805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.862985][ T7805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.866163][ T7805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.869395][ T7805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.961241][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.972530][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.012616][ T2426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.025310][ T2426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.225470][   T54] Bluetooth: hci0: command tx timeout
[  104.341311][ T7946] netlink: 'syz.0.563': attribute type 25 has an invalid length.
[  104.845045][ T7972] xt_hashlimit: size too large, truncated to 1048576
[  105.115931][ T7983] bpq0: entered promiscuous mode
[  105.117765][ T7983] bpq0: entered allmulticast mode
[  105.487740][ T7993] netlink: 'syz.2.575': attribute type 1 has an invalid length.
[  105.509537][ T7993] 8021q: adding VLAN 0 to HW filter on device bond3
[  105.530698][ T7993] 8021q: adding VLAN 0 to HW filter on device batadv1
[  105.536280][ T7993] bond3: (slave batadv1): making interface the new active one
[  105.540713][ T7993] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  105.551013][ T7996] lo speed is unknown, defaulting to 1000
[  105.663624][ T8003] __nla_validate_parse: 4 callbacks suppressed
[  105.663642][ T8003] netlink: 60 bytes leftover after parsing attributes in process `syz.2.578'.
[  105.678112][ T8003] netlink: 'syz.2.578': attribute type 1 has an invalid length.
[  105.681350][ T8003] netlink: 36 bytes leftover after parsing attributes in process `syz.2.578'.
[  105.906573][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'.
[  105.909855][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'.
[  105.912867][ T8016] netlink: 'syz.2.581': attribute type 1 has an invalid length.
[  105.916803][ T8016] netlink: 10 bytes leftover after parsing attributes in process `syz.2.581'.
[  105.987198][   T56] block nbd0: Receive control failed (result -107)
[  106.109720][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.584'.
[  106.120100][ T8024] lo speed is unknown, defaulting to 1000
[  106.557827][ T8062] netlink: 'syz.0.588': attribute type 3 has an invalid length.
[  106.691400][ T8066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.589'.
[  106.695560][ T8066] netlink: 'syz.0.589': attribute type 7 has an invalid length.
[  106.698183][ T8066] netlink: 'syz.0.589': attribute type 8 has an invalid length.
[  106.700700][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'.
[  106.778263][ T8072] netlink: 'syz.0.591': attribute type 20 has an invalid length.
[  106.997909][ T8081] lo speed is unknown, defaulting to 1000
[  107.431215][ T8095] wireguard0: entered promiscuous mode
[  107.433224][ T8095] wireguard0: entered allmulticast mode
[  107.606610][ T8101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.597'.
[  107.610655][ T8101] netlink: 'syz.2.597': attribute type 7 has an invalid length.
[  107.615201][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'.
[  107.973772][ T8107] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.977194][ T8107] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.979867][ T8107] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.982559][ T8107] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.997848][ T8107] tipc: Resetting bearer <eth:syzkaller0>
[  108.006708][ T8107] ip6tnl2: left promiscuous mode
[  108.008491][ T8107] ip6tnl2: left allmulticast mode
[  108.020419][   T24] lo speed is unknown, defaulting to 1000
[  108.022347][   T24] syz1: Port: 1 Link DOWN
[  108.238139][ T8131] x_tables: duplicate underflow at hook 2
[  108.288461][ T8128] lo speed is unknown, defaulting to 1000
[  109.155449][ T8187] validate_nla: 4 callbacks suppressed
[  109.155461][ T8187] netlink: 'syz.0.612': attribute type 4 has an invalid length.
[  109.160770][ T8187] netlink: 'syz.0.612': attribute type 4 has an invalid length.
[  109.331187][ T8197] netlink: 'syz.0.613': attribute type 3 has an invalid length.
[  109.339031][ T8197] netlink: 'syz.0.613': attribute type 7 has an invalid length.
[  109.342199][ T8197] netlink: 'syz.0.613': attribute type 8 has an invalid length.
[  109.411885][ T8199] pimreg: entered allmulticast mode
[  109.518172][ T8205] xt_TCPMSS: Only works on TCP SYN packets
[  109.804314][   T10] IPVS: starting estimator thread 0...
[  109.822032][ T8224] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  109.894142][ T8228] IPVS: using max 80 ests per chain, 192000 per kthread
[  110.769072][ T8252] netlink: 'syz.2.627': attribute type 1 has an invalid length.
[  110.772511][ T8252] __nla_validate_parse: 11 callbacks suppressed
[  110.772523][ T8252] netlink: 72 bytes leftover after parsing attributes in process `syz.2.627'.
[  110.805541][ T8252] lo speed is unknown, defaulting to 1000
[  110.860183][ T8255] wg1: entered promiscuous mode
[  110.862250][ T8255] wg1: entered allmulticast mode
[  111.220107][ T8261] pimreg: entered allmulticast mode
[  111.222636][ T8260] pimreg: left allmulticast mode
[  111.434462][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'.
[  111.829814][ T8282] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  112.040769][ T8286] netlink: 'syz.0.635': attribute type 4 has an invalid length.
[  112.044909][ T8286] netlink: 'syz.0.635': attribute type 4 has an invalid length.
[  112.048308][ T8286] netlink: 'syz.0.635': attribute type 4 has an invalid length.
[  112.051678][ T8286] netlink: 'syz.0.635': attribute type 4 has an invalid length.
[  112.259997][ T8291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.637'.
[  112.436974][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'.
[  112.440769][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'.
[  112.530217][ T8302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.641'.
[  112.658838][  T789] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  112.675078][  T789] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  112.678666][  T789] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  112.884813][ T8320] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  112.889992][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'.
[  112.893417][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'.
[  113.032341][ T8337] tipc: Started in network mode
[  113.034530][ T8337] tipc: Node identity 2a4030c06fc7, cluster identity 4711
[  113.037309][ T8337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.040778][ T8337] syzkaller0: entered promiscuous mode
[  113.042888][ T8337] syzkaller0: entered allmulticast mode
[  113.062274][ T8337] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.067004][ T8337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.079726][ T8336] tipc: Resetting bearer <eth:syzkaller0>
[  113.105327][ T8336] tipc: Disabling bearer <eth:syzkaller0>
[  113.162990][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'.
[  113.167080][ T8345] netlink: 32 bytes leftover after parsing attributes in process `syz.2.651'.
[  113.247435][   T10] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  113.250011][   T10] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  113.292484][   T10] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  113.394468][ T8345] xt_hashlimit: size too large, truncated to 1048576
[  113.919724][ T8386] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  114.933522][ T8400] xt_cluster: node mask cannot exceed total number of nodes
[  115.068318][ T8403] validate_nla: 66 callbacks suppressed
[  115.068331][ T8403] netlink: 'syz.2.664': attribute type 72 has an invalid length.
[  115.408272][ T8456] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  115.413040][ T8456] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  115.418796][ T8456] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  115.459095][ T8459] netlink: 'syz.2.670': attribute type 7 has an invalid length.
[  115.462571][ T8459] netlink: 'syz.2.670': attribute type 8 has an invalid length.
[  115.543528][ T8465] sctp: [Deprecated]: syz.2.672 (pid 8465) Use of int in maxseg socket option.
[  115.543528][ T8465] Use struct sctp_assoc_value instead
[  115.768042][ T8472] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.772144][ T8472] 8021q: adding VLAN 0 to HW filter on device team0
[  115.778985][ T8472] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  115.786096][  T789] lo speed is unknown, defaulting to 1000
[  115.788513][  T789] syz1: Port: 1 Link ACTIVE
[  115.806062][   T12] bond0: (slave wlan1): link status definitely down, disabling slave
[  115.811236][   T12] bond0: now running without any active interface!
[  116.229428][ T8475] netlink: 'syz.0.675': attribute type 1 has an invalid length.
[  116.232624][ T8475] netlink: 'syz.0.675': attribute type 2 has an invalid length.
[  116.270313][ T8477] netlink: 'syz.0.676': attribute type 21 has an invalid length.
[  116.273217][ T8477] __nla_validate_parse: 10 callbacks suppressed
[  116.273225][ T8477] netlink: 128 bytes leftover after parsing attributes in process `syz.0.676'.
[  116.279321][ T8477] netlink: 'syz.0.676': attribute type 5 has an invalid length.
[  116.281791][ T8477] netlink: 'syz.0.676': attribute type 6 has an invalid length.
[  116.284623][ T8477] netlink: 3 bytes leftover after parsing attributes in process `syz.0.676'.
[  116.289218][ T8477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.676'.
[  116.392333][ T8486] netlink: 'syz.0.679': attribute type 1 has an invalid length.
[  116.418874][ T8486] bond2: (slave bridge5): making interface the new active one
[  116.422641][ T8486] bond2: (slave bridge5): Enslaving as an active interface with an up link
[  116.597093][ T8497] !: renamed from dummy0 (while UP)
[  116.608439][ T8498] netlink: 248 bytes leftover after parsing attributes in process `syz.0.681'.
[  116.753010][ T8503] lo speed is unknown, defaulting to 1000
[  116.858138][ T8512] netlink: 56 bytes leftover after parsing attributes in process `syz.0.685'.
[  117.288778][ T8546] tap0: tun_chr_ioctl cmd 1074025676
[  117.291248][ T8546] tap0: owner set to 0
[  117.427219][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'.
[  117.544342][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'.
[  117.547868][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'.
[  117.612548][ T8560] netlink: 'syz.0.689': attribute type 14 has an invalid length.
[  117.846896][ T8602] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  117.849869][ T8602] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  117.852528][ T8602] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  117.857274][ T8602] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  117.861571][ T8602] bond4: (slave geneve2): making interface the new active one
[  117.865350][ T8602] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  117.870220][ T8602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.692'.
[  117.876983][ T8602] 8021q: adding VLAN 0 to HW filter on device bond4
[  117.880145][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.692'.
[  117.904818][ T8602] syz.2.692 (8602) used greatest stack depth: 20016 bytes left
[  117.998882][ T8610] Bluetooth: MGMT ver 1.23
[  118.336667][ T8633] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  118.464194][ T8637] netlink: 'syz.0.703': attribute type 11 has an invalid length.
[  118.466801][ T8638] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  118.470452][ T8638] tipc: Enabled bearer <udp:syz1>, priority 6
[  118.574940][ T8645] syzkaller1: entered promiscuous mode
[  118.576824][ T8645] syzkaller1: entered allmulticast mode
[  118.950882][ T8684] lo speed is unknown, defaulting to 1000
[  119.302747][  T789] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0
[  119.306148][  T789] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0
[  119.309303][  T789] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0
[  119.312415][  T789] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0
[  119.316032][  T789] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0
[  119.319923][  T789] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0
[  119.324309][  T789] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x3
[  119.330907][  T789] hid-generic 0005:16C0:5505.0004: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  119.424708][ T8707] veth0: entered promiscuous mode
[  119.461996][ T8707] veth0 (unregistering): left promiscuous mode
[  120.123371][ T8754] pimreg: entered allmulticast mode
[  120.140669][ T8754] lo: left allmulticast mode
[  120.142682][ T8754] pimreg: left allmulticast mode
[  120.230422][ T8756] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  120.253689][ T8759] lo speed is unknown, defaulting to 1000
[  120.298748][ T8764] openvswitch: netlink: Duplicate or invalid key (type 0).
[  120.301142][ T8764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.443949][ T8772] validate_nla: 5 callbacks suppressed
[  120.443965][ T8772] netlink: 'syz.0.737': attribute type 21 has an invalid length.
[  121.392748][ T8818] __nla_validate_parse: 23 callbacks suppressed
[  121.392766][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'.
[  121.916155][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'.
[  121.987284][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.753'.
[  122.029482][ T8832] netlink: 'syz.2.754': attribute type 1 has an invalid length.
[  122.038097][ T8832] netlink: 'syz.2.754': attribute type 21 has an invalid length.
[  122.040816][ T8832] netlink: 'syz.2.754': attribute type 6 has an invalid length.
[  122.043353][ T8832] netlink: 64 bytes leftover after parsing attributes in process `syz.2.754'.
[  122.145199][ T8835] delete_channel: no stack
[  122.181324][ T8842] bond0: Master is either lo or non-ether device
[  122.389426][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'.
[  122.465626][ T8868] bond0: (slave wlan1): Releasing backup interface
[  122.469443][ T8868] bond2: (slave bridge5): Releasing active interface
[  122.474875][ T8871] netlink: 'syz.2.765': attribute type 7 has an invalid length.
[  122.510824][ T8873] bond0: (slave wlan1): Releasing backup interface
[  122.514446][ T8873] bond1: (slave bond2): Releasing backup interface
[  122.516522][ T8873] bond1: (slave bond2): the permanent HWaddr of slave - 92:a3:fa:db:8c:e7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  122.521772][ T8873] bond1: (slave gretap1): making interface the new active one
[  122.527504][ T8873] bond1: (slave gretap1): Releasing backup interface
[  122.530876][ T8873] bond3: (slave batadv1): Releasing active interface
[  122.536074][ T8873] bond4: (slave geneve2): Releasing active interface
[  122.539403][ T8873] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  122.542062][ T8873] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  122.546603][ T8873] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  122.549216][ T8873] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  122.558203][ T8873] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  122.708694][ T8885] netlink: set zone limit has 8 unknown bytes
[  122.733877][ T8887] netlink: 'syz.2.770': attribute type 3 has an invalid length.
[  123.032621][ T8898] netlink: 'syz.2.774': attribute type 1 has an invalid length.
[  123.035403][ T8898] netlink: 'syz.2.774': attribute type 2 has an invalid length.
[  123.176648][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.778'.
[  123.263365][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'.
[  123.268507][ T8921] x_tables: duplicate underflow at hook 1
[  123.294301][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'.
[  123.297087][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'.
[  123.300208][ T8923] netlink: 'syz.2.782': attribute type 7 has an invalid length.
[  123.361566][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'.
[  124.274589][ T8991] tap0: tun_chr_ioctl cmd 1074025677
[  124.276554][ T8991] tap0: linktype set to 823
[  124.391687][ T8998] bridge2: entered promiscuous mode
[  124.436127][ T9000] macvtap1: entered promiscuous mode
[  124.437926][ T9000] bridge0: entered promiscuous mode
[  124.440266][ T9000] macvtap1: entered allmulticast mode
[  124.442477][ T9000] bridge0: entered allmulticast mode
[  124.455879][ T9000] bridge0: left allmulticast mode
[  124.457565][ T9000] bridge0: left promiscuous mode
[  124.532464][ T9010] Unsupported ieee802154 address type: 0
[  124.581078][ T9016] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  125.613339][ T9032] netlink: 'syz.0.800': attribute type 21 has an invalid length.
[  125.657868][ T9038] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  125.870528][ T9052] atomic_op ffff888038fde998 conn xmit_atomic 0000000000000000
[  125.918446][ T9054] xt_TCPMSS: Only works on TCP SYN packets
[  126.138052][ T9062] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.142796][ T9062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.928535][ T9078] __nla_validate_parse: 11 callbacks suppressed
[  126.928545][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'.
[  126.936551][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'.
[  127.002987][ T9084] netlink: 'syz.0.816': attribute type 1 has an invalid length.
[  127.006602][ T9084] netlink: 224 bytes leftover after parsing attributes in process `syz.0.816'.
[  127.025926][ T9084] xt_CT: No such helper "snmp"
[  127.191444][ T9094] delete_channel: no stack
[  127.393647][ T9101] netlink: 'syz.0.823': attribute type 21 has an invalid length.
[  127.398783][ T9101] IPv6: NLM_F_CREATE should be specified when creating new route
[  127.418033][ T9103] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  127.450175][ T9103] tipc: Resetting bearer <eth:syzkaller0>
[  127.500667][ T9113] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999
[  127.510773][ T9113] vlan2: entered promiscuous mode
[  127.512741][ T9113] bridge0: entered promiscuous mode
[  127.515916][ T9113] vlan2: entered allmulticast mode
[  127.517692][ T9113] bridge0: entered allmulticast mode
[  127.627391][ T9118] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  127.669997][ T9131] vlan3: entered promiscuous mode
[  127.671742][ T9131] vlan3: entered allmulticast mode
[  127.673627][ T9131] hsr_slave_1: entered allmulticast mode
[  128.293406][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'.
[  128.575491][ T9164] netlink: 34 bytes leftover after parsing attributes in process `syz.0.841'.
[  128.579152][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.841'.
[  128.634817][ T9168] x_tables: duplicate underflow at hook 2
[  128.638451][ T9168] x_tables: duplicate underflow at hook 1
[  128.782145][ T9174] lo speed is unknown, defaulting to 1000
[  128.960174][ T9174] netlink: 'syz.0.845': attribute type 12 has an invalid length.
[  129.418569][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'.
[  129.939580][ T9195] veth1: entered allmulticast mode
[  129.982393][ T9197] netlink: 176 bytes leftover after parsing attributes in process `syz.0.850'.
[  130.319791][ T9212] netlink: 'syz.2.854': attribute type 11 has an invalid length.
[  130.322461][ T9212] netlink: 224 bytes leftover after parsing attributes in process `syz.2.854'.
[  130.631724][ T9224] netlink: 'syz.2.857': attribute type 14 has an invalid length.
[  130.652146][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.857'.
[  131.176094][ T9265] netlink: 'syz.2.870': attribute type 9 has an invalid length.
[  131.275324][ T9270] netlink: 'syz.2.872': attribute type 10 has an invalid length.
[  131.333099][ T9282] netlink: 'syz.2.874': attribute type 1 has an invalid length.
[  131.372405][ T9282] 8021q: adding VLAN 0 to HW filter on device bond5
[  131.392656][ T9282] 8021q: adding VLAN 0 to HW filter on device batadv2
[  131.397642][ T9282] bond5: (slave batadv2): making interface the new active one
[  131.401882][ T9282] bond5: (slave batadv2): Enslaving as an active interface with an up link
[  131.493255][ T9290] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  131.626674][ T9305] netlink: 'syz.2.878': attribute type 13 has an invalid length.
[  131.629283][ T9305] netlink: 'syz.2.878': attribute type 17 has an invalid length.
[  131.656072][ T9305] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  131.972286][ T9340] __nla_validate_parse: 33 callbacks suppressed
[  131.972302][ T9340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.890'.
[  131.983287][ T9340] netlink: 9 bytes leftover after parsing attributes in process `syz.2.890'.
[  132.089402][ T9344] lo speed is unknown, defaulting to 1000
[  132.238713][ T9344] netlink: 248 bytes leftover after parsing attributes in process `syz.2.891'.
[  132.377758][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.706924][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.892'.
[  133.010987][ T9364] netlink: 152 bytes leftover after parsing attributes in process `syz.0.895'.
[  133.483120][ T9396] lo speed is unknown, defaulting to 1000
[  133.763108][ T9401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.906'.
[  133.899171][ T9405] netlink: 27 bytes leftover after parsing attributes in process `syz.0.907'.
[  134.059640][ T9409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.908'.
[  134.486892][ T9423] bond6: entered promiscuous mode
[  134.489171][ T9423] bond6: entered allmulticast mode
[  134.491659][ T9423] 8021q: adding VLAN 0 to HW filter on device bond6
[  134.630954][ T9432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.915'.
[  134.693257][ T9434] lo speed is unknown, defaulting to 1000
[  134.742624][ T9435] xt_cgroup: invalid path, errno=-2
[  134.924755][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'.
[  134.928949][ T9444] netlink: 'syz.2.919': attribute type 18 has an invalid length.
[  134.932873][ T9445] netlink: 'syz.0.918': attribute type 11 has an invalid length.
[  134.936681][ T9446] netlink: 'syz.0.918': attribute type 11 has an invalid length.
[  135.259618][ T9459] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  135.341218][ T9464] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  135.352981][ T9464] bond5: (slave batadv2): Releasing active interface
[  135.367132][ T9464] netlink: 'syz.2.924': attribute type 10 has an invalid length.
[  135.370471][ T9464] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  135.377751][ T9464] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  135.451605][ T9466] tipc: Resetting bearer <eth:syzkaller0>
[  135.455027][ T9466] tipc: Resetting bearer <eth:syzkaller0>
[  135.721217][ T9481] openvswitch: netlink: IP tunnel dst address not specified
[  135.724099][ T9482] openvswitch: netlink: IP tunnel dst address not specified
[  136.097138][ T9510] IPVS: Error connecting to the multicast addr
[  136.143315][ T9512] netlink: 'syz.0.942': attribute type 4 has an invalid length.
[  136.248964][ T9522] x_tables: duplicate underflow at hook 2
[  136.689536][ T9551] lo speed is unknown, defaulting to 1000
[  136.852021][ T9564] pim6reg1: entered promiscuous mode
[  136.858109][ T9564] pim6reg1: entered allmulticast mode
[  137.222418][ T9576] __nla_validate_parse: 7 callbacks suppressed
[  137.222432][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'.
[  137.396602][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'.
[  137.399832][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.962'.
[  137.426072][ T9589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.963'.
[  137.429167][ T9589] netlink: 'syz.2.963': attribute type 7 has an invalid length.
[  137.431591][ T9589] netlink: 'syz.2.963': attribute type 8 has an invalid length.
[  137.436814][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'.
[  137.622801][ T9607] netlink: 'syz.2.968': attribute type 1 has an invalid length.
[  137.626537][ T9607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.968'.
[  137.631315][ T9608] netlink: 'syz.2.968': attribute type 5 has an invalid length.
[  137.963733][ T9630] netlink: 9 bytes leftover after parsing attributes in process `syz.2.975'.
[  137.967520][ T9630] 0: renamed from hsr_slave_1
[  137.971069][ T9630] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  138.045883][ T9634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.977'.
[  138.083644][ T9636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.978'.
[  138.093028][ T9636] netlink: 132 bytes leftover after parsing attributes in process `syz.2.978'.
[  139.189775][ T9693] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  139.267232][ T9693] batadv_slave_0: entered promiscuous mode
[  139.361401][ T9698] netlink: 'syz.2.990': attribute type 9 has an invalid length.
[  139.366324][ T9698] netlink: 'syz.2.990': attribute type 6 has an invalid length.
[  140.191277][ T9715] bridge0: Device is already in use.
[  140.358012][ T9718] batadv_slave_0: left promiscuous mode
[  140.371305][ T9718] tipc: Resetting bearer <eth:syzkaller0>
[  140.374643][ T9718] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  140.377740][ T9718] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  140.391801][ T9718] bridge2: left promiscuous mode
[  140.396037][ T9718] vlan2: left promiscuous mode
[  140.398117][ T9718] bridge0: left promiscuous mode
[  140.400492][ T9718] vlan2: left allmulticast mode
[  140.402532][ T9718] bridge0: left allmulticast mode
[  140.406019][ T9718] vlan3: left promiscuous mode
[  140.408179][ T9718] vlan3: left allmulticast mode
[  140.410141][ T9718] 0: left allmulticast mode
[  140.420616][ T9718] bond6: left promiscuous mode
[  140.422641][ T9718] bond6: left allmulticast mode
[  140.427616][ T5878] lo speed is unknown, defaulting to 1000
[  140.430041][ T5878] syz1: Port: 1 Link DOWN
[  140.695809][ T9742] netlink: 'syz.0.1003': attribute type 7 has an invalid length.
[  140.699089][ T9742] netlink: 'syz.0.1003': attribute type 8 has an invalid length.
[  140.732747][ T9744] ip6tnl3: entered promiscuous mode
[  140.735274][ T9744] ip6tnl3: entered allmulticast mode
[  140.787918][ T9747] lo speed is unknown, defaulting to 1000
[  141.116035][ T9758] syzkaller1: entered promiscuous mode
[  141.118510][ T9758] syzkaller1: entered allmulticast mode
[  141.403074][ T9766] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  142.202019][ T9775] xt_CT: No such helper "snmp"
[  142.220784][ T9775] lo speed is unknown, defaulting to 1000
[  142.585119][ T9780] __nla_validate_parse: 10 callbacks suppressed
[  142.585136][ T9780] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1013'.
[  142.668324][ T9780] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  142.823717][ T9787] lo speed is unknown, defaulting to 1000
[  142.854194][ T9791] netlink: 'syz.0.1015': attribute type 21 has an invalid length.
[  142.856754][ T9791] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1015'.
[  142.966228][ T9795] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  143.226423][ T9808] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1020'.
[  143.318866][ T9810] netlink: 'syz.2.1021': attribute type 1 has an invalid length.
[  143.363093][ T9814] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1022'.
[  143.411593][ T9816] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1023'.
[  143.447831][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'.
[  143.485100][   T32] smc: removing ib device syz0
[  143.540075][ T9819] xt_TCPMSS: Only works on TCP SYN packets
[  143.572770][ T5646] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.980288][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  143.985944][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  143.989861][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  143.997233][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  144.001807][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  144.526501][ T5646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.539393][ T9823] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.542936][ T9823] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.547340][ T9823] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.550765][ T9823] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.554731][ T9823] geneve2: entered promiscuous mode
[  144.673735][ T9824] lo speed is unknown, defaulting to 1000
[  144.767060][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'.
[  144.769922][ T9828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1026'.
[  144.798185][ T9830] netlink: 'syz.2.1027': attribute type 1 has an invalid length.
[  144.801061][ T9830] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1027'.
[  144.809654][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1027'.
[  144.837739][ T5646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.882907][ T9828] bridge9: entered promiscuous mode
[  144.900340][ T5646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.997846][ T9841] openvswitch: netlink: Multiple metadata blocks provided
[  145.057159][ T9824] chnl_net:caif_netlink_parms(): no params data found
[  145.072185][ T5646] bridge_slave_1: left allmulticast mode
[  145.077347][ T5646] bridge_slave_1: left promiscuous mode
[  145.079753][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.081998][ T9845] netlink: zone id is out of range
[  145.085315][ T9845] netlink: zone id is out of range
[  145.087474][ T9845] netlink: zone id is out of range
[  145.089521][ T9845] netlink: zone id is out of range
[  145.091541][ T9845] netlink: zone id is out of range
[  145.093627][ T9845] netlink: zone id is out of range
[  145.096585][ T9845] netlink: zone id is out of range
[  145.100997][ T9845] netlink: zone id is out of range
[  145.103214][ T9845] netlink: zone id is out of range
[  145.106275][ T5646] bridge_slave_0: left allmulticast mode
[  145.108193][ T5646] bridge_slave_0: left promiscuous mode
[  145.110218][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.419229][ T5646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.427311][ T5646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.432463][ T5646] bond0 (unregistering): Released all slaves
[  145.611585][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.617184][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.620280][ T9824] bridge_slave_0: entered allmulticast mode
[  145.624481][ T9824] bridge_slave_0: entered promiscuous mode
[  145.647122][ T9856] lo speed is unknown, defaulting to 1000
[  145.658333][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.661302][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.665117][ T9824] bridge_slave_1: entered allmulticast mode
[  145.669361][ T9824] bridge_slave_1: entered promiscuous mode
[  145.777135][ T9824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.792827][ T5646] hsr_slave_0: left promiscuous mode
[  145.807195][ T5646] hsr_slave_1: left promiscuous mode
[  145.810062][ T5646] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.813221][ T5646] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.819343][ T5646] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.822294][ T5646] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.842076][ T5646] veth1_macvtap: left promiscuous mode
[  145.848822][ T5646] veth0_macvtap: left promiscuous mode
[  145.852117][ T5646] veth1_vlan: left promiscuous mode
[  145.854804][ T5646] veth0_vlan: left promiscuous mode
[  146.056818][ T5822] Bluetooth: hci0: command tx timeout
[  146.243048][ T5646] team0 (unregistering): Port device team_slave_1 removed
[  146.279085][ T5646] team0 (unregistering): Port device team_slave_0 removed
[  146.620602][ T9824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.704258][ T9824] team0: Port device team_slave_0 added
[  146.709754][ T9824] team0: Port device team_slave_1 added
[  146.772718][ T9870] syzkaller1: entered promiscuous mode
[  146.775550][ T9870] syzkaller1: entered allmulticast mode
[  146.811483][ T9824] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.813692][ T9824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.823078][ T9824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.832582][ T9824] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.835322][ T9824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.844326][ T9824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.898068][ T9824] hsr_slave_0: entered promiscuous mode
[  146.901426][ T9824] hsr_slave_1: entered promiscuous mode
[  146.905407][ T9824] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.908050][ T9824] Cannot create hsr debugfs directory
[  146.963473][ T9877] pimreg: entered allmulticast mode
[  147.302372][ T9895] bridge10: port 1(ip6gretap1) entered blocking state
[  147.307585][ T9895] bridge10: port 1(ip6gretap1) entered disabled state
[  147.311056][ T9895] ip6gretap1: entered allmulticast mode
[  147.316341][ T9895] ip6gretap1: entered promiscuous mode
[  147.338835][ T9895] veth5: entered promiscuous mode
[  147.341268][ T9895] bridge10: port 2(veth5) entered blocking state
[  147.348254][ T9895] bridge10: port 2(veth5) entered disabled state
[  147.351249][ T9895] veth5: entered allmulticast mode
[  147.465330][ T9824] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  147.469172][ T9901] netlink: 'syz.2.1046': attribute type 29 has an invalid length.
[  147.470693][ T9824] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  147.488034][ T9824] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  147.526567][ T9824] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  147.608925][ T9917] __nla_validate_parse: 9 callbacks suppressed
[  147.608942][ T9917] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1049'.
[  147.723674][ T9824] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.750796][ T9824] 8021q: adding VLAN 0 to HW filter on device team0
[  147.759755][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.762029][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.779118][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.782073][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.790911][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'.
[  147.892049][ T9938] lo speed is unknown, defaulting to 1000
[  147.896375][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'.
[  147.951725][ T9824] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.049992][ T9824] veth0_vlan: entered promiscuous mode
[  148.069684][ T9824] veth1_vlan: entered promiscuous mode
[  148.105503][ T9824] veth0_macvtap: entered promiscuous mode
[  148.109305][ T9824] veth1_macvtap: entered promiscuous mode
[  148.119601][ T9824] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.128166][ T9824] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.133016][ T9824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.136962][ T9824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.139901][ T9824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.142554][ T9824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.198350][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.201378][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.223722][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.229265][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.321260][ T9952] lo speed is unknown, defaulting to 1000
[  148.602876][ T9956] veth0_macvtap: default FDB implementation only supports local addresses
[  148.805279][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'.
[  148.861163][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'.
[  148.885642][ T9969] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1063'.
[  148.953315][ T9977] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004
[  149.459554][ T9996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1068'.
[  149.742327][T10001] x_tables: duplicate underflow at hook 3
[  149.753753][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'.
[  149.758038][T10001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1069'.
[  149.762955][T10001] x_tables: duplicate underflow at hook 3
[  149.812944][T10006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1070'.
[  149.818001][T10006] netlink: 'syz.2.1070': attribute type 7 has an invalid length.
[  149.820692][T10006] netlink: 'syz.2.1070': attribute type 8 has an invalid length.
[  149.849768][T10008] tap0: tun_chr_ioctl cmd 1074025677
[  149.854947][T10008] tap0: linktype set to 769
[  150.069958][T10021] can: request_module (can-proto-0) failed.
[  150.080611][T10020] can: request_module (can-proto-0) failed.
[  150.144564][T10021] netlink: 'syz.2.1076': attribute type 1 has an invalid length.
[  150.197952][ T5843] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.826400][ T5822] Bluetooth: hci2: link tx timeout
[  150.829257][ T5822] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  150.876051][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  150.881498][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  150.886096][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.889926][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.897129][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  150.902126][T10040] netlink: 'syz.0.1079': attribute type 1 has an invalid length.
[  150.958546][T10038] lo speed is unknown, defaulting to 1000
[  151.134849][T10038] chnl_net:caif_netlink_parms(): no params data found
[  151.247173][T10038] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.250229][T10038] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.253249][T10038] bridge_slave_0: entered allmulticast mode
[  151.276347][T10038] bridge_slave_0: entered promiscuous mode
[  151.282398][T10038] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.286895][T10038] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.289250][T10038] bridge_slave_1: entered allmulticast mode
[  151.292930][T10038] bridge_slave_1: entered promiscuous mode
[  151.329699][T10038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.348177][T10038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.378279][T10055] netlink: 'syz.0.1082': attribute type 3 has an invalid length.
[  151.408954][T10038] team0: Port device team_slave_0 added
[  151.421585][T10038] team0: Port device team_slave_1 added
[  151.485318][T10038] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.488116][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.506231][T10038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.605747][T10038] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.608002][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.635444][T10038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.657966][ T5843] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.725742][T10038] hsr_slave_0: entered promiscuous mode
[  151.732073][T10038] hsr_slave_1: entered promiscuous mode
[  151.744699][T10038] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.749014][T10038] Cannot create hsr debugfs directory
[  151.777995][ T5843] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.848179][ T5843] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.086406][ T5843] bridge_slave_1: left allmulticast mode
[  152.088465][ T5843] bridge_slave_1: left promiscuous mode
[  152.090770][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.107564][ T5843] bridge_slave_0: left allmulticast mode
[  152.109416][ T5843] bridge_slave_0: left promiscuous mode
[  152.114931][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.172421][T10062] netlink: 'syz.0.1083': attribute type 16 has an invalid length.
[  152.177131][T10062] netlink: 'syz.0.1083': attribute type 17 has an invalid length.
[  152.321511][T10067] net_ratelimit: 12 callbacks suppressed
[  152.321519][T10067] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  152.406715][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.411587][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.417220][ T5843] bond0 (unregistering): Released all slaves
[  152.510056][T10062] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.512891][T10062] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.516665][T10062] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.519519][T10062] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.528495][T10066] netlink: 'syz.2.1084': attribute type 3 has an invalid length.
[  152.768263][T10076] __nla_validate_parse: 4 callbacks suppressed
[  152.768277][T10076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1086'.
[  152.787831][ T5843] hsr_slave_0: left promiscuous mode
[  152.791965][ T5843] hsr_slave_1: left promiscuous mode
[  152.795230][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.799309][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.803353][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.813936][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.839063][ T5843] veth1_macvtap: left promiscuous mode
[  152.840858][ T5843] veth0_macvtap: left promiscuous mode
[  152.842652][ T5843] veth1_vlan: left promiscuous mode
[  152.849242][ T5843] veth0_vlan: left promiscuous mode
[  152.864348][ T5822] Bluetooth: hci2: command 0x0405 tx timeout
[  152.888627][T10084] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1089'.
[  152.944127][ T5822] Bluetooth: hci0: command tx timeout
[  153.065928][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1095'.
[  153.075441][T10102] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1095'.
[  153.262427][ T5843] team0 (unregistering): Port device team_slave_1 removed
[  153.288170][ T5843] team0 (unregistering): Port device team_slave_0 removed
[  153.656270][T10038] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  153.672243][T10038] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  153.696160][T10038] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  153.708917][T10038] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  153.738710][T10116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.750005][T10116] syzkaller0: entered promiscuous mode
[  153.752233][T10116] syzkaller0: entered allmulticast mode
[  153.755190][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'.
[  153.788169][T10116] tipc: Resetting bearer <eth:syzkaller0>
[  153.816482][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1098'.
[  153.822994][T10115] tipc: Resetting bearer <eth:syzkaller0>
[  153.841829][T10115] tipc: Disabling bearer <eth:syzkaller0>
[  153.883322][T10038] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.913381][T10038] 8021q: adding VLAN 0 to HW filter on device team0
[  153.921017][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.923469][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.945905][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.948567][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.011823][T10140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.020754][T10142] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  154.073033][T10147] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1104'.
[  154.083764][T10038] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.135182][T10038] veth0_vlan: entered promiscuous mode
[  154.165262][T10038] veth1_vlan: entered promiscuous mode
[  154.199886][T10038] veth0_macvtap: entered promiscuous mode
[  154.218279][T10038] veth1_macvtap: entered promiscuous mode
[  154.240467][T10038] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.250598][T10038] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.257189][T10038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.260488][T10038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.267449][T10038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.270317][T10038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.367297][ T8422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.370102][ T8422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.396862][ T8410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.400111][ T8410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.415958][T10160] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1107'.
[  154.422220][T10160] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1107'.
[  154.553325][T10166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1109'.
[  154.558927][T10166] netlink: 'syz.0.1109': attribute type 7 has an invalid length.
[  154.561483][T10166] netlink: 'syz.0.1109': attribute type 8 has an invalid length.
[  154.682311][T10172] sctp: [Deprecated]: syz.0.1112 (pid 10172) Use of struct sctp_assoc_value in delayed_ack socket option.
[  154.682311][T10172] Use struct sctp_sack_info instead
[  154.879031][T10185] 8021q: VLANs not supported on bond0
[  154.994565][T10190] lo speed is unknown, defaulting to 1000
[  155.705353][T10210] netlink: 'syz.2.1124': attribute type 10 has an invalid length.
[  155.708610][T10210] !: entered promiscuous mode
[  155.710636][T10210] !: entered allmulticast mode
[  155.713576][T10210] bridge0: port 1(0!) entered blocking state
[  155.718538][T10210] bridge0: port 1(0!) entered disabled state
[  155.936750][ T5844] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.646587][T10221] 0 (unregistering): left promiscuous mode
[  156.779733][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  156.783537][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  156.788641][T10237] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  156.792346][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  156.796643][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  156.800115][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  156.834533][T10234] lo speed is unknown, defaulting to 1000
[  156.847860][T10239] netlink: 'syz.2.1131': attribute type 1 has an invalid length.
[  156.896823][T10239] 8021q: adding VLAN 0 to HW filter on device bond8
[  156.902033][T10239] bond7: (slave bond8): making interface the new active one
[  156.908969][T10239] bond7: (slave bond8): Enslaving as an active interface with an up link
[  156.925265][T10239] 8021q: adding VLAN 0 to HW filter on device bond7
[  156.983053][T10246] ip6gretap1: left allmulticast mode
[  156.985623][T10246] ip6gretap1: left promiscuous mode
[  156.987930][T10246] bridge10: port 1(ip6gretap1) entered disabled state
[  156.996143][T10246] veth5: left allmulticast mode
[  156.998347][T10246] bridge10: port 2(veth5) entered disabled state
[  157.006077][T10246] netlink: 'syz.0.1133': attribute type 10 has an invalid length.
[  157.024256][T10246] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  157.029333][T10246] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  157.051604][T10234] chnl_net:caif_netlink_parms(): no params data found
[  157.114236][T10258] ieee802154 phy1 wpan1: encryption failed: -22
[  157.141740][T10234] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.147480][T10234] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.150397][T10234] bridge_slave_0: entered allmulticast mode
[  157.153232][T10234] bridge_slave_0: entered promiscuous mode
[  157.161179][T10234] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.163586][T10234] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.169088][T10234] bridge_slave_1: entered allmulticast mode
[  157.172218][T10234] bridge_slave_1: entered promiscuous mode
[  157.205632][T10234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.210438][T10234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.233120][T10270] netlink: 'syz.2.1139': attribute type 26 has an invalid length.
[  157.244544][T10234] team0: Port device team_slave_0 added
[  157.257603][T10234] team0: Port device team_slave_1 added
[  157.276426][T10234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.278711][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.294136][T10234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.305636][T10234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.308087][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.320567][T10234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.342911][T10274] SET target dimension over the limit!
[  157.388372][T10234] hsr_slave_0: entered promiscuous mode
[  157.392844][T10234] hsr_slave_1: entered promiscuous mode
[  157.402847][T10234] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.418605][T10234] Cannot create hsr debugfs directory
[  157.440634][ T5844] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.915376][ T5844] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.955255][ T5844] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.005468][T10296] veth0: entered promiscuous mode
[  158.008001][T10296] __nla_validate_parse: 19 callbacks suppressed
[  158.008012][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'.
[  158.020840][T10296] veth0 (unregistering): left promiscuous mode
[  158.082666][ T5844] bridge_slave_1: left allmulticast mode
[  158.092578][ T5844] bridge_slave_1: left promiscuous mode
[  158.100407][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.105362][ T5844] bridge_slave_0: left allmulticast mode
[  158.107206][ T5844] bridge_slave_0: left promiscuous mode
[  158.110201][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.353258][ T5844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.358390][ T5844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.362137][ T5844] bond0 (unregistering): Released all slaves
[  158.412403][T10300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'.
[  158.512913][T10305] netlink: 'syz.0.1151': attribute type 1 has an invalid length.
[  158.516620][T10308] netlink: 'syz.0.1151': attribute type 1 has an invalid length.
[  158.556085][T10308] 8021q: adding VLAN 0 to HW filter on device bond4
[  158.586505][T10305] 8021q: adding VLAN 0 to HW filter on device bond4
[  158.589021][T10305] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  158.599389][T10305] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  158.650529][T10308] gretap1: entered promiscuous mode
[  158.655941][T10308] bond4: (slave gretap1): making interface the new active one
[  158.659502][T10308] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  158.671212][T10317] macvlan0: entered promiscuous mode
[  158.673411][T10317] macvlan0: entered allmulticast mode
[  158.676694][T10317] bond4: entered promiscuous mode
[  158.680385][T10317] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  158.686283][T10317] bond4: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  158.694665][T10317] bond4: left promiscuous mode
[  158.712866][T10308] macvlan0: entered promiscuous mode
[  158.716075][T10308] macvlan0: entered allmulticast mode
[  158.718572][T10308] bond4: entered promiscuous mode
[  158.720701][T10308] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  158.725436][T10308] bond4: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  158.732102][T10308] bond4: left promiscuous mode
[  158.786165][ T5844] hsr_slave_0: left promiscuous mode
[  158.793200][ T5844] hsr_slave_1: left promiscuous mode
[  158.796598][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.799930][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.808763][T10317] syz.0.1151 (10317) used greatest stack depth: 19544 bytes left
[  158.812161][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.824235][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.842469][ T5844] veth1_macvtap: left promiscuous mode
[  158.846830][ T5844] veth0_macvtap: left promiscuous mode
[  158.849871][ T5844] veth1_vlan: left promiscuous mode
[  158.854314][ T5824] Bluetooth: hci0: command tx timeout
[  158.854565][ T5844] veth0_vlan: left promiscuous mode
[  159.275352][ T5844] team0 (unregistering): Port device team_slave_1 removed
[  159.306832][ T5844] team0 (unregistering): Port device team_slave_0 removed
[  159.598188][T10320] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (39785) !
[  159.672852][T10319] lo speed is unknown, defaulting to 1000
[  159.737586][T10234] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  159.763965][T10234] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  159.770835][T10234] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  159.785836][T10234] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  159.830884][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'.
[  159.873352][T10234] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.902991][T10234] 8021q: adding VLAN 0 to HW filter on device team0
[  159.918313][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.921341][ T8410] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.933238][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.936271][ T8410] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.988106][T10356] : entered promiscuous mode
[  160.052353][T10361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1161'.
[  160.082211][T10361] veth1: entered promiscuous mode
[  160.084951][T10361] bridge12: port 1(veth1) entered blocking state
[  160.087642][T10361] bridge12: port 1(veth1) entered disabled state
[  160.091015][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'.
[  160.094294][T10361] veth1: entered allmulticast mode
[  160.213359][T10234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.242667][T10234] veth0_vlan: entered promiscuous mode
[  160.248988][T10234] veth1_vlan: entered promiscuous mode
[  160.265569][T10234] veth0_macvtap: entered promiscuous mode
[  160.269393][T10234] veth1_macvtap: entered promiscuous mode
[  160.277392][T10234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.284487][T10234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.289656][T10234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.292492][T10234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.295693][T10234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.298529][T10234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.341928][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.344627][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.368885][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.371936][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.085644][T10379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1165'.
[  161.089397][T10379] netlink: 'syz.0.1165': attribute type 7 has an invalid length.
[  161.092698][T10379] netlink: 'syz.0.1165': attribute type 8 has an invalid length.
[  161.099137][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'.
[  161.158566][T10381] netlink: 'syz.0.1166': attribute type 1 has an invalid length.
[  161.161800][T10381] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1166'.
[  161.330427][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'.
[  161.339531][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[  161.591589][T10408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.597530][T10408] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  161.600749][T10408] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  161.612635][T10408] tipc: Resetting bearer <eth:syzkaller0>
[  161.810518][T10420] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  161.979989][T10425] bridge13: entered promiscuous mode
[  161.982301][T10425] bridge13: entered allmulticast mode
[  162.093129][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.594065][ T5878] tipc: Node number set to 1166487744
[  162.856243][T10436] netlink: 'syz.2.1182': attribute type 7 has an invalid length.
[  162.874352][T10436] netlink: 'syz.2.1182': attribute type 8 has an invalid length.
[  163.042904][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  163.048536][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  163.052218][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  163.057409][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  163.060273][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  163.108289][T10445] lo speed is unknown, defaulting to 1000
[  163.150774][T10459] __nla_validate_parse: 3 callbacks suppressed
[  163.150784][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1187'.
[  163.173366][T10459] lo speed is unknown, defaulting to 1000
[  163.286049][T10470] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1189'.
[  163.290162][T10470] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.293516][T10470] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.310395][T10470] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.314217][T10470] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.338988][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.348861][T10470] geneve0: entered promiscuous mode
[  163.359760][T10445] chnl_net:caif_netlink_parms(): no params data found
[  163.457930][T10469] geneve0: left promiscuous mode
[  163.460997][T10445] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.468801][T10445] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.471582][T10445] bridge_slave_0: entered allmulticast mode
[  163.486809][T10445] bridge_slave_0: entered promiscuous mode
[  163.491117][T10445] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.498080][T10445] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.501251][T10445] bridge_slave_1: entered allmulticast mode
[  163.507997][T10445] bridge_slave_1: entered promiscuous mode
[  163.510981][T10479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1190'.
[  163.523992][T10479] netlink: 'syz.0.1190': attribute type 7 has an invalid length.
[  163.527249][T10479] netlink: 'syz.0.1190': attribute type 8 has an invalid length.
[  163.530440][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'.
[  163.559735][T10445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.566755][T10445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.596869][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.621025][T10445] team0: Port device team_slave_0 added
[  163.630833][T10445] team0: Port device team_slave_1 added
[  163.678154][T10445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.681060][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.693776][T10445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.727602][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.744062][T10445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.756228][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.759230][T10495] xt_policy: too many policy elements
[  163.773992][T10496] xt_policy: too many policy elements
[  163.776870][T10445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.842343][T10445] hsr_slave_0: entered promiscuous mode
[  163.846782][T10445] hsr_slave_1: entered promiscuous mode
[  163.849272][T10445] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.852388][T10445] Cannot create hsr debugfs directory
[  163.891550][T10500] netlink: 'syz.0.1195': attribute type 1 has an invalid length.
[  163.895873][T10500] netlink: 'syz.0.1195': attribute type 3 has an invalid length.
[  163.899269][T10500] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1195'.
[  164.031369][   T12] bridge_slave_1: left allmulticast mode
[  164.033753][   T12] bridge_slave_1: left promiscuous mode
[  164.036382][T10505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1197'.
[  164.036407][T10505] netlink: 'syz.2.1197': attribute type 7 has an invalid length.
[  164.040340][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.042761][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'.
[  164.052729][   T12] bridge_slave_0: left allmulticast mode
[  164.056216][   T12] bridge_slave_0: left promiscuous mode
[  164.060382][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.363153][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.369971][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.375511][   T12] bond0 (unregistering): Released all slaves
[  164.662641][   T12] hsr_slave_0: left promiscuous mode
[  164.675480][   T12] hsr_slave_1: left promiscuous mode
[  164.678505][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.682216][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.689969][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.693206][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.719704][   T12] veth1_macvtap: left promiscuous mode
[  164.722149][   T12] veth0_macvtap: left promiscuous mode
[  164.726590][   T12] veth1_vlan: left promiscuous mode
[  164.729312][   T12] veth0_vlan: left promiscuous mode
[  165.096355][ T5822] Bluetooth: hci0: command tx timeout
[  165.133544][   T12] team0 (unregistering): Port device team_slave_1 removed
[  165.171266][   T12] team0 (unregistering): Port device team_slave_0 removed
[  165.519953][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1205'.
[  165.523778][T10527] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1205'.
[  165.587747][T10529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1206'.
[  165.703364][T10445] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  165.720478][T10445] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  165.726789][T10445] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  165.739298][T10445] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  165.864578][T10445] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.901495][T10445] 8021q: adding VLAN 0 to HW filter on device team0
[  165.926584][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.929760][ T8410] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.953299][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.956564][ T8410] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.036889][T10445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  166.065057][T10567] lo speed is unknown, defaulting to 1000
[  166.212258][T10445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.361524][T10445] veth0_vlan: entered promiscuous mode
[  166.381223][T10445] veth1_vlan: entered promiscuous mode
[  166.406578][T10445] veth0_macvtap: entered promiscuous mode
[  166.412930][T10445] veth1_macvtap: entered promiscuous mode
[  166.433509][T10445] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.443063][T10445] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.463361][T10445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.471614][T10445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.476505][T10445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.480456][T10445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.541028][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.553352][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.563761][T10587] can: request_module (can-proto-3) failed.
[  166.576365][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.579687][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.949753][T10593] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  167.010961][T10598] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  167.018274][T10598] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  167.175226][ T5824] Bluetooth: hci0: command tx timeout
[  167.422269][T10619] netlink: ct family unspecified
[  167.428175][T10619] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.610368][T10623] xt_CT: You must specify a L4 protocol and not use inversions on it
[  168.519058][T10635] xt_cluster: node mask cannot exceed total number of nodes
[  168.733352][T10640] __nla_validate_parse: 17 callbacks suppressed
[  168.733370][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'.
[  168.795346][T10643] set match dimension is over the limit!
[  168.929295][T10645] GUP no longer grows the stack in syz.0.1236 (10645): 200000006000-20000000a000 (200000005000)
[  168.935864][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.0.1236 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  168.935885][T10645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.935895][T10645] Call Trace:
[  168.935900][T10645]  <TASK>
[  168.935907][T10645]  dump_stack_lvl+0x189/0x250
[  168.935945][T10645]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.935966][T10645]  ? __pfx__printk+0x10/0x10
[  168.935980][T10645]  ? find_vma+0xe7/0x160
[  168.936003][T10645]  __get_user_pages+0x2a60/0x30b0
[  168.936049][T10645]  ? __pfx___get_user_pages+0x10/0x10
[  168.936067][T10645]  ? __gup_longterm_locked+0xbf7/0x15b0
[  168.936085][T10645]  ? down_read_killable+0x1d1/0x350
[  168.936100][T10645]  ? try_get_folio+0x633/0x660
[  168.936115][T10645]  __gup_longterm_locked+0xd66/0x15b0
[  168.936139][T10645]  ? try_grab_folio_fast+0x1be/0x4f0
[  168.936166][T10645]  ? gup_fast_fallback+0x1afc/0x2260
[  168.936187][T10645]  gup_fast_fallback+0x1cd4/0x2260
[  168.936231][T10645]  ? __pfx_gup_fast_fallback+0x10/0x10
[  168.936247][T10645]  ? trace_contention_end+0x39/0x120
[  168.936261][T10645]  ? __mutex_lock+0x330/0xe80
[  168.936284][T10645]  ? is_valid_gup_args+0x11f/0x200
[  168.936303][T10645]  ? get_user_pages_fast+0x4d/0xb0
[  168.936323][T10645]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  168.936341][T10645]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  168.936356][T10645]  ? wait_for_space+0x24d/0x2d0
[  168.936371][T10645]  iov_iter_get_pages2+0x5e/0xa0
[  168.936393][T10645]  __se_sys_vmsplice+0x548/0x10d0
[  168.936421][T10645]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  168.936435][T10645]  ? __pfx_futex_wait+0x10/0x10
[  168.936463][T10645]  ? __lock_acquire+0xab9/0xd20
[  168.936507][T10645]  ? do_pipe2+0xf7/0x170
[  168.936523][T10645]  ? rcu_is_watching+0x15/0xb0
[  168.936546][T10645]  ? do_syscall_64+0xbe/0x3b0
[  168.936560][T10645]  do_syscall_64+0xfa/0x3b0
[  168.936570][T10645]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.936587][T10645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.936599][T10645]  ? exc_page_fault+0x9f/0xf0
[  168.936646][T10645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.936660][T10645] RIP: 0033:0x7fea8cf8e929
[  168.936673][T10645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.936685][T10645] RSP: 002b:00007fea8de30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  168.936700][T10645] RAX: ffffffffffffffda RBX: 00007fea8d1b5fa0 RCX: 00007fea8cf8e929
[  168.936710][T10645] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b
[  168.936719][T10645] RBP: 00007fea8d010b39 R08: 0000000000000000 R09: 0000000000000000
[  168.936727][T10645] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  168.936735][T10645] R13: 0000000000000000 R14: 00007fea8d1b5fa0 R15: 00007ffe5ddebec8
[  168.936759][T10645]  </TASK>
[  168.939804][T10645] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  169.134872][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'.
[  169.324654][T10665] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.368740][T10668] openvswitch: netlink: Actions may not be safe on all matching packets
[  169.412901][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'.
[  169.415212][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'.
[  169.550951][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'.
[  170.442830][T10703] validate_nla: 3 callbacks suppressed
[  170.442842][T10703] netlink: 'syz.2.1252': attribute type 1 has an invalid length.
[  170.872515][T10724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1260'.
[  171.611820][T10757] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1269'.
[  171.631370][T10757] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  171.639060][T10757] bond0 (unregistering): Released all slaves
[  171.970908][T10770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1272'.
[  172.122435][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'.
[  172.169935][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1274'.
[  172.324854][T10787] sctp: [Deprecated]: syz.0.1276 (pid 10787) Use of struct sctp_assoc_value in delayed_ack socket option.
[  172.324854][T10787] Use struct sctp_sack_info instead
[  172.348924][T10791] lo speed is unknown, defaulting to 1000
[  172.698763][   T33] audit: type=1800 audit(1751894435.498:2): pid=10802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1280" name="memory.events" dev="tmpfs" ino=2833 res=0 errno=0
[  172.956887][T10812] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  173.238389][T10832] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.241975][T10832] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.248905][T10832] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.252441][T10832] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.256637][T10832] geneve1: entered allmulticast mode
[  173.270387][T10831] lo speed is unknown, defaulting to 1000
[  173.468599][T10842] openvswitch: netlink: IP tunnel dst address not specified
[  173.832170][T10863] __nla_validate_parse: 8 callbacks suppressed
[  173.832250][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'.
[  173.839970][T10863] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1299'.
[  173.979786][T10869] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.983417][T10870] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  173.987163][T10870] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  173.990789][T10870] tipc: Resetting bearer <eth:syzkaller0>
[  174.490455][T10883] netlink: 'syz.0.1306': attribute type 83 has an invalid length.
[  174.493939][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'.
[  174.497169][T10883] hsr_slave_0: left promiscuous mode
[  174.499685][T10883] hsr_slave_1: left promiscuous mode
[  174.560442][T10886] lo speed is unknown, defaulting to 1000
[  174.657696][T10890] netlink: 'syz.0.1307': attribute type 11 has an invalid length.
[  174.717574][T10892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1308'.
[  174.720508][T10892] netlink: 'syz.0.1308': attribute type 7 has an invalid length.
[  174.723013][T10892] netlink: 'syz.0.1308': attribute type 8 has an invalid length.
[  174.725979][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1308'.
[  174.768452][T10894] netlink: 'syz.0.1309': attribute type 11 has an invalid length.
[  174.854990][T10899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1310'.
[  175.159042][T10919] netlink: 'syz.2.1316': attribute type 13 has an invalid length.
[  175.162015][T10919] netlink: 'syz.2.1316': attribute type 17 has an invalid length.
[  175.176836][T10919] 8021q: adding VLAN 0 to HW filter on device team0
[  175.180314][T10919] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  175.186398][ T5878] lo speed is unknown, defaulting to 1000
[  175.193901][ T5878] syz1: Port: 1 Link ACTIVE
[  175.516134][T10937] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  175.611662][T10942] lo speed is unknown, defaulting to 1000
[  176.292638][T10967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1330'.
[  176.298991][T10967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1330'.
[  176.346855][T10969] netlink: 'syz.2.1331': attribute type 1 has an invalid length.
[  176.364429][T10969] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.384813][T10972] vlan0: entered allmulticast mode
[  176.461861][T10976] x_tables: duplicate underflow at hook 1
[  176.656488][T10985] netlink: 'syz.0.1336': attribute type 5 has an invalid length.
[  176.761043][T10993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1337'.
[  176.764988][T10990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1337'.
[  177.243250][T10997] netlink: 'syz.2.1339': attribute type 7 has an invalid length.
[  177.248485][T10997] netlink: 'syz.2.1339': attribute type 8 has an invalid length.
[  177.613965][T11013] block nbd1: server does not support multiple connections per device.
[  177.623776][T11013] block nbd1: shutting down sockets
[  178.182584][T11040] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[  178.388764][T11055] xt_time: unknown flags 0x4
[  178.391028][T11054] netlink: 'syz.0.1358': attribute type 10 has an invalid length.
[  178.947179][T11061] vxcan2: entered promiscuous mode
[  179.469392][T11072] __nla_validate_parse: 4 callbacks suppressed
[  179.469410][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'.
[  179.661000][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1364'.
[  179.664430][T11079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1364'.
[  179.667573][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'.
[  179.671261][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1364'.
[  179.790257][T11084] netlink: 'syz.2.1366': attribute type 1 has an invalid length.
[  179.793230][T11084] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1366'.
[  179.799044][T11084] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.893433][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1367'.
[  180.080409][T11112] lo speed is unknown, defaulting to 1000
[  180.198030][T11112] netlink: 'syz.2.1371': attribute type 4 has an invalid length.
[  180.501254][T11138] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1379'.
[  180.505587][T11138] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  180.534324][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  180.549122][T11140] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1380'.
[  180.553062][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'.
[  181.863757][T11176] xt_hashlimit: overflow, try lower: 6/0
[  193.816742][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  206.627508][T10445] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  206.632438][T10445] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  206.636765][T10445] CPU: 1 UID: 0 PID: 10445 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  206.642034][T10445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  206.646367][T10445] RIP: 0010:klist_remove+0x14a/0x340
[  206.648680][T10445] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 e9 c6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a e9 c6 f6 49 8b 44 24 58 48 89 44 24 08
[  206.656561][T10445] RSP: 0018:ffffc9000265f840 EFLAGS: 00010202
[  206.659156][T10445] RAX: 000000000000000b RBX: ffff8880330b5640 RCX: 0000000000000000
[  206.662480][T10445] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  206.665730][T10445] RBP: ffffc9000265f928 R08: ffffffff8f879603 R09: 1ffffffff1f0f2c0
[  206.668959][T10445] R10: dffffc0000000000 R11: fffffbfff1f0f2c1 R12: 0000000000000000
[  206.672171][T10445] R13: 1ffff11004757d0c R14: ffff888023abe860 R15: dffffc0000000000
[  206.675379][T10445] FS:  000055556bad6500(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  206.679030][T10445] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  206.681806][T10445] CR2: 000055e52f526e08 CR3: 0000000113014000 CR4: 00000000000006f0
[  206.685101][T10445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  206.688442][T10445] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  206.691697][T10445] Call Trace:
[  206.693175][T10445]  <TASK>
[  206.694453][T10445]  ? __pfx_klist_remove+0x10/0x10
[  206.696549][T10445]  ? __pfx_kobject_move+0x10/0x10
[  206.698697][T10445]  ? get_device_parent+0x366/0x3a0
[  206.700913][T10445]  device_move+0x193/0x700
[  206.702860][T10445]  hci_conn_del_sysfs+0xb8/0x170
[  206.705012][T10445]  hci_conn_del+0x8ff/0xcb0
[  206.706992][T10445]  hci_conn_hash_flush+0x191/0x230
[  206.709194][T10445]  hci_dev_close_sync+0xaef/0x1330
[  206.711427][T10445]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  206.713753][T10445]  ? up_write+0x1c4/0x420
[  206.715596][T10445]  hci_unregister_dev+0x21a/0x510
[  206.717802][T10445]  vhci_release+0x80/0xd0
[  206.719694][T10445]  ? __pfx_vhci_release+0x10/0x10
[  206.721871][T10445]  __fput+0x44c/0xa70
[  206.723602][T10445]  task_work_run+0x1d4/0x260
[  206.725495][T10445]  ? __pfx_task_work_run+0x10/0x10
[  206.727582][T10445]  ? kmem_cache_free+0x18f/0x400
[  206.729662][T10445]  do_exit+0x6b5/0x22e0
[  206.731382][T10445]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  206.733614][T10445]  ? __pfx_do_exit+0x10/0x10
[  206.735544][T10445]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.737652][T10445]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.739821][T10445]  do_group_exit+0x21c/0x2d0
[  206.741834][T10445]  __x64_sys_exit_group+0x3f/0x40
[  206.743933][T10445]  x64_sys_call+0x21ba/0x21c0
[  206.745872][T10445]  do_syscall_64+0xfa/0x3b0
[  206.747714][T10445]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.749944][T10445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.752556][T10445]  ? exc_page_fault+0x9f/0xf0
[  206.754587][T10445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.757005][T10445] RIP: 0033:0x7f8a9858e929
[  206.758826][T10445] Code: Unable to access opcode bytes at 0x7f8a9858e8ff.
[  206.761657][T10445] RSP: 002b:00007ffe686b19a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  206.765041][T10445] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8a9858e929
[  206.768383][T10445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  206.771710][T10445] RBP: 00007f8a985ee8f0 R08: 00007ffe686af747 R09: 0000000000000003
[  206.775049][T10445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.778374][T10445] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffe686b1b60
[  206.781711][T10445]  </TASK>
[  206.783064][T10445] Modules linked in:
[  206.785638][T10445] ---[ end trace 0000000000000000 ]---
[  206.788415][T10445] RIP: 0010:klist_remove+0x14a/0x340
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  206.790340][T10445] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 e9 c6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a e9 c6 f6 49 8b 44 24 58 48 89 44 24 08
[  206.797176][T10445] RSP: 0018:ffffc9000265f840 EFLAGS: 00010202
[  206.799492][T10445] RAX: 000000000000000b RBX: ffff8880330b5640 RCX: 0000000000000000
[  206.802307][T10445] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  206.806752][T10445] RBP: ffffc9000265f928 R08: ffffffff8f879603 R09: 1ffffffff1f0f2c0
[  206.810098][T10445] R10: dffffc0000000000 R11: fffffbfff1f0f2c1 R12: 0000000000000000
[  206.813495][T10445] R13: 1ffff11004757d0c R14: ffff888023abe860 R15: dffffc0000000000
[  206.817065][T10445] FS:  000055556bad6500(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  206.820717][T10445] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  206.823386][T10445] CR2: 000055e52f517ec0 CR3: 000000000df38000 CR4: 00000000000006f0
[  206.829043][T10445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  206.832192][T10445] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  206.834949][T10445] Kernel panic - not syncing: Fatal exception
[  206.837686][T10445] Kernel Offset: disabled
[  206.839160][T10445] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:21:09  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4d920 RBX=ffff88804b03b1c0 RCX=ffff888109bfd640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002d9f6c0 RSP=ffffc90002d9f560
R8 =ffffffff8fa10cf7 R9 =1ffffffff1f4219e R10=dffffc0000000000 R11=fffffbfff1f4219f
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81b4d909 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fad0ae94c80 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fad0abf3870 CR3=000000010fbb6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=302d78742f736575 6575712f3070656e XMM03=ffffff00ffffffff ffffffffffffffff
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000179 0000000031323038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=696b66722f343379 68702f3131323038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000265f070
R8 =ffff888107b28237 R9 =1ffff11020f65046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac490f R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556bad6500 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e52f526e08 CR3=0000000113014000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000003a07ea0f 0000000000000000 XMM01=000000376270616c 00005622af7fb5d8
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff0000000000ff ffffff0000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
