last executing test programs:

16.937024289s ago: executing program 2 (id=1992):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000a00)=""/4096, 0xe22}, {&(0x7f0000000100)=""/105, 0x6e}, {&(0x7f0000000400)=""/214, 0xc4}], 0x5}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x40000, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x40000000, 0x0)

16.866890743s ago: executing program 2 (id=1993):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3e5}, &(0x7f0000000000)=0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280000000002010200a871f106f5b227e336b0949978d066cf000000000000000000000404000280"], 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x60)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3e5}, &(0x7f0000000000)=0x8) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280000000002010200a871f106f5b227e336b0949978d066cf000000000000000000000404000280"], 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x60) (async)

16.866390245s ago: executing program 2 (id=1994):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000002440)="17000000020002000003be8c5ee17688a8002b00030100ecff3f0000000300000a0001000098fc5a53d4f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e060000e9d20499887ef23f028a7a63c900000200df01800000deff0000000000000080c457681f009cee4a5acb3da4f3001fb7315033bf79ac2df5bc080236e226f7b68c8e7b0d16e1600c09205e9682843f441e8f49f298eeab22344122bbc500602022fabf7f37f21ced9e51da13268fb9", 0xb8)
syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001000010029bd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003007465616d3000000000000000000000000a0001"], 0x70}}, 0x8000)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x25, &(0x7f0000000000)=0xce, 0x4)
sendmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="b3dd", 0x2}], 0x1}}], 0x1, 0x4015)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x1000)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0800000000001000000000000000060800000000000000000800e0000002"], 0x24}}, 0x0)

16.40685071s ago: executing program 0 (id=2004):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
close(0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async)
r8 = socket$inet(0x2, 0x2, 0x1)
socket$key(0xf, 0x3, 0x2) (async)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async)
close(r8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) (async)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r10=>0x0}) (async)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) (async)
r12 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r12, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d00000001000000000000001800000000000000100100000d"], 0x30}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002ead7004fcdbdf2525000000080003004c8972516800", @ANYRES32=r10, @ANYBLOB="0a0006005050505050500000"], 0x28}}, 0x20000880)
bind(0xffffffffffffffff, &(0x7f0000000300)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80)

16.3470077s ago: executing program 0 (id=2006):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES16=r1], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="1ec86e88bf4ba4466ecffff7edad", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

16.346507968s ago: executing program 1 (id=2007):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000a00)=""/4096, 0xe22}, {&(0x7f0000000100)=""/105, 0x6e}, {&(0x7f0000000400)=""/214, 0xc4}], 0x5}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0, 0x20}, 0xf04}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x40000000, 0x0)

16.34639909s ago: executing program 0 (id=2008):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r3, &(0x7f0000000280)={0x1f, @fixed}, 0x8)
setsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, 0x2)
ioctl$FIONCLEX(r3, 0x5450)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000003c0)={@val={0x1c, 0x820}, @val={0x2, 0x3, 0x0, 0x14, 0x14, 0x1}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x3, 0x2f, 0xfa7, 0x67, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x7, 0x1, 0x0, 0x2, 0x2, 0x5}, 0x2, {0x4, 0x7, 0x1, 0x14, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "d4327899e67566f565f3b6f39267f8c1581a1d8e5602fb9e8b83f6e62135bda4a2e2668dee614bc3d82d4cd01b4541722c422f05b5116e84f028cd53bbcfde9ae71d721f04b1bc50aadbf9f369386617c5d7ea8b4f643e92406b0a8b7ed306f46d7267b7b58fd7f498ddf2955dd47068"}}}}}, 0xfb5)

16.346289675s ago: executing program 1 (id=2009):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0)

16.275679089s ago: executing program 1 (id=2010):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r2, 0x0, 0xffffffffffffff20, 0x200c0045, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f00000000c0), 0x4)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d30000000000000050018000100000008000300fd0f0000080004000000000008000d000600000008000e"], 0x54}, 0x1, 0x0, 0x0, 0x104}, 0x20000000)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}, {0x6, 0x0, 0x0, 0x41}]})

16.275225148s ago: executing program 1 (id=2011):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000440)={0x34, r3, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x710}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000044)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x90)

16.224059551s ago: executing program 1 (id=2012):
r0 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xfffffffd}, 0x8)
sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c)
close(r0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
socket(0x2, 0x3, 0xff)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x203, 0x4)
write(0xffffffffffffffff, &(0x7f0000000440)="cde0a4e0c7769f01b0df22aebe6d58d5be33d90e74c1e79e9a4e825744cb1d4be74c0b142833c7e12e3f5514a6e8f874779501562bf2de6a9e39ceca0416c18f93b46653ad01395f669542a43441ea518feb6749a76745e4e5955a24b83686fe9efce04419b5274be3131c34a48b76a130251ee163a45dc79af8e7582f2e", 0x7e)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
socket$inet6_sctp(0xa, 0x0, 0x84)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f0000000000)={0x1d, r8}, 0x10)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r3, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000140)=""/125, &(0x7f00000000c0)=0x7d)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r9, 0x0, 0xf, 0x0, &(0x7f0000000040))
sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0xffffffffffffff2d, 0x0}}], 0x1, 0x4000000)

16.223811456s ago: executing program 0 (id=2013):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="c56cab817dc1576cdf257b00000008000300", @ANYRES32=r2, @ANYBLOB="14000201969e221e156c6938156e5818d43a30781400fe00a0f87bfa5825d8b895b4f524b7cc27520a000600080211000001ffef1400fe00c008a562889916c62a8c44f294c51ecb0a00060008021100000000001400fe005c4fbf1426d6e7e98a224a50dfb584e00a0006000802110000010000"], 0x90}, 0x1, 0x0, 0x0, 0x26026080}, 0x0)

16.223374797s ago: executing program 0 (id=2014):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='cgroup\x00'}, 0xffffffb4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f00000000c0)=0x1064, 0x4)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x6c}, 0x1, 0x0, 0x0, 0x4810}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r3)
sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000800)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4084)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r5 = socket(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)

16.164555507s ago: executing program 0 (id=2015):
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48094)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x20000050)
r4 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r4, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000feffffffffff080045000028000000000002907800000000ffffff9a56aba30c097ebc4fb240decf27ff11e090780000"], 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x1c, 0x0, @opaque="571818d3e222532f03de8fba932ff0e0f5d52380"}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000bb4c4509925fbfb58d7626ef8b2b5f25818bc3a4ca0486b87dd036d4e69075c2cc7da7fed6eb333d2997433e87216144e05afe220277bfdbf638929832997dc03c7faa5675b37f0df23d3de80412862df9c3de0de286501f89f985df7c4c7d8672345fdbc9bded36645a9968fe40f7a754b34c630a561570b8fadcb71e", @ANYRES16=r7, @ANYBLOB="0100ffffffff00000000010000000c0002000400000000000000100007800c00018008000100", @ANYRES32=r8, @ANYBLOB="08000100000000000c000200ff7f000000000000"], 0x44}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0xbf}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x7, 0xdb, &(0x7f0000000680)=""/219, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x10, 0x7fffffff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000240)='xprt_ping\x00', r9, 0x0, 0x1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000001640)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x4})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)

16.164198722s ago: executing program 1 (id=2016):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800)
sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400080001000000f1000900020e0073797a31000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$netlink(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d0021"], 0x1c}], 0x1}, 0x0)
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000b3381aa97a65798300000000000039000000a32bba56", @ANYBLOB="1c005a8018000080140005007f00a50fc4030000ff0f030002"], 0x38}}, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)={0x1c4, r6, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6a3a5554218ba8ac"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3ec95e9cab3afa8d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fea3484cafc85a906415aebedc9ade3dadb65a8c26766412"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "28ede5886353ddf8"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="440c7962f7167718648f067ef35590a9"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="cf6793c5b3ab44452b57d46ce75d7a6d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2ade00}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c9aa7a761be4c245"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8018a26f10b5b27eefd0b64c2100077f7a555a931c1bc5f8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="40b1debb515011cb417b8f55e8f35815"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f342150078cac9f09ee8c0c18c912f44389715fda8087ded"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="03803299d6ed3c0d1576e150c2f21d3e470ebd8dd2a806aca32f2b9d1d8238b5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac644c12fc2ce6e7"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="be02efeebcad44c11c3da4a04a99cb08"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97758f19d8babe86"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a47989d41aa21119"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3c}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="05af990413b6cc5e18e517f0aa73307ba4396d3f725840dd"}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8090}, 0x805)

16.023363694s ago: executing program 2 (id=2017):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0)

15.957181428s ago: executing program 2 (id=2018):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@mpls_delroute={0x30, 0x19, 0x1, 0x70bd2c, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "498eb9b37af76d8db5fdf87c372d"}}]}, 0x30}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000002700010000000000000000000a000100000000000000000000000000ac1e01010000000000000000000000000000000000000800000000002b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000800000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0)

15.957033716s ago: executing program 2 (id=2019):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x44)
write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7006030101ac"], 0x6)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'tunl0\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0xc0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x3, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002740)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000033c0)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000), &(0x7f00000010c0)=0x4)

999.057934ms ago: executing program 32 (id=2015):
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48094)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x20000050)
r4 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r4, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000feffffffffff080045000028000000000002907800000000ffffff9a56aba30c097ebc4fb240decf27ff11e090780000"], 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x1c, 0x0, @opaque="571818d3e222532f03de8fba932ff0e0f5d52380"}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000bb4c4509925fbfb58d7626ef8b2b5f25818bc3a4ca0486b87dd036d4e69075c2cc7da7fed6eb333d2997433e87216144e05afe220277bfdbf638929832997dc03c7faa5675b37f0df23d3de80412862df9c3de0de286501f89f985df7c4c7d8672345fdbc9bded36645a9968fe40f7a754b34c630a561570b8fadcb71e", @ANYRES16=r7, @ANYBLOB="0100ffffffff00000000010000000c0002000400000000000000100007800c00018008000100", @ANYRES32=r8, @ANYBLOB="08000100000000000c000200ff7f000000000000"], 0x44}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0xbf}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x7, 0xdb, &(0x7f0000000680)=""/219, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x10, 0x7fffffff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000240)='xprt_ping\x00', r9, 0x0, 0x1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000001640)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x4})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)

971.566678ms ago: executing program 33 (id=2016):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800)
sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400080001000000f1000900020e0073797a31000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$netlink(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d0021"], 0x1c}], 0x1}, 0x0)
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000b3381aa97a65798300000000000039000000a32bba56", @ANYBLOB="1c005a8018000080140005007f00a50fc4030000ff0f030002"], 0x38}}, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)={0x1c4, r6, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6a3a5554218ba8ac"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3ec95e9cab3afa8d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fea3484cafc85a906415aebedc9ade3dadb65a8c26766412"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "28ede5886353ddf8"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="440c7962f7167718648f067ef35590a9"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="cf6793c5b3ab44452b57d46ce75d7a6d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2ade00}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c9aa7a761be4c245"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8018a26f10b5b27eefd0b64c2100077f7a555a931c1bc5f8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="40b1debb515011cb417b8f55e8f35815"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f342150078cac9f09ee8c0c18c912f44389715fda8087ded"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="03803299d6ed3c0d1576e150c2f21d3e470ebd8dd2a806aca32f2b9d1d8238b5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac644c12fc2ce6e7"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="be02efeebcad44c11c3da4a04a99cb08"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97758f19d8babe86"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a47989d41aa21119"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3c}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="05af990413b6cc5e18e517f0aa73307ba4396d3f725840dd"}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8090}, 0x805)

0s ago: executing program 34 (id=2019):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x44)
write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7006030101ac"], 0x6)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'tunl0\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0xc0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x3, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002740)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000033c0)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000), &(0x7f00000010c0)=0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46786' (ED25519) to the list of known hosts.
syzkaller login: [   41.321323][ T5773] cgroup: Unknown subsys name 'net'
[   41.406240][ T5773] cgroup: Unknown subsys name 'cpuset'
[   41.411921][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.673411][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.927186][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.941441][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.944918][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.962090][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.964982][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.966074][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.968941][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.971206][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.974766][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.977358][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.981307][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.982029][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.986322][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.989360][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.992332][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.225214][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   46.239004][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   46.255347][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   46.378000][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.380748][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.383591][ T5833] bridge_slave_0: entered allmulticast mode
[   46.386271][ T5833] bridge_slave_0: entered promiscuous mode
[   46.397081][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.399365][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.402447][ T5830] bridge_slave_0: entered allmulticast mode
[   46.405184][ T5830] bridge_slave_0: entered promiscuous mode
[   46.408533][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.411012][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.415288][ T5830] bridge_slave_1: entered allmulticast mode
[   46.418693][ T5830] bridge_slave_1: entered promiscuous mode
[   46.422436][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.424768][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.427082][ T5833] bridge_slave_1: entered allmulticast mode
[   46.429761][ T5833] bridge_slave_1: entered promiscuous mode
[   46.438962][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.441284][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.443909][ T5826] bridge_slave_0: entered allmulticast mode
[   46.446528][ T5826] bridge_slave_0: entered promiscuous mode
[   46.467100][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.470156][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.474147][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.476504][ T5826] bridge_slave_1: entered allmulticast mode
[   46.479204][ T5826] bridge_slave_1: entered promiscuous mode
[   46.489349][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.508195][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.527324][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.532468][ T5833] team0: Port device team_slave_0 added
[   46.535866][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.554533][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.558520][ T5833] team0: Port device team_slave_1 added
[   46.569307][ T5830] team0: Port device team_slave_0 added
[   46.587029][ T5830] team0: Port device team_slave_1 added
[   46.589429][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.591639][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.600086][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.627200][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.629451][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.638406][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.644383][ T5826] team0: Port device team_slave_0 added
[   46.647516][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.649735][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.657979][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.663122][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.665369][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.673491][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.683279][ T5826] team0: Port device team_slave_1 added
[   46.730894][ T5833] hsr_slave_0: entered promiscuous mode
[   46.734018][ T5833] hsr_slave_1: entered promiscuous mode
[   46.746780][ T5830] hsr_slave_0: entered promiscuous mode
[   46.749026][ T5830] hsr_slave_1: entered promiscuous mode
[   46.751185][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.754356][ T5830] Cannot create hsr debugfs directory
[   46.763610][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.765898][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.774778][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.798539][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.801198][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.810703][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.884374][ T5826] hsr_slave_0: entered promiscuous mode
[   46.886760][ T5826] hsr_slave_1: entered promiscuous mode
[   46.888815][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.891168][ T5826] Cannot create hsr debugfs directory
[   47.015268][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.021215][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.032093][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.036698][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.072776][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.075087][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.077779][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.080144][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.086025][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.095308][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.119313][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.124453][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.161020][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.174192][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.181001][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.184540][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.188901][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.191147][ T5830] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.193626][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.195985][ T5830] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.201827][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.211781][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.215575][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.218138][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.221024][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.247662][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   47.259639][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.262136][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.270929][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.273321][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.310465][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.330346][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   47.345837][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.348121][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.368869][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.371222][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.380210][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.408755][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   47.420058][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.422373][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.434504][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.436831][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.445514][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.467977][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.471331][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.516266][ T5833] veth0_vlan: entered promiscuous mode
[   47.529767][ T5833] veth1_vlan: entered promiscuous mode
[   47.547407][ T5833] veth0_macvtap: entered promiscuous mode
[   47.551249][ T5833] veth1_macvtap: entered promiscuous mode
[   47.562424][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.568756][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.575309][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.578289][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.580979][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.585697][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.619500][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.642513][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.645183][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.651174][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.671648][ T3620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.675520][ T3620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.701544][ T5830] veth0_vlan: entered promiscuous mode
[   47.704708][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.716801][ T5826] veth0_vlan: entered promiscuous mode
[   47.721377][ T5830] veth1_vlan: entered promiscuous mode
[   47.733844][ T5826] veth1_vlan: entered promiscuous mode
[   47.754058][ T5895] netlink: 'syz.0.1': attribute type 23 has an invalid length.
[   47.779083][ T5830] veth0_macvtap: entered promiscuous mode
[   47.790921][ T5826] veth0_macvtap: entered promiscuous mode
[   47.797852][ T5826] veth1_macvtap: entered promiscuous mode
[   47.803181][ T5830] veth1_macvtap: entered promiscuous mode
[   47.820006][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.827993][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.831015][ T5897] netlink: zone id is out of range
[   47.833894][ T5897] netlink: zone id is out of range
[   47.835606][ T5897] netlink: zone id is out of range
[   47.837288][ T5897] netlink: zone id is out of range
[   47.838916][ T5897] netlink: zone id is out of range
[   47.843479][ T5897] netlink: zone id is out of range
[   47.845154][ T5897] netlink: zone id is out of range
[   47.845204][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.846785][ T5897] netlink: zone id is out of range
[   47.850742][ T5897] netlink: zone id is out of range
[   47.850875][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.853062][ T5897] netlink: zone id is out of range
[   47.857511][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.860462][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.864368][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.869033][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.878111][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.880964][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.896054][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.898768][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.961223][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.964395][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.972531][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5'.
[   47.992683][ T5219] Bluetooth: hci2: command tx timeout
[   47.993142][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.997028][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.998472][ T3620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.002290][ T3620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.034797][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.040005][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.070835][ T5905] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   48.073144][ T5219] Bluetooth: hci0: command tx timeout
[   48.073166][   T54] Bluetooth: hci1: command tx timeout
[   48.183796][ T5916] netlink: 'syz.2.8': attribute type 23 has an invalid length.
[   48.199642][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'.
[   48.205692][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'.
[   48.327497][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'.
[   48.333603][ T5932] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[   48.336768][ T5932] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[   48.537575][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'.
[   48.686790][ T5963] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.690978][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.693612][ T5963] Zero length message leads to an empty skb
[   48.789710][ T5980] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20002
[   48.801978][ T5981] netlink: 'syz.1.27': attribute type 7 has an invalid length.
[   48.804768][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'.
[   48.831202][ T5983] netlink: 'syz.0.28': attribute type 1 has an invalid length.
[   48.910572][ T5988] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   48.913502][ T5988] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   48.916352][ T5988] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   48.919387][ T5988] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   48.925344][ T5988] team0: Port device vxlan0 added
[   49.016018][ T5990] syzkaller0: entered promiscuous mode
[   49.018057][ T5990] syzkaller0: entered allmulticast mode
[   49.056734][ T5996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'.
[   49.086465][ T5998] tipc: Enabling of bearer <eth:syzka	ler0> rejected, failed to enable media
[   49.177714][ T6001] netlink: 'syz.0.35': attribute type 1 has an invalid length.
[   49.180319][ T6001] netlink: 224 bytes leftover after parsing attributes in process `syz.0.35'.
[   49.185829][ T6003] netlink: 'syz.0.35': attribute type 1 has an invalid length.
[   49.188912][ T6003] netlink: 224 bytes leftover after parsing attributes in process `syz.0.35'.
[   49.230511][ T6005] netlink: 'syz.0.36': attribute type 1 has an invalid length.
[   49.238398][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'.
[   49.253950][ T6005] netlink: 'syz.0.36': attribute type 23 has an invalid length.
[   49.607798][ T6032] netlink: 'syz.2.46': attribute type 1 has an invalid length.
[   49.625787][ T6032] netlink: 'syz.2.46': attribute type 23 has an invalid length.
[   49.739786][  T789] IPVS: starting estimator thread 0...
[   49.834570][ T6038] IPVS: using max 79 ests per chain, 189600 per kthread
[   50.082048][   T54] Bluetooth: hci2: command tx timeout
[   50.151951][   T54] Bluetooth: hci1: command tx timeout
[   50.161880][   T54] Bluetooth: hci0: command tx timeout
[   50.427815][ T6047] bridge_slave_0: left allmulticast mode
[   50.429704][ T6047] bridge_slave_0: left promiscuous mode
[   50.431638][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.438092][ T6047] bridge_slave_1: left allmulticast mode
[   50.439967][ T6047] bridge_slave_1: left promiscuous mode
[   50.444454][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.450788][ T6047] bond0: (slave bond_slave_0): Releasing backup interface
[   50.458341][ T6047] bond0: (slave bond_slave_1): Releasing backup interface
[   50.468004][ T6047] team0: Port device team_slave_0 removed
[   50.476483][ T6047] team0: Port device team_slave_1 removed
[   50.479252][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.483142][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.487281][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.489775][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_1
[   50.905952][ T6066] Bluetooth: MGMT ver 1.23
[   51.004873][ T6076] xt_ecn: cannot match TCP bits for non-tcp packets
[   51.030411][ T6078] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   52.152078][   T54] Bluetooth: hci2: command tx timeout
[   52.188544][ T6131] warning: `syz.0.80' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   52.232892][   T54] Bluetooth: hci1: command tx timeout
[   52.233824][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.238812][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0
[   52.247081][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.252623][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1
[   52.484253][ T6155] bridge_slave_0: left allmulticast mode
[   52.490744][ T6155] bridge_slave_0: left promiscuous mode
[   52.498643][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.512500][ T6155] bridge_slave_1: left allmulticast mode
[   52.514949][ T6155] bridge_slave_1: left promiscuous mode
[   52.516960][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.527755][ T6155] bond0: (slave bond_slave_0): Releasing backup interface
[   52.537150][ T6155] bond0: (slave bond_slave_1): Releasing backup interface
[   52.560093][ T6155] team0: Port device team_slave_0 removed
[   52.574066][ T6155] team0: Port device team_slave_1 removed
[   52.582609][ T6155] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   52.585691][ T6155] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   52.588575][ T6155] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   52.591529][ T6155] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   52.598724][ T6155] team0: Port device vxlan0 removed
[   52.892943][ T6194] netem: change failed
[   52.935357][ T6193] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.652262][ T6294] __nla_validate_parse: 19 callbacks suppressed
[   53.652273][ T6294] netlink: 32 bytes leftover after parsing attributes in process `syz.0.117'.
[   53.718251][ T6301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'.
[   53.864115][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'.
[   53.866984][ T6316] bridge_slave_1: left allmulticast mode
[   53.868841][ T6316] bridge_slave_1: left promiscuous mode
[   53.870949][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.881496][ T6316] bridge_slave_0: left allmulticast mode
[   53.914507][ T6316] bridge_slave_0: left promiscuous mode
[   53.960571][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.223073][ T6364] validate_nla: 6 callbacks suppressed
[   54.223083][ T6364] netlink: 'syz.1.126': attribute type 21 has an invalid length.
[   54.227465][ T6364] netlink: 156 bytes leftover after parsing attributes in process `syz.1.126'.
[   54.235219][   T54] Bluetooth: hci2: command tx timeout
[   54.312498][   T54] Bluetooth: hci1: command tx timeout
[   54.336796][ T6371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.128'.
[   54.390981][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'.
[   54.396711][ T6373] netlink: 48 bytes leftover after parsing attributes in process `syz.1.130'.
[   55.315878][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.137'.
[   55.322971][ T6405] netlink: 'syz.1.137': attribute type 1 has an invalid length.
[   55.326150][ T6405] netlink: 'syz.1.137': attribute type 1 has an invalid length.
[   55.329212][ T6405] netlink: 100 bytes leftover after parsing attributes in process `syz.1.137'.
[   55.459037][ T6413] netlink: 36 bytes leftover after parsing attributes in process `syz.2.140'.
[   55.607861][ T6417] netlink: 'syz.2.142': attribute type 23 has an invalid length.
[   55.801653][ T6432] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   56.004544][ T6438] netlink: 'syz.2.152': attribute type 6 has an invalid length.
[   56.061445][ T6445] xt_CT: You must specify a L4 protocol and not use inversions on it
[   56.212567][ T6462] net_ratelimit: 163 callbacks suppressed
[   56.212576][ T6462] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   56.401245][ T6487] geneve2: entered promiscuous mode
[   56.676090][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.678698][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.685343][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.687943][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.518070][ T6545] xt_CT: You must specify a L4 protocol and not use inversions on it
[   57.739053][ T6563] geneve2: entered promiscuous mode
[   57.741532][ T6563] geneve2: entered allmulticast mode
[   57.944620][ T6596] ipt_ECN: cannot use operation on non-tcp rule
[   58.057071][ T6611] netlink: 'syz.0.210': attribute type 23 has an invalid length.
[   58.226202][ T6634] Bluetooth: hci0: Opcode 0x080f failed: -22
[   58.238484][ T6627] x_tables: unsorted underflow at hook 2
[   58.437803][ T6663] IPv6: NLM_F_REPLACE set, but no existing node found!
[   58.569168][ T6680] netlink: 'syz.1.232': attribute type 1 has an invalid length.
[   58.607191][ T6674] netlink: 'syz.2.230': attribute type 1 has an invalid length.
[   58.615381][ T6680] xt_CT: You must specify a L4 protocol and not use inversions on it
[   58.700981][ T6694] netlink: 'syz.0.237': attribute type 4 has an invalid length.
[   58.715105][ T6685] can: request_module (can-proto-3) failed.
[   58.749409][ T6694] __nla_validate_parse: 32 callbacks suppressed
[   58.749419][ T6694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.237'.
[   58.756406][ T6700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.239'.
[   58.830337][ T6705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.241'.
[   58.867163][ T6709] syzkaller1: tun_chr_ioctl cmd 1074025672
[   58.871377][ T6709] syzkaller1: ignored: set checksum disabled
[   58.939360][ T6712] netlink: 'syz.1.244': attribute type 21 has an invalid length.
[   58.948692][ T6712] IPv6: NLM_F_CREATE should be specified when creating new route
[   58.961585][ T6712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.244'.
[   58.967552][ T6712] netlink: 152 bytes leftover after parsing attributes in process `syz.1.244'.
[   58.975118][ T6717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.246'.
[   58.989525][ T6717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.246'.
[   59.096716][ T6733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.248'.
[   59.117030][ T6737] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING
[   59.258185][ T6752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.258'.
[   59.307547][ T6760] netlink: 232 bytes leftover after parsing attributes in process `syz.2.259'.
[   59.310512][ T6760] openvswitch: netlink: Flow key attr not present in new flow.
[   59.352204][ T6763] tipc: Started in network mode
[   59.354100][ T6763] tipc: Node identity 8afad7f6f7d9, cluster identity 4711
[   59.356769][ T6763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.360628][ T6763] tipc: Resetting bearer <eth:syzkaller0>
[   59.377671][ T6762] tipc: Disabling bearer <eth:syzkaller0>
[   59.458359][ T6774] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   59.462750][ T6772] openvswitch: netlink: Key 6 has unexpected len 186 expected 2
[   59.535764][ T6778] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   59.562836][ T6785] geneve0: mtu less than device minimum
[   59.604986][ T6778] netlink: 'syz.2.265': attribute type 10 has an invalid length.
[   59.647270][ T6790] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   59.672238][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   59.694236][ T6794] syzkaller1: entered promiscuous mode
[   59.696084][ T6794] syzkaller1: entered allmulticast mode
[   59.701019][ T6789] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   59.768762][ T6801] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.905696][ T6820] netdevsim netdevsim0: Direct firmware load for .
[   59.905696][ T6820]  failed with error -2
[   59.909470][ T6820] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   59.909470][ T6820] 
[   60.151981][ T5881] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   60.242516][   T54] Bluetooth: hci0: command tx timeout
[   60.565291][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   60.810825][ T6845] netlink: 'syz.0.286': attribute type 1 has an invalid length.
[   60.813528][ T6845] netlink: 'syz.0.286': attribute type 1 has an invalid length.
[   61.721410][ T6861] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   61.970261][ T6893] netlink: 'syz.1.300': attribute type 29 has an invalid length.
[   61.974245][ T6890] netlink: 'syz.1.300': attribute type 29 has an invalid length.
[   61.977531][ T5881] IPVS: starting estimator thread 0...
[   62.063771][ T6895] IPVS: using max 79 ests per chain, 189600 per kthread
[   62.106330][ T6910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.319256][ T6928] nbd: must specify a size in bytes for the device
[   62.432494][ T6945] vlan2: entered allmulticast mode
[   62.434676][ T6945] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   62.828253][ T6982] tipc: Started in network mode
[   62.829862][ T6982] tipc: Node identity eea160095061, cluster identity 4711
[   62.832604][ T6982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.835312][ T6980] syzkaller0: entered promiscuous mode
[   62.840323][ T6980] syzkaller0: entered allmulticast mode
[   62.858646][ T6982] tipc: Resetting bearer <eth:syzkaller0>
[   62.864333][ T6979] tipc: Resetting bearer <eth:syzkaller0>
[   62.886039][ T6979] tipc: Disabling bearer <eth:syzkaller0>
[   63.021356][ T7008] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   63.029551][ T7004] x_tables: duplicate underflow at hook 3
[   63.030590][ T7008] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   63.036778][ T7008] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   63.274221][ T7036] netlink: 'syz.0.350': attribute type 10 has an invalid length.
[   63.276711][ T7036] team0: entered promiscuous mode
[   63.278319][ T7036] team_slave_0: entered promiscuous mode
[   63.280172][ T7036] team_slave_1: entered promiscuous mode
[   63.301329][ T7036] team0: entered allmulticast mode
[   63.305241][ T7036] team_slave_0: entered allmulticast mode
[   63.307082][ T7036] team_slave_1: entered allmulticast mode
[   63.309387][ T7036] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   63.321683][ T7036] team0: left promiscuous mode
[   63.324465][ T7036] team_slave_0: left promiscuous mode
[   63.326244][ T7036] team_slave_1: left promiscuous mode
[   63.329626][ T7036] team0: left allmulticast mode
[   63.338498][ T7036] team_slave_0: left allmulticast mode
[   63.340228][ T7036] team_slave_1: left allmulticast mode
[   63.347851][ T7036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.394163][ T7058] netlink: 'syz.0.359': attribute type 4 has an invalid length.
[   63.402540][ T7059] netlink: 'syz.1.358': attribute type 23 has an invalid length.
[   63.530751][ T7074] netlink: 'syz.1.364': attribute type 2 has an invalid length.
[   63.543164][ T7074] k*]: entered promiscuous mode
[   63.956627][ T7135] netlink: 'syz.0.385': attribute type 3 has an invalid length.
[   64.061286][ T7148] Illegal XDP return value 16128 on prog  (id 146) dev syz_tun, expect packet loss!
[   64.097847][ T7151] __nla_validate_parse: 26 callbacks suppressed
[   64.097884][ T7151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.391'.
[   64.226739][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.395'.
[   64.326546][ T7163] netlink: 76 bytes leftover after parsing attributes in process `syz.2.396'.
[   64.467012][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'.
[   64.621220][ T7190] ipt_rpfilter: unknown options
[   64.629913][ T7190] netlink: 72 bytes leftover after parsing attributes in process `syz.0.403'.
[   64.637584][ T7190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.403'.
[   64.669687][ T7192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'.
[   64.673316][ T7192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'.
[   64.718737][ T7194] smc: net device bond0 applied user defined pnetid SYZ2
[   64.721320][ T7194] smc: net device bond0 erased user defined pnetid SYZ2
[   64.919715][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.411'.
[   64.925004][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.411'.
[   65.805929][   T33] audit: type=1800 audit(1752920019.233:2): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.436" name="memory.events" dev="tmpfs" ino=641 res=0 errno=0
[   66.260191][ T7326] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0
[   66.694061][ T7345] Bluetooth: MGMT ver 1.23
[   66.743078][ T7349] validate_nla: 1 callbacks suppressed
[   66.743088][ T7349] netlink: 'syz.2.449': attribute type 23 has an invalid length.
[   66.831476][ T7355] ip6tnl1: entered promiscuous mode
[   66.841780][ T7355] ip6tnl1: entered allmulticast mode
[   66.858507][ T7355] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[   67.074102][ T7373] netlink: 'syz.2.456': attribute type 23 has an invalid length.
[   67.095551][ T7372] netlink: 'syz.0.455': attribute type 5 has an invalid length.
[   67.154859][ T7383] ieee802154 phy1 wpan1: encryption failed: -90
[   67.468178][ T7410] veth5: entered allmulticast mode
[   67.590343][ T7424] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[   67.626773][ T7434] netlink: 'syz.2.475': attribute type 23 has an invalid length.
[   67.669946][ T5881] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   67.684099][ T5881] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   67.697394][ T5881] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   67.708090][ T7446] netlink: 'syz.2.477': attribute type 23 has an invalid length.
[   67.753926][ T7443] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   68.024078][ T5859] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   68.084136][ T7478] netlink: 'syz.0.485': attribute type 4 has an invalid length.
[   68.086955][ T7478] netlink: 'syz.0.485': attribute type 4 has an invalid length.
[   68.797417][ T7485] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   68.949614][ T7507] batman_adv: batadv0: Adding interface: dummy0
[   68.951678][ T7507] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.961553][ T7507] batman_adv: batadv0: Interface activated: dummy0
[   68.984923][ T7508] netlink: 'syz.0.492': attribute type 23 has an invalid length.
[   69.018122][ T7513] netlink: 'syz.2.494': attribute type 2 has an invalid length.
[   69.036635][ T7513] : entered promiscuous mode
[   69.049326][ T7513] only policy match revision 0 supported
[   69.049337][ T7513] unable to load match
[   69.053402][ T7517] mac80211_hwsim hwsim6 ": renamed from wlan0 (while UP)
[   69.179962][ T7537] __nla_validate_parse: 18 callbacks suppressed
[   69.179970][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'.
[   69.188039][ T7539] DL<Y: renamed from lo (while UP)
[   69.313538][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'.
[   69.321088][ T7555] xt_hashlimit: size too large, truncated to 1048576
[   69.395901][ T7542] netlink: 14 bytes leftover after parsing attributes in process `syz.1.503'.
[   69.734239][ T7542] bond0 (unregistering): Released all slaves
[   70.248745][ T7589] Bluetooth: hci0: Opcode 0x080f failed: -22
[   70.796251][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.065807][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.527'.
[   71.102775][ T7615] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.528'.
[   71.131444][ T7624] syzkaller1: entered promiscuous mode
[   71.133779][ T7624] syzkaller1: entered allmulticast mode
[   71.136186][ T7615] netlink: 212892 bytes leftover after parsing attributes in process `syz.2.528'.
[   71.318144][ T7651] netlink: 'syz.0.541': attribute type 11 has an invalid length.
[   71.406482][ T7655] gtp0: entered promiscuous mode
[   71.492273][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'.
[   71.497554][ T7681] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   71.577918][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'.
[   71.629871][ T7694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.551'.
[   71.633450][ T7694] unsupported nlmsg_type 40
[   71.659937][ T7704] pim6reg1: entered promiscuous mode
[   71.661676][ T7704] pim6reg1: entered allmulticast mode
[   71.770582][ T7713] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   71.777861][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.558'.
[   72.321923][   T54] Bluetooth: hci0: command tx timeout
[   72.476093][ T7743] validate_nla: 3 callbacks suppressed
[   72.476103][ T7743] netlink: 'syz.2.570': attribute type 5 has an invalid length.
[   72.492193][ T7743] geneve2: entered promiscuous mode
[   72.695037][ T7761] bond0: option mode: unable to set because the bond device has slaves
[   72.815596][ T7769] bond1 (unregistering): Released all slaves
[   72.856331][ T7775] xt_HMARK: proto mask must be zero with L3 mode
[   73.361086][ T7814] xfrm1: entered promiscuous mode
[   73.363063][ T7814] xfrm1: entered allmulticast mode
[   73.594910][ T7835] xt_TCPMSS: Only works on TCP SYN packets
[   73.744100][ T7847] bridge0: entered allmulticast mode
[   73.863822][ T7853] netlink: 'syz.1.605': attribute type 1 has an invalid length.
[   73.944485][ T7861] netlink: 'syz.2.608': attribute type 2 has an invalid length.
[   73.983070][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   73.989415][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   73.991993][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   74.056584][ T7877] netlink: 'syz.2.612': attribute type 1 has an invalid length.
[   74.070313][ T7877] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.084828][ T7877] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.087102][ T7877] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   74.090989][ T7877] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   74.138625][ T7880] veth7: entered promiscuous mode
[   74.146367][ T7880] bond2: (slave veth7): Enslaving as an active interface with a down link
[   74.261915][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   74.721094][ T7915] __nla_validate_parse: 21 callbacks suppressed
[   74.721103][ T7915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.620'.
[   74.798409][ T7923] xt_hashlimit: max too large, truncated to 1048576
[   74.800739][ T7923] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   74.809626][ T7923] vlan2: entered allmulticast mode
[   74.811367][ T7923] team0: entered allmulticast mode
[   74.813942][ T7923] team_slave_0: entered allmulticast mode
[   74.816390][ T7923] team_slave_1: entered allmulticast mode
[   74.818382][ T7923] team0: Device vlan2 is already an upper device of the team interface
[   74.947195][ T7934] netlink: 72 bytes leftover after parsing attributes in process `syz.1.627'.
[   74.968528][ T7934] ip6tnl0: entered promiscuous mode
[   74.976913][ T7936] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   75.004892][ T7932] ip6tnl0: left promiscuous mode
[   75.050254][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   75.075045][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'.
[   75.084231][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.630'.
[   75.145181][ T7945] netlink: 'syz.2.631': attribute type 1 has an invalid length.
[   75.148028][ T7945] netlink: 172 bytes leftover after parsing attributes in process `syz.2.631'.
[   75.180843][ T7952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.633'.
[   75.201414][ T7961] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[   75.299366][ T7964] netlink: 5 bytes leftover after parsing attributes in process `syz.1.638'.
[   75.365044][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'.
[   75.367946][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'.
[   75.371268][ T7983] netlink: 'syz.2.643': attribute type 1 has an invalid length.
[   75.393265][ T7983] 8021q: adding VLAN 0 to HW filter on device bond3
[   75.410903][ T7983] 8021q: adding VLAN 0 to HW filter on device bond3
[   75.415233][ T7983] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   75.419312][ T7983] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   75.455154][ T7993] veth9: entered promiscuous mode
[   75.458821][ T7993] bond3: (slave veth9): Enslaving as an active interface with a down link
[   75.476342][ T7983] erspan0: entered allmulticast mode
[   75.493676][ T7983] bond3: (slave erspan0): making interface the new active one
[   75.499045][ T7983] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   75.556752][ T8000] netlink: 508 bytes leftover after parsing attributes in process `syz.2.649'.
[   75.841803][ T8002] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.844601][ T8002] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.847419][ T8002] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.850202][ T8002] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.952771][ T8012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.394748][ T8057] netlink: 'syz.2.663': attribute type 1 has an invalid length.
[   76.397192][ T8057] netlink: 'syz.2.663': attribute type 1 has an invalid length.
[   76.552119][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.555277][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   77.405763][ T8072] netlink: 'syz.2.668': attribute type 2 has an invalid length.
[   77.411112][ T8073] netlink: 'syz.2.668': attribute type 2 has an invalid length.
[   77.545226][ T8093] veth0: entered promiscuous mode
[   77.705819][ T8105] netlink: 'syz.2.678': attribute type 1 has an invalid length.
[   77.798194][ T8119] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   78.037620][ T8152] team0: Port device veth11 added
[   78.129947][ T8159] tc_dump_action: action bad kind
[   78.191594][ T8166] netlink: 'syz.0.697': attribute type 83 has an invalid length.
[   78.470331][ T8197] netlink: 'syz.0.706': attribute type 1 has an invalid length.
[   78.505219][ T8197] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.532244][ T8198] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.535159][ T8198] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   78.539108][ T8198] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   78.557798][ T8196] veth5: entered promiscuous mode
[   78.561123][ T8196] bond1: (slave veth5): Enslaving as an active interface with a down link
[   78.566978][ T8196] erspan0: entered allmulticast mode
[   78.570385][ T8196] bond1: (slave erspan0): making interface the new active one
[   78.575330][ T8196] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   78.605276][ T8208] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   78.638453][ T8210] x_tables: duplicate underflow at hook 4
[   78.746944][ T8223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.749965][ T8223] syzkaller0: entered promiscuous mode
[   78.754626][ T8223] syzkaller0: entered allmulticast mode
[   78.769983][ T8223] tipc: Resetting bearer <eth:syzkaller0>
[   78.776234][ T8222] tipc: Resetting bearer <eth:syzkaller0>
[   78.787407][ T8222] tipc: Disabling bearer <eth:syzkaller0>
[   78.790417][ T8226] digital: digital_start_poll: Unknown protocol
[   78.793487][ T8227] digital: digital_start_poll: Unknown protocol
[   78.860440][ T8241] sctp: [Deprecated]: syz.1.717 (pid 8241) Use of int in maxseg socket option.
[   78.860440][ T8241] Use struct sctp_assoc_value instead
[   79.097897][ T8262] tipc: Started in network mode
[   79.099600][ T8262] tipc: Node identity 82e2c7377e8, cluster identity 4711
[   79.102844][ T8262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.105843][ T8262] syzkaller0: entered promiscuous mode
[   79.107662][ T8262] syzkaller0: entered allmulticast mode
[   79.114323][ T8261] tipc: Resetting bearer <eth:syzkaller0>
[   79.124223][ T8261] tipc: Disabling bearer <eth:syzkaller0>
[   79.190139][ T8264] xt_hashlimit: max too large, truncated to 1048576
[   79.307728][ T8268] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   79.310314][ T8268] netlink: 'syz.2.726': attribute type 4 has an invalid length.
[   79.317248][ T8268] syzkaller0: entered promiscuous mode
[   79.318997][ T8268] syzkaller0: entered allmulticast mode
[   79.771473][ T8288] __nla_validate_parse: 17 callbacks suppressed
[   79.771483][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'.
[   79.777497][ T8288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.735'.
[   79.818560][ T8290] netlink: 60 bytes leftover after parsing attributes in process `syz.0.734'.
[   79.917071][ T8293] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   80.023959][ T8301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.737'.
[   80.027989][ T8301] netlink: 'syz.1.737': attribute type 1 has an invalid length.
[   80.030813][ T8301] netlink: 236 bytes leftover after parsing attributes in process `syz.1.737'.
[   80.109797][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.738'.
[   80.257744][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'.
[   80.261358][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'.
[   80.268680][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'.
[   80.567839][ T8320] openvswitch: netlink: Tunnel attr 94 out of range max 16
[   80.752945][ T8342] gretap0: entered promiscuous mode
[   80.755031][ T8342] vlan3: entered promiscuous mode
[   80.840940][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'.
[   80.877519][ T8351] netlink: 'syz.0.754': attribute type 1 has an invalid length.
[   80.878088][ T8349] erspan0: left allmulticast mode
[   80.886173][ T8349] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   80.979093][ T8357] C: renamed from lo
[   80.981361][ T8357] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   81.034486][   T10] cfg80211: failed to load regulatory.db
[   81.284661][ T8396] x_tables: duplicate underflow at hook 2
[   81.304044][ T8399] netlink: zone id is out of range
[   81.312310][ T8399] netlink: zone id is out of range
[   81.313998][ T8399] netlink: zone id is out of range
[   81.316928][ T8399] netlink: zone id is out of range
[   81.318995][ T8399] netlink: zone id is out of range
[   81.320647][ T8399] netlink: zone id is out of range
[   81.328035][ T8399] netlink: zone id is out of range
[   81.808871][  T790] IPVS: starting estimator thread 0...
[   81.876039][ T8449] delete_channel: no stack
[   81.911927][ T8446] IPVS: using max 78 ests per chain, 187200 per kthread
[   81.915077][ T8452] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   81.930727][ T8452] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   82.121175][ T8472] xt_hashlimit: max too large, truncated to 1048576
[   82.124307][ T8472] Cannot find add_set index 3 as target
[   82.276040][ T8486] sctp: [Deprecated]: syz.2.801 (pid 8486) Use of int in max_burst socket option.
[   82.276040][ T8486] Use struct sctp_assoc_value instead
[   82.335342][ T8495] xt_CT: No such helper "snmp"
[   82.340022][ T8495] Cannot find del_set index 4 as target
[   83.050330][ T8516] bridge0: entered promiscuous mode
[   83.094313][ T8518] netlink: 'syz.0.812': attribute type 5 has an invalid length.
[   83.270431][ T8538] batadv1: entered promiscuous mode
[   83.273608][ T8538] batadv1: entered allmulticast mode
[   83.302996][ T8539] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.366569][ T8548] netlink: 'syz.0.822': attribute type 1 has an invalid length.
[   83.386914][ T8548] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.404253][ T8548] bond2: (slave gretap2): making interface the new active one
[   83.407660][ T8548] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   83.438766][ T8557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.470944][ T8557] syzkaller0: entered promiscuous mode
[   83.475090][ T8557] syzkaller0: entered allmulticast mode
[   83.487432][ T8556] tipc: Resetting bearer <eth:syzkaller0>
[   83.505635][ T8556] tipc: Disabling bearer <eth:syzkaller0>
[   83.683634][ T8581] bond1: (slave erspan0): Releasing active interface
[   83.690663][ T8581] bond0: (slave bond_slave_0): Releasing backup interface
[   83.699182][ T8581] bond0: (slave bond_slave_1): Releasing backup interface
[   83.707772][ T8581] team_slave_0: left allmulticast mode
[   83.713965][ T8581] team0: Port device team_slave_0 removed
[   83.716154][ T8581] team_slave_1: left allmulticast mode
[   83.719004][ T8581] team0: Port device team_slave_1 removed
[   83.723404][ T8581] bond1: (slave veth5): Releasing active interface
[   83.727143][ T8581] bond2: (slave gretap2): Releasing active interface
[   84.023110][ T8636] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.026655][ T8636] syzkaller0: entered promiscuous mode
[   84.028472][ T8636] syzkaller0: entered allmulticast mode
[   84.036259][ T8635] tipc: Resetting bearer <eth:syzkaller0>
[   84.052729][ T8635] tipc: Disabling bearer <eth:syzkaller0>
[   84.197735][ T8650] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   84.394814][ T8666] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.397351][ T8666] syzkaller0: entered promiscuous mode
[   84.399031][ T8666] syzkaller0: entered allmulticast mode
[   84.406135][ T8666] tipc: Resetting bearer <eth:syzkaller0>
[   84.410644][ T8665] tipc: Resetting bearer <eth:syzkaller0>
[   84.419399][ T8665] tipc: Disabling bearer <eth:syzkaller0>
[   84.491292][ T8668] netlink: 'syz.0.862': attribute type 1 has an invalid length.
[   84.602434][ T8670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.657018][ T8670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.711617][ T8670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.025040][ T8678] __nla_validate_parse: 31 callbacks suppressed
[   85.025051][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'.
[   85.029999][ T8678] tipc: Enabled bearer <eth:vlan0>, priority 18
[   85.128118][ T8687] netlink: 'syz.1.868': attribute type 1 has an invalid length.
[   85.279410][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.875'.
[   85.293780][ T8705] bond2: entered promiscuous mode
[   85.295533][ T8705] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.394240][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'.
[   85.475280][ T8745] netlink: 'syz.2.888': attribute type 23 has an invalid length.
[   85.579221][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'.
[   85.584932][ T8761] netlink: 'syz.2.890': attribute type 10 has an invalid length.
[   85.591850][ T8760] netlink: 'syz.0.893': attribute type 1 has an invalid length.
[   85.600519][ T8761] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.768731][ T8768] IPv6: sit1: Disabled Multicast RS
[   85.771026][ T8768] sit1: entered allmulticast mode
[   85.827214][ T8770] netlink: 52 bytes leftover after parsing attributes in process `syz.0.897'.
[   85.830648][ T8770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.897'.
[   85.834435][ T8770] netlink: 68 bytes leftover after parsing attributes in process `syz.0.897'.
[   85.937111][ T8784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.953253][ T8784] can: request_module (can-proto-3) failed.
[   86.023090][ T5901] tipc: Node number set to 2099501046
[   86.064484][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'.
[   86.125263][ T8804] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   86.214634][ T8810] netlink: 763 bytes leftover after parsing attributes in process `syz.0.909'.
[   86.284457][ T8815] netlink: 14 bytes leftover after parsing attributes in process `syz.0.911'.
[   86.288288][ T8815] hsr_slave_0: left promiscuous mode
[   86.290576][ T8815] hsr_slave_1: left promiscuous mode
[   86.872025][ T8843] tipc: Resetting bearer <eth:vlan0>
[   86.967787][ T8843] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.970576][ T8843] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.973421][ T8843] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.976412][ T8843] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.270916][ T8888] netlink: 'syz.2.935': attribute type 23 has an invalid length.
[   87.355345][ T8894] ip6t_srh: unknown srh invflags 4449
[   87.428671][ T8898] SET target dimension over the limit!
[   87.430743][ T8898] 8021q: VLANs not supported on vxcan1
[   87.508713][ T8909] syzkaller1: entered promiscuous mode
[   87.510647][ T8909] syzkaller1: entered allmulticast mode
[   88.120111][ T8944] _Z`Ԁ@: entered promiscuous mode
[   88.347747][ T8988] bond0: (slave rose0): Enslaving as an active interface with an up link
[   88.499147][ T9007] netlink: 'syz.2.972': attribute type 27 has an invalid length.
[   88.523317][ T9009] xt_CT: No such helper "netbios-ns"
[   88.755927][ T9018] net_ratelimit: 7 callbacks suppressed
[   88.755936][ T9018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.241159][ T9045] syzkaller1: entered promiscuous mode
[   89.243426][ T9045] syzkaller1: entered allmulticast mode
[   89.423699][ T9062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.457739][ T9065] netlink: 'syz.0.995': attribute type 23 has an invalid length.
[   89.529682][ T9072] netlink: 'syz.2.998': attribute type 1 has an invalid length.
[   89.587993][ T9080] trusted_key: syz.1.1001 sent an empty control message without MSG_MORE.
[   89.628551][ T9084] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   89.638697][ T9084] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[   89.714392][ T9102] netlink: 'syz.0.1010': attribute type 1 has an invalid length.
[   89.738256][ T9102] 8021q: adding VLAN 0 to HW filter on device bond4
[   89.744175][ T9102] bond4: (slave bond_slave_1): Enslaving as an active interface with a down link
[   90.001631][ T9136] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   90.166178][ T9158] __nla_validate_parse: 39 callbacks suppressed
[   90.166187][ T9158] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1032'.
[   90.171243][ T9158] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1032'.
[   90.301632][ T9168] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1034'.
[   90.371540][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'.
[   90.504126][ T9194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.557361][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'.
[   90.570240][ T9194] dvmrp0: entered allmulticast mode
[   90.592680][ T9202] IPv6: NLM_F_CREATE should be specified when creating new route
[   90.695370][ T9212] IPv6: sit2: Disabled Multicast RS
[   90.753534][ T9225] netlink: 'syz.1.1051': attribute type 1 has an invalid length.
[   90.755953][ T9225] netlink: 'syz.1.1051': attribute type 1 has an invalid length.
[   90.785257][ T9231] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   90.855836][ T9241] xt_addrtype: ipv6 BLACKHOLE matching not supported
[   90.979508][ T9259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1069'.
[   90.982940][ T9259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1069'.
[   91.130760][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'.
[   91.135009][ T9271] netlink: 'syz.0.1073': attribute type 83 has an invalid length.
[   91.157294][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'.
[   91.210843][ T9287] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1079'.
[   91.228686][ T9289] 8021q: adding VLAN 0 to HW filter on device bond5
[   91.237887][ T9289] macvlan2: entered promiscuous mode
[   91.239672][ T9289] macvlan2: entered allmulticast mode
[   91.243410][ T9289] bond5: entered promiscuous mode
[   91.246817][ T9289] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   91.250369][ T9289] bond5: left promiscuous mode
[   91.306164][ T9297] netlink: 'syz.0.1083': attribute type 23 has an invalid length.
[   91.311596][ T9294] batman_adv: batadv0: Interface deactivated: dummy0
[   91.326939][ T9294] batman_adv: batadv0: Removing interface: dummy0
[   91.711427][ T9334] netlink: 'syz.0.1093': attribute type 1 has an invalid length.
[   91.880035][ T9359] netlink: 'syz.0.1102': attribute type 23 has an invalid length.
[   92.101289][ T9377] tipc: New replicast peer: 255.255.255.255
[   92.103852][ T9377] tipc: Enabled bearer <udp:syz2>, priority 10
[   92.987161][ T9458] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   93.222328][   T10] tipc: Node number set to 3200278537
[   93.437775][ T9493] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   93.594662][ T9507] validate_nla: 4 callbacks suppressed
[   93.594672][ T9507] netlink: 'syz.2.1160': attribute type 23 has an invalid length.
[   93.838613][ T9523] netlink: 'syz.1.1166': attribute type 1 has an invalid length.
[   94.000161][ T9545] netlink: 'syz.1.1174': attribute type 23 has an invalid length.
[   94.675860][ T9564] netlink: 'syz.0.1182': attribute type 1 has an invalid length.
[   94.678606][ T9567] netlink: 'syz.0.1182': attribute type 1 has an invalid length.
[   94.687318][ T9563] openvswitch: netlink: Message has 8 unknown bytes.
[   94.744314][ T9569] netlink: 'syz.0.1183': attribute type 39 has an invalid length.
[   94.922263][ T9583] xt_l2tp: v2 doesn't support IP mode
[   94.928019][ T9581] delete_channel: no stack
[   95.308154][ T9623] __nla_validate_parse: 29 callbacks suppressed
[   95.308164][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1200'.
[   95.506484][ T9634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1203'.
[   95.535961][ T9636] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1204'.
[   95.565909][ T9638] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1205'.
[   95.572569][ T9638] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1205'.
[   95.820954][ T9660] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1215'.
[   95.828838][ T9660] netlink: 'syz.0.1215': attribute type 10 has an invalid length.
[   95.832304][ T9660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1215'.
[   95.835688][ T9660] dummy0: entered promiscuous mode
[   95.837670][ T9660] dummy0: entered allmulticast mode
[   95.840486][ T9660] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   95.957928][ T9668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1218'.
[   95.960868][ T9668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1218'.
[   96.017721][ T9672] veth1_to_bond: entered allmulticast mode
[   96.020134][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'.
[   96.037514][ T9672] bond4: (slave bond_slave_1): Releasing active interface
[   96.051335][ T9672] veth1_to_bond (unregistering): left allmulticast mode
[   98.740230][ T9790] netlink: 'syz.1.1265': attribute type 7 has an invalid length.
[   98.744538][ T9790] netlink: 'syz.1.1265': attribute type 8 has an invalid length.
[   98.785828][ T9790] netlink: 'syz.1.1265': attribute type 3 has an invalid length.
[   99.043365][   T54] Bluetooth: hci2: link tx timeout
[   99.045830][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   99.399202][ T9846] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   99.533771][ T9869] openvswitch: netlink: Missing valid actions attribute.
[   99.536248][ T9869] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.692235][ T9887] netlink: 'syz.1.1289': attribute type 23 has an invalid length.
[  100.325691][ T9952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.771372][ T9965] netlink: 'syz.0.1297': attribute type 83 has an invalid length.
[  100.778434][ T9964] netlink: 'syz.0.1297': attribute type 83 has an invalid length.
[  100.866797][ T9977] __nla_validate_parse: 22 callbacks suppressed
[  100.866808][ T9977] netlink: 732 bytes leftover after parsing attributes in process `syz.0.1301'.
[  100.872537][ T9977] netlink: 732 bytes leftover after parsing attributes in process `syz.0.1301'.
[  100.916472][ T9981] pim6reg1: entered allmulticast mode
[  101.036795][ T9998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  101.111831][ T5219] Bluetooth: hci2: command 0x0406 tx timeout
[  101.147173][T10015] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1312'.
[  101.196928][T10019] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.199579][T10019] syzkaller0: entered promiscuous mode
[  101.201400][T10019] syzkaller0: entered allmulticast mode
[  101.206414][T10018] tipc: Resetting bearer <eth:syzkaller0>
[  101.217072][T10018] tipc: Disabling bearer <eth:syzkaller0>
[  101.338944][   T33] audit: type=1804 audit(1752920054.763:3): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1322" name="/newroot/531/blkio.bfq.time_recursive" dev="tmpfs" ino=2719 res=1 errno=0
[  101.346919][   T33] audit: type=1800 audit(1752920054.763:4): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1322" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2719 res=0 errno=0
[  101.356769][T10040] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  101.397033][T10048] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  101.400914][T10048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1324'.
[  101.405239][T10048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1324'.
[  101.418739][T10050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1325'.
[  101.504842][T10056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1326'.
[  101.594107][T10060] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1328'.
[  101.594543][   T33] audit: type=1804 audit(1752920055.023:5): pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1331" name="/newroot/452/cgroup.controllers" dev="tmpfs" ino=2314 res=1 errno=0
[  101.597051][T10060] netlink: 'syz.1.1328': attribute type 32 has an invalid length.
[  101.597074][T10060] bond0: option coupled_control: mode dependency failed, not supported in mode balance-tlb(5)
[  101.605024][   T33] audit: type=1800 audit(1752920055.023:6): pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1331" name="cgroup.controllers" dev="tmpfs" ino=2314 res=0 errno=0
[  101.655399][T10070] netlink: 'syz.2.1332': attribute type 3 has an invalid length.
[  101.819354][T10091] tun0: tun_chr_ioctl cmd 2147767520
[  101.877434][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'.
[  101.880389][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'.
[  101.883641][T10094] xt_CT: No such helper "snmp"
[  101.955889][T10103] xt_hashlimit: overflow, try lower: 6/0
[  102.197828][T10117] netlink: 'syz.2.1346': attribute type 29 has an invalid length.
[  102.232788][T10117] netlink: 'syz.2.1346': attribute type 29 has an invalid length.
[  102.750272][T10132] vxcan2: entered promiscuous mode
[  102.791936][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  102.985481][T10159] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  103.146627][T10169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.887676][T10292] validate_nla: 43 callbacks suppressed
[  103.887687][T10292] netlink: 'syz.1.1403': attribute type 23 has an invalid length.
[  104.055102][T10310] ieee802154 phy1 wpan1: encryption failed: -22
[  104.138223][T10316] netlink: 'syz.0.1411': attribute type 23 has an invalid length.
[  104.171492][T10318] netlink: 'syz.0.1412': attribute type 1 has an invalid length.
[  104.454312][T10344] x_tables: duplicate entry at hook 1
[  104.897213][T10377] netlink: 'syz.0.1430': attribute type 8 has an invalid length.
[  104.930483][T10379] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  104.988123][T10370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.999485][T10379] erspan0: entered promiscuous mode
[  105.001498][T10379] erspan0: left allmulticast mode
[  105.012972][T10379] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.017456][T10379] 8021q: adding VLAN 0 to HW filter on device team0
[  105.019872][T10379] dummy0: left promiscuous mode
[  105.021502][T10379] dummy0: left allmulticast mode
[  105.025697][T10379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.327568][T10405] netlink: 'syz.0.1439': attribute type 3 has an invalid length.
[  105.425943][T10422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.433700][T10423] xt_recent: Unsupported userspace flags (00000048)
[  105.434356][T10425] xt_recent: Unsupported userspace flags (00000048)
[  105.554129][T10435] sock: sock_timestamping_bind_phc: sock not bind to device
[  105.556881][T10435] sock: sock_timestamping_bind_phc: sock not bind to device
[  105.560714][T10436] Cannot find set identified by id 0 to match
[  105.695815][T10459] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  106.198923][   T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  106.294820][T10476] __nla_validate_parse: 77 callbacks suppressed
[  106.294829][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1458'.
[  106.299902][T10476] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1458'.
[  106.335180][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'.
[  106.338352][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1459'.
[  106.396034][T10485] xt_recent: Unsupported userspace flags (00000048)
[  106.454977][T10492] bridge0: port 1(vxlan1) entered blocking state
[  106.457281][T10492] bridge0: port 1(vxlan1) entered disabled state
[  106.459412][T10492] vxlan1: entered allmulticast mode
[  106.463349][T10492] vxlan1: entered promiscuous mode
[  106.466875][T10492] netlink: 'syz.2.1464': attribute type 1 has an invalid length.
[  106.469713][T10492] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1464'.
[  106.486993][T10492] batadv1: entered promiscuous mode
[  106.488749][T10492] batadv1: entered allmulticast mode
[  106.520943][T10497] _Z`Ԁ@: entered promiscuous mode
[  106.584616][T10501] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  106.588038][T10501] netlink: 'syz.1.1467': attribute type 6 has an invalid length.
[  106.590715][T10501] netlink: 'syz.1.1467': attribute type 7 has an invalid length.
[  106.594996][T10501] netlink: 'syz.1.1467': attribute type 8 has an invalid length.
[  106.626807][T10511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1469'.
[  106.631452][T10513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1470'.
[  106.639370][T10513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1470'.
[  106.703715][T10523] netlink: 'syz.0.1475': attribute type 5 has an invalid length.
[  106.705430][T10521] sctp: [Deprecated]: syz.1.1474 (pid 10521) Use of struct sctp_assoc_value in delayed_ack socket option.
[  106.705430][T10521] Use struct sctp_sack_info instead
[  106.815748][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'.
[  106.834576][T10535] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1478'.
[  106.904082][T10543] bond6 (unregistering): Released all slaves
[  107.647750][T10590] bridge2: the hash_elasticity option has been deprecated and is always 16
[  107.650668][T10590] bridge2: entered allmulticast mode
[  107.671931][ T5219] Bluetooth: hci2: command 0x0406 tx timeout
[  107.783589][T10602] xt_policy: output policy not valid in PREROUTING and INPUT
[  109.067307][T10669] ieee802154 phy1 wpan1: encryption failed: -22
[  109.197954][T10679] validate_nla: 2 callbacks suppressed
[  109.197964][T10679] netlink: 'syz.2.1517': attribute type 1 has an invalid length.
[  109.207342][T10679] netlink: 'syz.2.1517': attribute type 1 has an invalid length.
[  109.669733][T10700] geneve3: entered promiscuous mode
[  109.693258][T10699] netlink: 'syz.0.1524': attribute type 2 has an invalid length.
[  109.861147][T10722] wireguard0: entered promiscuous mode
[  109.863500][T10722] wireguard0: entered allmulticast mode
[  109.897789][T10720] netlink: 'syz.0.1528': attribute type 5 has an invalid length.
[  109.901519][T10720] netlink: 'syz.0.1528': attribute type 1 has an invalid length.
[  109.904515][T10720] netlink: 'syz.0.1528': attribute type 1 has an invalid length.
[  109.910604][T10720] macvlan0: entered promiscuous mode
[  109.919645][T10720] macvlan0: entered allmulticast mode
[  109.922382][T10720] bond6: entered promiscuous mode
[  109.924405][T10720] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  109.928308][T10720] bond6: left promiscuous mode
[  110.045737][T10728] netlink: 'syz.0.1530': attribute type 4 has an invalid length.
[  110.052770][T10728] netlink: 'syz.0.1530': attribute type 4 has an invalid length.
[  110.160747][T10732] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  110.213988][T10736] bond7: entered promiscuous mode
[  110.215992][T10736] 8021q: adding VLAN 0 to HW filter on device bond7
[  110.226603][T10736] 8021q: adding VLAN 0 to HW filter on device bond7
[  110.229057][T10736] bond7: (slave vcan1): The slave device specified does not support setting the MAC address
[  110.233512][T10736] bond7: (slave vcan1): Error -95 calling set_mac_address
[  110.712000][T10779] chnl_net:caif_netlink_parms(): no params data found
[  110.844129][T10785] netlink: 'syz.0.1549': attribute type 10 has an invalid length.
[  110.896269][T10788] netlink: zone id is out of range
[  110.899125][T10788] netlink: zone id is out of range
[  110.901568][T10788] netlink: zone id is out of range
[  110.905025][T10788] netlink: zone id is out of range
[  110.927831][T10788] netlink: zone id is out of range
[  110.930396][T10788] netlink: zone id is out of range
[  110.932848][T10788] netlink: zone id is out of range
[  110.935261][T10788] netlink: zone id is out of range
[  110.937932][T10788] netlink: zone id is out of range
[  110.940606][T10788] netlink: zone id is out of range
[  111.225033][T10807] netlink: 'syz.0.1555': attribute type 1 has an invalid length.
[  111.227578][T10807] NCSI netlink: No device for ifindex 0
[  111.359992][T10815] __nla_validate_parse: 24 callbacks suppressed
[  111.360006][T10815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1556'.
[  111.431517][T10822] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1558'.
[  111.468989][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1559'.
[  111.472471][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1559'.
[  111.498950][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1560'.
[  111.532793][T10834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1563'.
[  111.609358][T10845] veth15: entered promiscuous mode
[  111.729761][T10857] 8021q: adding VLAN 0 to HW filter on device bond8
[  111.750538][T10857] veth7: entered promiscuous mode
[  111.761393][T10857] bond8: (slave veth7): Enslaving as an active interface with a down link
[  111.767918][T10857] erspan0: entered allmulticast mode
[  111.877663][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'.
[  112.743349][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.745992][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.840181][T10901] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  112.844016][T10901] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  112.874727][T10908] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1585'.
[  112.877612][T10908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1585'.
[  112.887987][T10901] gretap2: entered promiscuous mode
[  112.891233][T10901] bond3: (slave gretap2): making interface the new active one
[  112.894106][T10901] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  112.900709][T10901] macvlan2: entered promiscuous mode
[  112.903446][T10901] macvlan2: entered allmulticast mode
[  112.907232][T10901] bond3: entered promiscuous mode
[  112.909220][T10901] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  112.913242][T10901] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  112.918242][T10901] bond3: left promiscuous mode
[  112.938287][T10912] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1587'.
[  113.043847][T10925] xt_CT: You must specify a L4 protocol and not use inversions on it
[  113.478805][T10970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.481273][T10970] syzkaller0: entered promiscuous mode
[  113.485735][T10970] syzkaller0: entered allmulticast mode
[  113.490999][T10970] tipc: Resetting bearer <eth:syzkaller0>
[  113.507115][T10974] tipc: Resetting bearer <eth:syzkaller0>
[  113.515626][T10974] tipc: Disabling bearer <eth:syzkaller0>
[  114.514165][T11034] validate_nla: 4 callbacks suppressed
[  114.514174][T11034] netlink: 'syz.1.1626': attribute type 6 has an invalid length.
[  114.519840][T11034] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  114.523363][T11034] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  115.100537][T11050] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.104320][T11050] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.107312][T11050] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.351250][T11081] macsec0: entered promiscuous mode
[  115.353631][T11081] macsec0: left promiscuous mode
[  115.416385][T11086] veth3: entered promiscuous mode
[  115.429631][T11086] netlink: 'syz.1.1644': attribute type 18 has an invalid length.
[  115.630704][T11106] syzkaller0: entered promiscuous mode
[  115.632792][T11106] syzkaller0: entered allmulticast mode
[  116.263706][T11144] IPv6: sit2: Disabled Multicast RS
[  116.267217][T11144] sit2: entered allmulticast mode
[  116.535332][T11155] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  116.538254][T11155] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  116.571393][T11157] __nla_validate_parse: 40 callbacks suppressed
[  116.571403][T11157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1666'.
[  116.629574][T11169] xt_CT: You must specify a L4 protocol and not use inversions on it
[  116.656967][T11172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1672'.
[  116.659930][T11172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1672'.
[  116.713529][T11178] net_ratelimit: 66 callbacks suppressed
[  116.713539][T11178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.741369][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'.
[  116.745276][T11185] pimreg: entered allmulticast mode
[  116.746993][T11185] pimreg: left allmulticast mode
[  116.755844][T11186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1678'.
[  116.839124][T11194] tipc: New replicast peer: 255.255.255.255
[  116.852597][T11194] tipc: Enabled bearer <udp:syz2>, priority 10
[  116.854829][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1680'.
[  117.617692][T11198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1683'.
[  117.620633][T11198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1683'.
[  117.648403][T11200] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1684'.
[  117.651250][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1684'.
[  117.682793][T11207] netlink: 'syz.2.1686': attribute type 21 has an invalid length.
[  117.697662][T11202] netlink: 'syz.1.1685': attribute type 10 has an invalid length.
[  117.781125][T11220] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  117.785769][T11220] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  117.994681][T11245] netlink: 'syz.2.1694': attribute type 4 has an invalid length.
[  118.358468][T11279] netlink: 'syz.2.1705': attribute type 29 has an invalid length.
[  118.388912][T11282] vlan3: entered allmulticast mode
[  118.390577][T11282] gretap0: entered allmulticast mode
[  118.561525][T11300] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  118.565347][T11299] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  118.936892][T11327] vlan0: entered promiscuous mode
[  118.939915][T11327] netlink: 'syz.0.1722': attribute type 4 has an invalid length.
[  118.943822][T11327] netlink: 'syz.0.1722': attribute type 3 has an invalid length.
[  119.039890][T11337] 8021q: adding VLAN 0 to HW filter on device bond6
[  119.099086][T11345] netlink: 'syz.2.1727': attribute type 1 has an invalid length.
[  119.356437][T11371] raw_sendmsg: syz.1.1735 forgot to set AF_INET. Fix it!
[  119.699752][T11428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.149979][T11493] x_tables: duplicate underflow at hook 3
[  120.299945][T11501] veth9: entered allmulticast mode
[  120.481127][T11528] IPVS: set_ctl: invalid protocol: 77 172.20.20.63:20002
[  120.705387][T11563] netlink: 'syz.2.1789': attribute type 12 has an invalid length.
[  120.789455][T11576] net veth1_virt_wifi : renamed from virt_wifi0
[  120.941569][T11598] xt_nfacct: accounting object `syz1' does not exists
[  121.414548][T11657] sctp: [Deprecated]: syz.0.1819 (pid 11657) Use of int in maxseg socket option.
[  121.414548][T11657] Use struct sctp_assoc_value instead
[  121.729652][T11673] __nla_validate_parse: 41 callbacks suppressed
[  121.729662][T11673] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1826'.
[  121.776467][T11677] blkio.reset_stats is deprecated
[  121.828216][T11684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1830'.
[  121.831287][T11684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1830'.
[  121.835915][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1830'.
[  121.946436][T11690] gretap1: entered promiscuous mode
[  122.045541][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'.
[  122.276400][T11717] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  122.284230][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'.
[  122.357426][T11725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.392649][T11727] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1846'.
[  122.395494][T11727] openvswitch: netlink: Flow actions attr not present in new flow.
[  122.908326][T11742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.922198][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1849'.
[  123.576707][T11772] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1861'.
[  123.609975][T11777] netlink: 'syz.0.1862': attribute type 58 has an invalid length.
[  123.614259][T11777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1862'.
[  123.976764][T11835] netlink: 'syz.2.1880': attribute type 23 has an invalid length.
[  123.981664][T11832] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  124.046134][T11843] netlink: 'syz.0.1884': attribute type 1 has an invalid length.
[  124.049220][T11844] netlink: 'syz.0.1884': attribute type 1 has an invalid length.
[  124.078275][T11848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.080794][T11848] syzkaller0: entered promiscuous mode
[  124.083083][T11848] syzkaller0: entered allmulticast mode
[  124.093562][T11848] tipc: Resetting bearer <eth:syzkaller0>
[  124.098089][T11847] tipc: Resetting bearer <eth:syzkaller0>
[  124.106472][T11847] tipc: Disabling bearer <eth:syzkaller0>
[  124.143899][T11852] netlink: 'syz.2.1887': attribute type 1 has an invalid length.
[  124.158334][T11854] netlink: 'syz.0.1888': attribute type 1 has an invalid length.
[  124.183781][T11856] netlink: 'syz.0.1889': attribute type 26 has an invalid length.
[  124.279682][T11866] netlink: 'syz.0.1892': attribute type 2 has an invalid length.
[  124.559883][T11875] Bluetooth: hci0: Opcode 0x080f failed: -22
[  124.632107][T11879] netlink: 'syz.0.1893': attribute type 2 has an invalid length.
[  125.515296][T11912] sctp: [Deprecated]: syz.0.1906 (pid 11912) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.515296][T11912] Use struct sctp_sack_info instead
[  125.524155][T11912] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  125.604349][T11921] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  126.122033][T11948] nbd1: detected capacity change from 0 to 63
[  126.132716][T10320] block nbd1: Receive control failed (result -32)
[  126.217325][T11959] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  126.270439][T11963] validate_nla: 4 callbacks suppressed
[  126.270448][T11963] netlink: 'syz.2.1925': attribute type 3 has an invalid length.
[  126.358042][T11967] xt_l2tp: unknown flags: 10
[  126.456579][T11978] sctp: [Deprecated]: syz.2.1930 (pid 11978) Use of int in maxseg socket option.
[  126.456579][T11978] Use struct sctp_assoc_value instead
[  126.641825][   T54] Bluetooth: hci0: command tx timeout
[  127.389823][T12008] netlink: 'syz.1.1938': attribute type 23 has an invalid length.
[  127.402651][T12007] __nla_validate_parse: 18 callbacks suppressed
[  127.402661][T12007] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1939'.
[  127.502060][T12018] netlink: 'syz.2.1942': attribute type 21 has an invalid length.
[  127.504597][T12018] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1942'.
[  127.507368][T12018] netlink: 'syz.2.1942': attribute type 5 has an invalid length.
[  127.513182][T12018] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1942'.
[  127.516499][T12014] netlink: 'syz.1.1941': attribute type 1 has an invalid length.
[  127.558530][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'.
[  127.561497][T12025] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  127.564798][T12025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.575185][T12025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1946'.
[  127.578287][T12025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1946'.
[  127.720968][T12045] netlink: 'syz.0.1951': attribute type 23 has an invalid length.
[  127.788796][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'.
[  127.846911][T12059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1958'.
[  127.869502][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1959'.
[  127.874779][T12061] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1959'.
[  127.972221][T12072] netlink: 'syz.2.1963': attribute type 1 has an invalid length.
[  128.044452][T12084] netlink: 'syz.1.1968': attribute type 23 has an invalid length.
[  128.322688][T12110] netlink: 'syz.1.1977': attribute type 23 has an invalid length.
[  128.474532][T12126] netlink: zone id is out of range
[  128.479896][T12126] netlink: zone id is out of range
[  128.485904][T12126] netlink: zone id is out of range
[  128.488679][T12126] netlink: get zone limit has 8 unknown bytes
[  129.177078][T12171] netlink: 'syz.0.1998': attribute type 21 has an invalid length.
[  129.243277][T12174] NCSI netlink: No device for ifindex 0
[  129.652560][T12218] block nbd0: NBD_DISCONNECT
[  129.654372][T12218] block nbd0: Send disconnect failed -107
[  129.656504][T12218] block nbd0: Disconnected due to user request.
[  129.658482][T12218] block nbd0: shutting down sockets
[  129.767598][T12225] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  132.234417][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  144.984741][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  144.984947][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  144.991324][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  144.991432][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  144.996475][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  144.998817][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  144.999852][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  145.004407][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  145.007205][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  145.007372][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  145.200112][T12240] chnl_net:caif_netlink_parms(): no params data found
[  145.226823][T12239] chnl_net:caif_netlink_parms(): no params data found
[  145.269033][T12240] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.271349][T12240] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.274023][T12240] bridge_slave_0: entered allmulticast mode
[  145.276640][T12240] bridge_slave_0: entered promiscuous mode
[  145.287844][T12240] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.290126][T12240] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.292763][T12240] bridge_slave_1: entered allmulticast mode
[  145.295410][T12240] bridge_slave_1: entered promiscuous mode
[  145.329240][T12239] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.332229][T12239] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.334713][T12239] bridge_slave_0: entered allmulticast mode
[  145.337536][T12239] bridge_slave_0: entered promiscuous mode
[  145.343761][T12240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.346808][T12239] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.349373][T12239] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.352556][T12239] bridge_slave_1: entered allmulticast mode
[  145.355462][T12239] bridge_slave_1: entered promiscuous mode
[  145.359138][T12240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.405257][T12240] team0: Port device team_slave_0 added
[  145.409455][T12239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.414581][T12239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.420764][T12240] team0: Port device team_slave_1 added
[  145.459843][T12239] team0: Port device team_slave_0 added
[  145.462712][T12240] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.465076][T12240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.474039][T12240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.480122][T12239] team0: Port device team_slave_1 added
[  145.483701][T12240] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.485924][T12240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.494432][T12240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.526990][T12239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.529276][T12239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.537261][T12239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.548958][T12239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.551261][T12239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.560017][T12239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.569630][T12240] hsr_slave_0: entered promiscuous mode
[  145.572628][T12240] hsr_slave_1: entered promiscuous mode
[  145.605382][T12239] hsr_slave_0: entered promiscuous mode
[  145.607736][T12239] hsr_slave_1: entered promiscuous mode
[  145.609926][T12239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.613180][T12239] Cannot create hsr debugfs directory
[  145.978487][ T5219] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  145.983578][ T5219] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  145.987080][ T5219] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  145.991001][ T5219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  145.995089][ T5219] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  146.125552][T12257] chnl_net:caif_netlink_parms(): no params data found
[  146.200762][T12257] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.203999][T12257] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.206908][T12257] bridge_slave_0: entered allmulticast mode
[  146.209863][T12257] bridge_slave_0: entered promiscuous mode
[  146.213834][T12257] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.216334][T12257] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.218849][T12257] bridge_slave_1: entered allmulticast mode
[  146.222536][T12257] bridge_slave_1: entered promiscuous mode
[  146.253938][T12257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.260618][T12257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.293851][T12257] team0: Port device team_slave_0 added
[  146.298891][T12257] team0: Port device team_slave_1 added
[  146.327610][T12257] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.330523][T12257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.341292][T12257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.348320][T12257] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.351118][T12257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.360900][T12257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.390473][T12257] hsr_slave_0: entered promiscuous mode
[  146.393191][T12257] hsr_slave_1: entered promiscuous mode
[  146.395326][T12257] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.397621][T12257] Cannot create hsr debugfs directory
[  147.032164][   T54] Bluetooth: hci3: command tx timeout
[  147.041926][   T54] Bluetooth: hci4: command tx timeout
[  148.071921][   T54] Bluetooth: hci5: command tx timeout
[  149.111935][   T54] Bluetooth: hci4: command tx timeout
[  149.112214][ T5219] Bluetooth: hci3: command tx timeout
[  150.151913][ T5219] Bluetooth: hci5: command tx timeout
[  151.191977][   T54] Bluetooth: hci4: command tx timeout
[  151.193754][ T5219] Bluetooth: hci3: command tx timeout
[  152.231904][   T54] Bluetooth: hci5: command tx timeout
[  153.271894][   T54] Bluetooth: hci4: command tx timeout
[  153.272124][ T5219] Bluetooth: hci3: command tx timeout
[  154.312103][ T5219] Bluetooth: hci5: command tx timeout
[  170.152014][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  193.683409][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  206.014555][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  206.018109][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  206.021384][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  206.026626][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  206.029681][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  206.032958][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  206.036124][ T5829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  206.039642][ T5829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  206.045413][ T5829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  206.047991][ T5829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  206.179514][T12267] chnl_net:caif_netlink_parms(): no params data found
[  206.207061][T12269] chnl_net:caif_netlink_parms(): no params data found
[  206.247576][T12267] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.249965][T12267] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.253704][T12267] bridge_slave_0: entered allmulticast mode
[  206.256490][T12267] bridge_slave_0: entered promiscuous mode
[  206.262934][T12267] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.265260][T12267] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.267766][T12267] bridge_slave_1: entered allmulticast mode
[  206.270528][T12267] bridge_slave_1: entered promiscuous mode
[  206.303377][T12267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.316765][T12267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.319873][T12269] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.322527][T12269] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.324881][T12269] bridge_slave_0: entered allmulticast mode
[  206.327688][T12269] bridge_slave_0: entered promiscuous mode
[  206.345436][T12269] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.347838][T12269] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.350183][T12269] bridge_slave_1: entered allmulticast mode
[  206.353656][T12269] bridge_slave_1: entered promiscuous mode
[  206.359004][T12267] team0: Port device team_slave_0 added
[  206.369369][T12267] team0: Port device team_slave_1 added
[  206.387034][T12269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.399334][T12269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.404196][T12267] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.406381][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.414631][T12267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.426464][T12267] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.428696][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.436602][T12267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.453959][T12269] team0: Port device team_slave_0 added
[  206.457559][T12269] team0: Port device team_slave_1 added
[  206.490823][T12269] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.493692][T12269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.502102][T12269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.508397][T12267] hsr_slave_0: entered promiscuous mode
[  206.510890][T12267] hsr_slave_1: entered promiscuous mode
[  206.514033][T12267] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.516485][T12267] Cannot create hsr debugfs directory
[  206.518689][T12269] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.521011][T12269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.529579][T12269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.576338][T12269] hsr_slave_0: entered promiscuous mode
[  206.578700][T12269] hsr_slave_1: entered promiscuous mode
[  206.580875][T12269] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.584986][T12269] Cannot create hsr debugfs directory
[  206.980154][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  206.989590][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  206.993106][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  206.996050][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  206.998761][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  207.105862][T12284] chnl_net:caif_netlink_parms(): no params data found
[  207.185041][T12284] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.187410][T12284] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.189722][T12284] bridge_slave_0: entered allmulticast mode
[  207.192554][T12284] bridge_slave_0: entered promiscuous mode
[  207.205269][T12284] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.208110][T12284] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.210497][T12284] bridge_slave_1: entered allmulticast mode
[  207.213622][T12284] bridge_slave_1: entered promiscuous mode
[  207.231346][T12284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.236338][T12284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.255529][T12284] team0: Port device team_slave_0 added
[  207.260287][T12284] team0: Port device team_slave_1 added
[  207.277203][T12284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.279421][T12284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.287853][T12284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.292586][T12284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.294805][T12284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.303162][T12284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.328085][T12284] hsr_slave_0: entered promiscuous mode
[  207.330505][T12284] hsr_slave_1: entered promiscuous mode
[  207.332757][T12284] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  207.335209][T12284] Cannot create hsr debugfs directory
[  208.072077][ T5829] Bluetooth: hci7: command tx timeout
[  208.072552][ T5835] Bluetooth: hci6: command tx timeout
[  209.032856][ T5835] Bluetooth: hci8: command tx timeout
[  210.155289][ T5835] Bluetooth: hci6: command tx timeout
[  210.162368][ T5835] Bluetooth: hci7: command tx timeout
[  211.112088][ T5835] Bluetooth: hci8: command tx timeout
[  212.232143][ T5835] Bluetooth: hci7: command tx timeout
[  212.232188][ T5829] Bluetooth: hci6: command tx timeout
[  213.192112][ T5829] Bluetooth: hci8: command tx timeout
[  214.311869][ T5829] Bluetooth: hci6: command tx timeout
[  214.312406][ T5835] Bluetooth: hci7: command tx timeout
[  215.272163][ T5835] Bluetooth: hci8: command tx timeout
[  236.712029][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  255.114190][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  266.988800][ T5219] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  266.992577][ T5219] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  266.996399][ T5219] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  267.000154][ T5219] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  267.003821][ T5219] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  267.029308][   T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  267.034731][   T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  267.037874][   T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  267.040940][   T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  267.044457][   T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  267.179550][T12299] chnl_net:caif_netlink_parms(): no params data found
[  267.208879][T12301] chnl_net:caif_netlink_parms(): no params data found
[  267.245482][T12299] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.247867][T12299] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.250238][T12299] bridge_slave_0: entered allmulticast mode
[  267.253258][T12299] bridge_slave_0: entered promiscuous mode
[  267.263011][T12299] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.265208][T12299] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.267442][T12299] bridge_slave_1: entered allmulticast mode
[  267.270023][T12299] bridge_slave_1: entered promiscuous mode
[  267.292659][T12299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.310805][T12299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.314241][T12301] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.316576][T12301] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.318932][T12301] bridge_slave_0: entered allmulticast mode
[  267.324177][T12301] bridge_slave_0: entered promiscuous mode
[  267.334076][T12301] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.336392][T12301] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.338649][T12301] bridge_slave_1: entered allmulticast mode
[  267.341243][T12301] bridge_slave_1: entered promiscuous mode
[  267.369791][T12299] team0: Port device team_slave_0 added
[  267.374369][T12301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.378552][T12299] team0: Port device team_slave_1 added
[  267.381870][T12301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.416207][T12301] team0: Port device team_slave_0 added
[  267.418597][T12299] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.420769][T12299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.429165][T12299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.433032][ T5219] Bluetooth: hci4: command 0x0406 tx timeout
[  267.433064][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  267.436038][T12299] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.438947][T12299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.447363][T12299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.454668][T12301] team0: Port device team_slave_1 added
[  267.477393][T12301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.479695][T12301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.487662][T12301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.498875][T12301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.501125][T12301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.509627][T12301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.533721][T12299] hsr_slave_0: entered promiscuous mode
[  267.536020][T12299] hsr_slave_1: entered promiscuous mode
[  267.538155][T12299] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  267.540545][T12299] Cannot create hsr debugfs directory
[  267.564481][T12301] hsr_slave_0: entered promiscuous mode
[  267.567271][T12301] hsr_slave_1: entered promiscuous mode
[  267.570170][T12301] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  267.574103][T12301] Cannot create hsr debugfs directory
[  267.989374][ T5835] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  267.993571][ T5835] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  267.996322][ T5835] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  268.000211][ T5835] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  268.004697][ T5835] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  268.138339][T12316] chnl_net:caif_netlink_parms(): no params data found
[  268.222814][T12316] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.225158][T12316] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.227585][T12316] bridge_slave_0: entered allmulticast mode
[  268.230324][T12316] bridge_slave_0: entered promiscuous mode
[  268.234182][T12316] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.236553][T12316] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.238836][T12316] bridge_slave_1: entered allmulticast mode
[  268.241487][T12316] bridge_slave_1: entered promiscuous mode
[  268.260626][T12316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.265805][T12316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.286810][T12316] team0: Port device team_slave_0 added
[  268.290710][T12316] team0: Port device team_slave_1 added
[  268.308003][T12316] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.310181][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.318661][T12316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.323546][T12316] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.325873][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.333981][T12316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.358703][T12316] hsr_slave_0: entered promiscuous mode
[  268.361234][T12316] hsr_slave_1: entered promiscuous mode
[  268.364047][T12316] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  268.366529][T12316] Cannot create hsr debugfs directory
[  269.031965][ T5835] Bluetooth: hci9: command tx timeout
[  269.112077][ T5835] Bluetooth: hci10: command tx timeout
[  270.071846][ T5835] Bluetooth: hci11: command tx timeout
[  271.121927][ T5835] Bluetooth: hci9: command tx timeout
[  271.191936][ T5835] Bluetooth: hci10: command tx timeout
[  272.151953][ T5835] Bluetooth: hci11: command tx timeout
[  272.561857][ T5835] Bluetooth: hci5: command 0x0406 tx timeout
[  273.192143][ T5829] Bluetooth: hci9: command tx timeout
[  273.271992][ T5829] Bluetooth: hci10: command tx timeout
[  274.232116][ T5829] Bluetooth: hci11: command tx timeout
[  275.272300][ T5829] Bluetooth: hci9: command tx timeout
[  275.352117][ T5829] Bluetooth: hci10: command tx timeout
[  276.312387][ T5829] Bluetooth: hci11: command tx timeout
[  287.121881][   T34] INFO: task syz.0.2015:12218 blocked for more than 143 seconds.
[  287.124439][   T34]       Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  287.129893][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.134264][   T34] task:syz.0.2015      state:D stack:25480 pid:12218 tgid:12216 ppid:5833   task_flags:0x400140 flags:0x00004004
[  287.139227][   T34] Call Trace:
[  287.141536][   T34]  <TASK>
[  287.143392][   T34]  __schedule+0x16f5/0x4d00
[  287.145338][   T34]  ? schedule+0x165/0x360
[  287.147204][   T34]  ? __lock_acquire+0xab9/0xd20
[  287.152156][   T34]  ? __pfx___schedule+0x10/0x10
[  287.154280][   T34]  ? schedule+0x91/0x360
[  287.156146][   T34]  schedule+0x165/0x360
[  287.157944][   T34]  schedule_timeout+0x9a/0x270
[  287.159969][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  287.164741][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.172091][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.173811][   T34]  ? wait_for_completion+0x267/0x5d0
[  287.175524][   T34]  wait_for_completion+0x2bf/0x5d0
[  287.177222][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  287.179044][   T34]  ? flush_workqueue_prep_pwqs+0x47c/0x4f0
[  287.180933][   T34]  ? check_flush_dependency+0x88/0x400
[  287.183408][   T34]  __flush_workqueue+0x6f7/0x14b0
[  287.185081][   T34]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  287.187005][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.188652][   T34]  ? __pfx___flush_workqueue+0x10/0x10
[  287.190388][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  287.192769][   T34]  ? __wake_up_common_lock+0x190/0x1f0
[  287.194527][   T34]  nbd_disconnect_and_put+0x9e/0x2a0
[  287.196217][   T34]  nbd_genl_disconnect+0x485/0x570
[  287.197866][   T34]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  287.199677][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  287.202745][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  287.205173][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  287.207762][   T34]  genl_rcv_msg+0x60e/0x790
[  287.209708][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  287.212164][   T34]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  287.214612][   T34]  netlink_rcv_skb+0x208/0x470
[  287.216702][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  287.218747][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  287.220985][   T34]  ? down_read+0x1ad/0x2e0
[  287.223347][   T34]  genl_rcv+0x28/0x40
[  287.224710][   T34]  netlink_unicast+0x75c/0x8e0
[  287.226296][   T34]  netlink_sendmsg+0x805/0xb30
[  287.228321][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.230610][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  287.233647][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  287.235883][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.238081][   T34]  __sock_sendmsg+0x21c/0x270
[  287.240102][   T34]  ____sys_sendmsg+0x505/0x830
[  287.243023][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.245306][   T34]  ? import_iovec+0x74/0xa0
[  287.247207][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  287.249245][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  287.251504][   T34]  ? __fget_files+0x2a/0x420
[  287.254165][   T34]  ? __fget_files+0x3a0/0x420
[  287.256224][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  287.258377][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  287.260748][   T34]  ? rcu_is_watching+0x15/0xb0
[  287.263408][   T34]  ? do_syscall_64+0xbe/0x3b0
[  287.265462][   T34]  do_syscall_64+0xfa/0x3b0
[  287.267397][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.269510][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.271496][   T34]  ? exc_page_fault+0x9f/0xf0
[  287.273650][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.275576][   T34] RIP: 0033:0x7f49e5f8e9a9
[  287.276993][   T34] RSP: 002b:00007f49e3df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.279676][   T34] RAX: ffffffffffffffda RBX: 00007f49e61b5fa0 RCX: 00007f49e5f8e9a9
[  287.282678][   T34] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 000000000000000a
[  287.285166][   T34] RBP: 00007f49e6010d69 R08: 0000000000000000 R09: 0000000000000000
[  287.287719][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.290274][   T34] R13: 0000000000000000 R14: 00007f49e61b5fa0 R15: 00007ffc2a804e18
[  287.293264][   T34]  </TASK>
[  287.294300][   T34] INFO: task syz.1.2016:12219 blocked for more than 143 seconds.
[  287.296765][   T34]       Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0
[  287.299346][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.302608][   T34] task:syz.1.2016      state:D stack:25352 pid:12219 tgid:12217 ppid:5826   task_flags:0x400140 flags:0x00004004
[  287.306715][   T34] Call Trace:
[  287.307831][   T34]  <TASK>
[  287.308811][   T34]  __schedule+0x16f5/0x4d00
[  287.310296][   T34]  ? __lock_acquire+0xab9/0xd20
[  287.312320][   T34]  ? __lock_acquire+0xab9/0xd20
[  287.313945][   T34]  ? schedule+0x165/0x360
[  287.315370][   T34]  ? __pfx___schedule+0x10/0x10
[  287.316946][   T34]  ? schedule+0x91/0x360
[  287.318282][   T34]  schedule+0x165/0x360
[  287.319600][   T34]  schedule_preempt_disabled+0x13/0x30
[  287.321337][   T34]  __mutex_lock+0x724/0xe80
[  287.323351][   T34]  ? unwind_get_return_address+0x4d/0x90
[  287.325167][   T34]  ? __mutex_lock+0x51b/0xe80
[  287.326714][   T34]  ? genl_rcv_msg+0x10d/0x790
[  287.328247][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  287.329914][   T34]  ? stack_trace_save+0x9c/0xe0
[  287.331582][   T34]  ? radix_tree_lookup+0x240/0x290
[  287.333854][   T34]  genl_rcv_msg+0x10d/0x790
[  287.335750][   T34]  ? __lock_acquire+0xab9/0xd20
[  287.337405][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  287.339027][   T34]  netlink_rcv_skb+0x208/0x470
[  287.340560][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  287.342723][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  287.344432][   T34]  ? down_read+0x1ad/0x2e0
[  287.345936][   T34]  genl_rcv+0x28/0x40
[  287.347323][   T34]  netlink_unicast+0x75c/0x8e0
[  287.348895][   T34]  netlink_sendmsg+0x805/0xb30
[  287.350456][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.353218][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  287.354869][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  287.356606][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.358342][   T34]  __sock_sendmsg+0x21c/0x270
[  287.359887][   T34]  ____sys_sendmsg+0x505/0x830
[  287.361444][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.363851][   T34]  ? import_iovec+0x74/0xa0
[  287.365348][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  287.366832][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  287.368528][   T34]  ? __fget_files+0x2a/0x420
[  287.370046][   T34]  ? __fget_files+0x3a0/0x420
[  287.371597][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  287.373749][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  287.375538][   T34]  ? rcu_is_watching+0x15/0xb0
[  287.377124][   T34]  ? do_syscall_64+0xbe/0x3b0
[  287.378672][   T34]  do_syscall_64+0xfa/0x3b0
[  287.380164][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.382456][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.384454][   T34]  ? exc_page_fault+0x9f/0xf0
[  287.386013][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.387941][   T34] RIP: 0033:0x7f23cb18e9a9
[  287.389331][   T34] RSP: 002b:00007f23cbf2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.392379][   T34] RAX: ffffffffffffffda RBX: 00007f23cb3b5fa0 RCX: 00007f23cb18e9a9
[  287.394965][   T34] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000010
[  287.397484][   T34] RBP: 00007f23cb210d69 R08: 0000000000000000 R09: 0000000000000000
[  287.400016][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.402947][   T34] R13: 0000000000000000 R14: 00007f23cb3b5fa0 R15: 00007ffee8512c08
[  287.405473][   T34]  </TASK>
[  287.406505][   T34] INFO: task syz.2.2019:12232 blocked for more than 143 seconds.
[  287.409025][   T34]       Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0
[  287.411645][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.414914][   T34] task:syz.2.2019      state:D stack:25280 pid:12232 tgid:12231 ppid:5830   task_flags:0x400140 flags:0x00004004
[  287.418714][   T34] Call Trace:
[  287.419834][   T34]  <TASK>
[  287.420789][   T34]  __schedule+0x16f5/0x4d00
[  287.422615][   T34]  ? __lock_acquire+0xab9/0xd20
[  287.424209][   T34]  ? __lock_acquire+0xab9/0xd20
[  287.425812][   T34]  ? schedule+0x165/0x360
[  287.427192][   T34]  ? __pfx___schedule+0x10/0x10
[  287.428744][   T34]  ? schedule+0x91/0x360
[  287.430070][   T34]  schedule+0x165/0x360
[  287.431390][   T34]  schedule_preempt_disabled+0x13/0x30
[  287.433592][   T34]  __mutex_lock+0x724/0xe80
[  287.435118][   T34]  ? unwind_get_return_address+0x4d/0x90
[  287.436972][   T34]  ? __mutex_lock+0x51b/0xe80
[  287.438511][   T34]  ? genl_rcv_msg+0x10d/0x790
[  287.440124][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  287.442171][   T34]  ? stack_trace_save+0x9c/0xe0
[  287.443990][   T34]  ? radix_tree_lookup+0x240/0x290
[  287.445693][   T34]  genl_rcv_msg+0x10d/0x790
[  287.447171][   T34]  ? __lock_acquire+0xab9/0xd20
[  287.448734][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  287.450339][   T34]  netlink_rcv_skb+0x208/0x470
[  287.452474][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  287.454186][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  287.455956][   T34]  ? down_read+0x1ad/0x2e0
[  287.457404][   T34]  genl_rcv+0x28/0x40
[  287.458700][   T34]  netlink_unicast+0x75c/0x8e0
[  287.460295][   T34]  netlink_sendmsg+0x805/0xb30
[  287.462473][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.464164][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  287.465768][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  287.467432][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.469131][   T34]  __sock_sendmsg+0x21c/0x270
[  287.470712][   T34]  __sys_sendto+0x3bd/0x520
[  287.472750][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  287.474357][   T34]  ? count_memcg_event_mm+0x21/0x260
[  287.476021][   T34]  ? exc_page_fault+0x76/0xf0
[  287.477565][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  287.479285][   T34]  __x64_sys_sendto+0xde/0x100
[  287.480846][   T34]  do_syscall_64+0xfa/0x3b0
[  287.482546][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.484274][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.486157][   T34]  ? exc_page_fault+0x9f/0xf0
[  287.487653][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.489545][   T34] RIP: 0033:0x7fb4eb79083c
[  287.491036][   T34] RSP: 002b:00007fb4ec6c7ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  287.494063][   T34] RAX: ffffffffffffffda RBX: 00007fb4ec6c7fc0 RCX: 00007fb4eb79083c
[  287.496669][   T34] RDX: 0000000000000020 RSI: 00007fb4ec6c8010 RDI: 0000000000000009
[  287.499250][   T34] RBP: 0000000000000000 R08: 00007fb4ec6c7f14 R09: 000000000000000c
[  287.502110][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009
[  287.504592][   T34] R13: 00007fb4ec6c7f68 R14: 00007fb4ec6c8010 R15: 0000000000000000
[  287.507136][   T34]  </TASK>
[  287.508155][   T34] 
[  287.508155][   T34] Showing all locks held in the system:
[  287.510705][   T34] 1 lock held by khungtaskd/34:
[  287.513737][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  287.516904][   T34] 2 locks held by kworker/u12:0/55:
[  287.518573][   T34]  #0: ffff88802136c948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  287.522244][   T34]  #1: ffffc900007dfbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  287.525944][   T34] 2 locks held by getty/5656:
[  287.527449][   T34]  #0: ffff88810e3210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  287.530573][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  287.533942][   T34] 3 locks held by syz.0.2015/12218:
[  287.535649][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  287.538275][   T34]  #1: ffffffff8f581c48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  287.541166][   T34]  #2: ffff888021368a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0
[  287.544730][   T34] 2 locks held by syz.1.2016/12219:
[  287.546370][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  287.549006][   T34]  #1: ffffffff8f581c48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  287.551990][   T34] 2 locks held by syz.2.2019/12232:
[  287.553690][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  287.556344][   T34]  #1: ffffffff8f581c48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  287.559268][   T34] 2 locks held by syz-executor/12239:
[  287.560949][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  287.563710][   T34]  #1: ffffffff8f581c48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  287.566771][   T34] 2 locks held by syz-executor/12240:
[  287.568522][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  287.571177][   T34]  #1: ffffffff8f581c48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  287.574142][   T34] 2 locks held by syz-executor/12257:
[  287.575913][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  287.578563][   T34]  #1: ffffffff8f581c48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  287.581446][   T34] 2 locks held by syz-executor/12267:
[  287.583487][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  287.586233][   T34]  #1: ffffffff8f581c48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  287.589122][   T34] 2 locks held by syz-executor/12269:
[  287.590890][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  287.593673][   T34]  #1: ffffffff8f581c48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  287.596582][   T34] 2 locks held by syz-executor/12284:
[  287.598341][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  287.600983][   T34]  #1: ffffffff8f581c48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  287.603966][   T34] 2 locks held by syz-executor/12299:
[  287.605664][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  287.608348][   T34]  #1: ffffffff8f581c48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  287.611230][   T34] 2 locks held by syz-executor/12301:
[  287.613228][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  287.615975][   T34]  #1: ffffffff8f581c48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  287.618817][   T34] 2 locks held by syz-executor/12316:
[  287.620513][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  287.623239][   T34]  #1: ffffffff8f581c48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  287.626159][   T34] 
[  287.626964][   T34] =============================================
[  287.626964][   T34] 
[  287.629655][   T34] NMI backtrace for cpu 1
[  287.629662][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  287.629671][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.629675][   T34] Call Trace:
[  287.629679][   T34]  <TASK>
[  287.629682][   T34]  dump_stack_lvl+0x189/0x250
[  287.629693][   T34]  ? __wake_up_klogd+0xd9/0x110
[  287.629705][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.629713][   T34]  ? __pfx__printk+0x10/0x10
[  287.629727][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  287.629740][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  287.629749][   T34]  ? _printk+0xcf/0x120
[  287.629760][   T34]  ? __pfx__printk+0x10/0x10
[  287.629771][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  287.629779][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  287.629791][   T34]  watchdog+0xfee/0x1030
[  287.629798][   T34]  ? watchdog+0x1de/0x1030
[  287.629807][   T34]  kthread+0x711/0x8a0
[  287.629819][   T34]  ? __pfx_watchdog+0x10/0x10
[  287.629825][   T34]  ? __pfx_kthread+0x10/0x10
[  287.629837][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.629851][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.629858][   T34]  ? __pfx_kthread+0x10/0x10
[  287.629868][   T34]  ret_from_fork+0x3fc/0x770
[  287.629877][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  287.629886][   T34]  ? __switch_to_asm+0x39/0x70
[  287.629895][   T34]  ? __switch_to_asm+0x33/0x70
[  287.629904][   T34]  ? __pfx_kthread+0x10/0x10
[  287.629914][   T34]  ret_from_fork_asm+0x1a/0x30
[  287.629929][   T34]  </TASK>
[  287.629932][   T34] Sending NMI from CPU 1 to CPUs 0:
[  287.681804][    C0] NMI backtrace for cpu 0
[  287.681814][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  287.681823][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.681828][    C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x2f/0x90
[  287.681842][    C0] Code: 8b 04 24 65 48 8b 0c 25 08 a0 9f 92 65 8b 15 f8 6e df 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 <74> 4e 8b 91 18 16 00 00 83 fa 03 75 43 48 8b 91 20 16 00 00 44 8b
[  287.681848][    C0] RSP: 0018:ffffc90000007a88 EFLAGS: 00000246
[  287.681855][    C0] RAX: ffffffff898b6cf6 RBX: 00000010c6f7a0b5 RCX: ffffffff8de95280
[  287.681860][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 00000010c6f7a0b5
[  287.681864][    C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  287.681868][    C0] R10: dffffc0000000000 R11: fffff52000000f54 R12: 000000101b2b299e
[  287.681873][    C0] R13: 0019999999999998 R14: ffffc90029bc2160 R15: 0000001f237594ba
[  287.681878][    C0] FS:  0000000000000000(0000) GS:ffff8880b8626000(0000) knlGS:0000000000000000
[  287.681883][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  287.681887][    C0] CR2: 00005628f0a542a8 CR3: 0000000028602000 CR4: 00000000000006f0
[  287.681918][    C0] Call Trace:
[  287.681923][    C0]  <IRQ>
[  287.681926][    C0]  pie_calculate_probability+0x256/0x7e0
[  287.681939][    C0]  fq_pie_timer+0x288/0x5b0
[  287.681946][    C0]  ? fq_pie_timer+0x4d/0x5b0
[  287.681954][    C0]  call_timer_fn+0x17e/0x5f0
[  287.681960][    C0]  ? __pfx_fq_pie_timer+0x10/0x10
[  287.681967][    C0]  ? call_timer_fn+0xbe/0x5f0
[  287.681973][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  287.681980][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.681991][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.681997][    C0]  ? __pfx_fq_pie_timer+0x10/0x10
[  287.682004][    C0]  __run_timer_base+0x61a/0x860
[  287.682014][    C0]  ? ktime_get+0x3e/0x1f0
[  287.682024][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  287.682032][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  287.682044][    C0]  run_timer_softirq+0xb7/0x180
[  287.682053][    C0]  handle_softirqs+0x286/0x870
[  287.682062][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  287.682070][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  287.682078][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  287.682088][    C0]  __irq_exit_rcu+0xca/0x1f0
[  287.682095][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  287.682104][    C0]  irq_exit_rcu+0x9/0x30
[  287.682110][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  287.682116][    C0]  </IRQ>
[  287.682118][    C0]  <TASK>
[  287.682121][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  287.682128][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  287.682134][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 dd 1a 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  287.682140][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000286
[  287.682145][    C0] RAX: f636c46c7683d400 RBX: ffffffff81976c78 RCX: f636c46c7683d400
[  287.682150][    C0] RDX: 0000000000000001 RSI: ffffffff8d99603b RDI: ffffffff8be28c40
[  287.682154][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f5b R09: 1ffff110096065eb
[  287.682158][    C0] R10: dffffc0000000000 R11: ffffed10096065ec R12: ffffffff8fa1d5f0
[  287.682162][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  287.682167][    C0]  ? do_idle+0x1e8/0x510
[  287.682177][    C0]  default_idle+0x13/0x20
[  287.682184][    C0]  default_idle_call+0x74/0xb0
[  287.682191][    C0]  do_idle+0x1e8/0x510
[  287.682199][    C0]  ? __pfx_do_idle+0x10/0x10
[  287.682208][    C0]  cpu_startup_entry+0x44/0x60
[  287.682216][    C0]  rest_init+0x2de/0x300
[  287.682223][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  287.682230][    C0]  start_kernel+0x47d/0x500
[  287.682240][    C0]  x86_64_start_reservations+0x24/0x30
[  287.682250][    C0]  x86_64_start_kernel+0x143/0x1c0
[  287.682259][    C0]  common_startup_64+0x13e/0x147
[  287.682271][    C0]  </TASK>
[  287.682796][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  287.807776][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  287.811688][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.814898][   T34] Call Trace:
[  287.816010][   T34]  <TASK>
[  287.816984][   T34]  dump_stack_lvl+0x99/0x250
[  287.818477][   T34]  ? __asan_memcpy+0x40/0x70
[  287.819987][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.821678][   T34]  ? __pfx__printk+0x10/0x10
[  287.823182][   T34]  panic+0x2db/0x790
[  287.824462][   T34]  ? __pfx_panic+0x10/0x10
[  287.825903][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  287.827802][   T34]  ? irq_work_queue+0xc3/0x140
[  287.829341][   T34]  watchdog+0x102d/0x1030
[  287.830727][   T34]  ? watchdog+0x1de/0x1030
[  287.832148][   T34]  kthread+0x711/0x8a0
[  287.833655][   T34]  ? __pfx_watchdog+0x10/0x10
[  287.835278][   T34]  ? __pfx_kthread+0x10/0x10
[  287.836791][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.838401][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.840079][   T34]  ? __pfx_kthread+0x10/0x10
[  287.841541][   T34]  ret_from_fork+0x3fc/0x770
[  287.843048][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  287.844687][   T34]  ? __switch_to_asm+0x39/0x70
[  287.846198][   T34]  ? __switch_to_asm+0x33/0x70
[  287.847747][   T34]  ? __pfx_kthread+0x10/0x10
[  287.849270][   T34]  ret_from_fork_asm+0x1a/0x30
[  287.850849][   T34]  </TASK>
[  287.852558][   T34] Kernel Offset: disabled
[  287.853985][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:17:20  Registers:
info registers vcpu 0

CPU#0
RAX=f636c46c7683d400 RBX=ffffffff81976c78 RCX=f636c46c7683d400 RDX=0000000000000001
RSI=ffffffff8d99603b RDI=ffffffff8be28c40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6ee5aac00c CR3=000000010f7c0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f6ee7d86d00
XMM02=0000000500000007 0300048800000001 XMM03=0204006c03100400 68030a0800600316
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000001df8a
XMM06=0002800401000000 0806060100000007 XMM07=8208000200000000 0002d00300100002
XMM08=c00302100002b003 7810001400000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888107cd0237 R9 =1ffff11020f9a046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8ba R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6ee5a10eb9 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f6ee7d86d00
XMM02=0000000500000007 0300048800000001 XMM03=0204006c03100400 68030a0800600316
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000001df8a
XMM06=0002800401000000 0806060100000007 XMM07=8208000200000000 0002d00300100002
XMM08=c00302100002b003 7810001400000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
