last executing test programs:

1.840322341s ago: executing program 0 (id=3001):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x5e, 0x101, 0x0, 0xffffffff, "", [@typed={0xc, 0x10, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40080)

1.777761471s ago: executing program 0 (id=3003):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x9e}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x40, r1, 0x830, 0xffffffff, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}}, 0x0)

1.777326553s ago: executing program 0 (id=3004):
r0 = socket$netlink(0x10, 0x3, 0x12)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdb1a766392cf3ce1dedf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000fc4c555f2f42e7a045e903e57d13877c496b2e0a569388471663287cc9d595ba3aa6269f569be2e5c3bd44e9ca4d1cc1a7375c31b26acd15fa092983f2b4968fc9955ea3b1fdb4d5329d2d000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x202)
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
write$cgroup_int(r7, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0xf36b, 0x6, 0x8000, 0x6, 0x0, 0x1}, 0x1c)
mmap(&(0x7f00002c6000/0x4000)=nil, 0x4000, 0x2, 0x110, 0xffffffffffffffff, 0x0)
r8 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000004c0)={0x3, 0x20a, 0x0, 0x6898, <r9=>0x0}, &(0x7f0000000880)=0x10)
bpf$ITER_CREATE(0x21, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000a40)=ANY=[@ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae6810ec259f0bfba1973a8b12f4d11dabc1360ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643e410ddbbfe8148fd2aa4a46e3e10213183112f97bb1b30a99b250389e8521f3e7c634923eb202b35834e1ee935c200d7140066bac96fad1591ed9a628a164ae2760f51b981fc1829feb7d3ead8bdd9ce3b5d5deee864e3b6b82d", @ANYRES8=r9, @ANYBLOB="dfe9aaaaaaaaaaaaaa8000000000000000000000000000aaff000108000000000000000000000000005eba0000000000000000", @ANYRES32=0x41424344], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

849.289394ms ago: executing program 0 (id=3014):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a010200000000000000000200000009f5010073797a30000000000c0002400000000000000001"], 0x80}}, 0x0)

768.428944ms ago: executing program 2 (id=3015):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c002c7ef1cc9b1d6523c5729693ac0c75404d9f7dd9ee3867062db34d8c3a5d865649a03557946b52d14189b8ccda73953a78c7c0385b6c4488a1782ad804000000000000000030b34eb4dd11e6ee31f9136a4ea942f67fe0d4ddda4a2b98ce982703e6009802af0c0e3baca415", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf254c0000000c00a70040000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a600ff00000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x40080) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="1c005e800800020001000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r7=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r4, 0x200, 0x2, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5d8, 0x3d}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6d71, 0x30}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, 'vk6m>'}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3c299bcceb976a7dea97a3ca97"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f0e3f6a232a48fe5c57aea17ac"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c512ec5a9d"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

767.026307ms ago: executing program 0 (id=3016):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) (async)
shutdown(r0, 0x1) (async)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r2, 0x8}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000180)='cpuacct.stat\x00', 0x275a, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000064000003620000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfd3, &(0x7f0000000800)=""/4051, 0x100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x40080)

766.606448ms ago: executing program 0 (id=3018):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000180)=0x2, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
nanosleep(0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000004000008040000000600474ddbc70000000000613b6ab2d056639600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r4}, 0x20)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000240)={0x20000000})
r6 = socket(0x1, 0x80802, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000001})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000600000000060015"], 0x38}}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c25000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10)
epoll_pwait(r7, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
shutdown(r6, 0x0)
close(r5)
unshare(0x68040200)
socket$inet(0x2, 0x3, 0x33)

639.358952ms ago: executing program 1 (id=3019):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0}) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r4)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) (async, rerun: 64)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) (async, rerun: 64)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000180), &(0x7f0000000240)=0x4) (async)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x61}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) (async)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x40080)

579.96223ms ago: executing program 1 (id=3020):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c600020c00018008000185a51f825f8475df00000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x4000000)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@private1}, &(0x7f0000000080)=0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async, rerun: 32)
r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x8fdff, {0x0, 0x0, 0x0, r7, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x34}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) (async, rerun: 64)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000013000100020000000000000007000000", @ANYRES32=r11, @ANYBLOB="800d0100000000000c001a800800048004000980"], 0x2c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x8, 0x20, 0xfffffff3, 0x9b, {{0x16, 0x4, 0x1, 0x5, 0x58, 0x67, 0x0, 0x9, 0x4, 0x0, @broadcast, @multicast1, {[@generic={0x89, 0x5, "f650c2"}, @timestamp={0x44, 0x18, 0x75, 0x0, 0x7, [0x4, 0x6, 0x6, 0xe5d, 0x0]}, @ssrr={0x89, 0x27, 0x66, [@broadcast, @empty, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x30}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x22}]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x7, 0x7ff, 0x5, {{0x8, 0x4, 0x3, 0x0, 0x20, 0x68, 0x0, 0x7, 0x29, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0xb, 0xf9, [@rand_addr=0x64010101, @local]}]}}}}}) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@multicast1, @local}, &(0x7f00000002c0)=0xc) (async, rerun: 64)
r13 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
r14 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0}) (rerun: 32)
sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

497.718981ms ago: executing program 1 (id=3021):
syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0x902)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
syz_extract_tcp_res(&(0x7f0000000080), 0x4, 0x4)
ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f00000000c0))
write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x19}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x100010, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={<r2=>r0})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x40044)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040044}, 0x24005401)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x25, &(0x7f0000000400)=@raw=[@exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @jmp={0x5, 0x0, 0xd, 0x7, 0xa, 0xfffffffffffffff0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdce}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x1, 0xa, 0x9, 0x4, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xbd}, @btf_id={0x18, 0x14, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000540)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x7, 0xd0, 0x800}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', <r6=>0x0, 0x2d, 0x4a, 0x9, 0x7, 0x40, @empty, @empty, 0x8, 0x8, 0x800, 0x3}})
r7 = gettid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r5, r6, 0x25, 0x10, @val=@uprobe_multi={&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=[0xe, 0x6, 0x1, 0x3, 0xa3], &(0x7f0000000800)=[0x1, 0x1, 0x3, 0x4, 0x1, 0x3], 0x80, 0x5, 0x0, r7}}, 0x40)
bind$xdp(r2, &(0x7f0000000880)={0x2c, 0x4, r6, 0xd, r2}, 0x10)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000008c0)={0x0, 0x6, 0x6, 0x6}, &(0x7f0000000900)=0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000940), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000009c0)=<r8=>0x0)
sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004000}, 0x40890)
socket$inet(0x2, 0x4, 0x3ff)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), r2)
sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xd4, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r10 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000000cc0)=r7)
pipe(&(0x7f0000000d00)={<r11=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1e, 0x21, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x511}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@cb_func={0x18, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @alu={0x7, 0x1, 0x6, 0x8, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_fd={0x18, 0x3, 0x1, 0x0, r10}, @tail_call, @generic={0x0, 0x5, 0x0, 0xf6fd, 0x7}, @ldst={0x3, 0x2, 0x0, 0x1, 0x2, 0x50, 0x10}, @ldst={0x0, 0x0, 0x6, 0x3, 0xb, 0x40, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001000)='GPL\x00', 0x8, 0xf2, &(0x7f0000001040)=""/242, 0x41000, 0x12, '\x00', r6, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001180)={0x5, 0x2, 0x9, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001240)=[{0x0, 0x4, 0xa}, {0x5, 0x2, 0xa, 0xc}, {0x4, 0x5, 0xe, 0x9}], 0x10, 0x3}, 0x94)

416.244636ms ago: executing program 2 (id=3022):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xfffffff0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x20008084)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r3, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r2, 0x0)
close(0x3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

411.58119ms ago: executing program 1 (id=3023):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102000000000000000002000000090001f573797a30000000000c0002400000000000000001"], 0x80}}, 0x0)

409.21732ms ago: executing program 1 (id=3024):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000340)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20008c40}, 0x40)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf254a0000000e0075ce62b779c6184f73696d0000000f0002006e657464657673696d3000000800030003000800"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

405.61758ms ago: executing program 2 (id=3025):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000c00000000010000000100000506000000010000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb0, 0x5}, 0xc)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff)
r4 = socket(0x848000000015, 0x805, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x40, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x3, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x40084)
setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f00000005c0), 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r11)
sendmsg$NFC_CMD_SE_IO(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000000880)={&(0x7f0000000580), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x1c, r12, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040014}, 0x0)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000300)=<r13=>0x0, &(0x7f0000000340)=0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000008a00)=@delqdisc={0x120, 0x25, 0x200, 0x70bd26, 0x3, {0x0, 0x0, 0x0, r13, {0xf, 0x6}, {0x6, 0x4}, {0xa, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0x1}}, @TCA_RATE={0x6, 0x5, {0x40, 0x19}}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1f, 0x8, 0x401, 0xffff, 0x0, 0x0, 0xdcd, 0x6}}, {0x10, 0x2, [0xc8c0, 0x4, 0xaff, 0xfff7, 0x0, 0x7f]}}, {{0x1c, 0x1, {0x3, 0x3, 0x7, 0x9, 0x1, 0x0, 0x2, 0x7}}, {0x12, 0x2, [0x6, 0x80, 0x5, 0xf6b0, 0xff7f, 0x100, 0x2]}}, {{0x1c, 0x1, {0x6, 0x67, 0x40, 0xd, 0x2, 0x1ff, 0xba0c, 0x5}}, {0xe, 0x2, [0x9, 0xff, 0x0, 0x5, 0xf]}}, {{0x1c, 0x1, {0x9, 0x10, 0xe, 0x40, 0x778fec59f4fe5985, 0x0, 0x6, 0xa}}, {0x18, 0x2, [0xcb, 0x8000, 0x9, 0x1, 0x1, 0xfaa7, 0x9, 0x7, 0x2, 0x2]}}]}, @qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffff00}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_EGRESS_BLOCK={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004)
r14 = socket(0x10, 0x803, 0x0)
sendto(r14, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
recvmmsg(r14, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100fdffffff000000003d0000000e00010064736988687b5154613f1c6d917aa6c964146d0000000d0002006e657464658078696d30000000000000000004000000000000000000"], 0x34}}, 0x20004804)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080)

299.615331ms ago: executing program 1 (id=3026):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket(0x2, 0x5, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00\x00\x00'], 0x8)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
syz_emit_ethernet(0xd0, &(0x7f0000000740)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0x9a, 0x3a, 0x0, @private2, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x4, 0x0, "0a5b85938db539fac6822395565e9f572fae62eb78bd5f32fed329307c689855b7c925966c3d2eea3ad913a0afb5a917f06f1eaa52419e8a94733807a04c418e2b67211f5424f26317119a2211e6f26b8c32eede24f6b96b2e9d5b8686f861db733b404594b3c4728f21dbbb62f6d2a3e987b1e146900786e6d0412955fdf52248185bc457a810c994d45c2cfb2ece403a1a"}}}}}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, r5, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2041}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20048844)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0)
r7 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000000))
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000600)={0x40000008})
sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01000300"], 0x28}, 0x1, 0x40030000000000, 0x0, 0x4}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'veth0_to_team\x00', 0x700})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
r11 = socket$inet6(0xa, 0x3, 0x5)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r9, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0xc080)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r11, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="e00000000000000001"], 0xe0}}], 0x1, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, r9, 0x400, 0x70bd30, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000050)

297.822535ms ago: executing program 2 (id=3027):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async, rerun: 64)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x1) (async, rerun: 64)
listen(r3, 0x0) (rerun: 64)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async)
r5 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) (async)
recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x0) (async)
writev(r2, &(0x7f0000001580)=[{&(0x7f0000000340)='0_', 0x2}], 0x1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0xd, "f42a97706b23b6a31f9f75fdcb"}}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r6) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400070001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000640)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) (async)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000108000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) (async, rerun: 32)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x3c, r11, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random='\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)

224.804596ms ago: executing program 2 (id=3028):
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, &(0x7f0000000040))
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x11, 0x4)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}}, 0x0)
write$nci(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907"], 0x12)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000680)=0x100)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r7, 0x781, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x200040c0)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000500)={'wpan4\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r10, &(0x7f0000000000), 0x2a979d)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e00000002000000800000000300000000000000", @ANYRES32=r10, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="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"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xd, &(0x7f00000006c0)=ANY=[@ANYRES64=r11, @ANYBLOB="de1a9b54d64b0b6fe4ef13d39f2822", @ANYRESOCT=r8], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r12}, 0x10)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000e0ca9961a00199d89d185c177e95410959ee705ffbdff1662f911c489363d43a37c1d893f218ed9458a66f23999d95dd68e7fef4c4e12e568d4dbe9c90f604bfe359e5c2a0894efc4672089de691f8", @ANYRES8=r6, @ANYRES16=r13, @ANYRES32, @ANYRES64=r7], 0x1c}}, 0x20005011)

0s ago: executing program 2 (id=3029):
syz_emit_ethernet(0x131a, &(0x7f0000002240)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @val={@val, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "d220de", 0x12dc, 0x2b, 0x1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x26}, {[@fragment={0x2f, 0x0, 0x4, 0x0, 0x0, 0x9, 0x68}, @fragment={0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x65}, @routing={0x4, 0x8, 0x2, 0x5, 0x0, [@private0, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}, @hopopts={0x22, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x12}}, @generic={0x6, 0x12, "8f306f23148e9588708978b07454169274c1"}, @calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0x0, [0x3, 0xf, 0xfffffffffffffffe]}}]}, @hopopts={0x29, 0x16, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x80, 0x9e, "052c678db47a2ffdba81ebf32d1232de1a605d65fef45e0588e3d42dd4eef3598afd70431250ddad19ed9756febab84c329a5b450272e535579b0d7228b55b0b8681c9c92dccea9c7c56f4c84719e1b5970506e47d803500c761ebab3cfd63bc66e81bcabb0d4c62a2a4b83f60666329eec23bcf011c8478ac0c615d3cc6e6ad82441016a1e486c7c35cfae47bda9967e85e913694da0f87d9d3a16749a0"}]}, @dstopts={0x11, 0x203, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x2}, @pad1, @enc_lim={0x4, 0x1, 0x6b}]}, @routing={0x0, 0x10, 0x1, 0x9, 0x0, [@empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0xd}, @private0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}, @dstopts={0x2c, 0xb, '\x00', [@ra={0x5, 0x2, 0xfffb}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x18, {0x3, 0x4, 0xc0, 0x4, [0x513, 0x1]}}]}], "d885549be82d48d74d94102a518ea947aaad32b826c92840185fdfef3da5c4bb577f71b625218c1af5fe5d7bcd4704a6aed179c3b1cada2412b7f4223b0e5f9528a5d549202d0e335235dca7a14e299d30cd86d0"}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101900000000009500080000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r1, 0x2, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0x0, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x52, 0xb2, @name2}]}, 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53172' (ED25519) to the list of known hosts.
syzkaller login: [   56.062698][ T5837] cgroup: Unknown subsys name 'net'
[   56.194105][ T5837] cgroup: Unknown subsys name 'cpuset'
[   56.200082][ T5837] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.327452][ T5837] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.691284][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.694111][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.700192][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.703622][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.704736][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.709598][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.713421][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.722195][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.724186][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.725175][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.730662][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.731390][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.740561][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.743397][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.746304][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.083567][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   64.181165][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   64.188535][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   64.238041][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.242618][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.245802][ T5855] bridge_slave_0: entered allmulticast mode
[   64.249750][ T5855] bridge_slave_0: entered promiscuous mode
[   64.255412][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.258235][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.261644][ T5855] bridge_slave_1: entered allmulticast mode
[   64.265504][ T5855] bridge_slave_1: entered promiscuous mode
[   64.348706][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.368362][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.463358][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.466049][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.469107][ T5854] bridge_slave_0: entered allmulticast mode
[   64.473715][ T5854] bridge_slave_0: entered promiscuous mode
[   64.478435][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.481886][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.484723][ T5852] bridge_slave_0: entered allmulticast mode
[   64.488528][ T5852] bridge_slave_0: entered promiscuous mode
[   64.495076][ T5855] team0: Port device team_slave_0 added
[   64.497601][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.502304][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.505316][ T5852] bridge_slave_1: entered allmulticast mode
[   64.509304][ T5852] bridge_slave_1: entered promiscuous mode
[   64.513132][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.516006][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.518794][ T5854] bridge_slave_1: entered allmulticast mode
[   64.522782][ T5854] bridge_slave_1: entered promiscuous mode
[   64.541859][ T5855] team0: Port device team_slave_1 added
[   64.601439][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.622593][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.625365][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.638107][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.645782][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.654011][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.658203][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.661246][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.672961][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.706467][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.719357][ T5854] team0: Port device team_slave_0 added
[   64.765199][ T5854] team0: Port device team_slave_1 added
[   64.783599][ T5852] team0: Port device team_slave_0 added
[   64.805128][ T5855] hsr_slave_0: entered promiscuous mode
[   64.808677][ T5855] hsr_slave_1: entered promiscuous mode
[   64.815671][ T5852] team0: Port device team_slave_1 added
[   64.830210][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.832851][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.840762][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.862225][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.864485][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.873332][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.887460][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.889593][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.899041][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.915484][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.917682][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.927359][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.004174][ T5854] hsr_slave_0: entered promiscuous mode
[   65.007161][ T5854] hsr_slave_1: entered promiscuous mode
[   65.009879][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   65.012416][ T5854] Cannot create hsr debugfs directory
[   65.048462][ T5852] hsr_slave_0: entered promiscuous mode
[   65.053286][ T5852] hsr_slave_1: entered promiscuous mode
[   65.055832][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   65.057958][ T5852] Cannot create hsr debugfs directory
[   65.283180][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.290645][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.299223][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.306511][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.355793][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.363907][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.381065][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.385743][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.438702][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.457186][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.472553][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.484693][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.565478][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.588795][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.604910][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   65.612636][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   65.620157][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.622684][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.644109][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.646315][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.650075][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.652334][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.656471][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.658622][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.711818][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.726194][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.764431][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   65.772894][ T5238] Bluetooth: hci2: command tx timeout
[   65.772909][ T5864] Bluetooth: hci1: command tx timeout
[   65.773161][ T5864] Bluetooth: hci0: command tx timeout
[   65.782439][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.785276][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.805013][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.807906][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.909204][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.977703][ T5854] veth0_vlan: entered promiscuous mode
[   65.985519][ T5854] veth1_vlan: entered promiscuous mode
[   66.005433][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.042383][ T5854] veth0_macvtap: entered promiscuous mode
[   66.054515][ T5854] veth1_macvtap: entered promiscuous mode
[   66.065279][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.087511][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.100121][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.119011][ T5870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.124536][ T5855] veth0_vlan: entered promiscuous mode
[   66.134399][ T5870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.142111][ T5870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.161868][ T5870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.167029][ T5855] veth1_vlan: entered promiscuous mode
[   66.193145][ T5852] veth0_vlan: entered promiscuous mode
[   66.236213][ T5852] veth1_vlan: entered promiscuous mode
[   66.258403][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.263152][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.272781][ T5855] veth0_macvtap: entered promiscuous mode
[   66.279942][ T5855] veth1_macvtap: entered promiscuous mode
[   66.304901][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.307875][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.309743][ T5852] veth0_macvtap: entered promiscuous mode
[   66.319811][ T5852] veth1_macvtap: entered promiscuous mode
[   66.330210][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.354985][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.364371][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.365346][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.373835][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.407499][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.433638][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.442446][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.446376][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.471840][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.492999][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.502222][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.505329][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.601698][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.604790][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.614291][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.620753][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.664110][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.673697][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.684202][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.689853][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.883318][ T5948] netlink: 'syz.1.7': attribute type 11 has an invalid length.
[   66.886233][ T5948] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7'.
[   66.906752][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'.
[   66.948376][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.023364][ T5954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8'.
[   67.072766][ T5953] pim6reg1: entered promiscuous mode
[   67.075110][ T5953] pim6reg1: entered allmulticast mode
[   67.175121][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'.
[   67.703523][ T5967] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.745309][ T5967] netlink: 'syz.2.12': attribute type 178 has an invalid length.
[   67.796247][ T5969] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET)
[   67.851730][ T5864] Bluetooth: hci2: command tx timeout
[   67.853435][ T5864] Bluetooth: hci1: command tx timeout
[   67.855117][ T5864] Bluetooth: hci0: command tx timeout
[   68.138953][ T5972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14'.
[   68.937454][ T5977] tun0: tun_chr_ioctl cmd 1074025672
[   68.939655][ T5977] tun0: ignored: set checksum disabled
[   69.120297][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[   69.328614][ T5983] warning: `syz.0.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.492105][ T5991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22'.
[   69.546825][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'.
[   69.768794][ T6002] bond0: option use_carrier: invalid value (6)
[   69.849308][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'.
[   69.931097][ T5859] Bluetooth: hci0: command tx timeout
[   69.932838][ T5859] Bluetooth: hci1: command tx timeout
[   69.934816][ T5859] Bluetooth: hci2: command tx timeout
[   70.267739][ T6026] netlink: 'syz.2.33': attribute type 178 has an invalid length.
[   71.014700][ T6056] sctp: [Deprecated]: syz.1.41 (pid 6056) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.014700][ T6056] Use struct sctp_sack_info instead
[   71.041710][ T6062] sctp: [Deprecated]: syz.1.41 (pid 6062) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.041710][ T6062] Use struct sctp_sack_info instead
[   71.059038][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.062667][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.268295][ T6079] netlink: 'syz.0.47': attribute type 178 has an invalid length.
[   71.593005][ T6100] sctp: [Deprecated]: syz.0.55 (pid 6100) Use of int in max_burst socket option deprecated.
[   71.593005][ T6100] Use struct sctp_assoc_value instead
[   71.698349][ T6104] netlink: 'syz.0.56': attribute type 3 has an invalid length.
[   71.704241][ T6104] netlink: 'syz.0.56': attribute type 178 has an invalid length.
[   71.870093][ T6109] Zero length message leads to an empty skb
[   72.010609][ T5864] Bluetooth: hci2: command tx timeout
[   72.013356][ T5859] Bluetooth: hci1: command tx timeout
[   72.013391][ T5238] Bluetooth: hci0: command tx timeout
[   72.016786][ T6121] __nla_validate_parse: 10 callbacks suppressed
[   72.016799][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'.
[   72.171779][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[   72.175686][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[   72.321186][ T6139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.66'.
[   72.422676][ T6141] Bluetooth: hci0: Opcode 0x080f failed: -4
[   72.535266][ T6157] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20002
[   72.735955][ T6177] netlink: 'syz.2.76': attribute type 178 has an invalid length.
[   72.800346][ T6179] netlink: 'syz.2.78': attribute type 178 has an invalid length.
[   73.075188][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   73.085840][ T6194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.83'.
[   73.158445][ T6196] netlink: 96 bytes leftover after parsing attributes in process `syz.0.84'.
[   73.166576][ T6196] netlink: 'syz.0.84': attribute type 178 has an invalid length.
[   73.217977][ T6199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.85'.
[   73.264596][ T6202] netlink: 'syz.2.86': attribute type 1 has an invalid length.
[   73.267076][ T6202] netlink: 224 bytes leftover after parsing attributes in process `syz.2.86'.
[   73.396863][ T6213] netlink: 'syz.2.89': attribute type 178 has an invalid length.
[   73.477805][ T6218] netlink: 'syz.2.92': attribute type 22 has an invalid length.
[   73.544965][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'.
[   73.629524][ T6224] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.792314][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.819246][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.262849][ T6266] netlink: 'syz.0.105': attribute type 178 has an invalid length.
[   74.269494][ T6267] netlink: 'syz.0.105': attribute type 178 has an invalid length.
[   74.269758][ T6262] IPv6: sit1: Disabled Multicast RS
[   74.282973][ T6264] Bluetooth: MGMT ver 1.23
[   74.410720][ T5238] Bluetooth: hci0: command 0x080f tx timeout
[   74.957649][ T6303] netlink: 'syz.1.117': attribute type 4 has an invalid length.
[   74.972335][ T6303] Illegal XDP return value 256 on prog  (id 15) dev syz_tun, expect packet loss!
[   75.082917][ T6316] netlink: 'syz.1.123': attribute type 178 has an invalid length.
[   75.379517][ T6337] tipc: Started in network mode
[   75.381512][ T6337] tipc: Node identity 62ae8671d8d8, cluster identity 4711
[   75.391272][ T6337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.400070][ T6337] syzkaller0: entered promiscuous mode
[   75.410484][ T6337] syzkaller0: entered allmulticast mode
[   75.425534][ T6337] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   75.446104][ T6337] tipc: Resetting bearer <eth:syzkaller0>
[   75.481033][ T6339] syzkaller1: entered promiscuous mode
[   75.483229][ T6339] syzkaller1: entered allmulticast mode
[   75.991393][ T6357] xt_socket: unknown flags 0xfc
[   76.157794][ T6328] tipc: Resetting bearer <eth:syzkaller0>
[   76.172315][ T6328] tipc: Disabling bearer <eth:syzkaller0>
[   76.392641][ T6388] netlink: 'syz.2.146': attribute type 11 has an invalid length.
[   77.087473][ T6441] ieee802154 phy0 wpan0: encryption failed: -22
[   77.095332][ T6441] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[   77.629635][ T6469] __nla_validate_parse: 20 callbacks suppressed
[   77.629696][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'.
[   78.856569][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'.
[   78.867611][ T6505] veth1: entered promiscuous mode
[   78.869910][ T6505] macvtap1: entered promiscuous mode
[   78.874467][ T6505] macvtap1: entered allmulticast mode
[   78.876559][ T6505] veth1: entered allmulticast mode
[   78.893074][ T6505] veth1: left allmulticast mode
[   78.895234][ T6505] veth1: left promiscuous mode
[   78.923135][ T6507] netlink: 'syz.0.187': attribute type 178 has an invalid length.
[   78.923135][ T6508] validate_nla: 7 callbacks suppressed
[   78.923156][ T6508] netlink: 'syz.0.187': attribute type 178 has an invalid length.
[   78.953372][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'.
[   78.968958][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'.
[   79.014826][ T6510] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.034214][ T6511] macsec1: entered promiscuous mode
[   79.036244][ T6511] bond1: entered promiscuous mode
[   79.052557][ T6511] macsec1: entered allmulticast mode
[   79.056226][ T6511] bond1: entered allmulticast mode
[   79.075613][ T6511] bond1: left allmulticast mode
[   79.079480][ T6511] bond1: left promiscuous mode
[   79.307839][ T6535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.196'.
[   79.407090][ T6538] macvtap1: entered promiscuous mode
[   79.415203][ T6538] macvtap1: entered allmulticast mode
[   79.418087][ T6538] bond_slave_0: entered promiscuous mode
[   79.420596][ T6538] bond_slave_1: entered promiscuous mode
[   79.423371][ T6538] bond0: entered allmulticast mode
[   79.425560][ T6538] bond_slave_0: entered allmulticast mode
[   79.427966][ T6538] bond_slave_1: entered allmulticast mode
[   79.430291][ T6538] bond0: entered promiscuous mode
[   79.435745][ T6538] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   79.439102][ T6538] team0: Device macvtap1 failed to register rx_handler
[   79.442943][ T6538] bond0: left allmulticast mode
[   79.444845][ T6538] bond_slave_0: left allmulticast mode
[   79.446709][ T6538] bond_slave_1: left allmulticast mode
[   79.448554][ T6538] bond0: left promiscuous mode
[   79.450822][ T6538] bond_slave_0: left promiscuous mode
[   79.452605][ T6538] bond_slave_1: left promiscuous mode
[   79.472747][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'.
[   79.771553][ T6573] netlink: 'syz.2.209': attribute type 178 has an invalid length.
[   79.791073][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'.
[   79.888916][ T6577] tipc: Started in network mode
[   79.891666][ T6577] tipc: Node identity 4242362f3de1, cluster identity 4711
[   79.894806][ T6577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.897001][ T6583] netlink: 'syz.2.213': attribute type 1 has an invalid length.
[   79.936930][ T6574] tipc: Resetting bearer <eth:syzkaller0>
[   80.795128][ T6574] tipc: Disabling bearer <eth:syzkaller0>
[   80.802672][ T6593] netlink: 108 bytes leftover after parsing attributes in process `syz.2.216'.
[   80.806988][ T6593] netlink: 108 bytes leftover after parsing attributes in process `syz.2.216'.
[   80.914206][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'.
[   81.274148][ T6644] netlink: 'syz.0.232': attribute type 178 has an invalid length.
[   81.522964][ T6665] netlink: 'syz.2.239': attribute type 1 has an invalid length.
[   81.526581][ T6665] netlink: 'syz.2.239': attribute type 1 has an invalid length.
[   81.531533][ T6665] netlink: 'syz.2.239': attribute type 11 has an invalid length.
[   81.574497][ T6672] lo speed is unknown, defaulting to 1000
[   81.576537][ T6672] lo speed is unknown, defaulting to 1000
[   81.579982][ T6672] lo speed is unknown, defaulting to 1000
[   81.592695][ T6672] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   81.603205][ T6665] netlink: 'syz.2.239': attribute type 178 has an invalid length.
[   81.603696][ T6672] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   81.626259][ T6672] lo speed is unknown, defaulting to 1000
[   81.629256][ T6672] lo speed is unknown, defaulting to 1000
[   81.633352][ T6672] lo speed is unknown, defaulting to 1000
[   82.484837][ T6744] ipvlan2: entered promiscuous mode
[   82.487997][ T6744] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   82.756662][ T6758] __nla_validate_parse: 10 callbacks suppressed
[   82.756674][ T6758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.267'.
[   82.843752][ T6766] netlink: 'syz.1.269': attribute type 1 has an invalid length.
[   82.846939][ T6766] netlink: 224 bytes leftover after parsing attributes in process `syz.1.269'.
[   83.323280][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.276'.
[   83.326777][ T6789] netlink: 'syz.0.276': attribute type 7 has an invalid length.
[   83.329784][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'.
[   83.397230][ T6796] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.047968][ T6819] netlink: 32 bytes leftover after parsing attributes in process `syz.1.287'.
[   84.054362][  T793] IPVS: starting estimator thread 0...
[   84.140656][ T6820] IPVS: using max 53 ests per chain, 127200 per kthread
[   84.273127][ T6834] netlink: 48 bytes leftover after parsing attributes in process `syz.1.290'.
[   84.364196][ T6834] validate_nla: 3 callbacks suppressed
[   84.364208][ T6834] netlink: 'syz.1.290': attribute type 1 has an invalid length.
[   84.424667][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'.
[   84.427625][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'.
[   84.566706][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'.
[   84.572305][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'.
[   84.857341][ T6897] sctp: [Deprecated]: syz.1.308 (pid 6897) Use of int in max_burst socket option.
[   84.857341][ T6897] Use struct sctp_assoc_value instead
[   85.090031][ T6917] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.144029][ T6926] netlink: 'syz.0.318': attribute type 14 has an invalid length.
[   85.160033][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.160077][ T6926] netlink: 'syz.0.318': attribute type 14 has an invalid length.
[   85.164366][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.169428][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.177133][ T6926] netlink: 'syz.0.318': attribute type 178 has an invalid length.
[   85.179545][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.205671][ T6917] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.283794][ T6917] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.363805][ T6917] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.528878][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.562086][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.593022][ T5870] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.611317][ T5870] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.647479][ T6951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.679642][ T6950] tipc: Resetting bearer <eth:syzkaller0>
[   85.706246][ T6959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.415686][   T10] cfg80211: failed to load regulatory.db
[   86.641657][ T6950] tipc: Disabling bearer <eth:syzkaller0>
[   86.845036][ T6982] openvswitch: netlink: Flow key attr not present in new flow.
[   87.005969][ T6999] netlink: 'syz.0.344': attribute type 178 has an invalid length.
[   87.340571][   T47] IPVS: starting estimator thread 0...
[   87.432074][ T7040] IPVS: using max 64 ests per chain, 153600 per kthread
[   87.497543][ T7064] netlink: 'syz.1.367': attribute type 178 has an invalid length.
[   87.774723][ T7103] __nla_validate_parse: 17 callbacks suppressed
[   87.774735][ T7103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.373'.
[   87.788902][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'.
[   88.575846][ T7116] netlink: 36 bytes leftover after parsing attributes in process `syz.2.381'.
[   88.620710][ T7116] netlink: 'syz.2.381': attribute type 178 has an invalid length.
[   88.654991][ T7124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   88.658796][ T7119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   88.679315][ T7130] netlink: 'syz.0.382': attribute type 178 has an invalid length.
[   88.824560][ T7139] netlink: 'syz.2.386': attribute type 39 has an invalid length.
[   88.849160][ T7141] netlink: 10 bytes leftover after parsing attributes in process `syz.1.385'.
[   88.881232][ T7142] netlink: 'syz.2.386': attribute type 178 has an invalid length.
[   88.886206][ T7144] netlink: 136 bytes leftover after parsing attributes in process `syz.1.387'.
[   88.889764][ T7144] netlink: 180 bytes leftover after parsing attributes in process `syz.1.387'.
[   89.066086][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'.
[   89.073023][ T7151] block nbd0: shutting down sockets
[   89.146617][ T7154] netlink: 56 bytes leftover after parsing attributes in process `syz.1.389'.
[   89.149769][ T7154] netlink: 56 bytes leftover after parsing attributes in process `syz.1.389'.
[   89.419679][ T7173] atomic_op ffff88801f453198 conn xmit_atomic 0000000000000000
[   89.534655][ T7178] validate_nla: 2 callbacks suppressed
[   89.534666][ T7178] netlink: 'syz.2.397': attribute type 4 has an invalid length.
[   89.826376][ T7237] netlink: 'syz.2.399': attribute type 178 has an invalid length.
[   89.998882][ T7255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.401'.
[   90.021421][ T7255] batadv1: entered promiscuous mode
[   90.023747][ T7255] batadv1: entered allmulticast mode
[   90.971055][ T7320] syzkaller1: entered promiscuous mode
[   90.973037][ T7320] syzkaller1: entered allmulticast mode
[   90.977444][ T7320] netlink: 'syz.1.422': attribute type 178 has an invalid length.
[   91.292381][ T7322] netlink: 'syz.1.423': attribute type 1 has an invalid length.
[   94.416226][ T7333] __nla_validate_parse: 8 callbacks suppressed
[   94.416236][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'.
[   94.424884][ T7333] netlink: 48 bytes leftover after parsing attributes in process `syz.2.426'.
[   94.546875][ T7355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.432'.
[   94.590038][ T7355] af_packet: tpacket_rcv: packet too big, clamped from 212 to 4294967272. macoff=96
[   94.614804][ T7353] netlink: 200 bytes leftover after parsing attributes in process `syz.0.431'.
[   94.619403][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'.
[   94.664182][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'.
[   94.728710][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.435'.
[   94.878664][ T7383] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   94.950338][ T7396] netlink: 'syz.2.445': attribute type 1 has an invalid length.
[   94.960329][ T7396] netlink: 'syz.2.445': attribute type 1 has an invalid length.
[   94.994646][ T7400] netlink: 'syz.0.447': attribute type 178 has an invalid length.
[   95.052154][ T7396] netlink: 'syz.2.445': attribute type 1 has an invalid length.
[   95.067624][ T7396] 8021q: adding VLAN 0 to HW filter on device bond2
[   95.076510][ T7396] vlan2: entered allmulticast mode
[   95.076809][ T7404] netlink: 'syz.1.448': attribute type 1 has an invalid length.
[   95.078219][ T7396] veth1: entered allmulticast mode
[   95.081958][ T7404] netlink: 232 bytes leftover after parsing attributes in process `syz.1.448'.
[   95.089092][ T7396] bond2: (slave vlan2): making interface the new active one
[   95.092745][ T7396] bond2: (slave vlan2): Enslaving as an active interface with an up link
[   95.198276][ T7416] netlink: 'syz.0.452': attribute type 178 has an invalid length.
[   95.487041][ T7454] netlink: 'syz.0.461': attribute type 178 has an invalid length.
[   95.490658][ T7456] netlink: 'syz.1.462': attribute type 2 has an invalid length.
[   95.788467][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.475'.
[   95.849708][ T7491] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20002
[   95.915696][ T7498] sctp: [Deprecated]: syz.1.479 (pid 7498) Use of int in max_burst socket option.
[   95.915696][ T7498] Use struct sctp_assoc_value instead
[   96.072177][ T7506] netlink: 'syz.1.481': attribute type 178 has an invalid length.
[   96.308630][ T7511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.669692][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'.
[   96.675162][ T7519] netlink: 'syz.1.486': attribute type 11 has an invalid length.
[   96.684603][ T5870] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.711366][ T5870] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.714201][ T5870] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.719049][ T5870] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.771738][ T7526] unsupported nla_type 52263
[   96.996880][ T7557] openvswitch: netlink: IP tunnel dst address not specified
[   97.284240][ T7578] lo speed is unknown, defaulting to 1000
[   97.506934][ T7586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.527113][ T7585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.534838][   T10] lo speed is unknown, defaulting to 1000
[   97.537197][ T7583] xfrm0: entered promiscuous mode
[   97.538787][ T7583] xfrm0: entered allmulticast mode
[   98.170938][ T7619] Bluetooth: MGMT ver 1.23
[   98.533227][ T5870] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   98.581610][ T7669] sch_tbf: burst 2 is lower than device lo mtu (18) !
[   98.592466][ T7673] sch_tbf: burst 2 is lower than device lo mtu (18) !
[   98.597091][ T7673] sch_tbf: burst 2 is lower than device lo mtu (18) !
[   99.512212][ T7702] __nla_validate_parse: 15 callbacks suppressed
[   99.512229][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'.
[   99.603168][ T7707] lo speed is unknown, defaulting to 1000
[   99.625533][ T7708] pim6reg1: entered promiscuous mode
[   99.627394][ T7708] pim6reg1: entered allmulticast mode
[   99.883332][ T7728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.547'.
[  100.457712][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'.
[  100.465617][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.555'.
[  100.500340][ T7765] validate_nla: 11 callbacks suppressed
[  100.500351][ T7765] netlink: 'syz.1.557': attribute type 178 has an invalid length.
[  100.508860][ T7767] netlink: 'syz.1.557': attribute type 178 has an invalid length.
[  100.684214][ T7777] netlink: 'syz.0.561': attribute type 2 has an invalid length.
[  100.776757][ T7790] netlink: 'syz.1.564': attribute type 12 has an invalid length.
[  101.638454][ T7799] netlink: 'syz.0.565': attribute type 2 has an invalid length.
[  101.686869][ T7804] netlink: 32 bytes leftover after parsing attributes in process `syz.0.567'.
[  101.905537][ T7821] netlink: 'syz.2.574': attribute type 178 has an invalid length.
[  101.921553][ T7825] netlink: 'syz.1.576': attribute type 178 has an invalid length.
[  101.943838][ T5238] Bluetooth: hci1: command tx timeout
[  102.159621][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'.
[  102.164651][ T7842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.173129][   T47] lo speed is unknown, defaulting to 1000
[  102.174968][   T47] syz1: Port: 1 Link DOWN
[  102.198036][ T7853] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  102.201223][ T7853] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.586'.
[  102.257004][ T7862] netlink: 'syz.1.588': attribute type 1 has an invalid length.
[  102.283054][ T7862] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.418320][ T7877] lo speed is unknown, defaulting to 1000
[  102.768803][ T7883] syzkaller0: entered promiscuous mode
[  102.771362][ T7883] syzkaller0: entered allmulticast mode
[  102.775248][ T7882] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.787749][ T7883] tipc: Resetting bearer <eth:syzkaller0>
[  102.801713][ T7883] tipc: Disabling bearer <eth:syzkaller0>
[  102.904950][ T7889] netlink: 'syz.0.596': attribute type 1 has an invalid length.
[  102.908099][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'.
[  103.054599][ T7899] lo speed is unknown, defaulting to 1000
[  103.083250][ T7862] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  103.190804][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'.
[  103.193648][ T7912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.603'.
[  103.749759][ T7971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.755660][ T7970] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.807183][ T7970] syzkaller0: entered promiscuous mode
[  103.809282][ T7970] syzkaller0: entered allmulticast mode
[  103.815398][ T7970] tipc: Resetting bearer <eth:syzkaller0>
[  103.828447][ T7969] tipc: Resetting bearer <eth:syzkaller0>
[  104.332209][ T5238] Bluetooth: hci2: command 0x0401 tx timeout
[  104.811907][ T5895] tipc: Node number set to 3128329841
[  105.031946][ T7969] tipc: Disabling bearer <eth:syzkaller0>
[  105.129184][ T7990] __nla_validate_parse: 4 callbacks suppressed
[  105.129199][ T7990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.627'.
[  105.228175][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'.
[  105.251220][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'.
[  105.267031][ T7999] netlink: 48 bytes leftover after parsing attributes in process `syz.1.630'.
[  105.280209][ T7999] netlink: 64 bytes leftover after parsing attributes in process `syz.1.630'.
[  105.369479][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'.
[  105.576726][ T8030] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.583995][ T8030] netlink: 64 bytes leftover after parsing attributes in process `syz.0.639'.
[  105.664727][ T8034] validate_nla: 2 callbacks suppressed
[  105.664738][ T8034] netlink: 'syz.0.640': attribute type 178 has an invalid length.
[  105.697357][ T8039] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  105.793002][ T8042] netlink: 'syz.0.643': attribute type 178 has an invalid length.
[  106.148257][ T8071] netlink: 'syz.2.653': attribute type 178 has an invalid length.
[  106.179927][ T8073] trusted_key: syz.0.654 sent an empty control message without MSG_MORE.
[  106.270153][ T8083] netlink: 'syz.0.659': attribute type 178 has an invalid length.
[  106.320216][ T8085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.660'.
[  106.563187][ T8115] netlink: 'syz.2.667': attribute type 83 has an invalid length.
[  106.611028][ T8124] netlink: 'syz.0.669': attribute type 4 has an invalid length.
[  106.612090][ T8122] team0: Device gtp0 is of different type
[  106.666100][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'.
[  106.688142][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'.
[  106.705312][ T8130] netlink: 'syz.2.672': attribute type 7 has an invalid length.
[  106.757848][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803b63c400: rx timeout, send abort
[  106.757992][ T8136] netlink: 'syz.2.675': attribute type 21 has an invalid length.
[  106.766344][ T8136] netlink: 'syz.2.675': attribute type 22 has an invalid length.
[  106.768763][ T8136] netlink: 'syz.2.675': attribute type 23 has an invalid length.
[  107.258535][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803438ec00: rx timeout, send abort
[  107.262146][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803b63c400: abort rx timeout. Force session deactivation
[  107.356466][ T5895] hid-generic 0005:16C0:5502.0001: item fetching failed at offset 0/3
[  107.363047][ T5895] hid-generic 0005:16C0:5502.0001: probe with driver hid-generic failed with error -22
[  107.761880][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803438ec00: abort rx timeout. Force session deactivation
[  107.869006][ T8166] syzkaller1: entered promiscuous mode
[  107.873662][ T8166] syzkaller1: entered allmulticast mode
[  107.917341][ T8164] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  107.920376][ T8164] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  108.323036][ T8198] xt_l2tp: missing protocol rule (udp|l2tpip)
[  108.853733][ T8243] xt_l2tp: invalid flags combination: 0
[  108.958067][ T8240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  109.072969][ T8254] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  109.076985][ T8254] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  110.239027][ T8298] 8021q: adding VLAN 0 to HW filter on device bond4
[  110.255906][ T8298] bond4: (slave geneve2): making interface the new active one
[  110.261364][ T8298] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  110.270938][ T8298] syz.1.725 (8298) used greatest stack depth: 16696 bytes left
[  110.506414][ T8316] __nla_validate_parse: 10 callbacks suppressed
[  110.506430][ T8316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.729'.
[  110.618698][ T8322] netlink: 44 bytes leftover after parsing attributes in process `syz.0.732'.
[  110.916606][ T8344] validate_nla: 15 callbacks suppressed
[  110.916617][ T8344] netlink: 'syz.0.741': attribute type 178 has an invalid length.
[  111.104679][ T8354] netlink: 'syz.0.745': attribute type 178 has an invalid length.
[  111.194084][ T8358] netlink: 'syz.0.747': attribute type 178 has an invalid length.
[  111.283061][ T8363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.749'.
[  111.916968][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  112.265421][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.767'.
[  112.281490][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'.
[  112.284640][ T8408] bridge_slave_1: left allmulticast mode
[  112.286751][ T8408] bridge_slave_1: left promiscuous mode
[  112.290495][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.302313][ T8408] bridge_slave_0: left allmulticast mode
[  112.304462][ T8408] bridge_slave_0: left promiscuous mode
[  112.306396][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.334377][ T8410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.767'.
[  112.373778][ T8410] netlink: 32 bytes leftover after parsing attributes in process `syz.0.767'.
[  112.386939][   T33] audit: type=1107 audit(1758198398.474:2): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='plm"^5db[y[vcȃ}L&Q9PPS^Bcݎo*tыK[SEHy4"ɲkuzo^&Tq=̲1M'
[  112.546885][ T8419] netlink: 'syz.1.770': attribute type 1 has an invalid length.
[  112.549480][ T8419] netlink: 'syz.1.770': attribute type 2 has an invalid length.
[  112.553841][ T8419] netlink: 'syz.1.770': attribute type 1 has an invalid length.
[  112.556329][ T8419] netlink: 'syz.1.770': attribute type 2 has an invalid length.
[  112.572583][ T8419] lo speed is unknown, defaulting to 1000
[  112.903227][ T8427] netlink: 'syz.1.772': attribute type 178 has an invalid length.
[  113.045377][ T8440] netlink: 'syz.1.777': attribute type 178 has an invalid length.
[  113.272304][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'.
[  113.395023][ T8478] netlink: 32 bytes leftover after parsing attributes in process `syz.0.788'.
[  114.080595][ T8499] syzkaller0: entered promiscuous mode
[  114.082776][ T8499] syzkaller0: entered allmulticast mode
[  114.173526][ T8504] netlink: 'syz.2.798': attribute type 178 has an invalid length.
[  114.277927][ T8514] pim6reg1: entered promiscuous mode
[  114.279702][ T8514] pim6reg1: entered allmulticast mode
[  114.599700][ T8555] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  114.607146][ T8555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.612310][ T8612] __nla_validate_parse: 12 callbacks suppressed
[  115.612321][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'.
[  115.659678][ T8619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.831'.
[  115.688745][ T8626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.832'.
[  115.727004][ T8628] pim6reg: entered allmulticast mode
[  115.729909][ T8628] pim6reg: left allmulticast mode
[  115.776403][ T8632] sctp: [Deprecated]: syz.0.835 (pid 8632) Use of struct sctp_assoc_value in delayed_ack socket option.
[  115.776403][ T8632] Use struct sctp_sack_info instead
[  115.787971][ T8632] sctp: [Deprecated]: syz.0.835 (pid 8632) Use of struct sctp_assoc_value in delayed_ack socket option.
[  115.787971][ T8632] Use struct sctp_sack_info instead
[  115.866328][ T8644] lo speed is unknown, defaulting to 1000
[  115.927896][ T8650] netlink: 68 bytes leftover after parsing attributes in process `syz.2.839'.
[  116.066848][ T8654] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.070570][ T8654] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.085326][ T8644] validate_nla: 5 callbacks suppressed
[  116.085335][ T8644] netlink: 'syz.1.838': attribute type 178 has an invalid length.
[  116.095616][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'.
[  116.106451][ T8659] netlink: 'syz.0.841': attribute type 178 has an invalid length.
[  116.145008][ T8654] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.151211][ T8654] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.229629][ T8654] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.233547][ T8654] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.313463][ T8654] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.316747][ T8654] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.462475][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.465154][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.483178][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.486377][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.504833][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.507901][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.520085][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.534602][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.597911][ T8676] delete_channel: no stack
[  116.678200][ T8681] netlink: 'syz.0.850': attribute type 4 has an invalid length.
[  116.681079][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'.
[  116.826806][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'.
[  116.829915][ T8686] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  116.919358][ T8691] netlink: 'syz.0.853': attribute type 1 has an invalid length.
[  116.923341][ T8691] netlink: 'syz.0.853': attribute type 178 has an invalid length.
[  117.235440][ T8705] netlink: 'syz.0.856': attribute type 178 has an invalid length.
[  118.048112][ T8740] : renamed from batadv_slave_1 (while UP)
[  118.247013][ T8757] netlink: 'syz.1.871': attribute type 178 has an invalid length.
[  118.258426][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'.
[  118.329349][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'.
[  118.348787][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'.
[  118.654370][ T8798] netlink: 'syz.0.887': attribute type 33 has an invalid length.
[  119.089805][ T8802] can: request_module (can-proto-0) failed.
[  119.096862][ T8802] team0: No ports can be present during mode change
[  119.100065][ T8802] vlan0: entered promiscuous mode
[  119.112968][ T8802] team0: Port device vlan0 added
[  119.117139][ T8802] tipc: Enabled bearer <eth:team0>, priority 0
[  120.373817][ T8829] sctp: [Deprecated]: syz.1.895 (pid 8829) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.373817][ T8829] Use struct sctp_sack_info instead
[  120.384970][ T8829] sctp: [Deprecated]: syz.1.895 (pid 8829) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.384970][ T8829] Use struct sctp_sack_info instead
[  120.389440][ T8832] syzkaller1: entered promiscuous mode
[  120.393023][ T8832] syzkaller1: entered allmulticast mode
[  120.398380][ T8829] sctp: [Deprecated]: syz.1.895 (pid 8829) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.398380][ T8829] Use struct sctp_sack_info instead
[  120.408116][ T8829] sctp: [Deprecated]: syz.1.895 (pid 8829) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.408116][ T8829] Use struct sctp_sack_info instead
[  120.418178][ T8829] sctp: [Deprecated]: syz.1.895 (pid 8829) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.418178][ T8829] Use struct sctp_sack_info instead
[  120.686822][ T8848] __nla_validate_parse: 3 callbacks suppressed
[  120.686839][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.902'.
[  120.728222][ T8851] netlink: 'syz.1.903': attribute type 1 has an invalid length.
[  120.731768][ T8850] netlink: 'syz.1.903': attribute type 1 has an invalid length.
[  120.732263][ T8851] netlink: 36 bytes leftover after parsing attributes in process `syz.1.903'.
[  120.734257][ T8850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.903'.
[  120.917122][ T8860] netlink: 32 bytes leftover after parsing attributes in process `syz.2.907'.
[  120.983334][ T8861] lo speed is unknown, defaulting to 1000
[  121.288677][ T8891] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  121.834790][ T8898] netlink: 'syz.2.918': attribute type 5 has an invalid length.
[  121.844453][ T8898] netlink: 'syz.2.918': attribute type 5 has an invalid length.
[  121.973900][ T8911] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.987399][ T8911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.921'.
[  122.426572][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'.
[  122.490204][ T8948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.935'.
[  122.512288][ T8953] netlink: 'syz.1.937': attribute type 2 has an invalid length.
[  122.594111][ T8960] netlink: 'syz.1.939': attribute type 1 has an invalid length.
[  122.597650][ T8960] netlink: 144 bytes leftover after parsing attributes in process `syz.1.939'.
[  122.602194][ T8960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.939'.
[  122.632919][ T8964] netlink: 'syz.0.940': attribute type 5 has an invalid length.
[  122.635918][ T8964] netlink: 'syz.0.940': attribute type 5 has an invalid length.
[  122.671952][ T8966] netlink: 'syz.1.939': attribute type 178 has an invalid length.
[  122.759660][ T8968] lo speed is unknown, defaulting to 1000
[  122.960652][ T8977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.942'.
[  123.336763][ T9004] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.365056][ T9024] netlink: 'syz.0.959': attribute type 9 has an invalid length.
[  124.369042][ T9024] netlink: 'syz.0.959': attribute type 178 has an invalid length.
[  124.425222][ T9028] openvswitch: netlink: Multiple metadata blocks provided
[  124.647810][ T9055] netlink: 'syz.1.973': attribute type 178 has an invalid length.
[  124.671793][ T9057] syzkaller1: entered promiscuous mode
[  124.674057][ T9057] syzkaller1: entered allmulticast mode
[  124.893584][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.895963][ T9082] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.898754][ T9082] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.308260][ T9115] syzkaller1: entered promiscuous mode
[  125.310285][ T9115] syzkaller1: entered allmulticast mode
[  125.972445][ T9173] __nla_validate_parse: 11 callbacks suppressed
[  125.972463][ T9173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1004'.
[  126.194172][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1010'.
[  126.246918][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'.
[  126.250240][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1011'.
[  126.260232][ T9188] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1008'.
[  126.269432][ T9188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1008'.
[  126.344810][ T9202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1013'.
[  126.963172][ T9207] validate_nla: 5 callbacks suppressed
[  126.963184][ T9207] netlink: 'syz.1.1015': attribute type 1 has an invalid length.
[  126.968077][ T9207] netlink: 'syz.1.1015': attribute type 1 has an invalid length.
[  126.972843][ T9207] netlink: 'syz.1.1015': attribute type 1 has an invalid length.
[  127.133853][ T9216] netlink: 'syz.1.1017': attribute type 2 has an invalid length.
[  127.233878][ T9233] sctp: [Deprecated]: syz.2.1022 (pid 9233) Use of int in maxseg socket option.
[  127.233878][ T9233] Use struct sctp_assoc_value instead
[  127.425132][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'.
[  127.553628][ T9276] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1034'.
[  127.583151][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'.
[  127.854958][ T9296] veth0: entered promiscuous mode
[  127.858395][ T9295] veth0: left promiscuous mode
[  128.472043][ T9335] netlink: 'syz.1.1049': attribute type 178 has an invalid length.
[  128.650624][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.811665][ T9356] xt_time: invalid argument - start or stop time greater than 23:59:59
[  129.107548][ T9368] netlink: 'syz.1.1063': attribute type 10 has an invalid length.
[  129.143313][ T9368] batman_adv: batadv0: Adding interface: netdevsim0
[  129.145477][ T9368] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  129.272919][ T9382] netlink: 'syz.1.1069': attribute type 1 has an invalid length.
[  129.275914][ T9382] netlink: 'syz.1.1069': attribute type 4 has an invalid length.
[  129.308596][ T9387] netlink: 'syz.2.1073': attribute type 178 has an invalid length.
[  129.628881][ T9417] lo speed is unknown, defaulting to 1000
[  129.843326][ T9442] netlink: 'syz.1.1087': attribute type 178 has an invalid length.
[  130.928963][ T9489] sctp: [Deprecated]: syz.1.1102 (pid 9489) Use of int in maxseg socket option.
[  130.928963][ T9489] Use struct sctp_assoc_value instead
[  131.174520][ T9517] __nla_validate_parse: 10 callbacks suppressed
[  131.174532][ T9517] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1110'.
[  131.189713][ T9517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.194333][ T9517] syzkaller0: entered promiscuous mode
[  131.196275][ T9517] syzkaller0: entered allmulticast mode
[  131.199021][ T9517] tipc: Resetting bearer <eth:syzkaller0>
[  131.214402][ T9516] tipc: Resetting bearer <eth:syzkaller0>
[  131.241501][ T9516] tipc: Disabling bearer <eth:syzkaller0>
[  131.877044][ T5238] Bluetooth: hci1: link tx timeout
[  131.879244][ T5238] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.008072][ T9545] lo: entered promiscuous mode
[  132.017786][ T9545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.041337][ T9545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1115'.
[  132.145405][ T9556] validate_nla: 4 callbacks suppressed
[  132.145415][ T9556] netlink: 'syz.1.1123': attribute type 1 has an invalid length.
[  132.149747][ T9556] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1123'.
[  132.156727][ T9556] netlink: 'syz.1.1123': attribute type 1 has an invalid length.
[  132.176615][ T9560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1124'.
[  132.188665][ T9560] netlink: 'syz.2.1124': attribute type 2 has an invalid length.
[  132.248329][ T9561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1124'.
[  132.258483][ T9563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1124'.
[  132.358124][ T9574] netlink: 'syz.2.1127': attribute type 83 has an invalid length.
[  132.364393][ T9574] netlink: 'syz.2.1127': attribute type 1 has an invalid length.
[  132.367160][ T9574] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1127'.
[  132.528640][ T9592] netlink: 'syz.1.1132': attribute type 26 has an invalid length.
[  132.601015][ T9592] block nbd0: server does not support multiple connections per device.
[  132.605849][ T9592] block nbd0: shutting down sockets
[  132.754252][ T9609] netem: incorrect ge model size
[  132.756152][ T9609] netem: change failed
[  132.786788][ T9611] lo speed is unknown, defaulting to 1000
[  132.900191][ T9611] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1140'.
[  133.016594][ T9638] netlink: 'syz.1.1148': attribute type 178 has an invalid length.
[  133.216864][ T9644] netlink: 'syz.0.1150': attribute type 178 has an invalid length.
[  133.316093][ T9659] netlink: 'syz.1.1153': attribute type 3 has an invalid length.
[  133.940616][ T5238] Bluetooth: hci1: command 0x0406 tx timeout
[  134.240035][ T9691] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  134.291643][ T9693] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  134.295231][ T9693] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  134.760903][ T9706] TCP: TCP_TX_DELAY enabled
[  134.850581][ T9708] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1171'.
[  134.931174][ T9711] netlink: 'syz.2.1172': attribute type 2 has an invalid length.
[  135.002952][ T9711] k*]: entered promiscuous mode
[  135.132826][ T9717] netlink: 556 bytes leftover after parsing attributes in process `syz.2.1174'.
[  135.618000][ T9784] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  136.038386][ T9823] openvswitch: netlink: Key type 29 is not supported
[  136.188201][ T9834] wg1 speed is unknown, defaulting to 1000
[  136.192195][ T9834] wg1 speed is unknown, defaulting to 1000
[  136.195436][ T9834] wg1 speed is unknown, defaulting to 1000
[  136.206085][ T9834] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  136.227612][ T9834] wg1 speed is unknown, defaulting to 1000
[  136.233125][ T9834] wg1 speed is unknown, defaulting to 1000
[  136.235875][ T9834] wg1 speed is unknown, defaulting to 1000
[  136.690197][ T9859] __nla_validate_parse: 14 callbacks suppressed
[  136.690208][ T9859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1220'.
[  136.764978][ T9869] syzkaller0: entered promiscuous mode
[  136.767467][ T9869] syzkaller0: entered allmulticast mode
[  136.773043][ T9868] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.809017][ T9869] tipc: Resetting bearer <eth:syzkaller0>
[  136.861841][ T9869] tipc: Disabling bearer <eth:syzkaller0>
[  137.027968][ T9911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1234'.
[  137.291942][ T9952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1246'.
[  137.325923][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1247'.
[  137.334105][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.336931][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.344806][ T9954] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  137.576177][ T9969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1251'.
[  137.657798][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1254'.
[  138.158941][T10024] validate_nla: 14 callbacks suppressed
[  138.158952][T10024] netlink: 'syz.2.1272': attribute type 1 has an invalid length.
[  138.161907][T10023] netlink: 'syz.0.1270': attribute type 21 has an invalid length.
[  138.166308][T10024] netlink: 'syz.2.1272': attribute type 6 has an invalid length.
[  138.168311][T10023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1270'.
[  138.169997][T10024] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1272'.
[  138.492951][T10056] netlink: 'syz.1.1285': attribute type 2 has an invalid length.
[  138.617539][T10069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1290'.
[  138.621147][T10069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1290'.
[  138.692270][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.694784][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.733908][T10080] bond0: (slave gretap0): Opening slave failed
[  139.149132][T10108] netlink: 'syz.2.1305': attribute type 178 has an invalid length.
[  139.176970][T10110] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  139.423981][T10128] netlink: 'syz.2.1313': attribute type 178 has an invalid length.
[  139.617670][T10147] netlink: 'syz.1.1318': attribute type 9 has an invalid length.
[  139.663429][T10151] netlink: 'syz.0.1321': attribute type 1 has an invalid length.
[  139.698130][T10151] bond2 (unregistering): Released all slaves
[  139.737689][T10158] bond0: option xmit_hash_policy: invalid value (255)
[  140.001748][T10182] tipc: Can't bind to reserved service type 2
[  140.181698][T10204] netlink: 'syz.2.1340': attribute type 178 has an invalid length.
[  140.271607][T10217] bridge_slave_0: left allmulticast mode
[  140.273368][T10217] bridge_slave_0: left promiscuous mode
[  140.275180][T10217] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.279425][T10217] bridge_slave_1: left allmulticast mode
[  140.281920][T10217] bridge_slave_1: left promiscuous mode
[  140.283812][T10217] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.290062][T10217] bond0: (slave bond_slave_0): Releasing backup interface
[  140.305083][T10217] bond0: (slave bond_slave_1): Releasing backup interface
[  140.319191][T10217] team0: Port device team_slave_0 removed
[  140.336486][T10217] team0: Port device team_slave_1 removed
[  140.340063][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.348580][T10217] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.358031][T10217] batman_adv: batadv0: Removing interface: netdevsim0
[  140.365154][T10217] bond4: (slave geneve2): Releasing active interface
[  140.372619][   T47] wg1 speed is unknown, defaulting to 1000
[  140.392106][T10217] netlink: 'syz.1.1345': attribute type 10 has an invalid length.
[  140.417598][T10217] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  140.429829][T10217] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  140.435562][T10217] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  141.463368][T10303] lo speed is unknown, defaulting to 1000
[  141.468845][T10303] wg1 speed is unknown, defaulting to 1000
[  141.544070][T10300] syzkaller0: entered promiscuous mode
[  141.545913][T10300] syzkaller0: entered allmulticast mode
[  141.723198][T10314] lo speed is unknown, defaulting to 1000
[  141.730354][T10314] wg1 speed is unknown, defaulting to 1000
[  141.909143][T10326] bond0: (slave wlan1): Releasing backup interface
[  142.197030][T10349] bridge6: the hash_elasticity option has been deprecated and is always 16
[  142.202545][T10349] bridge6: entered promiscuous mode
[  142.244170][T10353] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x11
[  142.352238][T10365] __nla_validate_parse: 10 callbacks suppressed
[  142.352255][T10365] netlink: 16175 bytes leftover after parsing attributes in process `syz.1.1396'.
[  142.445937][T10374] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1398'.
[  142.456061][T10376] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1398'.
[  142.564109][T10388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1403'.
[  142.609962][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1404'.
[  142.635205][T10394] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1405'.
[  142.690985][T10402] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1408'.
[  142.919712][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1415'.
[  142.999720][T10432] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  143.034912][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1418'.
[  143.146194][T10438] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.149197][T10438] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.165008][T10438] tipc: Resetting bearer <eth:team0>
[  143.277285][T10438] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.294091][T10438] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.445106][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1417'.
[  143.448080][ T5870] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.451656][ T5870] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.454909][ T5870] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.457984][ T5870] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.554017][T10455] IPVS: Scheduler module ip_vs_sip not found
[  143.604139][T10460] validate_nla: 6 callbacks suppressed
[  143.604151][T10460] netlink: 'syz.0.1424': attribute type 178 has an invalid length.
[  143.671514][T10465] netlink: 'syz.0.1426': attribute type 10 has an invalid length.
[  143.683821][T10465] veth0_vlan: left promiscuous mode
[  143.687044][T10465] veth0_vlan: entered promiscuous mode
[  143.692990][T10465] team0: Device veth0_vlan failed to register rx_handler
[  144.474883][T10491] netlink: 'syz.1.1432': attribute type 178 has an invalid length.
[  144.485526][T10491] netlink: 'syz.1.1432': attribute type 178 has an invalid length.
[  144.606258][T10503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.611763][T10501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  145.669701][T10539] netlink: 'syz.1.1444': attribute type 5 has an invalid length.
[  145.810061][T10552] netlink: 'syz.2.1449': attribute type 178 has an invalid length.
[  145.936050][T10565] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  146.089595][T10571] netlink: 'syz.1.1455': attribute type 178 has an invalid length.
[  146.368262][T10593] netlink: 'syz.1.1462': attribute type 178 has an invalid length.
[  146.409945][T10596] syzkaller1: entered promiscuous mode
[  146.420661][T10596] syzkaller1: entered allmulticast mode
[  146.429493][T10600] netlink: 'syz.0.1464': attribute type 1 has an invalid length.
[  146.450379][T10600] 8021q: adding VLAN 0 to HW filter on device bond2
[  146.472551][T10600] bond2: (slave veth11): Enslaving as an active interface with a down link
[  146.480324][T10600] macvlan3: entered promiscuous mode
[  146.484059][T10600] macvlan3: entered allmulticast mode
[  146.486541][T10600] bond2: entered promiscuous mode
[  146.488636][T10600] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  146.492126][T10600] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  146.498868][T10600] bond2: left promiscuous mode
[  146.699779][T10616] netlink: 'syz.1.1468': attribute type 178 has an invalid length.
[  146.909656][T10567] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  147.321488][T10678] 8021q: adding VLAN 0 to HW filter on device bond3
[  147.334349][T10678] bond3: (slave gretap1): making interface the new active one
[  147.337783][T10678] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  147.398255][T10685] __nla_validate_parse: 113 callbacks suppressed
[  147.398271][T10685] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1494'.
[  147.482323][T10696] tipc: Started in network mode
[  147.483977][T10696] tipc: Node identity , cluster identity 4711
[  147.486260][T10696] tipc: Failed to set node id, please configure manually
[  147.495351][T10696] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  147.597596][T10708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1502'.
[  147.638451][T10713] tap0: tun_chr_ioctl cmd 1074025677
[  147.640305][T10713] tap0: linktype set to 776
[  147.653772][T10713] tap0: tun_chr_ioctl cmd 1074025673
[  147.654941][T10716] delete_channel: no stack
[  147.679404][T10725] IPv6: NLM_F_CREATE should be specified when creating new route
[  147.685509][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.991309][T10751] lo speed is unknown, defaulting to 1000
[  147.993904][T10751] wg1 speed is unknown, defaulting to 1000
[  148.072895][T10749] block nbd0: server does not support multiple connections per device.
[  148.089768][T10749] block nbd0: shutting down sockets
[  148.316427][T10769] bridge0: port 1(batadv1) entered blocking state
[  148.321405][T10769] bridge0: port 1(batadv1) entered disabled state
[  148.326415][T10769] batadv1: entered allmulticast mode
[  148.336557][T10769] batadv1: entered promiscuous mode
[  148.497009][T10784] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  148.622898][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'.
[  148.625701][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1527'.
[  148.629237][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'.
[  148.632341][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1527'.
[  148.743944][T10810] validate_nla: 6 callbacks suppressed
[  148.743956][T10810] netlink: 'syz.1.1531': attribute type 178 has an invalid length.
[  148.810616][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  148.813762][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  148.862184][T10821] lo speed is unknown, defaulting to 1000
[  148.866176][T10821] wg1 speed is unknown, defaulting to 1000
[  148.903823][T10826] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1538'.
[  149.048966][T10835] lo speed is unknown, defaulting to 1000
[  149.052810][T10835] wg1 speed is unknown, defaulting to 1000
[  149.083083][T10838] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1541'.
[  149.263664][T10851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1548'.
[  149.353388][T10859] netlink: 'syz.0.1551': attribute type 178 has an invalid length.
[  149.392972][T10863] netlink: 'syz.0.1553': attribute type 178 has an invalid length.
[  149.416416][T10865] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1554'.
[  149.651343][T10907] netlink: 'syz.2.1563': attribute type 29 has an invalid length.
[  149.728771][T10920] netlink: 'syz.1.1570': attribute type 178 has an invalid length.
[  149.756955][T10924] netlink: 'syz.0.1572': attribute type 178 has an invalid length.
[  149.796703][T10928] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  149.804789][T10926] netlink: 'syz.0.1573': attribute type 178 has an invalid length.
[  150.154500][T10964] netlink: 'syz.0.1584': attribute type 178 has an invalid length.
[  150.278494][T10978] veth1_to_batadv: default FDB implementation only supports local addresses
[  150.313875][T10984] netlink: 'syz.0.1590': attribute type 178 has an invalid length.
[  150.396446][T10994] vcan0: entered allmulticast mode
[  150.615250][T11014] netlink: 'syz.2.1601': attribute type 1 has an invalid length.
[  150.619434][T11014] block nbd0: shutting down sockets
[  150.994715][T11055] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  151.305578][T11080] veth5: entered promiscuous mode
[  151.932022][T11130] veth0: entered promiscuous mode
[  152.137796][T11154] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  152.143290][T11157] netem: incorrect ge model size
[  152.145084][T11157] netem: change failed
[  152.320190][T11180] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  152.422416][T11191] __nla_validate_parse: 23 callbacks suppressed
[  152.422432][T11191] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1664'.
[  152.456278][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1666'.
[  152.459527][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1666'.
[  152.465555][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'.
[  152.468564][T11195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1666'.
[  152.795392][T11245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1681'.
[  152.861559][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1681'.
[  152.949570][T11259] bridge0: port 1(syz_tun) entered blocking state
[  152.954548][T11259] bridge0: port 1(syz_tun) entered disabled state
[  152.956815][T11259] syz_tun: entered allmulticast mode
[  152.959486][T11259] syz_tun: entered promiscuous mode
[  153.007733][T11261] bond5: (slave gretap1): making interface the new active one
[  153.010741][T11261] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  153.662253][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'.
[  153.724775][T11291] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1691'.
[  153.895264][T11310] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1699'.
[  154.097666][T11327] tipc: Enabling of bearer <et:g> rejected, media not registered
[  154.293161][T11345] sctp: [Deprecated]: syz.2.1711 (pid 11345) Use of int in max_burst socket option.
[  154.293161][T11345] Use struct sctp_assoc_value instead
[  154.367696][T11351] lo speed is unknown, defaulting to 1000
[  154.374052][T11351] wg1 speed is unknown, defaulting to 1000
[  154.652413][T11367] bridge_slave_1: left allmulticast mode
[  154.654341][T11367] bridge_slave_1: left promiscuous mode
[  154.656256][T11367] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.660166][T11367] bridge_slave_0: left allmulticast mode
[  154.663643][T11367] bridge_slave_0: left promiscuous mode
[  154.665504][T11367] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.085266][T11390] validate_nla: 10 callbacks suppressed
[  155.085280][T11390] netlink: 'syz.2.1722': attribute type 13 has an invalid length.
[  155.089452][T11390] netlink: 'syz.2.1722': attribute type 17 has an invalid length.
[  155.107198][T11390] erspan0: entered promiscuous mode
[  155.134323][T11390] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.141499][T11390] 8021q: adding VLAN 0 to HW filter on device team0
[  155.144118][T11390] tipc: Resetting bearer <eth:team0>
[  155.146449][T11390] tipc: Resetting bearer <eth:team0>
[  155.152632][T11390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.171608][T11391] xfrm0: entered promiscuous mode
[  155.173626][T11391] xfrm0: entered allmulticast mode
[  155.209110][T11390] lo speed is unknown, defaulting to 1000
[  155.213582][T11390] wg1 speed is unknown, defaulting to 1000
[  155.368091][T11400] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  155.596503][T11416] Unknown options in mask b7f2
[  155.873163][T11441] tipc: Invalid UDP bearer configuration
[  155.873191][T11441] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  155.947072][T11445] openvswitch: netlink: IP tunnel dst address not specified
[  156.219632][T11480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.223750][T11480] syzkaller0: entered promiscuous mode
[  156.225498][T11480] syzkaller0: entered allmulticast mode
[  156.239921][T11477] tipc: Resetting bearer <eth:syzkaller0>
[  156.255241][T11477] tipc: Disabling bearer <eth:syzkaller0>
[  157.129754][T11546] tipc: Started in network mode
[  157.133496][T11546] tipc: Node identity 028bc789d14b, cluster identity 4711
[  157.136043][T11546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.138565][T11546] syzkaller0: entered promiscuous mode
[  157.141939][T11546] syzkaller0: entered allmulticast mode
[  157.157825][T11546] tipc: Resetting bearer <eth:syzkaller0>
[  157.163682][T11544] tipc: Resetting bearer <eth:syzkaller0>
[  157.186096][T11544] tipc: Disabling bearer <eth:syzkaller0>
[  157.243397][T11554] lo speed is unknown, defaulting to 1000
[  157.486000][T11597] __nla_validate_parse: 20 callbacks suppressed
[  157.486012][T11597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1781'.
[  157.523026][T11594] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  157.543664][T11606] netlink: 'syz.1.1786': attribute type 178 has an invalid length.
[  157.624480][T11625] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1791'.
[  157.628754][T11628] netlink: 'syz.1.1792': attribute type 8 has an invalid length.
[  157.631373][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'.
[  157.769136][T11668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1796'.
[  157.831176][T11684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.065155][T11692] netlink: 'syz.1.1800': attribute type 1 has an invalid length.
[  158.069426][T11692] netlink: 'syz.1.1800': attribute type 2 has an invalid length.
[  158.081440][T11692] netlink: 'syz.1.1800': attribute type 1 has an invalid length.
[  158.084441][T11692] netlink: 'syz.1.1800': attribute type 2 has an invalid length.
[  158.193417][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1801'.
[  158.203142][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1801'.
[  158.322930][T11835] bridge6: entered promiscuous mode
[  158.325809][T11835] bridge6: entered allmulticast mode
[  158.335725][T11835] team0: Port device bridge6 added
[  158.385231][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'.
[  158.511303][T11870] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  158.515654][T11870] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  158.530778][ T5911] tipc: Node number set to 2141402671
[  158.617013][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1808'.
[  158.641304][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1809'.
[  158.756816][T11880] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1810'.
[  158.843686][T11882] netlink: zone id is out of range
[  158.846325][T11882] netlink: zone id is out of range
[  158.860225][T11882] netlink: zone id is out of range
[  158.872567][T11882] netlink: zone id is out of range
[  158.874980][T11882] netlink: zone id is out of range
[  158.879486][T11882] netlink: zone id is out of range
[  158.896797][T11882] netlink: zone id is out of range
[  159.763066][T11929] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  159.937602][T11940] netlink: 'syz.1.1829': attribute type 21 has an invalid length.
[  159.940215][T11940] netlink: 'syz.1.1829': attribute type 4 has an invalid length.
[  160.098246][T11949] validate_nla: 129 callbacks suppressed
[  160.098259][T11949] netlink: 'syz.0.1833': attribute type 178 has an invalid length.
[  160.338025][T11959] netlink: 'syz.1.1837': attribute type 1 has an invalid length.
[  160.528592][T11975] netlink: 'syz.0.1844': attribute type 178 has an invalid length.
[  160.564104][T11979] net_ratelimit: 9 callbacks suppressed
[  160.564125][T11979] sit0: mtu less than device minimum
[  160.568110][T11978] sit0: mtu less than device minimum
[  160.571922][ T5864] Bluetooth: hci0: command tx timeout
[  160.627105][T11985] wireguard0: entered promiscuous mode
[  160.628967][T11985] wireguard0: entered allmulticast mode
[  160.664588][T11992] netlink: 'syz.0.1848': attribute type 178 has an invalid length.
[  160.700501][T11998] netlink: 'syz.0.1850': attribute type 178 has an invalid length.
[  160.753761][T12007] netlink: 'syz.2.1853': attribute type 178 has an invalid length.
[  161.115228][T12029] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.122640][T12029] tipc: Resetting bearer <eth:syzkaller0>
[  161.126907][T12028] tipc: Disabling bearer <eth:syzkaller0>
[  161.739252][T12052] netlink: 'syz.1.1870': attribute type 32 has an invalid length.
[  161.744762][T12052] (unnamed net_device) (uninitialized): option coupled_control: invalid value (118)
[  161.914573][T12060] delete_channel: no stack
[  161.955244][T12063] netlink: 'syz.1.1875': attribute type 4 has an invalid length.
[  161.958880][T12063] netlink: 'syz.1.1875': attribute type 4 has an invalid length.
[  162.072667][T12067] netlink: del zone limit has 8 unknown bytes
[  162.302342][T12084] netlink: 'syz.1.1884': attribute type 1 has an invalid length.
[  162.365799][T12088] gtp1: entered promiscuous mode
[  162.615527][T12110] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  162.649560][T12117] __nla_validate_parse: 153 callbacks suppressed
[  162.649572][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1897'.
[  162.678127][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1897'.
[  162.773863][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'.
[  163.143679][T12165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1911'.
[  163.240384][T12165] lo speed is unknown, defaulting to 1000
[  163.244210][T12165] wg1 speed is unknown, defaulting to 1000
[  163.391762][T12174] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.395078][T12174] syzkaller0: entered promiscuous mode
[  163.396946][T12174] syzkaller0: entered allmulticast mode
[  163.410639][T12174] tipc: Resetting bearer <eth:syzkaller0>
[  163.413952][T12174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1912'.
[  163.419567][T12173] tipc: Resetting bearer <eth:syzkaller0>
[  163.438301][T12173] tipc: Disabling bearer <eth:syzkaller0>
[  163.583259][T12176] sctp: [Deprecated]: syz.0.1913 (pid 12176) Use of int in maxseg socket option.
[  163.583259][T12176] Use struct sctp_assoc_value instead
[  163.659341][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1914'.
[  163.759180][T12184] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1915'.
[  163.807761][ T5911] IPVS: starting estimator thread 0...
[  163.912954][T12187] IPVS: using max 48 ests per chain, 115200 per kthread
[  164.353217][T12226] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1930'.
[  164.484240][T12240] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  164.547135][T12236] lo speed is unknown, defaulting to 1000
[  164.551084][T12236] wg1 speed is unknown, defaulting to 1000
[  164.865763][T12253] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1936'.
[  164.985711][T12273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1944'.
[  165.028225][T12276] syzkaller1: entered promiscuous mode
[  165.029900][T12276] syzkaller1: entered allmulticast mode
[  165.044996][T12280] syz_tun: entered allmulticast mode
[  165.047447][T12280] unsupported nlmsg_type 40
[  165.154480][T12288] lo speed is unknown, defaulting to 1000
[  165.157079][T12288] wg1 speed is unknown, defaulting to 1000
[  165.182132][T12295] sctp: [Deprecated]: syz.0.1952 (pid 12295) Use of int in max_burst socket option.
[  165.182132][T12295] Use struct sctp_assoc_value instead
[  165.203157][T12294] sctp: [Deprecated]: syz.0.1952 (pid 12294) Use of int in max_burst socket option.
[  165.203157][T12294] Use struct sctp_assoc_value instead
[  165.849447][T12336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.859250][T12336] syzkaller0: entered promiscuous mode
[  165.865032][T12336] syzkaller0: entered allmulticast mode
[  165.938360][T12343] tipc: Resetting bearer <eth:syzkaller0>
[  166.394241][T12360] validate_nla: 5 callbacks suppressed
[  166.394259][T12360] netlink: 'syz.0.1972': attribute type 178 has an invalid length.
[  166.652551][T12334] tipc: Resetting bearer <eth:syzkaller0>
[  166.664853][T12334] tipc: Disabling bearer <eth:syzkaller0>
[  166.745721][T12379] bond0: default FDB implementation only supports local addresses
[  167.626917][T12440] lo speed is unknown, defaulting to 1000
[  167.636373][T12440] wg1 speed is unknown, defaulting to 1000
[  167.644070][T12443] netlink: 'syz.0.1999': attribute type 1 has an invalid length.
[  167.656102][T12443] netlink: 'syz.0.1999': attribute type 1 has an invalid length.
[  167.663033][T12443] netlink: 'syz.0.1999': attribute type 2 has an invalid length.
[  167.667128][T12443] __nla_validate_parse: 14 callbacks suppressed
[  167.667465][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'.
[  167.678198][T12443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1999'.
[  167.724589][T12450] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2001'.
[  167.727373][T12450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2001'.
[  167.735903][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2001'.
[  167.773699][T12452] syzkaller0: entered promiscuous mode
[  167.775435][T12452] syzkaller0: entered allmulticast mode
[  168.377525][T12471] netlink: 'syz.1.2007': attribute type 12 has an invalid length.
[  168.978410][T12496] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2015'.
[  169.145552][T12510] tipc: Enabled bearer <udp:syz1>, priority 10
[  169.213070][T12514] netlink: 'syz.2.2020': attribute type 178 has an invalid length.
[  169.293729][T12520] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2023'.
[  169.836086][T12533] netlink: 'syz.1.2027': attribute type 178 has an invalid length.
[  170.243931][T12556] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2037'.
[  171.037953][T12563] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  171.093342][T12568] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2041'.
[  171.104092][T12570] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2042'.
[  171.993063][T12604] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  172.125667][T12619] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.156958][T12622] netlink: 'syz.0.2055': attribute type 1 has an invalid length.
[  172.159962][T12622] netlink: 'syz.0.2055': attribute type 2 has an invalid length.
[  172.163892][T12622] netlink: 'syz.0.2055': attribute type 1 has an invalid length.
[  172.217620][T12628] netlink: 'syz.1.2058': attribute type 178 has an invalid length.
[  172.224122][T12629] netlink: 'syz.1.2058': attribute type 178 has an invalid length.
[  172.525176][T12659] netlink: 'syz.2.2068': attribute type 1 has an invalid length.
[  173.091196][ T5864] Bluetooth: hci0: command tx timeout
[  174.048674][ T5864] Bluetooth: hci1: command 0x0406 tx timeout
[  175.802626][T12679] __nla_validate_parse: 9 callbacks suppressed
[  175.802643][T12679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2074'.
[  175.936529][T12691] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2078'.
[  175.961454][T12690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2077'.
[  175.996237][T12699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.009382][T12697] syzkaller0: entered promiscuous mode
[  176.015396][T12697] syzkaller0: entered allmulticast mode
[  176.037420][T12698] tipc: Resetting bearer <eth:syzkaller0>
[  176.039847][T12690] lo speed is unknown, defaulting to 1000
[  176.042580][T12696] tipc: Resetting bearer <eth:syzkaller0>
[  176.053973][T12696] tipc: Disabling bearer <eth:syzkaller0>
[  176.059692][T12690] wg1 speed is unknown, defaulting to 1000
[  176.063626][T12701] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2077'.
[  176.362625][T12714] netlink: 'syz.1.2085': attribute type 1 has an invalid length.
[  176.424534][T12717] netlink: 'syz.1.2086': attribute type 1 has an invalid length.
[  176.462222][T12717] bond6: (slave geneve3): making interface the new active one
[  176.465731][T12717] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  176.469569][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  176.473518][   T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  176.476863][   T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  176.479506][T12717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2086'.
[  176.480974][   T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  176.491658][T12717] 8021q: adding VLAN 0 to HW filter on device bond6
[  176.826580][T12730] syzkaller1: entered promiscuous mode
[  176.828813][T12730] syzkaller1: entered allmulticast mode
[  176.834200][T12730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2091'.
[  176.947321][T12732] netlink: 'syz.0.2092': attribute type 178 has an invalid length.
[  177.036763][T12737] sctp: [Deprecated]: syz.0.2094 (pid 12737) Use of struct sctp_assoc_value in delayed_ack socket option.
[  177.036763][T12737] Use struct sctp_sack_info instead
[  177.154915][T12742] netlink: 'syz.1.2097': attribute type 1 has an invalid length.
[  177.161190][T12742] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2097'.
[  177.165769][T12742] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  177.306755][T12762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2103'.
[  177.309763][T12762] tc_dump_action: action bad kind
[  177.363377][T12771] netlink: 'syz.1.2105': attribute type 178 has an invalid length.
[  178.041705][T12808] netlink: 'syz.0.2119': attribute type 178 has an invalid length.
[  178.332835][T12815] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20003
[  178.384047][T12820] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  178.436584][T12820] netlink: 'syz.0.2124': attribute type 11 has an invalid length.
[  178.439608][T12820] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2124'.
[  178.671524][T12850] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  178.673794][T12850] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  178.675916][T12850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2137'.
[  178.678609][T12850] tipc: Invalid UDP bearer configuration
[  178.678635][T12850] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  179.221636][T12902] dvmrp8: entered allmulticast mode
[  179.227536][T12901] dvmrp8: left allmulticast mode
[  179.399852][T12919] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  179.446703][T12930] netlink: 'syz.1.2165': attribute type 29 has an invalid length.
[  179.481483][T12936] delete_channel: no stack
[  180.095724][T12992] openvswitch: netlink: Flow key attribute not present in set flow.
[  180.463613][T13028] bond0: (slave bond_slave_0): Releasing backup interface
[  180.471881][T13028] bond0: (slave bond_slave_1): Releasing backup interface
[  180.495941][T13028] team0: Port device team_slave_0 removed
[  180.508172][T13028] team0: Port device team_slave_1 removed
[  180.511537][T13028] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.513951][T13028] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.518236][T13028] batman_adv: batadv0: Interface deactivated: 26
[  180.522327][T13028] batman_adv: batadv0: Removing interface: 26
[  180.530051][T13028] bond2: (slave veth11): Releasing active interface
[  180.536251][T13028] batadv1: left allmulticast mode
[  180.537800][T13028] batadv1: left promiscuous mode
[  180.539383][T13028] bridge0: port 1(batadv1) entered disabled state
[  180.900287][T13071] __nla_validate_parse: 16 callbacks suppressed
[  180.900306][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'.
[  180.911261][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'.
[  181.358296][T13093] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2217'.
[  181.361672][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2217'.
[  181.716372][T13127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  181.719011][T13127] IPv6: NLM_F_CREATE should be set when creating new route
[  181.721405][T13127] IPv6: NLM_F_CREATE should be set when creating new route
[  181.727002][T13127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  181.737614][T13127] syzkaller1: entered promiscuous mode
[  181.740029][T13127] syzkaller1: entered allmulticast mode
[  181.753256][T13127] netlink: 'syz.2.2223': attribute type 178 has an invalid length.
[  181.879038][T13137] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  181.884115][T13137] netlink: 508 bytes leftover after parsing attributes in process `syz.1.2226'.
[  181.985204][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'.
[  181.985424][T13152] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  182.015154][T13158] lo speed is unknown, defaulting to 1000
[  182.017699][T13158] wg1 speed is unknown, defaulting to 1000
[  182.048829][T13162] netlink: 'syz.1.2234': attribute type 10 has an invalid length.
[  182.056638][T13162] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2234'.
[  182.070130][T13162] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2234'.
[  182.493836][T13192] syzkaller0: entered promiscuous mode
[  182.496256][T13192] syzkaller0: entered allmulticast mode
[  182.734899][T13203] lo speed is unknown, defaulting to 1000
[  182.737595][T13203] wg1 speed is unknown, defaulting to 1000
[  182.863006][T13212] netlink: 'syz.1.2251': attribute type 21 has an invalid length.
[  182.867201][T13212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2251'.
[  183.266077][T13237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2258'.
[  184.494773][T13360] netlink: 'syz.0.2281': attribute type 178 has an invalid length.
[  185.146926][T13400] netlink: 'syz.1.2291': attribute type 1 has an invalid length.
[  185.167304][T13400] bond7: entered promiscuous mode
[  185.169279][T13400] 8021q: adding VLAN 0 to HW filter on device bond7
[  185.473401][T13412] netlink: 'syz.2.2297': attribute type 1 has an invalid length.
[  186.037141][T13447] syzkaller1: entered promiscuous mode
[  186.039152][T13447] syzkaller1: entered allmulticast mode
[  186.373580][T13459] netlink: 'syz.1.2309': attribute type 10 has an invalid length.
[  186.382997][T13459] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.386613][T13459] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  186.505335][T13463] __nla_validate_parse: 12 callbacks suppressed
[  186.505348][T13463] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2311'.
[  186.522425][T13463] bridge0: port 2(batadv1) entered blocking state
[  186.525118][T13463] bridge0: port 2(batadv1) entered disabled state
[  186.527792][T13463] batadv1: entered allmulticast mode
[  186.538850][T13463] batadv1: entered promiscuous mode
[  186.748024][T13483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2317'.
[  186.755818][T13483] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  186.792394][T13483] netlink: 'syz.0.2317': attribute type 178 has an invalid length.
[  186.929029][T13498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2323'.
[  187.009381][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'.
[  187.022011][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  187.025594][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  187.278007][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'.
[  187.363265][T13545] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2339'.
[  187.580217][T13563] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  187.581244][T13564] netlink: 'syz.0.2345': attribute type 178 has an invalid length.
[  187.584265][T13563] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  187.945913][T13582] lo speed is unknown, defaulting to 1000
[  187.948559][T13582] wg1 speed is unknown, defaulting to 1000
[  188.253431][T13588] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2351'.
[  188.257937][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2351'.
[  188.294563][T13590] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2352'.
[  188.297506][T13590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2352'.
[  188.503980][T13607] netlink: 'syz.0.2358': attribute type 178 has an invalid length.
[  188.665488][T13614] netlink: 'syz.0.2361': attribute type 178 has an invalid length.
[  188.720287][T13618] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  188.839610][T13632] netlink: 'syz.1.2366': attribute type 12 has an invalid length.
[  188.846907][T13629] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  188.913109][T13635] netlink: 'syz.2.2367': attribute type 1 has an invalid length.
[  189.366039][T13662] netlink: 'syz.1.2377': attribute type 178 has an invalid length.
[  189.632638][T13690] Unsupported ieee802154 address type: 0
[  189.735629][T13675] netlink: 'syz.0.2382': attribute type 178 has an invalid length.
[  189.853200][T13709] netlink: 'syz.2.2394': attribute type 178 has an invalid length.
[  189.921503][T13713] netlink: 'syz.2.2396': attribute type 178 has an invalid length.
[  190.281554][T13738] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  190.326989][T13742] netlink: 'syz.2.2405': attribute type 1 has an invalid length.
[  190.886288][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803484ec00: rx timeout, send abort
[  190.902395][ T5864] Bluetooth: hci2: command 0x0401 tx timeout
[  190.967305][T13789] Bluetooth: MGMT ver 1.23
[  190.968990][T13789] Bluetooth: hci1: too big key_count value 32778
[  191.386396][    C1] vcan0: j1939_tp_rxtimer: 0xffff888112553000: rx timeout, send abort
[  191.389782][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803484ec00: abort rx timeout. Force session deactivation
[  191.459798][T13821] netlink: 'syz.2.2432': attribute type 178 has an invalid length.
[  191.488667][T13823] IPv6: Can't replace route, no match found
[  191.523339][T13828] __nla_validate_parse: 15 callbacks suppressed
[  191.523362][T13828] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2434'.
[  191.889695][    C1] vcan0: j1939_tp_rxtimer: 0xffff888112553000: abort rx timeout. Force session deactivation
[  192.101606][T13880] sch_tbf: peakrate 4096 is lower than or equals to rate 185707055559232049 !
[  192.306197][T13890] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2456'.
[  193.441948][T13922] sctp: [Deprecated]: syz.2.2465 (pid 13922) Use of struct sctp_assoc_value in delayed_ack socket option.
[  193.441948][T13922] Use struct sctp_sack_info instead
[  193.640107][T13938] Bluetooth: hci0: Opcode 0x080f failed: -22
[  194.117220][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2483'.
[  194.121171][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2483'.
[  194.134497][T13984] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2484'.
[  194.192356][T13985] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2484'.
[  194.216437][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2486'.
[  194.465213][T14003] validate_nla: 1 callbacks suppressed
[  194.465226][T14003] netlink: 'syz.0.2491': attribute type 178 has an invalid length.
[  194.507651][T14005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2492'.
[  194.562980][T14007] netlink: 'syz.1.2493': attribute type 178 has an invalid length.
[  194.566787][T14007] IPVS: set_ctl: invalid protocol: 115 172.20.20.48:20000
[  194.736350][T14024] Unsupported ieee802154 address type: 0
[  195.514932][T14061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2510'.
[  195.690874][ T5238] Bluetooth: hci0: command tx timeout
[  195.721827][T14073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2515'.
[  196.576897][T14111] team0: Port device vlan0 removed
[  196.668823][T14114] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  196.957036][T14140] syzkaller1: entered promiscuous mode
[  196.967576][T14140] syzkaller1: entered allmulticast mode
[  197.039009][T14153] openvswitch: netlink: IPv4 tun info is not correct
[  197.076487][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2540'.
[  197.080345][T14157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  197.087199][T14157] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  197.089887][T14157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.093786][T14157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  197.184132][T14161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2541'.
[  197.276267][T14176] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2545'.
[  197.334686][T14176] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  197.447838][T14192] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  197.503960][T14198] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2552'.
[  197.522588][T14198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2552'.
[  197.539678][T14199] netlink: 'syz.0.2550': attribute type 178 has an invalid length.
[  197.872383][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2556'.
[  197.875501][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2556'.
[  198.395306][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2566'.
[  198.422984][T14241] netlink: 'syz.0.2565': attribute type 12 has an invalid length.
[  198.682142][T14260] sctp: [Deprecated]: syz.0.2570 (pid 14260) Use of struct sctp_assoc_value in delayed_ack socket option.
[  198.682142][T14260] Use struct sctp_sack_info instead
[  198.793901][T14266] netlink: 'syz.2.2572': attribute type 32 has an invalid length.
[  199.010338][T14288] netlink: 'syz.0.2578': attribute type 21 has an invalid length.
[  199.276168][T14323] netlink: 'syz.1.2589': attribute type 178 has an invalid length.
[  199.325333][T14330] sctp: [Deprecated]: syz.2.2591 (pid 14330) Use of int in max_burst socket option.
[  199.325333][T14330] Use struct sctp_assoc_value instead
[  199.518049][T14351] netlink: 'syz.0.2601': attribute type 178 has an invalid length.
[  199.569410][T14355] openvswitch: netlink: Missing key (keys=40, expected=100)
[  199.569764][T14352] bond0: (slave gretap0): Opening slave failed
[  199.605307][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.608264][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.631608][T14361] netlink: 'syz.1.2606': attribute type 1 has an invalid length.
[  199.777314][T14368] lo speed is unknown, defaulting to 1000
[  199.779961][T14368] wg1 speed is unknown, defaulting to 1000
[  200.171424][T14404] netlink: 'syz.1.2618': attribute type 16 has an invalid length.
[  200.173852][T14404] netlink: 'syz.1.2618': attribute type 17 has an invalid length.
[  200.184158][T14404] bridge0: port 1(syz_tun) entered blocking state
[  200.186325][T14404] bridge0: port 1(syz_tun) entered forwarding state
[  200.197604][T14404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  200.240203][T14410] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.347350][T14415] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  200.736288][T14430] bond0: Device is already in use.
[  201.339615][T14472] netlink: 'syz.2.2645': attribute type 178 has an invalid length.
[  201.457301][T14480] netlink: 'syz.1.2649': attribute type 3 has an invalid length.
[  201.597320][T14490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.604614][T14490] syzkaller0: entered promiscuous mode
[  201.606863][T14490] syzkaller0: entered allmulticast mode
[  201.633582][T14490] tipc: Resetting bearer <eth:syzkaller0>
[  201.642728][T14489] tipc: Resetting bearer <eth:syzkaller0>
[  201.656832][T14489] tipc: Disabling bearer <eth:syzkaller0>
[  202.095948][T14521] lo speed is unknown, defaulting to 1000
[  202.098843][T14521] wg1 speed is unknown, defaulting to 1000
[  202.164679][T14521] __nla_validate_parse: 23 callbacks suppressed
[  202.164695][T14521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2663'.
[  202.474366][T14540] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2670'.
[  202.719423][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811ea03800: rx timeout, send abort
[  202.841277][T14554] netlink: 'syz.1.2675': attribute type 178 has an invalid length.
[  202.844387][T14555] netlink: 'syz.1.2675': attribute type 178 has an invalid length.
[  202.848025][T14557] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2676'.
[  202.861768][T14557] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  202.904941][T14560] netlink: 'syz.1.2677': attribute type 16 has an invalid length.
[  202.908222][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2677'.
[  202.990290][T14567] netlink: 'syz.1.2679': attribute type 178 has an invalid length.
[  203.217885][T14587] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2685'.
[  203.221369][T14586] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2685'.
[  203.224903][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811ea03800: abort rx timeout. Force session deactivation
[  203.310286][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2687'.
[  203.987680][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2699'.
[  203.990752][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2699'.
[  204.120133][T14637] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2705'.
[  205.536250][T14680] validate_nla: 1 callbacks suppressed
[  205.536267][T14680] netlink: 'syz.0.2721': attribute type 178 has an invalid length.
[  206.051555][T14700] netlink: 'syz.0.2727': attribute type 3 has an invalid length.
[  207.479847][T14761] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  207.539361][T14764] netlink: 'syz.0.2745': attribute type 178 has an invalid length.
[  207.543793][T14763] netlink: 'syz.1.2746': attribute type 1 has an invalid length.
[  207.701639][T14772] netlink: 'syz.1.2750': attribute type 178 has an invalid length.
[  207.797507][T14778] netlink: 'syz.1.2753': attribute type 178 has an invalid length.
[  207.857041][T14781] __nla_validate_parse: 12 callbacks suppressed
[  207.857060][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2754'.
[  207.916164][T14786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2756'.
[  208.059581][T14802] siw: device registration error -23
[  208.153498][T14813] netlink: 'syz.1.2762': attribute type 1 has an invalid length.
[  208.156875][T14813] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2762'.
[  208.166176][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'.
[  208.280212][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2768'.
[  208.287154][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2768'.
[  208.291839][T14822] netlink: 'syz.1.2768': attribute type 12 has an invalid length.
[  208.295144][T14822] netlink: 'syz.1.2768': attribute type 15 has an invalid length.
[  208.372467][T14822] netlink: 'syz.1.2768': attribute type 178 has an invalid length.
[  208.415326][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'.
[  209.130962][ T5864] Bluetooth: hci1: command 0x0406 tx timeout
[  209.295810][T14889] sock: sock_timestamping_bind_phc: sock not bind to device
[  209.593871][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'.
[  209.597814][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'.
[  209.694930][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2802'.
[  209.810264][T14928] sctp: [Deprecated]: syz.0.2803 (pid 14928) Use of struct sctp_assoc_value in delayed_ack socket option.
[  209.810264][T14928] Use struct sctp_sack_info instead
[  209.817296][T14929] sctp: [Deprecated]: syz.0.2803 (pid 14929) Use of struct sctp_assoc_value in delayed_ack socket option.
[  209.817296][T14929] Use struct sctp_sack_info instead
[  210.079345][T14931] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  210.815213][T14976] validate_nla: 1 callbacks suppressed
[  210.815224][T14976] netlink: 'syz.0.2820': attribute type 178 has an invalid length.
[  210.969867][T14988] netlink: 'syz.0.2823': attribute type 4 has an invalid length.
[  210.981544][T14983] netlink: 'syz.0.2823': attribute type 4 has an invalid length.
[  210.988484][ T5911] lo speed is unknown, defaulting to 1000
[  210.992573][ T5911] syz1: Port: 1 Link ACTIVE
[  211.014669][T14991] netlink: 'syz.1.2826': attribute type 178 has an invalid length.
[  211.045192][T14995] netlink: 'syz.0.2827': attribute type 1 has an invalid length.
[  211.070230][T14998] netlink: 'syz.1.2829': attribute type 1 has an invalid length.
[  211.088404][T14995] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  211.101181][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  211.101351][T14995] 8021q: adding VLAN 0 to HW filter on device bond3
[  211.233245][T14995] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  211.237925][T14995] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface
[  211.243274][T14995] bond3 (unregistering): Released all slaves
[  211.523386][T15021] dvmrp1: tun_chr_ioctl cmd 1074025677
[  211.525303][T15021] dvmrp1: linktype set to 768
[  212.303976][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.472724][T15091] netlink: 'syz.0.2858': attribute type 178 has an invalid length.
[  212.517048][T15096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.586745][T15103] netlink: 'syz.2.2859': attribute type 1 has an invalid length.
[  212.626649][T15101] netlink: 'syz.0.2861': attribute type 178 has an invalid length.
[  212.687049][T15108] netlink: 'syz.0.2862': attribute type 178 has an invalid length.
[  212.901740][T15119] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  213.008053][T15125] __nla_validate_parse: 20 callbacks suppressed
[  213.008068][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2868'.
[  213.013841][T15125] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  213.098138][T15129] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.237213][T15142] openvswitch: netlink: nsh attr 7 is out of range max 3
[  213.239711][T15142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.247493][T15142] openvswitch: netlink: nsh attr 7 is out of range max 3
[  213.250272][T15142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.316612][T15148] lo: left promiscuous mode
[  213.326077][T15148] 8021q: adding VLAN 0 to HW filter on device team0
[  213.337537][T15150] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  213.374333][T15148] lo speed is unknown, defaulting to 1000
[  213.378714][T15148] wg1 speed is unknown, defaulting to 1000
[  213.418676][T15154] syzkaller1: tun_chr_ioctl cmd 2148553947
[  213.921821][T15190] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2885'.
[  214.023562][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2886'.
[  214.253455][T15224] tipc: Resetting bearer <eth:team0>
[  214.256130][T15224] tipc: Resetting bearer <eth:team0>
[  214.265177][T15224] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2893'.
[  214.321907][T15234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2896'.
[  214.402367][T15234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2896'.
[  214.417738][T15234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2896'.
[  214.420968][T15234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2896'.
[  214.456633][T15249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2898'.
[  214.499780][T15241] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2896'.
[  215.668863][T15323] syzkaller1: entered promiscuous mode
[  215.672243][T15323] syzkaller1: entered allmulticast mode
[  216.526943][T15370] Unsupported xt match
[  216.526954][T15370] unable to load match
[  216.611274][ T5922] net_ratelimit: 9 callbacks suppressed
[  216.611286][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.751094][T15385] validate_nla: 9 callbacks suppressed
[  216.751110][T15385] netlink: 'syz.2.2929': attribute type 3 has an invalid length.
[  216.771060][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.806110][T15392] openvswitch: netlink: Flow actions attr not present in new flow.
[  216.848906][T15390] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  217.043581][T15420] netlink: 'syz.2.2938': attribute type 21 has an invalid length.
[  217.046215][T15420] netlink: 'syz.2.2938': attribute type 5 has an invalid length.
[  217.187397][T15433] bridge0: failed insert local address into bridge forwarding table
[  217.454170][T15455] lo speed is unknown, defaulting to 1000
[  217.459449][T15455] wg1 speed is unknown, defaulting to 1000
[  217.540857][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.687046][T15470] netlink: 'syz.1.2952': attribute type 3 has an invalid length.
[  217.858106][T15476] netlink: 'syz.1.2955': attribute type 4 has an invalid length.
[  217.881515][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.010980][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.146131][T15516] netlink: 'syz.1.2966': attribute type 4 has an invalid length.
[  219.170962][T15516] netlink: 'syz.1.2966': attribute type 4 has an invalid length.
[  219.173486][T15520] lo speed is unknown, defaulting to 1000
[  219.184579][T15520] wg1 speed is unknown, defaulting to 1000
[  219.228875][T15525] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  219.233786][T15525] macsec1: entered promiscuous mode
[  219.237940][T15525] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  219.258665][T15524] __nla_validate_parse: 16 callbacks suppressed
[  219.258680][T15524] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2969'.
[  219.340989][T15532] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2971'.
[  219.508273][T15545] netlink: 'syz.1.2976': attribute type 178 has an invalid length.
[  219.691294][T15564] netlink: 'syz.2.2980': attribute type 178 has an invalid length.
[  219.780007][T15575] netlink: 'syz.0.2984': attribute type 1 has an invalid length.
[  219.783942][T15575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2984'.
[  219.835867][T15579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2986'.
[  219.849534][T15579] tc_dump_action: action bad kind
[  219.854170][T15580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2986'.
[  219.858439][T15580] tc_dump_action: action bad kind
[  220.077729][T15606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2993'.
[  220.121387][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.136525][T15611] veth1_to_batadv: entered allmulticast mode
[  221.231323][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.573863][T15661] dvmrp1: entered allmulticast mode
[  221.576120][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3011'.
[  221.588027][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3011'.
[  221.706963][T15671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3014'.
[  221.776242][T15681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  221.798837][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3015'.
[  221.828523][T15681] validate_nla: 4 callbacks suppressed
[  221.828534][T15681] netlink: 'syz.1.3017': attribute type 3 has an invalid length.
[  221.893109][T15692] lo speed is unknown, defaulting to 1000
[  221.915205][T15692] wg1 speed is unknown, defaulting to 1000
[  222.284819][T15720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  222.298460][T15724] veth0_to_team: entered promiscuous mode
[  222.301516][T15724] veth0_to_team: entered allmulticast mode
[  222.341910][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.569982][ T3568] 
[  222.571068][ T3568] ============================================
[  222.573511][ T3568] WARNING: possible recursive locking detected
[  222.576008][ T3568] syzkaller #0 Not tainted
[  222.577937][ T3568] --------------------------------------------
[  222.581082][ T3568] kworker/u10:5/3568 is trying to acquire lock:
[  222.583504][ T3568] ffffe8ffffc55968 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80
[  222.587125][ T3568] 
[  222.587125][ T3568] but task is already holding lock:
[  222.589969][ T3568] ffffe8ff146559b8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80
[  222.593620][ T3568] 
[  222.593620][ T3568] other info that might help us debug this:
[  222.596765][ T3568]  Possible unsafe locking scenario:
[  222.596765][ T3568] 
[  222.599695][ T3568]        CPU0
[  222.601014][ T3568]        ----
[  222.602333][ T3568]   lock(&pd_list->lock);
[  222.604101][ T3568]   lock(&pd_list->lock);
[  222.605508][ T3568] 
[  222.605508][ T3568]  *** DEADLOCK ***
[  222.605508][ T3568] 
[  222.608073][ T3568]  May be due to missing lock nesting notation
[  222.608073][ T3568] 
[  222.611144][ T3568] 3 locks held by kworker/u10:5/3568:
[  222.613241][ T3568]  #0: ffff88801b6f7948 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  222.617760][ T3568]  #1: ffffc90008397bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  222.622336][ T3568]  #2: ffffe8ff146559b8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80
[  222.625391][ T3568] 
[  222.625391][ T3568] stack backtrace:
[  222.627454][ T3568] CPU: 1 UID: 0 PID: 3568 Comm: kworker/u10:5 Not tainted syzkaller #0 PREEMPT(full) 
[  222.627466][ T3568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  222.627473][ T3568] Workqueue: pencrypt_parallel padata_parallel_worker
[  222.627488][ T3568] Call Trace:
[  222.627493][ T3568]  <TASK>
[  222.627500][ T3568]  dump_stack_lvl+0x189/0x250
[  222.627512][ T3568]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.627520][ T3568]  ? __pfx__printk+0x10/0x10
[  222.627531][ T3568]  ? print_lock_name+0xde/0x100
[  222.627541][ T3568]  print_deadlock_bug+0x28b/0x2a0
[  222.627574][ T3568]  validate_chain+0x1a3f/0x2140
[  222.627589][ T3568]  ? __queue_work+0x102/0xfb0
[  222.627603][ T3568]  ? look_up_lock_class+0x74/0x170
[  222.627630][ T3568]  ? register_lock_class+0x51/0x320
[  222.627641][ T3568]  ? __queue_work+0xc56/0xfb0
[  222.627649][ T3568]  __lock_acquire+0xab9/0xd20
[  222.627661][ T3568]  ? padata_do_serial+0x73e/0xb80
[  222.627670][ T3568]  lock_acquire+0x120/0x360
[  222.627681][ T3568]  ? padata_do_serial+0x73e/0xb80
[  222.627690][ T3568]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  222.627700][ T3568]  _raw_spin_lock+0x2e/0x40
[  222.627710][ T3568]  ? padata_do_serial+0x73e/0xb80
[  222.627719][ T3568]  padata_do_serial+0x73e/0xb80
[  222.627730][ T3568]  ? padata_parallel_worker+0x44/0x1d0
[  222.627740][ T3568]  padata_parallel_worker+0x75/0x1d0
[  222.627749][ T3568]  ? process_scheduled_works+0x9ef/0x17b0
[  222.627756][ T3568]  process_scheduled_works+0xae1/0x17b0
[  222.627768][ T3568]  ? __pfx_process_scheduled_works+0x10/0x10
[  222.627777][ T3568]  worker_thread+0x8a0/0xda0
[  222.627785][ T3568]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  222.627796][ T3568]  ? __kthread_parkme+0x7b/0x200
[  222.627806][ T3568]  kthread+0x711/0x8a0
[  222.627815][ T3568]  ? __pfx_worker_thread+0x10/0x10
[  222.627822][ T3568]  ? __pfx_kthread+0x10/0x10
[  222.627830][ T3568]  ? _raw_spin_unlock_irq+0x23/0x50
[  222.627840][ T3568]  ? lockdep_hardirqs_on+0x9c/0x150
[  222.627850][ T3568]  ? __pfx_kthread+0x10/0x10
[  222.627858][ T3568]  ret_from_fork+0x3fc/0x770
[  222.627868][ T3568]  ? __pfx_ret_from_fork+0x10/0x10
[  222.627876][ T3568]  ? __switch_to_asm+0x39/0x70
[  222.627885][ T3568]  ? __switch_to_asm+0x33/0x70
[  222.627894][ T3568]  ? __pfx_kthread+0x10/0x10
[  222.627903][ T3568]  ret_from_fork_asm+0x1a/0x30
[  222.627915][ T3568]  </TASK>
[  223.491153][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.621051][T13901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.731056][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.840876][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  227.960859][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.060635][T13901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.171031][T13901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.291123][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.401008][T13901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog

VM DIAGNOSIS:
12:28:28  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffffe8ff146559a0 RCX=ffffffff8b7cae5c RDX=0000000000000000
RSI=0000000000000004 RDI=ffffe8ff146559a0 RBP=ffffc90003cff8d8 RSP=ffffc90003cff7e0
R8 =ffffe8ff146559a3 R9 =1ffffd1fe28cab34 R10=dffffc0000000000 R11=fffff91fe28cab35
R12=1ffff9200079ff04 R13=0000000000000001 R14=ffffc90003cff840 R15=1ffffd1fe28cab34
RIP=ffffffff8b7cae4f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000540 CR3=00000001206ce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007feb041a7498 00007feb041a7470 XMM03=00007feb041a74a8 00007feb041a74a0
XMM04=00007feb04d0d100 00007feb041a7460 XMM05=00007feb041a7478 00007feb041a74c0
XMM06=00007feb041a74b8 00007feb041a74b0 XMM07=00007feb041a74a8 00007feb041a74a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33be460 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df26b0 RSP=ffffc90008397070
R8 =ffff8881082c8237 R9 =1ffff11021059046 R10=dffffc0000000000 R11=ffffffff854f4630
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f46a7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f102e6f0fc8 CR3=00000001232e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f102d9a7498 00007f102d9a7470 XMM03=00007f102d9a74a8 00007f102d9a74a0
XMM04=00007f102e50d100 00007f102d9a7460 XMM05=00007f102d9a7478 00007f102d9a74c0
XMM06=00007f102d9a74b8 00007f102d9a74b0 XMM07=00007f102d9a74a8 00007f102d9a74a0
XMM08=0000000000000000 00007f102d812ee7 XMM09=0000000000000000 00007f102d812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
