last executing test programs:

1.982032879s ago: executing program 0 (id=1854):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe})
ioctl(r0, 0x8b22, &(0x7f0000000040))

1.922114713s ago: executing program 0 (id=1855):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r6, r6, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000002e00000008002300610033f70fb3681174f9f09f94ff012afa74f29577", @ANYRES32=r11, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x1f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)

1.085166616s ago: executing program 1 (id=1877):
r0 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x9, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10)

982.391311ms ago: executing program 1 (id=1878):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x888, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x0, 0x4, 0x3701, 0xcc42, 0x7}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x2, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x80000001, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x6, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x8001, 0x9, 0x4, 0x9, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20000005}, 0x40)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

981.51143ms ago: executing program 1 (id=1881):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

891.941502ms ago: executing program 1 (id=1883):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, 0x33, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x20000000)

891.585313ms ago: executing program 1 (id=1884):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
close(0x3)

692.102865ms ago: executing program 1 (id=1888):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
listen(r2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
shutdown(r2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', <r6=>0x0, 0x8, 0x700, 0x8001, 0x5, {{0x32, 0x4, 0x0, 0x3a, 0xc8, 0x64, 0x0, 0x3, 0x2, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x44, 0x75, 0x1, 0x7, [{@empty, 0xe}, {@broadcast, 0x5b}, {@private=0xa010101, 0x5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffe}, {@multicast1, 0xa00}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @end, @rr={0x7, 0x13, 0xe4, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @generic={0x86, 0x3, 'v'}, @timestamp_addr={0x44, 0x3c, 0x8b, 0x1, 0xc, [{@multicast2, 0x1}, {@multicast1, 0x4}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@broadcast, 0x5}, {@broadcast, 0x149fea77}]}, @ssrr={0x89, 0x17, 0x5b, [@private=0xa010102, @multicast1, @remote, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x5, 0x4, 0x9, 0x59, 0x1})
r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, <r8=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x6, 0xbc, &(0x7f0000000480)=""/188, 0x41000, 0x46, '\x00', r6, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xdd, 0x9}, 0x10, r8, r3, 0x0, &(0x7f0000000780)=[r4, r1, r4, r4, r4, r4, r4], 0x0, 0x10, 0x48}, 0x94)
ppoll(&(0x7f0000000080)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
r10 = socket(0x10, 0x3, 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x800000, 0x0, 0xffffffff}, 0x20, 0x0, 0x7, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x0, {0x200}}}}]}, 0x78}}, 0x4080)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x13, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)

518.316833ms ago: executing program 0 (id=1889):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50)

431.907177ms ago: executing program 2 (id=1890):
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={<r0=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
socket$unix(0x1, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000010001000600000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000)
recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x2020)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4f23, 0x6, @empty, 0xb}, 0x1c)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={r0, 0x97}, &(0x7f0000000100)=0x8)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$inet(0x10, 0x3, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
r7 = socket(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, 0x0)
recvfrom$ax25(r7, &(0x7f0000000280)=""/155, 0x9b, 0x2004, &(0x7f0000000600)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x48)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r10, 0x1, 0x3, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048002}, 0x90)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

369.627643ms ago: executing program 0 (id=1891):
unshare(0x4000600)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000180)=0x83)

301.838628ms ago: executing program 2 (id=1892):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f00000001c0), 0x4)
sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4060019}, 0x20000041)

210.321892ms ago: executing program 0 (id=1893):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20)

210.0193ms ago: executing program 2 (id=1894):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000006a0001002abd7000fddbdf250a000000000002"], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

150.187537ms ago: executing program 2 (id=1895):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9f}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

88.222743ms ago: executing program 0 (id=1896):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="2e9b3d88", 0x4}], 0x2)
write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52)

87.952915ms ago: executing program 2 (id=1897):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x7e, 0x1f, 0xb, 0x14, 0x5}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)

0s ago: executing program 2 (id=1898):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:54313' (ED25519) to the list of known hosts.
syzkaller login: [   56.294893][ T5779] cgroup: Unknown subsys name 'net'
[   56.382203][ T5779] cgroup: Unknown subsys name 'cpuset'
[   56.387676][ T5779] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.051305][ T5779] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.826035][ T5852] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.883692][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.889349][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.892710][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.898373][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.902052][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.940582][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.947542][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.951201][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.960373][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.964680][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.988535][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.992347][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.996453][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.003298][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.006870][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.462669][ T5866] chnl_net:caif_netlink_parms(): no params data found
[   71.495486][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   71.503165][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.505860][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.569879][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   71.627843][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.630940][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.633241][ T5866] bridge_slave_0: entered allmulticast mode
[   71.636257][ T5866] bridge_slave_0: entered promiscuous mode
[   71.642798][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.645665][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.649047][ T5866] bridge_slave_1: entered allmulticast mode
[   71.652700][ T5866] bridge_slave_1: entered promiscuous mode
[   71.714055][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.723928][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.769862][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.772327][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.774895][ T5873] bridge_slave_0: entered allmulticast mode
[   71.779517][ T5873] bridge_slave_0: entered promiscuous mode
[   71.784194][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.788104][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.790874][ T5873] bridge_slave_1: entered allmulticast mode
[   71.793739][ T5873] bridge_slave_1: entered promiscuous mode
[   71.835991][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.839322][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.842015][ T5869] bridge_slave_0: entered allmulticast mode
[   71.844960][ T5869] bridge_slave_0: entered promiscuous mode
[   71.849643][ T5866] team0: Port device team_slave_0 added
[   71.851991][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.854618][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.857551][ T5869] bridge_slave_1: entered allmulticast mode
[   71.860331][ T5869] bridge_slave_1: entered promiscuous mode
[   71.879952][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.885991][ T5866] team0: Port device team_slave_1 added
[   71.912593][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.939785][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.942322][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.952104][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.975294][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.980447][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.982930][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.994263][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.021496][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.025894][ T5873] team0: Port device team_slave_0 added
[   72.041926][ T5873] team0: Port device team_slave_1 added
[   72.084621][ T5869] team0: Port device team_slave_0 added
[   72.107392][ T5866] hsr_slave_0: entered promiscuous mode
[   72.110605][ T5866] hsr_slave_1: entered promiscuous mode
[   72.133232][ T5869] team0: Port device team_slave_1 added
[   72.136059][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.138769][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.148180][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.173863][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.176258][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.186556][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.223595][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.226058][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.235423][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.242631][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.244973][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.254635][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.318826][ T5873] hsr_slave_0: entered promiscuous mode
[   72.321745][ T5873] hsr_slave_1: entered promiscuous mode
[   72.324193][ T5873] debugfs: 'hsr0' already exists in 'hsr'
[   72.326048][ T5873] Cannot create hsr debugfs directory
[   72.402522][ T5869] hsr_slave_0: entered promiscuous mode
[   72.405220][ T5869] hsr_slave_1: entered promiscuous mode
[   72.408648][ T5869] debugfs: 'hsr0' already exists in 'hsr'
[   72.410765][ T5869] Cannot create hsr debugfs directory
[   72.628647][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.638809][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.657876][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.663851][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.706552][ T5873] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.721254][ T5873] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.738611][ T5873] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.748454][ T5873] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.809905][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.822014][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.828547][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.840419][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.915180][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.937921][ T5871] Bluetooth: hci0: command tx timeout
[   72.945577][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   72.956393][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.958840][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.983904][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.995096][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.997872][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.017989][ T5871] Bluetooth: hci2: command tx timeout
[   73.018840][ T5233] Bluetooth: hci1: command tx timeout
[   73.031199][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   73.047265][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.049951][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.061464][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.063691][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.096585][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.144113][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   73.166587][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.169517][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.175960][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.179047][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.372387][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.432188][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.460122][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.473627][ T5866] veth0_vlan: entered promiscuous mode
[   73.496079][ T5866] veth1_vlan: entered promiscuous mode
[   73.546614][ T5869] veth0_vlan: entered promiscuous mode
[   73.553193][ T5873] veth0_vlan: entered promiscuous mode
[   73.563254][ T5869] veth1_vlan: entered promiscuous mode
[   73.591672][ T5873] veth1_vlan: entered promiscuous mode
[   73.605795][ T5869] veth0_macvtap: entered promiscuous mode
[   73.613605][ T5869] veth1_macvtap: entered promiscuous mode
[   73.631077][ T5866] veth0_macvtap: entered promiscuous mode
[   73.646231][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.650294][ T5866] veth1_macvtap: entered promiscuous mode
[   73.668737][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.693588][ T5865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.702865][ T5865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.706448][ T5865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.721504][ T5865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.725716][ T5873] veth0_macvtap: entered promiscuous mode
[   73.732452][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.745331][ T5873] veth1_macvtap: entered promiscuous mode
[   73.751544][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.783624][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.803438][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.815145][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.836883][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.842549][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.851667][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.892841][ T5865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.914839][ T5865] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.919615][ T5865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.936437][ T5865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.952470][ T1224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.962843][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.963033][ T1224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.965770][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.005404][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.008479][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.066499][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.079806][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.089670][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.115820][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.121602][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.199231][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.204141][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.503655][ T5947] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.19'.
[   74.569231][ T5952] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.644460][ T5955] syzkaller1: entered promiscuous mode
[   74.646679][ T5955] syzkaller1: entered allmulticast mode
[   75.017893][ T5233] Bluetooth: hci0: command tx timeout
[   75.084179][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'.
[   75.098611][ T5233] Bluetooth: hci1: command tx timeout
[   75.101403][ T5233] Bluetooth: hci2: command tx timeout
[   75.480709][ T6002] netlink: 'syz.1.45': attribute type 2 has an invalid length.
[   75.484363][ T6002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.45'.
[   75.510179][ T6004] nbd: must specify an index to disconnect
[   75.573243][ T6008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.48'.
[   76.516506][ T6052] netlink: 'syz.1.69': attribute type 1 has an invalid length.
[   76.599842][ T6052] bond1 (unregistering): Released all slaves
[   76.606226][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'.
[   76.633615][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'.
[   76.749080][ T6061] netlink: 'syz.1.74': attribute type 1 has an invalid length.
[   76.752229][ T6061] netlink: 172 bytes leftover after parsing attributes in process `syz.1.74'.
[   76.756002][ T6061] netlink: 'syz.1.74': attribute type 1 has an invalid length.
[   77.095075][ T6082] netlink: 68 bytes leftover after parsing attributes in process `syz.2.83'.
[   77.108144][ T5871] Bluetooth: hci0: command tx timeout
[   77.181497][ T5233] Bluetooth: hci2: command tx timeout
[   77.183834][ T5233] Bluetooth: hci1: command tx timeout
[   77.354356][ T6104] Zero length message leads to an empty skb
[   77.422041][ T6106] atomic_op ffff88810ab8f998 conn xmit_atomic 0000000000000000
[   77.554468][ T6118] veth1_macvtap: left promiscuous mode
[   77.556868][ T6118] macsec0: entered promiscuous mode
[   77.562042][ T6117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.99'.
[   77.566359][ T6118] macsec0: entered allmulticast mode
[   77.583410][ T6118] veth1_macvtap: entered promiscuous mode
[   77.585783][ T6118] veth1_macvtap: entered allmulticast mode
[   77.598236][ T6118] macsec0: left promiscuous mode
[   77.600796][ T6118] macsec0: left allmulticast mode
[   77.602977][ T6118] veth1_macvtap: left allmulticast mode
[   77.798564][ T6128] syz.0.104 uses obsolete (PF_INET,SOCK_PACKET)
[   77.851880][ T6130] Driver unsupported XDP return value 0 on prog  (id 13) dev N/A, expect packet loss!
[   78.199960][ T6150] netlink: 'syz.2.114': attribute type 9 has an invalid length.
[   78.203721][ T6150] netlink: 147436 bytes leftover after parsing attributes in process `syz.2.114'.
[   78.416623][ T6161] geneve2: entered promiscuous mode
[   78.424161][ T6161] geneve2: entered allmulticast mode
[   78.538662][ T6162] nbd0: detected capacity change from 0 to 127
[   78.557131][   T55] block nbd0: Receive control failed (result -104)
[   78.813250][ T6178] netlink: 'syz.2.127': attribute type 3 has an invalid length.
[   78.918251][ T6186] netlink: 'syz.0.132': attribute type 3 has an invalid length.
[   79.020000][ T6192] pim6reg1: entered promiscuous mode
[   79.029395][ T6192] pim6reg1: entered allmulticast mode
[   79.177194][   T54] Bluetooth: hci0: command tx timeout
[   79.260914][   T54] Bluetooth: hci1: command tx timeout
[   79.263291][ T5233] Bluetooth: hci2: command 0x0419 tx timeout
[   79.642076][ T5895] IPVS: starting estimator thread 0...
[   79.727180][ T6229] IPVS: using max 64 ests per chain, 153600 per kthread
[   79.745133][ T6232] ip6gre1: entered allmulticast mode
[   79.782188][ T6235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   79.785502][ T6235] IPv6: NLM_F_CREATE should be set when creating new route
[   79.819865][ T6237] netlink: 'syz.0.154': attribute type 1 has an invalid length.
[   79.914708][ T6235] __nla_validate_parse: 4 callbacks suppressed
[   79.914726][ T6235] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.153'.
[   80.042128][ T6244] syz_tun: entered allmulticast mode
[   80.108763][ T6242] syz_tun: left allmulticast mode
[   80.247014][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.250307][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.270268][ T6257] netlink: 36 bytes leftover after parsing attributes in process `syz.0.163'.
[   80.270505][ T6256] netlink: 'syz.1.162': attribute type 2 has an invalid length.
[   80.280584][ T6256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.162'.
[   80.284277][ T6256] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   80.352813][ T6263] warning: `syz.1.166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.665854][ T6292] netlink: 'syz.2.175': attribute type 4 has an invalid length.
[   80.801793][ T6301] sctp: [Deprecated]: syz.1.179 (pid 6301) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.801793][ T6301] Use struct sctp_sack_info instead
[   80.929048][ T6307] tipc: Started in network mode
[   80.931456][ T6307] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[   80.936623][ T6307] tipc: Enabled bearer <udp:syz1>, priority 10
[   81.004938][ T6312] netlink: 264 bytes leftover after parsing attributes in process `syz.0.184'.
[   81.008883][ T6312] netlink: 56 bytes leftover after parsing attributes in process `syz.0.184'.
[   81.171103][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'.
[   81.174697][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'.
[   81.203746][ T5865] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.208745][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'.
[   81.212574][ T5865] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.216454][ T5865] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.221927][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'.
[   81.232327][ T5865] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.337192][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[   81.585093][ T6348] netem: incorrect gi model size
[   81.588293][ T6348] netem: change failed
[   81.805353][ T6360] netlink: 44 bytes leftover after parsing attributes in process `syz.2.207'.
[   82.058315][   T10] tipc: Node number set to 4269801494
[   82.330269][ T6393] netlink: 'syz.0.219': attribute type 16 has an invalid length.
[   82.333508][ T6393] netlink: 'syz.0.219': attribute type 17 has an invalid length.
[   82.353646][ T6393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.719224][ T6409] netlink: 'syz.1.230': attribute type 1 has an invalid length.
[   82.751000][ T6409] bond1: entered promiscuous mode
[   82.753571][ T6409] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.770715][ T6409] batadv1: entered promiscuous mode
[   82.772787][ T6409] batadv1: entered allmulticast mode
[   82.776822][ T6409] 8021q: adding VLAN 0 to HW filter on device batadv1
[   82.783599][ T6409] bond1: (slave batadv1): making interface the new active one
[   82.788193][ T6409] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   83.335155][ T6433] netlink: 'syz.0.239': attribute type 18 has an invalid length.
[   84.751674][ T6516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.390136][ T6523] __nla_validate_parse: 8 callbacks suppressed
[   85.390152][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'.
[   85.399282][ T6523] netlink: 7 bytes leftover after parsing attributes in process `syz.2.280'.
[   85.620579][ T6541] rdma_op ffff888106a381f0 conn xmit_rdma 0000000000000000
[   85.899258][ T6552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.915215][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'.
[   85.951527][ T6557] netlink: 'syz.0.296': attribute type 11 has an invalid length.
[   85.956486][ T6552] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   85.969904][ T6557] netlink: 44 bytes leftover after parsing attributes in process `syz.0.296'.
[   85.972272][ T6552] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   86.245071][ T6567] netlink: 'syz.0.298': attribute type 1 has an invalid length.
[   86.250382][ T6567] netlink: 120 bytes leftover after parsing attributes in process `syz.0.298'.
[   86.303003][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'.
[   86.308073][ T6569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.299'.
[   86.752480][ T6582] syzkaller0: entered promiscuous mode
[   86.754822][ T6582] syzkaller0: entered allmulticast mode
[   86.874417][  T972] cfg80211: failed to load regulatory.db
[   88.114208][ T6595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.309'.
[   88.468926][ T6612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.498190][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'.
[   88.569481][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'.
[   88.708915][   T34] audit: type=1800 audit(1757346951.096:2): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.325" name="blkio.bfq.time_recursive" dev="tmpfs" ino=570 res=0 errno=0
[   88.800363][ T6632] netlink: 'syz.0.326': attribute type 2 has an invalid length.
[   89.173649][ T6656] netlink: 'syz.0.338': attribute type 13 has an invalid length.
[   89.176446][ T6656] netlink: 'syz.0.338': attribute type 17 has an invalid length.
[   89.244068][ T6656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.392007][ T6669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.885947][ T6702] erspan0: entered promiscuous mode
[   89.889722][ T6702] macvtap1: entered promiscuous mode
[   89.892056][ T6702] macvtap1: entered allmulticast mode
[   89.897341][ T6702] erspan0: entered allmulticast mode
[   90.894279][ T6738] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[   91.144903][ T6752] netlink: 'syz.2.378': attribute type 5 has an invalid length.
[   91.240599][ T6761] netlink: 'syz.2.382': attribute type 4 has an invalid length.
[   92.220957][ T6843] tipc: Started in network mode
[   92.223153][ T6843] tipc: Node identity 5e1515ba3a38, cluster identity 4711
[   92.226446][ T6843] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.232009][ T6843] syzkaller0: entered promiscuous mode
[   92.234451][ T6843] syzkaller0: entered allmulticast mode
[   92.274674][ T6843] tipc: Resetting bearer <eth:syzkaller0>
[   92.281743][ T6842] tipc: Resetting bearer <eth:syzkaller0>
[   92.295569][ T6842] tipc: Disabling bearer <eth:syzkaller0>
[   92.537657][ T6862] __nla_validate_parse: 4 callbacks suppressed
[   92.537677][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.417'.
[   92.549937][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.417'.
[   93.125176][ T6890] netlink: 428 bytes leftover after parsing attributes in process `syz.2.431'.
[   93.129629][ T6890] netlink: 32 bytes leftover after parsing attributes in process `syz.2.431'.
[   93.721199][ T6937] syzkaller0: entered promiscuous mode
[   93.722926][ T6937] syzkaller0: entered allmulticast mode
[   94.962093][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'.
[   94.965834][ T6948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.455'.
[   94.969752][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'.
[   94.974286][ T6948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.455'.
[   94.978778][ T6948] netlink: 5 bytes leftover after parsing attributes in process `syz.1.455'.
[   95.302587][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.468'.
[   95.334333][ T6980] openvswitch: netlink: Message has 5 unknown bytes.
[   95.741181][ T7014] syzkaller1: entered promiscuous mode
[   95.743434][ T7014] syzkaller1: entered allmulticast mode
[   96.003052][ T7034] netlink: 'syz.1.494': attribute type 1 has an invalid length.
[   96.134230][ T7045] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   96.139678][ T7045] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   97.212653][ T7116] IPv6: sit1: Disabled Multicast RS
[   97.215597][ T7116] sit1: entered allmulticast mode
[   97.281083][ T7124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   97.284109][ T7124] IPv6: NLM_F_CREATE should be set when creating new route
[   97.287205][ T7124] IPv6: NLM_F_CREATE should be set when creating new route
[   97.290109][ T7124] IPv6: NLM_F_CREATE should be set when creating new route
[   97.646504][ T7150] __nla_validate_parse: 11 callbacks suppressed
[   97.646522][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'.
[   97.659584][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'.
[   97.663148][ T7150] netlink: 'syz.0.545': attribute type 20 has an invalid length.
[   98.116783][ T7163] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.123890][ T7163] syzkaller0: entered promiscuous mode
[   98.126417][ T7163] syzkaller0: entered allmulticast mode
[   98.153315][ T7163] sch_fq: defrate 257 ignored.
[   98.161854][ T7163] tipc: Resetting bearer <eth:syzkaller0>
[   98.176284][ T7162] tipc: Resetting bearer <eth:syzkaller0>
[   98.194689][ T7162] tipc: Disabling bearer <eth:syzkaller0>
[   98.500126][ T7181] netlink: 'syz.1.560': attribute type 11 has an invalid length.
[   98.600814][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'.
[   99.535674][ T7219] netlink: 300 bytes leftover after parsing attributes in process `syz.1.578'.
[   99.753955][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'.
[   99.757947][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.586'.
[  100.188946][ T7272] tipc: Started in network mode
[  100.190669][ T7272] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  100.193933][ T7272] tipc: Enabled bearer <eth:team0>, priority 10
[  100.575173][ T7293] netlink: 'syz.2.606': attribute type 5 has an invalid length.
[  101.182845][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'.
[  101.188740][   T10] tipc: Node number set to 11578026
[  101.297944][ T7325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'.
[  101.398382][ T7333] netlink: 228 bytes leftover after parsing attributes in process `syz.0.623'.
[  102.146406][ T7365] netlink: 'syz.2.636': attribute type 13 has an invalid length.
[  102.151294][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.636'.
[  102.446736][ T7375] veth1_macvtap: left promiscuous mode
[  102.663782][ T7393] __nla_validate_parse: 1 callbacks suppressed
[  102.663798][ T7393] netlink: 188 bytes leftover after parsing attributes in process `syz.1.648'.
[  103.328153][ T7404] infiniband syz0: set active
[  103.332924][ T7404] infiniband syz0: added veth0_vlan
[  103.480393][ T7404] RDS/IB: syz0: added
[  103.482778][ T7404] smc: adding ib device syz0 with port count 1
[  103.485593][ T7404] smc:    ib device syz0 port 1 has pnetid 
[  103.927120][ T7418] batadv_slave_1: entered promiscuous mode
[  103.931321][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'.
[  103.935150][ T7418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.989709][ T7418] batadv_slave_1 (unregistering): left promiscuous mode
[  103.992588][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.297228][ T7427] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  104.453614][ T7448] veth0_to_bond: entered allmulticast mode
[  104.801309][ T5311] IPVS: starting estimator thread 0...
[  104.897796][ T7473] IPVS: using max 41 ests per chain, 98400 per kthread
[  105.309963][ T7512] bridge: RTM_NEWNEIGH with invalid ether address
[  105.398580][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'.
[  105.402229][ T7519] openvswitch: netlink: Unknown nsh attribute 0
[  105.404764][ T7519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.484623][ T7526] netlink: 96 bytes leftover after parsing attributes in process `syz.0.703'.
[  105.772206][ T7545] netlink: 64 bytes leftover after parsing attributes in process `syz.0.712'.
[  105.990704][ T7558] netlink: 'syz.1.717': attribute type 9 has an invalid length.
[  106.083607][ T7561] netlink: 'syz.1.719': attribute type 13 has an invalid length.
[  106.383187][ T7582] netlink: 'syz.2.727': attribute type 1 has an invalid length.
[  106.551609][ T7591] vlan0: entered promiscuous mode
[  108.020743][ T7647] netlink: 'syz.0.742': attribute type 4 has an invalid length.
[  108.319445][ T7663] netlink: 'syz.0.749': attribute type 12 has an invalid length.
[  108.597567][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'.
[  108.618526][   T11] block nbd0: Possible stuck request ffff888020d98000: control (read@0,1024B). Runtime 30 seconds
[  108.618949][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'.
[  108.623099][   T11] block nbd0: Possible stuck request ffff888020d98200: control (read@1024,1024B). Runtime 30 seconds
[  108.633475][   T11] block nbd0: Possible stuck request ffff888020d98400: control (read@2048,1024B). Runtime 30 seconds
[  108.638676][   T11] block nbd0: Possible stuck request ffff888020d98600: control (read@3072,1024B). Runtime 30 seconds
[  108.639466][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'.
[  108.719073][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'.
[  108.773201][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'.
[  108.827167][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'.
[  108.830735][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'.
[  108.834214][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'.
[  108.852237][ T7670] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.751'.
[  108.888907][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'.
[  109.611342][ T7717] ip6tnl0: Caught tx_queue_len zero misconfig
[  110.518584][   T26] smc: removing ib device syz0
[  110.640030][ T5894] syz0: Port: 1 Link DOWN
[  112.603459][ T7796] sctp: [Deprecated]: syz.2.806 (pid 7796) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.603459][ T7796] Use struct sctp_sack_info instead
[  112.610611][ T7796] sctp: [Deprecated]: syz.2.806 (pid 7796) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.610611][ T7796] Use struct sctp_sack_info instead
[  112.680620][ T7802] veth2: entered allmulticast mode
[  112.734716][ T7807] netlink: 'syz.0.812': attribute type 3 has an invalid length.
[  112.773684][ T7808] 8021q: adding VLAN 0 to HW filter on device bond2
[  112.798645][ T7808] bond_slave_0: entered promiscuous mode
[  112.801124][ T7808] bond_slave_1: entered promiscuous mode
[  112.810539][ T7808] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  112.816455][ T7808] bond2: (slave macvlan0): Enslaving as a backup interface with an up link
[  112.834974][ T7808] bridge_slave_0: left allmulticast mode
[  112.838146][ T7808] bridge_slave_0: left promiscuous mode
[  112.840498][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.861768][ T7808] bridge_slave_1: left allmulticast mode
[  112.864397][ T7808] bridge_slave_1: left promiscuous mode
[  112.873761][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.880956][ T7808] bond0: (slave bond_slave_0): Releasing backup interface
[  112.883862][ T7808] bond_slave_0: left promiscuous mode
[  112.895877][ T7808] bond0: (slave bond_slave_1): Releasing backup interface
[  112.915354][ T7808] bond_slave_1: left promiscuous mode
[  112.925816][ T7808] team0: Port device team_slave_0 removed
[  112.933233][ T7808] team0: Port device team_slave_1 removed
[  112.936105][ T7808] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.939619][ T7808] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.943515][ T7808] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.946273][ T7808] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.956829][ T7808] bond1: (slave batadv1): Releasing active interface
[  112.963911][ T7808] bond2: (slave macvlan0): Removing an active aggregator
[  112.968697][ T7808] bond2: (slave macvlan0): Releasing backup interface
[  112.996758][  T972] syz1: Port: 1 Link DOWN
[  112.998935][ T7818] syz_tun: entered allmulticast mode
[  113.006503][ T7814] syz_tun: left allmulticast mode
[  113.081529][ T7822] netlink: 'syz.0.817': attribute type 1 has an invalid length.
[  113.084782][ T7822] netlink: 'syz.0.817': attribute type 4 has an invalid length.
[  113.280712][ T7838] netlink: 'syz.1.823': attribute type 1 has an invalid length.
[  113.713903][ T7869] __nla_validate_parse: 48 callbacks suppressed
[  113.713919][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[  113.917931][ T7892] netlink: 368 bytes leftover after parsing attributes in process `syz.2.848'.
[  114.050899][ T7903] netlink: 'syz.0.853': attribute type 10 has an invalid length.
[  114.064582][ T7903] team0: Port device macvlan1 added
[  114.124458][ T7906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.480847][ T7927] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  114.837227][ T7946] ieee802154 phy0 wpan0: encryption failed: -90
[  115.256143][ T7970] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  115.373919][ T7980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.392630][ T7980] syzkaller0: entered promiscuous mode
[  115.394824][ T7980] syzkaller0: entered allmulticast mode
[  115.435111][ T7980] tipc: Resetting bearer <eth:syzkaller0>
[  115.452981][ T7977] tipc: Resetting bearer <eth:syzkaller0>
[  115.490751][ T7977] tipc: Disabling bearer <eth:syzkaller0>
[  115.790715][ T8013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.904'.
[  115.795650][ T8013] 8021q: VLANs not supported on ipvlan1
[  115.798693][ T8014] netlink: 68 bytes leftover after parsing attributes in process `syz.2.905'.
[  115.798717][ T8014] netlink: 56 bytes leftover after parsing attributes in process `syz.2.905'.
[  115.820563][ T8013] macsec1: entered promiscuous mode
[  115.823471][ T8013] macsec1: entered allmulticast mode
[  115.917672][ T8008] block nbd1: server does not support multiple connections per device.
[  115.921603][ T8008] block nbd1: shutting down sockets
[  115.966871][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.133168][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'.
[  116.285921][ T8045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.289686][ T8045] syzkaller0: entered promiscuous mode
[  116.291999][ T8045] syzkaller0: entered allmulticast mode
[  116.309213][ T8045] tipc: Resetting bearer <eth:syzkaller0>
[  116.319318][ T8044] tipc: Resetting bearer <eth:syzkaller0>
[  116.350716][ T8044] tipc: Disabling bearer <eth:syzkaller0>
[  116.378896][ T5233] Bluetooth: hci2: command 0x0419 tx timeout
[  116.415184][ T8053] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.479953][ T8053] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.491634][ T8059] netlink: 64 bytes leftover after parsing attributes in process `syz.1.926'.
[  116.497751][ T8059] trusted_key: syz.1.926 sent an empty control message without MSG_MORE.
[  116.555791][ T8053] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.662953][ T8053] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.945387][ T5876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.985321][ T5876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.042801][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.128444][ T5876] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.581417][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'.
[  117.585026][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'.
[  117.825533][ T8084] Bluetooth: MGMT ver 1.23
[  118.197256][ T8115] block nbd1: server does not support multiple connections per device.
[  118.201149][ T8115] block nbd1: shutting down sockets
[  118.442790][ T8131] netlink: 'syz.0.955': attribute type 10 has an invalid length.
[  118.467605][ T8131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.491450][ T8131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.507553][ T8131] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  118.562598][ T8139] syzkaller0: entered promiscuous mode
[  118.564717][ T8139] syzkaller0: entered allmulticast mode
[  118.766689][ T8146] netlink: 'syz.2.962': attribute type 1 has an invalid length.
[  118.836189][ T8146] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.866747][ T8153] bond2: (slave ip6gretap1): making interface the new active one
[  118.911108][ T8153] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  118.982150][ T8146] veth3: entered promiscuous mode
[  119.023450][ T8146] bond2: (slave veth3): Enslaving as an active interface with a down link
[  119.030117][ T8153] erspan0: entered allmulticast mode
[  119.050633][ T8153] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  119.186098][ T8169] syzkaller1: entered promiscuous mode
[  119.190695][ T8169] syzkaller1: entered allmulticast mode
[  119.208424][ T8172] netlink: 'syz.2.971': attribute type 1 has an invalid length.
[  119.211020][ T8172] netlink: 232 bytes leftover after parsing attributes in process `syz.2.971'.
[  119.503312][ T8195] dvmrp1: tun_chr_ioctl cmd 1074025677
[  119.505631][ T8195] dvmrp1: linktype set to 768
[  119.566594][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.983'.
[  119.571336][ T8199] netlink: 'syz.1.983': attribute type 7 has an invalid length.
[  119.573752][ T8199] netlink: 'syz.1.983': attribute type 8 has an invalid length.
[  119.576245][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'.
[  119.691654][ T8207] batadv_slave_1: entered promiscuous mode
[  119.724387][ T8207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.987'.
[  119.736026][ T8205] batadv_slave_1: left promiscuous mode
[  119.744790][ T8209] netlink: 96 bytes leftover after parsing attributes in process `syz.2.988'.
[  119.834473][ T8215] syzkaller1: entered promiscuous mode
[  119.836562][ T8215] syzkaller1: entered allmulticast mode
[  120.042436][ T8229] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  120.048163][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.531039][ T8262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.534668][ T8262] syzkaller0: entered promiscuous mode
[  120.536878][ T8262] syzkaller0: entered allmulticast mode
[  120.545498][ T8262] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  120.564003][ T8262] tipc: Resetting bearer <eth:syzkaller0>
[  120.569753][ T8261] tipc: Resetting bearer <eth:syzkaller0>
[  120.581783][ T8261] tipc: Disabling bearer <eth:syzkaller0>
[  121.333423][ T8301] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1030'.
[  121.360144][ T8302] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1031'.
[  121.393718][ T8304] netlink: 'syz.2.1032': attribute type 5 has an invalid length.
[  121.652901][ T8319] netlink: 'syz.1.1039': attribute type 2 has an invalid length.
[  121.656087][ T8319] netlink: 'syz.1.1039': attribute type 1 has an invalid length.
[  121.659762][ T8319] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1039'.
[  122.127474][ T8355] can: request_module (can-proto-0) failed.
[  122.138724][ T8355] openvswitch: netlink: IP tunnel dst address not specified
[  122.366233][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1063'.
[  122.610943][ T8383] netlink: 'syz.0.1070': attribute type 83 has an invalid length.
[  123.055603][ T8420] geneve2: entered promiscuous mode
[  123.059393][ T8420] geneve2: entered allmulticast mode
[  123.085026][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'.
[  123.548652][ T8457] netlink: 'syz.1.1102': attribute type 1 has an invalid length.
[  123.810341][ T8473] erspan0: entered promiscuous mode
[  123.812802][ T8473] macvtap1: entered promiscuous mode
[  123.815343][ T8473] macvtap1: entered allmulticast mode
[  123.823374][ T8473] erspan0: entered allmulticast mode
[  123.986425][ T8481] netlink: 'syz.1.1112': attribute type 21 has an invalid length.
[  124.083303][ T8485] netlink: del zone limit has 8 unknown bytes
[  124.109881][ T8484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.115807][ T8484] syzkaller0: entered promiscuous mode
[  124.118341][ T8484] syzkaller0: entered allmulticast mode
[  124.149387][ T8484] tipc: Resetting bearer <eth:syzkaller0>
[  124.169460][ T8482] tipc: Resetting bearer <eth:syzkaller0>
[  124.197907][ T8482] tipc: Disabling bearer <eth:syzkaller0>
[  124.568048][ T8512] team0: entered promiscuous mode
[  125.071670][ T8541] __nla_validate_parse: 5 callbacks suppressed
[  125.071686][ T8541] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1140'.
[  125.522715][ T8572] netlink: 'syz.1.1152': attribute type 1 has an invalid length.
[  125.762073][ T8586] netlink: 'syz.0.1158': attribute type 6 has an invalid length.
[  125.974548][ T8600] netlink: 'syz.1.1165': attribute type 1 has an invalid length.
[  125.980026][ T8600] netlink: 'syz.1.1165': attribute type 1 has an invalid length.
[  125.982514][ T8600] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1165'.
[  125.985334][ T8600] netlink: 'syz.1.1165': attribute type 1 has an invalid length.
[  125.993158][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1165'.
[  126.475919][ T8647] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1181'.
[  126.628178][ T8655] team0: No ports can be present during mode change
[  126.632380][ T8655] vlan0: entered promiscuous mode
[  126.644146][ T8655] team0: Port device vlan0 added
[  126.764831][ T8664] netlink: 'syz.2.1189': attribute type 1 has an invalid length.
[  126.772195][ T8664] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1189'.
[  127.262910][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'.
[  127.456699][ T8708] syzkaller0: entered promiscuous mode
[  127.459186][ T8708] syzkaller0: entered allmulticast mode
[  129.633824][ T8723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  129.760873][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'.
[  129.861448][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'.
[  129.877678][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1212'.
[  130.005135][ T8744] syzkaller0: entered promiscuous mode
[  130.007774][ T8744] syzkaller0: entered allmulticast mode
[  130.189924][ T8754] netlink: 'syz.1.1223': attribute type 1 has an invalid length.
[  130.192880][ T8754] netlink: 'syz.1.1223': attribute type 1 has an invalid length.
[  130.196545][ T8754] netlink: 'syz.1.1223': attribute type 1 has an invalid length.
[  131.555716][ T8750] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1221'.
[  132.071851][ T8799] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1244'.
[  132.945298][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  133.136066][ T8823] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1255'.
[  133.833950][ T8845] netlink: 'syz.0.1264': attribute type 4 has an invalid length.
[  134.090933][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1274'.
[  134.094624][ T8866] netlink: 'syz.2.1274': attribute type 2 has an invalid length.
[  134.100316][ T8866] netlink: 'syz.2.1274': attribute type 1 has an invalid length.
[  134.103366][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'.
[  134.262911][ T8880] netlink: 'syz.1.1280': attribute type 1 has an invalid length.
[  134.302925][ T8880] 8021q: adding VLAN 0 to HW filter on device bond3
[  134.330003][ T8880] bond3: (slave veth3): Enslaving as an active interface with a down link
[  134.352286][ T8880] 8021q: adding VLAN 0 to HW filter on device batadv2
[  134.355216][ T8880] bond3: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  134.512757][ T8894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.516177][ T8894] syzkaller0: entered promiscuous mode
[  134.525550][ T8894] syzkaller0: entered allmulticast mode
[  134.558458][ T8894] tipc: Resetting bearer <eth:syzkaller0>
[  134.563328][ T8893] tipc: Resetting bearer <eth:syzkaller0>
[  134.586130][ T8893] tipc: Disabling bearer <eth:syzkaller0>
[  134.729017][ T8912] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  135.131508][ T8941] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  135.366427][ T8962] tipc: Enabling <ib:lo> not permitted
[  135.368895][ T8962] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  135.682048][ T8986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1327'.
[  135.780416][ T8993] netlink: 'syz.0.1330': attribute type 9 has an invalid length.
[  136.585271][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1341'.
[  136.589204][ T9016] openvswitch: netlink: Missing key (keys=40, expected=80)
[  137.006659][ T9042] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1353'.
[  137.213289][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'.
[  137.265610][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1360'.
[  137.627886][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'.
[  137.633743][ T9088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.931621][ T9108] : renamed from bond_slave_0
[  138.700385][   T11] block nbd0: Possible stuck request ffff888020d98000: control (read@0,1024B). Runtime 60 seconds
[  138.705760][   T11] block nbd0: Possible stuck request ffff888020d98200: control (read@1024,1024B). Runtime 60 seconds
[  138.710110][   T11] block nbd0: Possible stuck request ffff888020d98400: control (read@2048,1024B). Runtime 60 seconds
[  138.713557][   T11] block nbd0: Possible stuck request ffff888020d98600: control (read@3072,1024B). Runtime 60 seconds
[  138.807277][ T9129] netlink: 'syz.0.1389': attribute type 1 has an invalid length.
[  138.848261][ T9129] bond1: entered promiscuous mode
[  138.850461][ T9129] bond1: entered allmulticast mode
[  138.869472][ T9129] 8021q: adding VLAN 0 to HW filter on device bond1
[  138.921449][ T9129] 8021q: adding VLAN 0 to HW filter on device bond2
[  138.928877][ T9129] bond2: entered promiscuous mode
[  138.931025][ T9129] bond2: entered allmulticast mode
[  138.933527][ T9129] bond1: (slave bond2): Enslaving as a backup interface with a down link
[  139.089827][ T9151] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1399'.
[  139.380438][ T5876] syzkaller0: tun_net_xmit 76
[  139.385898][ T9163] syzkaller0: create flow: hash 2663096210 index 1
[  139.387339][ T5876] syzkaller0: tun_net_xmit 48
[  139.407401][  T972] syzkaller0: tun_net_xmit 76
[  139.443934][ T9173] syzkaller0: delete flow: hash 2663096210 index 1
[  140.763616][ T5293] udevd[5293]: worker [5856] /devices/virtual/block/nbd0 is taking a long time
[  140.937354][   T54] Bluetooth: hci1: command tx timeout
[  140.941640][ T9167] syzkaller0: entered allmulticast mode
[  140.944097][ T9167] syzkaller0: left allmulticast mode
[  141.255189][ T9197] pim6reg1: entered promiscuous mode
[  141.267475][ T9197] pim6reg1: entered allmulticast mode
[  141.643116][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'.
[  141.892739][ T9245] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  141.937493][ T9247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1438'.
[  141.941243][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'.
[  141.946732][ T9247] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.949797][ T9247] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.056096][ T9249] tap0: tun_chr_ioctl cmd 1074025676
[  142.062353][ T9249] tap0: owner set to 0
[  142.169882][ T9256] dummy0: mtu less than device minimum
[  142.336262][ T9266] macvlan2: entered allmulticast mode
[  142.342953][ T9266] veth1_vlan: entered allmulticast mode
[  142.349999][ T9266] veth1_vlan: left allmulticast mode
[  142.492889][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'.
[  142.841515][ T9300] lo: Caught tx_queue_len zero misconfig
[  143.580110][ T9346] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1482'.
[  143.778503][ T9363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1492'.
[  144.106506][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1503'.
[  144.927688][ T9418] syzkaller0: entered promiscuous mode
[  144.929795][ T9418] syzkaller0: entered allmulticast mode
[  145.069230][ T9423] netlink: 'syz.1.1521': attribute type 29 has an invalid length.
[  145.077586][ T9423] netlink: 'syz.1.1521': attribute type 29 has an invalid length.
[  145.088121][ T9423] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1521'.
[  145.092128][ T9423] unsupported nla_type 58
[  146.605799][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'.
[  146.822495][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1537'.
[  147.764333][ T9542] sit0: Caught tx_queue_len zero misconfig
[  147.790470][ T9544] tipc: Enabled bearer <ib:geneve1>, priority 10
[  147.910014][ T9555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1575'.
[  147.913513][ T9555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1575'.
[  148.541948][ T9605] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.629675][ T9614] bond0: Caught tx_queue_len zero misconfig
[  148.908650][ T5895] tipc: Node number set to 1680676282
[  149.120592][ T9642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.808276][ T9681] tipc: Resetting bearer <eth:team0>
[  149.861353][ T9681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.000642][ T5876] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.004232][ T5876] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.010738][ T5876] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.015254][ T5876] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.019691][ T5876] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.023437][ T5876] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.029835][ T5876] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.033424][ T5876] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.231941][ T9689] netlink: 'syz.1.1635': attribute type 21 has an invalid length.
[  150.234889][ T9689] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1635'.
[  150.238977][ T9689] netlink: 'syz.1.1635': attribute type 5 has an invalid length.
[  150.242858][ T9689] netlink: 'syz.1.1635': attribute type 6 has an invalid length.
[  150.245955][ T9689] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1635'.
[  150.561461][ T9712] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1645'.
[  151.357169][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[  151.727075][ T9726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1652'.
[  151.730683][ T9728] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.896611][ T9747] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  151.914858][ T9747] team_slave_0: Caught tx_queue_len zero misconfig
[  151.928736][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'.
[  151.931754][ T9747] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  151.942195][ T9736] netlink: 'syz.0.1656': attribute type 13 has an invalid length.
[  151.944595][ T9736] netlink: 'syz.0.1656': attribute type 17 has an invalid length.
[  151.962217][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.964630][ T9736] bridge0: port 2(bridge_slave_1) entered listening state
[  151.967315][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.969613][ T9736] bridge0: port 1(bridge_slave_0) entered listening state
[  152.001499][ T9736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.452387][ T9835] netlink: 'syz.0.1673': attribute type 1 has an invalid length.
[  153.455752][ T9835] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1673'.
[  153.462917][ T9835] netlink: 'syz.0.1673': attribute type 1 has an invalid length.
[  153.534344][ T9841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1675'.
[  154.218676][ T5233] Bluetooth: hci2: command 0x0419 tx timeout
[  154.452664][ T9916] netlink: 'syz.2.1711': attribute type 13 has an invalid length.
[  154.527831][ T2017] IPVS: starting estimator thread 0...
[  154.575189][ T9923] tipc: Enabled bearer <udp:s>, priority 10
[  154.585407][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1717'.
[  154.647083][ T9924] IPVS: using max 64 ests per chain, 153600 per kthread
[  154.836044][ T9948] netlink: 'syz.1.1727': attribute type 21 has an invalid length.
[  155.052376][ T9970] erspan0: left allmulticast mode
[  155.072448][ T9970] veth0_to_bond: left allmulticast mode
[  155.085487][ T9970] vlan0: left promiscuous mode
[  155.092453][ T9970] sit1: left allmulticast mode
[  155.095255][ T9970] veth3: left promiscuous mode
[  155.125457][ T9974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1738'.
[  155.138501][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'.
[  155.148049][ T9970] hsr_slave_0: left promiscuous mode
[  155.151322][ T9970] hsr_slave_1: left promiscuous mode
[  155.329709][ T9988] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  155.336776][ T9990] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1746'.
[  155.569731][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'.
[  155.664946][T10016] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.1758'.
[  156.403371][T10049] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.406354][T10049] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.558530][T10049] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.629054][T10049] vlan0: left promiscuous mode
[  156.681171][T10049] tipc: Resetting bearer <ib:geneve1>
[  156.715387][T10049] ip6gre1: left allmulticast mode
[  156.720312][T10049] erspan0: left allmulticast mode
[  156.722863][T10049] macvtap1: left promiscuous mode
[  156.725061][T10049] macvtap1: left allmulticast mode
[  156.748647][T10049] bond1: left promiscuous mode
[  156.750706][T10049] bond2: left promiscuous mode
[  156.752938][T10049] bond1: left allmulticast mode
[  156.755105][T10049] bond2: left allmulticast mode
[  156.763500][ T5876] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.769507][ T5876] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.775002][ T5876] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.779195][ T5876] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.190687][T10081] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1785'.
[  159.647330][T10105] Bluetooth: hci0: Opcode 0x080f failed: -4
[  159.698446][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'.
[  159.781860][T10121] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  159.843226][T10128] nbd: illegal input index -1
[  159.883001][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1805'.
[  160.058955][T10141] block nbd1: server does not support multiple connections per device.
[  160.064669][T10141] block nbd1: shutting down sockets
[  160.501766][T10169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.509420][T10169] netlink: 'syz.2.1821': attribute type 1 has an invalid length.
[  160.512492][T10169] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1821'.
[  160.857128][ T5233] Bluetooth: hci0: command 0x080f tx timeout
[  161.304588][T10213] netlink: 'syz.1.1837': attribute type 1 has an invalid length.
[  161.339816][T10213] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[  161.343766][T10213] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  161.352546][T10213] bond4: (slave vti0): making interface the new active one
[  161.356770][T10213] bond4: (slave vti0): Enslaving as an active interface with an up link
[  161.435952][T10220] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1839'.
[  161.630311][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'.
[  161.644011][T10236] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  161.844882][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'.
[  161.852495][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'.
[  161.933513][T10259] netlink: 'syz.0.1855': attribute type 13 has an invalid length.
[  161.936707][T10259] netlink: 'syz.0.1855': attribute type 17 has an invalid length.
[  161.963116][T10259] erspan0: left promiscuous mode
[  162.005542][T10259] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.024169][T10259] 8021q: adding VLAN 0 to HW filter on device team0
[  162.052587][T10259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.140787][T10259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1855'.
[  162.297271][T10280] delete_channel: no stack
[  162.508064][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1871'.
[  162.514485][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1871'.
[  162.524286][T10293] netlink: 'syz.1.1871': attribute type 4 has an invalid length.
[  162.530280][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1874'.
[  162.534830][T10293] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1871'.
[  162.697146][ T5233] Bluetooth: hci2: command 0x0419 tx timeout
[  163.311267][T10333] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1888'.
[  163.314635][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'.
[  163.331286][T10333] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1888'.
[  163.351683][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'.
[  163.379539][T10333] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1888'.
[  163.820060][    C0] 
[  163.821055][    C0] ================================
[  163.823074][    C0] WARNING: inconsistent lock state
[  163.825127][    C0] syzkaller #0 Not tainted
[  163.827917][    C0] --------------------------------
[  163.830445][    C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[  163.833247][    C0] syz.0.1896/10346 [HC0[0]:SC1[1]:HE1:SE0] takes:
[  163.835817][    C0] ffff88801fad58a8 (&p->tcfa_lock){+.?.}-{3:3}, at: est_timer+0xd4/0x9f0
[  163.839099][    C0] {SOFTIRQ-ON-W} state was registered at:
[  163.841387][    C0]   lock_acquire+0x120/0x360
[  163.843200][    C0]   _raw_spin_lock+0x2e/0x40
[  163.845234][    C0]   tcf_pedit_init+0xbc9/0xff0
[  163.847372][    C0]   tcf_action_init_1+0x463/0x6d0
[  163.849373][    C0]   tcf_action_init+0x2cf/0xab0
[  163.851331][    C0]   tc_ctl_action+0x430/0xbd0
[  163.853164][    C0]   rtnetlink_rcv_msg+0x77c/0xb70
[  163.855384][    C0]   netlink_rcv_skb+0x208/0x470
[  163.857386][    C0]   netlink_unicast+0x82f/0x9e0
[  163.859408][    C0]   netlink_sendmsg+0x805/0xb30
[  163.861334][    C0]   __sock_sendmsg+0x21c/0x270
[  163.863298][    C0]   ____sys_sendmsg+0x52d/0x830
[  163.865258][    C0]   ___sys_sendmsg+0x21f/0x2a0
[  163.867133][    C0]   __sys_sendmmsg+0x227/0x430
[  163.869125][    C0]   __x64_sys_sendmmsg+0xa0/0xc0
[  163.871159][    C0]   do_syscall_64+0xfa/0x3b0
[  163.873141][    C0]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.875690][    C0] irq event stamp: 4850
[  163.877400][    C0] hardirqs last  enabled at (4850): [<ffffffff8b7cceb3>] _raw_spin_unlock_irq+0x23/0x50
[  163.881238][    C0] hardirqs last disabled at (4849): [<ffffffff8b7ccc2d>] _raw_spin_lock_irq+0x7d/0xf0
[  163.885550][    C0] softirqs last  enabled at (4802): [<ffffffff8a337712>] fib6_run_gc+0x682/0x710
[  163.889045][    C0] softirqs last disabled at (4845): [<ffffffff8184f4da>] __irq_exit_rcu+0xca/0x1f0
[  163.892745][    C0] 
[  163.892745][    C0] other info that might help us debug this:
[  163.895837][    C0]  Possible unsafe locking scenario:
[  163.895837][    C0] 
[  163.898796][    C0]        CPU0
[  163.900112][    C0]        ----
[  163.901541][    C0]   lock(&p->tcfa_lock);
[  163.903180][    C0]   <Interrupt>
[  163.904601][    C0]     lock(&p->tcfa_lock);
[  163.906473][    C0] 
[  163.906473][    C0]  *** DEADLOCK ***
[  163.906473][    C0] 
[  163.909561][    C0] 2 locks held by syz.0.1896/10346:
[  163.911666][    C0]  #0: ffffffff8f538d48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  163.915083][    C0]  #1: ffffc90000007be0 ((&est->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0
[  163.918590][    C0] 
[  163.918590][    C0] stack backtrace:
[  163.920914][    C0] CPU: 0 UID: 0 PID: 10346 Comm: syz.0.1896 Not tainted syzkaller #0 PREEMPT(full) 
[  163.920933][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.920943][    C0] Call Trace:
[  163.920949][    C0]  <IRQ>
[  163.920955][    C0]  dump_stack_lvl+0x189/0x250
[  163.920979][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.920994][    C0]  ? __pfx__printk+0x10/0x10
[  163.921014][    C0]  ? print_lock_name+0xde/0x100
[  163.921033][    C0]  print_usage_bug+0x297/0x2e0
[  163.921046][    C0]  valid_state+0xc3/0xf0
[  163.921059][    C0]  mark_lock_irq+0x36/0x390
[  163.921072][    C0]  ? __kernel_text_address+0xd/0x40
[  163.921090][    C0]  ? unwind_get_return_address+0x4d/0x90
[  163.921108][    C0]  mark_lock+0x11b/0x190
[  163.921120][    C0]  __lock_acquire+0x680/0xd20
[  163.921143][    C0]  ? est_timer+0xd4/0x9f0
[  163.921160][    C0]  lock_acquire+0x120/0x360
[  163.921177][    C0]  ? est_timer+0xd4/0x9f0
[  163.921196][    C0]  ? lockdep_unlock+0x89/0x120
[  163.921215][    C0]  _raw_spin_lock+0x2e/0x40
[  163.921233][    C0]  ? est_timer+0xd4/0x9f0
[  163.921250][    C0]  est_timer+0xd4/0x9f0
[  163.921301][    C0]  ? call_timer_fn+0xbe/0x5f0
[  163.921321][    C0]  ? call_timer_fn+0xbe/0x5f0
[  163.921338][    C0]  ? __pfx_est_timer+0x10/0x10
[  163.921358][    C0]  call_timer_fn+0x17e/0x5f0
[  163.921375][    C0]  ? __pfx_est_timer+0x10/0x10
[  163.921392][    C0]  ? call_timer_fn+0xbe/0x5f0
[  163.921410][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  163.921438][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.921457][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.921469][    C0]  ? __pfx_est_timer+0x10/0x10
[  163.921486][    C0]  __run_timer_base+0x61a/0x860
[  163.921501][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  163.921522][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  163.921544][    C0]  run_timer_softirq+0xb7/0x180
[  163.921560][    C0]  handle_softirqs+0x286/0x870
[  163.921574][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  163.921589][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  163.921603][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  163.921637][    C0]  __irq_exit_rcu+0xca/0x1f0
[  163.921651][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  163.921666][    C0]  irq_exit_rcu+0x9/0x30
[  163.921677][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  163.921697][    C0]  </IRQ>
[  163.921702][    C0]  <TASK>
[  163.921707][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  163.921722][    C0] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  163.921736][    C0] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 1b 99 14 f6 e8 b6 f2 4b f6 fb bf 01 00 00 00 <e8> 5b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  163.921747][    C0] RSP: 0018:ffffc90004faf820 EFLAGS: 00000282
[  163.921762][    C0] RAX: 0014701fca16ea00 RBX: 0000000000000000 RCX: 0014701fca16ea00
[  163.921772][    C0] RDX: 0000000000000006 RSI: ffffffff8d9b95c4 RDI: 0000000000000001
[  163.921780][    C0] RBP: ffffc90004faf8d0 R08: ffffffff8fa39337 R09: 1ffffffff1f47266
[  163.921790][    C0] R10: dffffc0000000000 R11: fffffbfff1f47267 R12: 0000000000000000
[  163.921799][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920009f5f04
[  163.921816][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  163.921832][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  163.921847][    C0]  irqentry_exit+0x6f/0x90
[  163.921859][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  163.921872][    C0] RIP: 0010:lockdep_unregister_key+0x2c5/0x310
[  163.921893][    C0] Code: 65 48 8b 05 0d 40 03 11 48 3b 44 24 10 0f 84 26 fe ff ff e8 cd b6 dc 09 e8 f8 b7 dc 09 41 f7 c7 00 02 00 00 74 bd fb 40 84 ed <75> bc eb cd 90 0f 0b 90 e9 19 ff ff ff 90 0f 0b 90 e9 2a ff ff ff
[  163.921904][    C0] RSP: 0018:ffffc90004faf998 EFLAGS: 00000202
[  163.921914][    C0] RAX: 0014701fca16ea00 RBX: 0000000000000001 RCX: 0014701fca16ea00
[  163.921923][    C0] RDX: ffffffff93648338 RSI: ffffffff8d9cd1b4 RDI: ffffffff8be33800
[  163.921933][    C0] RBP: ffff888110d31201 R08: 0000000000000000 R09: ffffffff81aa8268
[  163.921942][    C0] R10: dffffc0000000000 R11: fffffbfff1f47267 R12: 0000000000000000
[  163.921951][    C0] R13: 0000000000001000 R14: 0000000000000001 R15: 0000000000000207
[  163.921961][    C0]  ? __is_module_percpu_address+0x28/0x3f0
[  163.921981][    C0]  ? __pfx_pfifo_fast_destroy+0x10/0x10
[  163.921999][    C0]  __qdisc_destroy+0x166/0x420
[  163.922010][    C0]  dev_shutdown+0x34c/0x440
[  163.922021][    C0]  unregister_netdevice_many_notify+0xe0f/0x1ff0
[  163.922043][    C0]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  163.922060][    C0]  ? __queue_work+0xc56/0xfb0
[  163.922075][    C0]  ? queue_delayed_work_on+0x11a/0x280
[  163.922086][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.922098][    C0]  unregister_netdevice_queue+0x33c/0x380
[  163.922111][    C0]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  163.922124][    C0]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  163.922139][    C0]  ? linkwatch_urgent_event+0x318/0x3a0
[  163.922159][    C0]  __tun_detach+0xda4/0x1560
[  163.922180][    C0]  ? __pfx_tun_chr_close+0x10/0x10
[  163.922194][    C0]  tun_chr_close+0x10a/0x1c0
[  163.922207][    C0]  __fput+0x44c/0xa70
[  163.922226][    C0]  task_work_run+0x1d4/0x260
[  163.922246][    C0]  ? __pfx_task_work_run+0x10/0x10
[  163.922265][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  163.922333][    C0]  exit_to_user_mode_loop+0xec/0x110
[  163.922348][    C0]  do_syscall_64+0x2bd/0x3b0
[  163.922359][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.922368][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.922379][    C0]  ? exc_page_fault+0x9f/0xf0
[  163.922391][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.922404][    C0] RIP: 0033:0x7f2ee5d8ebe9
[  163.922417][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.922437][    C0] RSP: 002b:00007ffca4058488 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  163.922451][    C0] RAX: 0000000000000000 RBX: 0000000000027ef2 RCX: 00007f2ee5d8ebe9
[  163.922460][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  163.922466][    C0] RBP: 00007f2ee5fc7da0 R08: 0000000000000001 R09: 00000009a405877f
[  163.922475][    C0] R10: 0000001b32620000 R11: 0000000000000246 R12: 00007f2ee5fc609c
[  163.922484][    C0] R13: 00007f2ee5fc6090 R14: ffffffffffffffff R15: 00007ffca40585a0
[  163.922499][    C0]  </TASK>
[  164.178022][T10354] team0: Device vlan0 failed to change mtu
[  168.777157][   T11] block nbd0: Possible stuck request ffff888020d98000: control (read@0,1024B). Runtime 90 seconds
[  168.783694][   T11] block nbd0: Possible stuck request ffff888020d98200: control (read@1024,1024B). Runtime 90 seconds
[  168.788678][   T11] block nbd0: Possible stuck request ffff888020d98400: control (read@2048,1024B). Runtime 90 seconds
[  168.792172][   T11] block nbd0: Possible stuck request ffff888020d98600: control (read@3072,1024B). Runtime 90 seconds

VM DIAGNOSIS:
15:57:06  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bec60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df66b0 RSP=ffffc90000007190
R8 =ffff8881080d8237 R9 =1ffff1102101b046 R10=dffffc0000000000 R11=ffffffff854f3cb0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3d27 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557f762500 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33814ff8 CR3=000000003abac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=e593efc18f3fec00 RBX=0000000000000000 RCX=e593efc18f3fec00 RDX=0000000000000000
RSI=ffffffff8be337e0 RDI=ffffffff8be337a0 RBP=ffff88801b6698a0 RSP=ffffc9000308f2e0
R8 =ffff88801b66989f R9 =1ffff110036cd313 R10=dffffc0000000000 R11=ffffed10036cd314
R12=ffffffff822e559d R13=ffffffff822e559d R14=ffffffff8e139ee0 R15=0000000000000001
RIP=ffffffff819d6e55 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555586103500 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7d8a2f56c0 CR3=000000001fd62000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9674a12e53
XMM06=0000000000000000 00007f9674a12e4d XMM07=0000000000000000 00007f9674a12e61
XMM08=0000000000000000 00007f9674a12ee7 XMM09=0000000000000000 00007f9674a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
