last executing test programs:

16.408910008s ago: executing program 1 (id=1354):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x4, {0x1, 0x0, 0x4}}, 0x18)
bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r2, 0x2, {0x2, 0xf0, 0x1}, 0xff}, 0x18)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0)

16.231492364s ago: executing program 2 (id=1359):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010, r1}, 0x18)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000340)=0x4)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x5, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x8}}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @ptr={0x4, 0x0, 0x0, 0x2, 0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x3, 0x5}, {0x1, 0x2}, {0x5, 0x5}]}]}, {0x0, [0x2e, 0x30, 0x2e]}}, &(0x7f0000000600)=""/165, 0x7d, 0xa5, 0x0, 0x9, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0xffffffff, 0xe, 0x4, 0x4eefad9ab2b65fab, r4, 0x8f, '\x00', r5, r6, 0x3, 0x3}, 0x50)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xf72, 0x6, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r7, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000440)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0xb3, 0x1, 0xd, 0x100, 0x0, 0x4800001})
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
r11 = openat$cgroup(0xffffffffffffffff, &(0x7f00000006c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_type(r11, &(0x7f0000000700), 0x2, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r12, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001740)=""/4079, 0xfef}, {&(0x7f00000012c0)=""/181, 0xb5}], 0x2}, 0x5}], 0x1, 0x40010040, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)

16.230925401s ago: executing program 2 (id=1360):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x11, 0x200000000000003, 0x300)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="0300000049d9", 'bond0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r2, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
unshare(0x22020600)
r3 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x80800)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4)
recvmsg$kcm(r1, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001000000480001800500020020000000060001000200000008000600feffff7f080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)

16.164762375s ago: executing program 2 (id=1361):
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f07ebbee1, 0x8031, 0xffffffffffffffff, 0x4ff72000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000140)="43fb50e76b8d25ee33b1e2440f35eb6f93ea73775ae3fcbf0de9ee4b62bdcb2ff161845e5f3792d0d0815c77d709aa4b9ab18e850e31bb9f79fb0f0a9a43f88d", 0x40}, {&(0x7f0000000200)="83bc5b7ee01e2557fe16a7f71c81340249135e995d71fc42170230302c189b605fc2de052b190ddcc5b4af8fafde6bb850e23e8b3ba86c71b3c8b146b180966e1176ded515118495bf12fcb1b87ab22d6ce9e3dab915b7bfa9a0c5bf50cc0df8b5d0f34456bf2210020c764e00cf70125b40856d79120891", 0x78}, {&(0x7f0000000300)="1d50f1110b6b032c8364240f36a684e6fca75179f8fb93419f1cddc2c4a6eac605ac3eac51a1369316b4767e18babf2a5b5071a4b648683ca61b16a495493d90b66569c8c27cdec9ebebb517a8b0e092269085d29f0b6d077ff1560e614618cbb9a8a743b31f7f9fca3ee9b80df8881d3ebe0b98451906a1da74181dcf63e68a74b5f982706addaecb211460cb0333e70cc3eb3b5385df8b608ffa7c5e31c03aa4bd8169d01f3f05a3c536b54e7b3db8af3f0926e09517569009440233697fd5801ee69cc5915085bed6e8f99a8c277d7b3579c7059f288c256d14cdd24578542fd38b194c3b80c04dcf20baebeebc4cd0641ad8028e70", 0xf7}, {&(0x7f0000000000)="632516c56d8c24b7757a77d00cd85d8c554ee9c50b6dbcffafebac93bafac3ba04", 0x21}, {&(0x7f0000000080)="534062a07ad77a9063768e9f", 0xc}, {&(0x7f0000000480)="42ac59ec88f8a4cd47cba605b71896f22430beb92fafca8bb6b34ccabb538a0111b169c04810c7d3a97dbdfa722eb0688f1b6db814c337b4e31ba3f3ee854081d9a0fcc778b69031fe823d6bfa304a3d6b58c0b00f8f8df4bdf00f4c260fcaab54711746142ef5917a0521a658bbbcb77cbbd179e4fb323c84c5dcbe890911e43cf6386eee9c6b52c4e3ded4fcc7afba13af1afcae92460850ee740120321efab91d3298b46e2f52cbafa8dc37f165157ec62dcd5b35f24bc2faa66c44936ccbe9ec7070b0078e625f99191ebfcb63d1ed1eec78e9ff7a38c46d76fa5c2e40ebca75fc3b03", 0xe5}, {&(0x7f0000000580)="1406f9c601b177511e3c951efd23728f0fd53e9a3c040804f8dc52a74463733d2fa3562f7188086ca9b996f0599e3a0ffcc5d92899ff9a7fbf88a0c225cc3b20c6dcc4e587c109cfbab15a1b33d7d601221f816556ed751815098ebb324825babfd0b049e76c9fa6a805250832689298f1e1784905fc96b41021b345d55cf9962a63caa413e8e5287dafdcf1717043f00c5b70636c970f", 0x97}], 0x8)
close(0x4)
close(0x3)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000002c0), 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=r2], 0x80}}, 0x0)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000018090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0500030008000000bd2df584"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a000004050001000740000033a4"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
socket$unix(0x1, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0)

15.614575807s ago: executing program 0 (id=1367):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETVNETLE(r5, 0x400454dc, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r9=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r10=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r11=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={<r12=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r13=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r14=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={<r15=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, r8, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7cc}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, ')@G'}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x40011)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r16 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206010800000000000000000000fffc1400078008001140000000006001f30d28a19905001500080000000500010006000900000005000a0000000500040000000011000300686173683a6e65742c"], 0x60}}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)

15.485839403s ago: executing program 1 (id=1368):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))

15.433157151s ago: executing program 0 (id=1369):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000ffff00000000ac14144200000000000000000000000000000000000080000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ff010000000000000000000000000001000004d2330000000a000000000000000000000000000000000000000135000001003b00830000000500000007000000fe8000000000000000000000000000aa000004d63c0000000a000000ac1414bb00000000000000000000000002350000020007007f0000000000000004000000e0000001000000000000000000000000000004d56c00000002000000000000000000000000000000000000000000000004030300040000000200000003000000fc000000000000000000000000000000000004d32b"], 0x1fc}}, 0x4000)

15.432460038s ago: executing program 0 (id=1370):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x5502000000000000}, 0x4000)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x71, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xa032}, [@IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @IFLA_PORT_VF={0x8, 0x1, 0x10000}, @IFLA_PORT_VF={0x8, 0x1, 0x8001}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "65ad7ae669ab54d5ee80b028986fdc5b"}]}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x20009010}, 0x0)

15.355608881s ago: executing program 1 (id=1371):
r0 = socket$inet(0x10, 0x3, 0x0) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmsg$nl_route(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@getneigh={0x14, 0x1e, 0x900, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004004)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip_vti0\x00', <r3=>0x0, 0x20, 0x10, 0x3d0, 0x40, {{0xf, 0x4, 0x2, 0x6, 0x3c, 0x68, 0x0, 0xa, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_prespec={0x44, 0xc, 0x5f, 0x3, 0xb, [{@private=0xa010100, 0x8}]}, @timestamp_addr={0x44, 0x1c, 0x56, 0x1, 0x6, [{@multicast2, 0xb96}, {@empty, 0x7}, {@remote, 0x3}]}]}}}}})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1\x00', <r6=>0x0}) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x59, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x28, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x0, 0x6}, 0x8}, 0x94) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000f7ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10)
unshare(0x4040d80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[], 0x10) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0x2, &(0x7f00000002c0)={&(0x7f0000000340)={0x14c, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfc000000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x3d, 0x6, r9}}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r10=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) (async)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) (async)
r12 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000200)=[{r12}, {r12, 0x5020}], 0x2, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) (async)
listen(r12, 0x0) (async)
shutdown(r12, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'})
r13 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r13, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0)

15.354975056s ago: executing program 1 (id=1372):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x1000})
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000040), &(0x7f0000000140)=0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x14, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x8e165bd}}]}}]}, 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x1000}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000040), &(0x7f0000000140)=0x4) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x14, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x8e165bd}}]}}]}, 0x38}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async)

15.354536204s ago: executing program 0 (id=1373):
r0 = socket$nl_audit(0x10, 0x3, 0x9) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000006800010002000000fcffff7f00000000000000001400020001000000040000004200000007006f"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20048040) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x300, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x200000c1) (async)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r4, 0x1, 0x3, 0x1}, 0x50) (async)
sendmsg$AUDIT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x3c, 0x3c, 0x107, 0x0, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x15}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0xd}, @nested={0x8, 0x8, 0x0, 0x1, [@nested={0x4, 0x48}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
unshare(0x20040600)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r8, &(0x7f00000006c0)={0x2, 0x4e24, @multicast2}, 0x10) (async)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r6, &(0x7f0000000300)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x27, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@rr={0x7, 0x13, 0x5c, [@broadcast, @empty, @rand_addr=0x64010102, @remote]}, @generic={0x7, 0x10, "e6a4c5056e39cf045452f50649d3"}, @cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0x13, 0x33, [@empty, @dev={0xac, 0x14, 0x14, 0x16}, @local, @empty]}, @timestamp_prespec={0x44, 0x34, 0x48, 0x3, 0x2, [{@private=0xa010102, 0x7fff}, {@empty, 0x80000001}, {@multicast2, 0x4}, {@loopback, 0x1000}, {@multicast1, 0x7fffffff}, {@local, 0x9}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x4b, [@multicast1, @multicast2, @multicast2, @broadcast]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0xd6)

15.283068479s ago: executing program 2 (id=1374):
socket$netlink(0x10, 0x3, 0x0) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @none, 0xd}, 0xa) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 32)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="924016c29c99b475a6652c43fa2a2a819e4617b0c7ec8e24e3225e7a042396d9f1e1cdee0d487cd5706e1b702318cc7266672638d02fbd7d94be8996cad76152237ac716ebba90a30017026590e46c2f33af63ac95c2d373670e414288b9b3a9b3486fbfb2cb595b27091cd4e802d7b626608cdac25956ca10d9583c46496174af497a919b0b2343f578c18616b6fec46dd758f0690ddd5f437e", @ANYBLOB="01000000ffffff7f000000000000280017db2c955f26c824683a766c616e30000000140002800800010012100000060003ea"], 0x3c}}, 0xc020) (rerun: 32)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_newrule={0x24, 0x20, 0x400, 0x70bd26, 0x25dfdbfb, {0x2, 0xe2d853bc565d562c, 0x10, 0x6, 0x3, 0x0, 0x0, 0x1, 0x9}, [@FRA_FLOW={0x8, 0xb, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x1004) (async)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r3)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5d7238f96712e159dce4040000000000008e131c28590d0cb61078", @ANYRES16=r4, @ANYBLOB="07ef28bd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x45080) (async)
r5 = socket(0xa, 0x2, 0x4)
setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) (async)
r6 = socket(0x10, 0x803, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x6, 0xc}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x204, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x7ffe, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x3, 0x6}}]}}]}, 0x84}}, 0x24040084) (async, rerun: 64)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c) (async, rerun: 32)
r9 = socket(0x2, 0x80805, 0x0) (rerun: 32)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, 0x0, &(0x7f0000000100))
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000001c0)=0x4) (async)
connect$bt_rfcomm(r1, &(0x7f0000000240)={0x1f, @any, 0x6}, 0xa)

15.282333704s ago: executing program 1 (id=1375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000506000000000000000000000c"], 0x0, 0x32, 0x0, 0xa, 0x7ff}, 0x28) (async)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x15, 0x8, 0x77}, {@broadcast, 0x4e20, 0x10000, 0x3, 0x2}}, 0x44) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e80)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001ec0)=@generic={0x1, 0x9, 0x84}) (async)
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x1c, r6, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r6, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x810) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async)
r10 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9, 0x8001, 0xffffffff}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in6=@remote, 0x1, 0x2b}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) (async)
connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) (async)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000004", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r12, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async, rerun: 64)
r13 = socket(0x1, 0x803, 0x0) (rerun: 64)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900727370616e30000000000000fdff00080852a3d1d96e3ee418119be2fd000a00", @ANYRES32=r14, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)

15.281919722s ago: executing program 0 (id=1376):
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x99, &(0x7f0000000000)=0x2, 0x4)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
accept(r1, 0x0, 0x0)

15.281158309s ago: executing program 2 (id=1377):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000280060012"], 0x24}}, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYRES16=r0], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000001c0))
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$unix(r8, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000900)="400000ccbada0fcd3a9c", 0xa}], 0x1}}], 0x1, 0x4001)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
r13 = socket$unix(0x1, 0x2, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x9, 0x1, 0x1000, 0x400, 0xfffffffffffffbd2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
r16 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r16, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000150a010400000000000000000a0000000880035400000007090002ff73797a32000000000900016373797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

15.225890874s ago: executing program 0 (id=1378):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x400c0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0xa, 0x3, 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)
r4 = socket(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000027400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001800010000000000000000001d01000015000200000000000000000019d0606ac3c3bc8f070000000800050000000100"], 0x34}}, 0x0)

15.225590713s ago: executing program 2 (id=1379):
r0 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0x6, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x5}, @TCA_PIE_BETA={0x8, 0x5, 0x1f}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

15.175997975s ago: executing program 1 (id=1380):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8810)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c25000000000057337c3d5309b797000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000580)={0x0, 0x39, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x4049000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff6203f0fff8ffffff71a4f0ff000000002d040300000000003d030000000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007913000000000000b5000000000000009500000000000000023bc065b7a379d183f9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c26f71b29ee35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6d150352e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa48f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae5630800c5363092adaa1d8964162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee96a1c685508e6ca4fe5a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9029bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f75c345edcb84ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f277b8a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba0af35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c320e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0bad3b0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcefb9303a7861fce422f3f9c422a1619e6c6c2dd825743b22a6f93604c73d886c25ecaaeafccdeb19bd0cdbc5d22dae879561ea5606fa0c9dc23c0f52621aaae42180aecfd32cd6a66a1efa0949bc195dfcb691a26344362989371f2d5bf274363416b3cafb9a3331285449dc1afe9af7fed27bd4e36fa423d6c05ffa2acee27e2444b5ca28fc16fe31bd1320d4415ec0f5471b0b671d7626f773"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0)
getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d2946a15e8fd6804bb12bc7242fbed5293902547937d1cf30e9f9ba9961f2c46bce63fd7107de01d9e8691675245dbaeeaa52f764a08199f74df5a53cf5126ff1ee15b329b224855ba532576bd5f4d89f11bc6e65d4ce6469bac7a74761cc2d5f632939aab76a439a9f160568ed2e9c98e781026269a332bc5daf1", 0x7b)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'veth1_macvtap\x00', 0x1})
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000980), 0x8042, 0x0)
ioctl$PPPIOCGIDLE(r7, 0x8010743f, &(0x7f00000009c0))
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4e23, @private=0xfffffffc}})
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xea3}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0)
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000180)=@hopopts={0x2e, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18)

201.414256ms ago: executing program 32 (id=1378):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x400c0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0xa, 0x3, 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)
r4 = socket(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000027400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001800010000000000000000001d01000015000200000000000000000019d0606ac3c3bc8f070000000800050000000100"], 0x34}}, 0x0)

118.858615ms ago: executing program 33 (id=1380):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8810)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c25000000000057337c3d5309b797000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000580)={0x0, 0x39, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x4049000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0)
getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d2946a15e8fd6804bb12bc7242fbed5293902547937d1cf30e9f9ba9961f2c46bce63fd7107de01d9e8691675245dbaeeaa52f764a08199f74df5a53cf5126ff1ee15b329b224855ba532576bd5f4d89f11bc6e65d4ce6469bac7a74761cc2d5f632939aab76a439a9f160568ed2e9c98e781026269a332bc5daf1", 0x7b)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'veth1_macvtap\x00', 0x1})
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000980), 0x8042, 0x0)
ioctl$PPPIOCGIDLE(r7, 0x8010743f, &(0x7f00000009c0))
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4e23, @private=0xfffffffc}})
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xea3}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0)
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000180)=@hopopts={0x2e, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18)

0s ago: executing program 34 (id=1379):
r0 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0x6, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x5}, @TCA_PIE_BETA={0x8, 0x5, 0x1f}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50607' (ED25519) to the list of known hosts.
syzkaller login: [   48.129480][ T5834] cgroup: Unknown subsys name 'net'
[   48.292691][ T5834] cgroup: Unknown subsys name 'cpuset'
[   48.298310][ T5834] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.815510][ T5834] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.398508][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.402391][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.405818][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.409598][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.413019][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.471372][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.474567][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.477370][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.481684][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.484895][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.490840][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.493775][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.496400][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.499365][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.501991][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.649390][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   53.755499][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.758245][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.761538][ T5845] bridge_slave_0: entered allmulticast mode
[   53.764515][ T5845] bridge_slave_0: entered promiscuous mode
[   53.785913][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.788975][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.793517][ T5845] bridge_slave_1: entered allmulticast mode
[   53.797028][ T5845] bridge_slave_1: entered promiscuous mode
[   53.868335][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.876933][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   53.896875][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.953113][ T5845] team0: Port device team_slave_0 added
[   53.960025][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   53.969591][ T5845] team0: Port device team_slave_1 added
[   54.050195][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.052777][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.062439][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.066949][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.070723][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.073765][ T5851] bridge_slave_0: entered allmulticast mode
[   54.077635][ T5851] bridge_slave_0: entered promiscuous mode
[   54.083877][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.086786][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.089718][ T5851] bridge_slave_1: entered allmulticast mode
[   54.093682][ T5851] bridge_slave_1: entered promiscuous mode
[   54.103312][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.106109][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.117217][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.172889][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.185455][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.188237][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.191877][ T5850] bridge_slave_0: entered allmulticast mode
[   54.195432][ T5850] bridge_slave_0: entered promiscuous mode
[   54.200200][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.219914][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.225265][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.227642][ T5850] bridge_slave_1: entered allmulticast mode
[   54.231245][ T5850] bridge_slave_1: entered promiscuous mode
[   54.256732][ T5845] hsr_slave_0: entered promiscuous mode
[   54.259068][ T5845] hsr_slave_1: entered promiscuous mode
[   54.273093][ T5851] team0: Port device team_slave_0 added
[   54.277327][ T5851] team0: Port device team_slave_1 added
[   54.312334][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.319415][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.322987][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.332216][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.337796][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.365958][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.368260][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.376838][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.401547][ T5850] team0: Port device team_slave_0 added
[   54.422537][ T5850] team0: Port device team_slave_1 added
[   54.466496][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.469480][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.480762][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.496181][ T5851] hsr_slave_0: entered promiscuous mode
[   54.498781][ T5851] hsr_slave_1: entered promiscuous mode
[   54.502441][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   54.504688][ T5851] Cannot create hsr debugfs directory
[   54.517732][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.521007][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.533189][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.621069][ T5850] hsr_slave_0: entered promiscuous mode
[   54.624348][ T5850] hsr_slave_1: entered promiscuous mode
[   54.627236][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   54.629480][ T5850] Cannot create hsr debugfs directory
[   54.728211][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.741644][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.754284][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.784544][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.844000][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.852537][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.858915][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.868890][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.924897][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.934539][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.944188][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.956682][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.006255][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.037206][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   55.047385][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.063587][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.066655][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.082110][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.084405][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.096566][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   55.117892][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.120972][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.146373][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.149377][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.165291][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.218707][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   55.238830][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.254705][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.257140][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.279829][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.282969][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.341126][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.398344][ T5845] veth0_vlan: entered promiscuous mode
[   55.407915][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.413560][ T5845] veth1_vlan: entered promiscuous mode
[   55.440725][ T5853] Bluetooth: hci0: command tx timeout
[   55.441795][ T5845] veth0_macvtap: entered promiscuous mode
[   55.458477][ T5845] veth1_macvtap: entered promiscuous mode
[   55.464520][ T5851] veth0_vlan: entered promiscuous mode
[   55.487666][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.496377][ T5851] veth1_vlan: entered promiscuous mode
[   55.502487][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.520585][ T5853] Bluetooth: hci1: command tx timeout
[   55.523086][ T5853] Bluetooth: hci2: command tx timeout
[   55.528402][ T5716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.534979][ T5716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.545460][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.553027][ T5716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.566304][ T5716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.620013][ T5851] veth0_macvtap: entered promiscuous mode
[   55.632719][ T5851] veth1_macvtap: entered promiscuous mode
[   55.648258][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.648804][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.653889][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.672645][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.675518][ T5850] veth0_vlan: entered promiscuous mode
[   55.686282][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.691371][ T5850] veth1_vlan: entered promiscuous mode
[   55.695975][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.699333][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.703615][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.707954][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.718212][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.769681][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.785618][ T5850] veth0_macvtap: entered promiscuous mode
[   55.800371][ T5850] veth1_macvtap: entered promiscuous mode
[   55.809897][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.820815][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.835475][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.853740][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.859819][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.867875][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.883625][ T5873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.887066][ T5873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.894867][ T5873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.911553][ T5873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.015869][   T33] audit: type=1800 audit(1756951963.315:2): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=19 res=0 errno=0
[   56.081851][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.101905][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.216892][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.219921][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.424250][ T5928] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET)
[   56.478430][ T5933] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.755868][ T5944] netlink: 'syz.1.7': attribute type 8 has an invalid length.
[   56.771899][ T5944] netlink: 'syz.1.7': attribute type 1 has an invalid length.
[   56.899196][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'.
[   56.937225][ T5952] hsr_slave_1 (unregistering): left promiscuous mode
[   57.522059][ T5847] Bluetooth: hci0: command tx timeout
[   57.547425][ T5970] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.557410][ T5970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'.
[   57.563648][ T5970] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9'.
[   57.600467][ T5847] Bluetooth: hci2: command tx timeout
[   57.600522][ T5853] Bluetooth: hci1: command tx timeout
[   58.635202][ T5989] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13'.
[   58.665579][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'.
[   58.687664][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'.
[   58.803919][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'.
[   58.803980][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'.
[   58.807765][ T6006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19'.
[   58.817707][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'.
[   58.826929][ T6004] ipvlan2: entered promiscuous mode
[   58.856174][ T6005] netlink: 'syz.0.20': attribute type 16 has an invalid length.
[   58.858785][ T6005] netlink: 'syz.0.20': attribute type 17 has an invalid length.
[   58.949765][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.953432][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.036950][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.044251][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.140546][ T6012] netlink: 'syz.2.23': attribute type 12 has an invalid length.
[   59.152893][ T6024] tipc: Started in network mode
[   59.157772][ T6024] tipc: Node identity d2acaf637a25, cluster identity 4711
[   59.171103][ T6024] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.176839][ T5873] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.193536][ T5873] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.197107][ T5716] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.210468][ T5873] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.215774][ T6025] syzkaller0: entered promiscuous mode
[   59.218186][ T6025] syzkaller0: entered allmulticast mode
[   59.233938][ T6015] syzkaller0: mtu less than device minimum
[   59.239791][ T6029] IPVS: set_ctl: invalid protocol: 4 172.30.1.1:20000
[   59.247950][ T6015] tipc: Resetting bearer <eth:syzkaller0>
[   59.252132][ T6029] netlink: 'syz.0.25': attribute type 1 has an invalid length.
[   59.255214][ T6029] netlink: 'syz.0.25': attribute type 1 has an invalid length.
[   59.264972][ T6029] netlink: 'syz.0.25': attribute type 2 has an invalid length.
[   59.265481][ T6015] tipc: Disabling bearer <eth:syzkaller0>
[   59.600920][ T5853] Bluetooth: hci0: command tx timeout
[   59.633449][ T6046] netlink: 'syz.1.30': attribute type 12 has an invalid length.
[   59.680693][ T5853] Bluetooth: hci2: command tx timeout
[   59.690487][ T5853] Bluetooth: hci1: command tx timeout
[   59.734385][ T6051] openvswitch: netlink: Flow key attr not present in new flow.
[   59.843488][ T6064] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   59.846387][ T6064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.897322][ T6070] Zero length message leads to an empty skb
[   60.075425][ T6091] lo speed is unknown, defaulting to 1000
[   60.078956][ T6091] lo speed is unknown, defaulting to 1000
[   60.086117][ T6091] lo speed is unknown, defaulting to 1000
[   60.202293][ T6091] infiniband syz0: set active
[   60.208119][   T24] lo speed is unknown, defaulting to 1000
[   60.213178][ T6091] infiniband syz0: added lo
[   60.216468][ T6098] netlink: 'syz.0.43': attribute type 3 has an invalid length.
[   60.252917][ T6091] RDS/IB: syz0: added
[   60.256679][ T6091] smc: adding ib device syz0 with port count 1
[   60.258735][ T6091] smc:    ib device syz0 port 1 has pnetid 
[   60.261640][   T24] lo speed is unknown, defaulting to 1000
[   60.265162][ T6091] lo speed is unknown, defaulting to 1000
[   60.327045][ T6104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.417927][ T6104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.437883][ T6112] geneve2: entered promiscuous mode
[   60.445394][ T6112] geneve2: entered allmulticast mode
[   60.451957][ T5875] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   60.454922][ T5875] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   60.474894][ T6104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.478808][ T6104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   60.508590][ T6091] lo speed is unknown, defaulting to 1000
[   60.542456][ T6104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.547137][ T6104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   60.607733][ T6091] lo speed is unknown, defaulting to 1000
[   60.651572][ T5716] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   60.655018][ T5716] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   60.672771][ T5716] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   60.676289][ T5716] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   60.687645][ T5875] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   60.694392][ T5875] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   60.712819][ T5875] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   60.721206][ T5875] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   60.833780][ T6119] trusted_key: syz.1.49 sent an empty control message without MSG_MORE.
[   60.915945][ T6132] delete_channel: no stack
[   60.991123][ T6136] k*: entered promiscuous mode
[   61.143684][ T6136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.151577][   T47] lo speed is unknown, defaulting to 1000
[   61.389422][ T6173] vlan0: entered promiscuous mode
[   61.599093][ T6184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.605696][ T6184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.610516][ T6184] bond0 (unregistering): Released all slaves
[   61.691462][ T5853] Bluetooth: hci0: command tx timeout
[   61.761706][ T5853] Bluetooth: hci1: command tx timeout
[   61.761724][ T5847] Bluetooth: hci2: command tx timeout
[   62.026994][ T6226] __nla_validate_parse: 22 callbacks suppressed
[   62.027007][ T6226] netlink: 48 bytes leftover after parsing attributes in process `syz.1.74'.
[   62.092883][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'.
[   62.096128][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'.
[   62.099808][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'.
[   62.106254][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'.
[   62.164328][ T6231] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.77'.
[   62.418584][ T6237] lo speed is unknown, defaulting to 1000
[   62.509073][ T6242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.832733][ T6259] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.85'.
[   63.050668][ T6277] netlink: 256 bytes leftover after parsing attributes in process `syz.2.91'.
[   63.054401][ T6277] netlink: 48 bytes leftover after parsing attributes in process `syz.2.91'.
[   63.132847][ T6282] erspan0: entered promiscuous mode
[   63.143474][ T6282] erspan0: left promiscuous mode
[   63.162021][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'.
[   63.359244][ T6297] validate_nla: 3 callbacks suppressed
[   63.359259][ T6297] netlink: 'syz.0.96': attribute type 21 has an invalid length.
[   63.376748][ T6285] warning: `syz.2.93' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.682815][ T6313] lo speed is unknown, defaulting to 1000
[   63.861927][ T6323] lo speed is unknown, defaulting to 1000
[   63.895608][ T6326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.189791][ T6337] delete_channel: no stack
[   64.193182][ T6337] delete_channel: no stack
[   64.194713][ T6337] delete_channel: no stack
[   64.196416][ T6337] delete_channel: no stack
[   64.197985][ T6337] delete_channel: no stack
[   64.199578][ T6337] delete_channel: no stack
[   64.201259][ T6337] delete_channel: no stack
[   64.202862][ T6337] delete_channel: no stack
[   64.204386][ T6337] delete_channel: no stack
[   64.205913][ T6337] delete_channel: no stack
[   64.207397][ T6337] delete_channel: no stack
[   64.208978][ T6337] delete_channel: no stack
[   64.211842][ T6337] delete_channel: no stack
[   64.213727][ T6337] delete_channel: no stack
[   64.215806][ T6337] delete_channel: no stack
[   64.217369][ T6337] delete_channel: no stack
[   64.219013][ T6337] delete_channel: no stack
[   64.221118][ T6337] delete_channel: no stack
[   64.222994][ T6337] delete_channel: no stack
[   64.225781][ T6337] delete_channel: no stack
[   64.227575][ T6337] delete_channel: no stack
[   64.229710][ T6337] delete_channel: no stack
[   64.233433][ T6337] delete_channel: no stack
[   64.235564][ T6337] delete_channel: no stack
[   64.237689][ T6337] delete_channel: no stack
[   64.239882][ T6337] delete_channel: no stack
[   64.242403][ T6337] delete_channel: no stack
[   64.252526][ T6337] delete_channel: no stack
[   64.254138][ T6337] delete_channel: no stack
[   64.255895][ T6337] delete_channel: no stack
[   64.257574][ T6337] delete_channel: no stack
[   64.259461][ T6337] delete_channel: no stack
[   64.261211][ T6337] delete_channel: no stack
[   64.262936][ T6337] delete_channel: no stack
[   64.264910][ T6337] delete_channel: no stack
[   64.266854][ T6337] delete_channel: no stack
[   64.268694][ T6337] delete_channel: no stack
[   64.271479][ T6337] delete_channel: no stack
[   64.273293][ T6337] delete_channel: no stack
[   64.276145][ T6337] delete_channel: no stack
[   64.277827][ T6337] delete_channel: no stack
[   64.279387][ T6337] delete_channel: no stack
[   64.282205][ T6337] delete_channel: no stack
[   64.283979][ T6337] delete_channel: no stack
[   64.285892][ T6337] delete_channel: no stack
[   64.287534][ T6337] delete_channel: no stack
[   64.289344][ T6337] delete_channel: no stack
[   64.292669][ T6337] delete_channel: no stack
[   64.294207][ T6337] delete_channel: no stack
[   64.295706][ T6337] delete_channel: no stack
[   64.297413][ T6337] delete_channel: no stack
[   64.298975][ T6337] delete_channel: no stack
[   64.302043][ T6337] delete_channel: no stack
[   64.303659][ T6337] delete_channel: no stack
[   64.305321][ T6337] delete_channel: no stack
[   64.306918][ T6337] delete_channel: no stack
[   64.308610][ T6337] delete_channel: no stack
[   64.311265][ T6337] delete_channel: no stack
[   64.312984][ T6337] delete_channel: no stack
[   64.314796][ T6337] delete_channel: no stack
[   64.318327][ T6337] delete_channel: no stack
[   64.321738][ T6337] delete_channel: no stack
[   64.325448][ T6337] delete_channel: no stack
[   64.329386][ T6337] delete_channel: no stack
[   64.333413][ T6337] delete_channel: no stack
[   64.416276][ T6355] netlink: 'syz.2.113': attribute type 16 has an invalid length.
[   64.419097][ T6355] netlink: 'syz.2.113': attribute type 17 has an invalid length.
[   64.466161][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.469321][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.556697][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.567547][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.659976][ T5875] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[   64.663414][ T5875] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[   64.666383][ T5875] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[   64.669344][ T5875] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[   64.672537][ T5875] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[   64.675303][ T5875] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[   64.678144][ T5875] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[   64.682341][ T5875] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[   64.736145][ T6361] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.211863][ T6369] netlink: 'syz.0.116': attribute type 1 has an invalid length.
[   65.636914][ T6393] netlink: 'syz.0.123': attribute type 7 has an invalid length.
[   65.746455][ T6399] tipc: Started in network mode
[   65.748296][ T6399] tipc: Node identity 2a4a56308a1, cluster identity 4711
[   65.754022][ T6399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.756699][ T6399] syzkaller0: entered promiscuous mode
[   65.758593][ T6399] syzkaller0: entered allmulticast mode
[   65.769775][ T6399] tipc: Resetting bearer <eth:syzkaller0>
[   65.775984][ T6398] tipc: Resetting bearer <eth:syzkaller0>
[   65.783270][ T6398] tipc: Disabling bearer <eth:syzkaller0>
[   66.183817][ T6409] sctp: [Deprecated]: syz.0.129 (pid 6409) Use of struct sctp_assoc_value in delayed_ack socket option.
[   66.183817][ T6409] Use struct sctp_sack_info instead
[   66.242434][ T6411] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.254763][ T6411] syzkaller0: entered promiscuous mode
[   66.256615][ T6411] syzkaller0: entered allmulticast mode
[   66.281084][ T6411] tipc: Resetting bearer <eth:syzkaller0>
[   66.284331][ T6411] netlink: 'syz.0.130': attribute type 1 has an invalid length.
[   66.312524][ T6411] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   66.316909][ T6411] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   66.324873][ T6411] bond1: (slave vcan1): making interface the new active one
[   66.328622][ T6411] bond1: (slave vcan1): Enslaving as an active interface with an up link
[   66.337930][ T6411] bond1: (slave vcan2): The slave device specified does not support setting the MAC address
[   66.345622][ T6411] bond1: (slave vcan2): Enslaving as a backup interface with an up link
[   66.351248][ T6410] tipc: Resetting bearer <eth:syzkaller0>
[   66.358763][ T6410] tipc: Disabling bearer <eth:syzkaller0>
[   66.468182][ T6414] netlink: 'syz.0.131': attribute type 23 has an invalid length.
[   66.866420][  T793] IPVS: starting estimator thread 0...
[   66.935523][ T6449] : renamed from vlan1
[   66.951055][ T6445] IPVS: using max 80 ests per chain, 192000 per kthread
[   67.207915][ T6483] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.316698][ T6495] __nla_validate_parse: 78 callbacks suppressed
[   67.316708][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'.
[   67.333302][ T6495] bridge_slave_1: left allmulticast mode
[   67.335409][ T6495] bridge_slave_1: left promiscuous mode
[   67.337376][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.347019][ T6495] bridge_slave_0: left allmulticast mode
[   67.349695][ T6495] bridge_slave_0: left promiscuous mode
[   67.353222][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.439821][ T6501] netlink: 32 bytes leftover after parsing attributes in process `syz.0.158'.
[   67.514170][ T6494] netlink: 32 bytes leftover after parsing attributes in process `syz.0.158'.
[   67.522151][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'.
[   67.684368][ T6518] sctp: [Deprecated]: syz.0.161 (pid 6518) Use of int in max_burst socket option.
[   67.684368][ T6518] Use struct sctp_assoc_value instead
[   67.692387][ T6518] sctp: [Deprecated]: syz.0.161 (pid 6518) Use of int in max_burst socket option.
[   67.692387][ T6518] Use struct sctp_assoc_value instead
[   67.698580][ T6518] sctp: [Deprecated]: syz.0.161 (pid 6518) Use of int in max_burst socket option.
[   67.698580][ T6518] Use struct sctp_assoc_value instead
[   67.715015][ T6518] sctp: [Deprecated]: syz.0.161 (pid 6518) Use of int in max_burst socket option.
[   67.715015][ T6518] Use struct sctp_assoc_value instead
[   67.728324][ T6518] sctp: [Deprecated]: syz.0.161 (pid 6518) Use of int in max_burst socket option.
[   67.728324][ T6518] Use struct sctp_assoc_value instead
[   67.735109][ T6518] sctp: [Deprecated]: syz.0.161 (pid 6518) Use of int in max_burst socket option.
[   67.735109][ T6518] Use struct sctp_assoc_value instead
[   67.742818][ T6518] sctp: [Deprecated]: syz.0.161 (pid 6518) Use of int in max_burst socket option.
[   67.742818][ T6518] Use struct sctp_assoc_value instead
[   67.748862][ T6518] sctp: [Deprecated]: syz.0.161 (pid 6518) Use of int in max_burst socket option.
[   67.748862][ T6518] Use struct sctp_assoc_value instead
[   67.755060][ T6518] sctp: [Deprecated]: syz.0.161 (pid 6518) Use of int in max_burst socket option.
[   67.755060][ T6518] Use struct sctp_assoc_value instead
[   67.761353][ T6518] sctp: [Deprecated]: syz.0.161 (pid 6518) Use of int in max_burst socket option.
[   67.761353][ T6518] Use struct sctp_assoc_value instead
[   67.914597][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.165'.
[   67.994624][ T6552] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   68.249471][ T6576] netlink: 'syz.0.168': attribute type 3 has an invalid length.
[   68.277881][ T6576] syz_tun: entered allmulticast mode
[   68.281989][ T6576] netlink: 'syz.0.168': attribute type 10 has an invalid length.
[   68.285271][ T6576] team0: Cannot enslave team device to itself
[   68.287994][ T6576] siw: device registration error -23
[   68.304280][ T6576] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.307322][ T6576] 8021q: adding VLAN 0 to HW filter on device team0
[   68.320313][ T6576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.330967][ T6575] syz_tun: left allmulticast mode
[   68.425665][ T6582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.510674][ T6589] netlink: 104 bytes leftover after parsing attributes in process `syz.2.172'.
[   68.769267][ T6598] netlink: 'syz.1.175': attribute type 11 has an invalid length.
[   68.923965][ T6605] netlink: 56 bytes leftover after parsing attributes in process `syz.1.176'.
[   68.928369][ T6605] netlink: 56 bytes leftover after parsing attributes in process `syz.1.176'.
[   68.933125][ T6605] netlink: 56 bytes leftover after parsing attributes in process `syz.1.176'.
[   68.940560][ T6605] netlink: 56 bytes leftover after parsing attributes in process `syz.1.176'.
[   69.021036][ T6608] lo speed is unknown, defaulting to 1000
[   69.149776][ T6613] veth1_to_bond: entered allmulticast mode
[   69.197754][ T6613] veth1_to_bond (unregistering): left allmulticast mode
[   69.391286][ T6627] netlink: 'syz.1.183': attribute type 12 has an invalid length.
[   69.537203][ T6638] netlink: 'syz.0.186': attribute type 1 has an invalid length.
[   69.694407][ T6645] Bluetooth: MGMT ver 1.23
[   69.774868][ T6649] nbd: couldn't find a device at index 0
[   69.831561][ T6653] syz_tun: entered allmulticast mode
[   69.843965][ T6653] dvmrp8: entered allmulticast mode
[   69.852345][ T6655] syz_tun: left allmulticast mode
[   69.854113][ T6655] dvmrp8: left allmulticast mode
[   69.970533][ T6656] nbd1: detected capacity change from 0 to 127
[   70.218200][ T6674] lo speed is unknown, defaulting to 1000
[   70.271373][ T6675] vlan1: entered promiscuous mode
[   70.276166][ T6675] vlan1: entered allmulticast mode
[   70.277936][ T6675] hsr_slave_1: entered allmulticast mode
[   70.636690][   T56] block nbd1: Receive control failed (result -104)
[   70.642776][   T47] IPVS: starting estimator thread 0...
[   70.654359][ T6684] ieee802154 phy0 wpan0: encryption failed: -22
[   70.668335][ T6682] lo speed is unknown, defaulting to 1000
[   70.733762][ T6686] IPVS: using max 80 ests per chain, 192000 per kthread
[   70.884563][ T6697] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   70.887152][ T6697] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.934560][ T6697] lo speed is unknown, defaulting to 1000
[   71.016097][ T6704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.127579][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.393807][ T6722] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   71.961708][ T6752] netlink: 'syz.1.215': attribute type 1 has an invalid length.
[   72.011829][ T6753] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   72.027384][ T6752] veth3: entered promiscuous mode
[   72.031998][ T6752] bond0: (slave veth3): Enslaving as a backup interface with a down link
[   72.104111][ T6756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.107203][ T6756] syzkaller0: entered promiscuous mode
[   72.109142][ T6756] syzkaller0: entered allmulticast mode
[   72.113581][ T6757] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   72.125993][ T6757] tipc: Resetting bearer <eth:syzkaller0>
[   72.134467][ T6755] tipc: Resetting bearer <eth:syzkaller0>
[   72.142347][ T6755] tipc: Disabling bearer <eth:syzkaller0>
[   72.454193][ T6773] __nla_validate_parse: 13 callbacks suppressed
[   72.454203][ T6773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.220'.
[   72.464890][ T6773] netlink: 256 bytes leftover after parsing attributes in process `syz.0.220'.
[   72.766873][ T6790] netlink: 'syz.1.224': attribute type 1 has an invalid length.
[   72.819011][ T6798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.001905][ T6826] erspan0: entered promiscuous mode
[   73.003794][ T6826] vlan1: entered promiscuous mode
[   73.676098][ T6839] geneve2: entered promiscuous mode
[   73.885147][ T6845] netlink: 'syz.1.238': attribute type 58 has an invalid length.
[   73.888397][ T6845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.238'.
[   74.048723][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.239'.
[   74.083363][ T6850] macvlan2: entered promiscuous mode
[   74.085792][ T6850] macvlan2: entered allmulticast mode
[   74.088977][ T6850] bond1: (slave macvlan2): Opening slave failed
[   74.103447][ T6852] macvlan2: entered promiscuous mode
[   74.105772][ T6852] macvlan2: entered allmulticast mode
[   74.108826][ T6852] bond1: (slave macvlan2): Opening slave failed
[   74.266166][ T6856] netlink: 'syz.1.241': attribute type 2 has an invalid length.
[   74.269454][ T6856] netlink: 51 bytes leftover after parsing attributes in process `syz.1.241'.
[   74.402652][ T6862] netlink: 508 bytes leftover after parsing attributes in process `syz.2.243'.
[   74.450699][ T6865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.462997][ T6865] syzkaller0: entered promiscuous mode
[   74.465039][ T6865] syzkaller0: entered allmulticast mode
[   74.880294][ T5847] Bluetooth: hci2: command tx timeout
[   75.221738][ T6876] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.280733][ T6879] netlink: 'syz.0.248': attribute type 12 has an invalid length.
[   75.472171][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'.
[   75.497262][ T6902] netlink: 224 bytes leftover after parsing attributes in process `syz.0.255'.
[   75.505172][ T6902] netlink: 'syz.0.255': attribute type 1 has an invalid length.
[   75.519301][ T6902] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.532333][ T6902] bond2: (slave gretap1): making interface the new active one
[   75.537147][ T6902] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   75.786145][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'.
[   75.812685][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'.
[   76.298256][ T6946] netlink: 'syz.1.267': attribute type 2 has an invalid length.
[   76.359473][ T6951] netlink: 'syz.1.268': attribute type 1 has an invalid length.
[   76.387499][ T6952] bond2: (slave geneve3): making interface the new active one
[   76.391496][ T6952] bond2: (slave geneve3): Enslaving as an active interface with an up link
[   76.398802][ T5716] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   76.407337][ T5716] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   76.411334][ T5716] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   76.415254][ T5716] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   76.419500][ T6956] netlink: 'syz.2.269': attribute type 13 has an invalid length.
[   76.515332][ T6961] bridge_slave_0: left allmulticast mode
[   76.517696][ T6961] bridge_slave_0: left promiscuous mode
[   76.521426][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.526729][ T6961] bridge_slave_1: left allmulticast mode
[   76.529076][ T6961] bridge_slave_1: left promiscuous mode
[   76.531837][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.536875][ T6961] bond0: (slave bond_slave_0): Releasing backup interface
[   76.545590][ T6961] bond0: (slave bond_slave_1): Releasing backup interface
[   76.551847][ T6961] team0: Port device team_slave_0 removed
[   76.554607][ T6961] team0: Port device team_slave_1 removed
[   76.556691][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.650725][ T6963] block nbd2: server does not support multiple connections per device.
[   76.654164][ T6963] block nbd2: shutting down sockets
[   76.657540][ T6961] tipc: Started in network mode
[   76.659926][ T6961] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   76.663058][ T6961] tipc: Enabled bearer <eth:team0>, priority 0
[   76.758365][ T6982] netlink: 'syz.0.279': attribute type 5 has an invalid length.
[   76.879766][ T6989] team0: Device gtp0 is of different type
[   76.899312][ T6988] netem: change failed
[   76.922410][ T6978] Bluetooth: MGMT ver 1.23
[   77.035776][ T7006] lo: Caught tx_queue_len zero misconfig
[   77.097624][ T7014] ip6tnl0: Caught tx_queue_len zero misconfig
[   77.163289][ T7019] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.171841][ T7019] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   77.227935][ T7019] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.235349][ T7019] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   77.298404][ T7019] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.310141][ T7019] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   77.382261][ T7019] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.385688][ T7019] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   77.425965][ T7030] veth7: entered promiscuous mode
[   77.459685][ T5873] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[   77.463795][ T5873] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   77.472959][ T5873] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[   77.475729][ T5873] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   77.486068][ T5873] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[   77.488848][ T5873] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   77.497608][ T5873] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[   77.501466][ T5873] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   77.868068][ T5876] tipc: Node number set to 11578026
[   77.919236][ T7049] team0: Mode "l" not found
[   78.140712][ T7072] Bluetooth: MGMT ver 1.23
[   78.153649][ T7073] openvswitch: netlink: Message has 4 unknown bytes.
[   78.181148][ T5876] IPVS: starting estimator thread 0...
[   78.237429][ T7080] __nla_validate_parse: 8 callbacks suppressed
[   78.237443][ T7080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.307'.
[   78.256592][ T7083] vxcan1: entered allmulticast mode
[   78.270229][ T7076] IPVS: using max 81 ests per chain, 194400 per kthread
[   78.273263][ T7087] netlink: 168 bytes leftover after parsing attributes in process `syz.0.309'.
[   78.292021][ T7087] netlink: 'syz.0.309': attribute type 1 has an invalid length.
[   78.301370][ T7087] netlink: 224 bytes leftover after parsing attributes in process `syz.0.309'.
[   78.454219][ T7107] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   78.457394][ T7107] netlink: 60 bytes leftover after parsing attributes in process `syz.1.316'.
[   78.508984][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'.
[   78.519104][ T7115] netlink: zone id is out of range
[   78.527949][ T7112] netlink: zone id is out of range
[   78.538045][ T7112] netlink: zone id is out of range
[   78.541117][ T7115] netlink: zone id is out of range
[   78.578351][ T7121] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.598157][ T7112] netlink: set zone limit has 4 unknown bytes
[   78.600248][ T7115] netlink: set zone limit has 4 unknown bytes
[   78.605538][ T7121] syzkaller0: entered promiscuous mode
[   78.607456][ T7121] syzkaller0: entered allmulticast mode
[   78.621115][ T7121] tipc: Resetting bearer <eth:syzkaller0>
[   78.622086][ T7124] netlink: del zone limit has 4 unknown bytes
[   78.627152][ T7121] openvswitch: netlink: Flow key attr not present in new flow.
[   78.631712][ T7120] tipc: Resetting bearer <eth:syzkaller0>
[   78.647386][ T7120] tipc: Disabling bearer <eth:syzkaller0>
[   78.714706][ T7133] openvswitch: netlink: Actions may not be safe on all matching packets
[   78.922803][ T7149] lo speed is unknown, defaulting to 1000
[   79.023019][ T7161] syzkaller1: entered promiscuous mode
[   79.025125][ T7161] syzkaller1: entered allmulticast mode
[   79.189998][ T7171] lo: entered allmulticast mode
[   79.192733][ T7171] tunl0: entered allmulticast mode
[   79.195054][ T7171] gre0: entered allmulticast mode
[   79.203061][ T7171] gretap0: entered allmulticast mode
[   79.207467][ T7171] erspan0: entered allmulticast mode
[   79.212089][ T7171] ip_vti0: entered allmulticast mode
[   79.215200][ T7171] ip6_vti0: entered allmulticast mode
[   79.328901][ T7174] geneve2: entered promiscuous mode
[   79.351069][ T7174] geneve2: entered allmulticast mode
[   79.358081][ T5716] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0
[   79.362547][ T5716] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0
[   79.372836][ T5716] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0
[   79.376170][ T5716] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0
[   79.492755][ T7197] netlink: 64 bytes leftover after parsing attributes in process `syz.0.344'.
[   79.528120][ T7202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.346'.
[   79.544030][ T7202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.346'.
[   79.572093][ T7206] netlink: 14 bytes leftover after parsing attributes in process `syz.2.347'.
[   79.599696][ T7208] geneve3: entered promiscuous mode
[   79.609768][ T7182] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[   79.617706][ T7182] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[   79.628109][ T7182] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[   79.642359][ T7182] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[   79.648586][ T7212] macsec1: entered promiscuous mode
[   79.652034][ T7212] macsec0: entered promiscuous mode
[   79.653909][ T7212] macsec1: entered allmulticast mode
[   79.656235][ T7212] macsec0: entered allmulticast mode
[   80.678589][ T7242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'.
[   80.972151][ T7270] syzkaller1: entered promiscuous mode
[   80.974266][ T7270] syzkaller1: entered allmulticast mode
[   81.361754][   T10] cfg80211: failed to load regulatory.db
[   81.805229][ T7294] netlink: 'syz.2.373': attribute type 1 has an invalid length.
[   81.807906][ T7294] netlink: 'syz.2.373': attribute type 1 has an invalid length.
[   81.902820][ T7301] lo speed is unknown, defaulting to 1000
[   82.070312][ T7314] netlink: 'syz.2.379': attribute type 10 has an invalid length.
[   82.075531][ T7314] team0: Port device geneve0 added
[   82.077717][ T5873] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.081117][ T5873] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.090154][ T5873] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.092917][ T5873] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.102476][ T7314] lo speed is unknown, defaulting to 1000
[   82.259412][ T7331] dvmrp0: entered allmulticast mode
[   82.272375][ T7332] dvmrp8: entered allmulticast mode
[   82.275241][ T7332] dvmrp0: left allmulticast mode
[   82.277114][ T7332] dvmrp8: left allmulticast mode
[   82.490604][ T7343] netlink: 'syz.2.386': attribute type 1 has an invalid length.
[   82.505651][ T7343] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.623811][ T7347] team_slave_0: entered promiscuous mode
[   82.625923][ T7347] team_slave_1: entered promiscuous mode
[   82.627957][ T7347] macsec1: entered promiscuous mode
[   82.629819][ T7347] team0: entered promiscuous mode
[   82.775013][ T7356] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[   82.787976][ T7356] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   82.820855][ T7356] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[   82.824523][ T7356] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   82.877564][ T7366] sch_tbf: burst 0 is lower than device lo mtu (230) !
[   82.906249][ T7369] bond0: Caught tx_queue_len zero misconfig
[   82.918336][ T7356] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[   82.925048][ T7356] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   82.949255][ T7371] netlink: 'syz.2.393': attribute type 13 has an invalid length.
[   82.955092][ T7371] netlink: 'syz.2.393': attribute type 17 has an invalid length.
[   82.957966][ T7371] lo: left allmulticast mode
[   82.968271][ T7371] tunl0: left allmulticast mode
[   82.971358][ T7371] gre0: left allmulticast mode
[   82.973827][ T7371] gretap0: left allmulticast mode
[   82.978250][ T7371] erspan0: left allmulticast mode
[   82.985254][ T7371] ip_vti0: left allmulticast mode
[   82.987436][ T7371] ip6_vti0: left allmulticast mode
[   83.005068][ T7371] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.008672][ T7371] 8021q: adding VLAN 0 to HW filter on device team0
[   83.014709][ T7356] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[   83.018065][ T7356] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   83.033997][ T7373] lo speed is unknown, defaulting to 1000
[   83.079150][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[   83.091119][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   83.098416][ T7182] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[   83.101992][ T7182] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   83.112665][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[   83.115458][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   83.124760][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[   83.127931][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   83.137335][ T7376] syzkaller1: entered promiscuous mode
[   83.139200][ T7376] syzkaller1: entered allmulticast mode
[   83.236190][ T7381] netlink: 'syz.0.395': attribute type 12 has an invalid length.
[   83.243204][ T7381] __nla_validate_parse: 14 callbacks suppressed
[   83.243212][ T7381] netlink: 48 bytes leftover after parsing attributes in process `syz.0.395'.
[   83.308915][ T7383] netlink: 32 bytes leftover after parsing attributes in process `syz.0.396'.
[   83.483499][ T7388] netlink: 'syz.0.398': attribute type 1 has an invalid length.
[   83.487774][ T7388] netlink: 'syz.0.398': attribute type 2 has an invalid length.
[   83.491814][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'.
[   83.540495][ T7394] netlink: 'syz.2.401': attribute type 1 has an invalid length.
[   83.555412][ T7394] bond2: entered promiscuous mode
[   83.557303][ T7394] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.560022][ T7397] bridge_slave_0: left allmulticast mode
[   83.562565][ T7394] netlink: 3 bytes leftover after parsing attributes in process `syz.2.401'.
[   83.567481][ T7397] bridge_slave_0: left promiscuous mode
[   83.569553][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.574546][ T7397] bridge_slave_1: left allmulticast mode
[   83.576529][ T7397] bridge_slave_1: left promiscuous mode
[   83.578588][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.583246][ T7397] bond0: (slave bond_slave_0): Releasing backup interface
[   83.586568][ T7397] bond0: (slave bond_slave_1): Releasing backup interface
[   83.590642][ T7397] team0: Port device team_slave_0 removed
[   83.594013][ T7397] team0: Port device team_slave_1 removed
[   83.598863][ T7397] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.603210][ T7397] bond1: (slave vcan1): Releasing backup interface
[   83.610232][ T7397] bond1: (slave vcan2): making interface the new active one
[   83.616179][ T7397] bond1: (slave vcan2): Releasing backup interface
[   83.619821][ T7397] bond2: (slave gretap1): Releasing active interface
[   83.627899][ T7394] batadv1: entered promiscuous mode
[   83.629688][ T7394] batadv1: entered allmulticast mode
[   83.632461][ T7394] 8021q: adding VLAN 0 to HW filter on device batadv1
[   83.636227][ T7394] bond2: (slave batadv1): making interface the new active one
[   83.639025][ T7394] bond2: (slave batadv1): Enslaving as an active interface with an up link
[   83.643449][ T7399] team0: Mode changed to "broadcast"
[   83.660448][ T7397] vlan0: entered promiscuous mode
[   83.667083][ T7405] veth1_to_bond: entered allmulticast mode
[   83.669466][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'.
[   83.670470][ T7397] tipc: Enabled bearer <eth:team0>, priority 0
[   83.695177][ T7405] veth1_to_bond (unregistering): left allmulticast mode
[   83.736666][ T7403] lo speed is unknown, defaulting to 1000
[   83.802688][ T7416] netlink: 14 bytes leftover after parsing attributes in process `syz.2.407'.
[   83.949836][ T7421] bridge4: entered allmulticast mode
[   84.163880][ T7433] syzkaller0: entered promiscuous mode
[   84.165941][ T7433] syzkaller0: entered allmulticast mode
[   84.488349][ T7450] IPVS: Error connecting to the multicast addr
[   84.539148][ T7454] netlink: 404 bytes leftover after parsing attributes in process `syz.0.418'.
[   84.543551][ T7454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.418'.
[   84.546544][ T7454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.418'.
[   84.549465][ T7454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.418'.
[   84.660416][   T10] tipc: Node number set to 2690274864
[   84.885556][ T7487] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   84.893928][ T7487] net_ratelimit: 4 callbacks suppressed
[   84.893935][ T7487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.644506][ T5716] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.647311][ T5716] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.653013][ T7520] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.655696][ T7520] syzkaller0: entered promiscuous mode
[   85.657534][ T7520] syzkaller0: entered allmulticast mode
[   85.676688][ T7520] tipc: Resetting bearer <eth:syzkaller0>
[   85.679634][ T5716] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.684607][ T5716] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.688039][ T7516] tipc: Resetting bearer <eth:syzkaller0>
[   85.695748][ T7516] tipc: Disabling bearer <eth:syzkaller0>
[   85.851923][ T7545] lo speed is unknown, defaulting to 1000
[   85.953248][ T7556] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.958863][ T7556] syzkaller0: entered promiscuous mode
[   85.978735][ T7556] syzkaller0: entered allmulticast mode
[   86.007585][ T7556] tipc: Resetting bearer <eth:syzkaller0>
[   86.022139][ T7555] tipc: Resetting bearer <eth:syzkaller0>
[   86.038463][ T7555] tipc: Disabling bearer <eth:syzkaller0>
[   86.065498][ T7554] syz_tun: entered promiscuous mode
[   86.067425][ T7554] macvtap1: entered promiscuous mode
[   86.069221][ T7554] macvtap1: entered allmulticast mode
[   86.073149][ T7554] syz_tun: entered allmulticast mode
[   86.128576][ T7567] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.133362][ T7567] 8021q: adding VLAN 0 to HW filter on device team0
[   86.135616][ T7567] tipc: Resetting bearer <eth:team0>
[   86.137656][ T7567] tipc: Resetting bearer <eth:team0>
[   86.143873][ T7567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.166684][ T7563] lo speed is unknown, defaulting to 1000
[   86.513598][ T7588] syzkaller1: entered promiscuous mode
[   86.515575][ T7588] syzkaller1: entered allmulticast mode
[   86.614424][ T7593] lo speed is unknown, defaulting to 1000
[   87.102108][   T33] audit: type=1800 audit(1756951994.395:3): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.468" name="blkio.bfq.time_recursive" dev="tmpfs" ino=748 res=0 errno=0
[   87.193337][ T7665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.196208][ T7665] syzkaller0: entered promiscuous mode
[   87.198130][ T7665] syzkaller0: entered allmulticast mode
[   87.204041][ T7665] IPv6: addrconf: prefix option has invalid lifetime
[   87.206719][ T7665] IPv6: addrconf: prefix option has invalid lifetime
[   87.209091][ T7665] IPv6: addrconf: prefix option has invalid lifetime
[   87.285251][ T7678] tipc: Resetting bearer <eth:syzkaller0>
[   87.329373][ T7691] validate_nla: 7 callbacks suppressed
[   87.329383][ T7691] netlink: 'syz.2.473': attribute type 3 has an invalid length.
[   87.336276][ T7691] netlink: 'syz.2.473': attribute type 3 has an invalid length.
[   87.374401][ T7664] tipc: Resetting bearer <eth:syzkaller0>
[   87.387254][ T7664] tipc: Disabling bearer <eth:syzkaller0>
[   87.395951][ T7703] netlink: 'syz.2.475': attribute type 1 has an invalid length.
[   88.294730][ T7731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.297250][ T7732] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[   88.299830][ T7732] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[   88.311927][ T7731] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   88.320802][ T7733] tipc: Resetting bearer <eth:syzkaller0>
[   88.361148][ T7741] __nla_validate_parse: 28 callbacks suppressed
[   88.361157][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.487'.
[   88.373927][ T7741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.487'.
[   88.376967][ T7741] netlink: 3 bytes leftover after parsing attributes in process `syz.0.487'.
[   88.410244][ T5853] Bluetooth: hci2: command 0x0405 tx timeout
[   88.702260][ T7789] netlink: 'syz.0.497': attribute type 12 has an invalid length.
[   88.820185][ T7812] netlink: 'syz.0.499': attribute type 2 has an invalid length.
[   89.180439][ T7849] lo speed is unknown, defaulting to 1000
[   89.321200][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'.
[   89.442472][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'.
[   89.445452][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'.
[   89.448416][ T7894] netlink: 'syz.2.509': attribute type 18 has an invalid length.
[   89.604862][ T7903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.609094][ T7903] syzkaller0: entered promiscuous mode
[   89.613898][ T7903] syzkaller0: entered allmulticast mode
[   89.623338][ T7903] tipc: Resetting bearer <eth:syzkaller0>
[   89.636399][ T7902] tipc: Resetting bearer <eth:syzkaller0>
[   89.651992][ T7902] tipc: Disabling bearer <eth:syzkaller0>
[   89.818944][ T7927] team0: No ports can be present during mode change
[   89.855812][ T7933] netlink: 'syz.0.519': attribute type 1 has an invalid length.
[   89.858295][ T7933] netlink: 'syz.0.519': attribute type 4 has an invalid length.
[   89.862726][ T7933] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.519'.
[   89.869928][ T7933] _Z`Ԁ@S!: entered promiscuous mode
[   89.882032][ T7933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   89.884649][ T7933] IPv6: NLM_F_CREATE should be set when creating new route
[   89.886818][ T7935] netlink: 'syz.2.521': attribute type 3 has an invalid length.
[   89.887059][ T7933] IPv6: NLM_F_CREATE should be set when creating new route
[   89.894065][ T7933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   89.920431][ T7937] lo speed is unknown, defaulting to 1000
[   90.054483][ T7943] lo speed is unknown, defaulting to 1000
[   90.166887][ T7937] netlink: 76 bytes leftover after parsing attributes in process `syz.1.522'.
[   90.316621][ T7943] netlink: 'syz.0.524': attribute type 2 has an invalid length.
[   90.449222][ T7958] 8021q: adding VLAN 0 to HW filter on device bond3
[   90.467059][ T7957] bond3: (slave gretap2): making interface the new active one
[   90.473960][ T7957] bond3: (slave gretap2): Enslaving as an active interface with an up link
[   90.493505][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'.
[   90.506040][ T7957] macsec2: entered promiscuous mode
[   90.507854][ T7957] bond0: entered promiscuous mode
[   90.509488][ T7957] ip6gretap1: entered promiscuous mode
[   90.515029][ T7957] bond0: left promiscuous mode
[   90.517183][ T7957] ip6gretap1: left promiscuous mode
[   90.562366][ T7968] tipc: Resetting bearer <eth:team0>
[   90.565450][ T7968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.596368][ T7968] lo speed is unknown, defaulting to 1000
[   90.603441][ T7970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.606076][ T7970] syzkaller0: entered promiscuous mode
[   90.607979][ T7970] syzkaller0: entered allmulticast mode
[   90.663765][ T7969] tipc: Resetting bearer <eth:syzkaller0>
[   90.688894][ T7969] tipc: Disabling bearer <eth:syzkaller0>
[   90.948134][ T7981] lo speed is unknown, defaulting to 1000
[   91.247131][ T7995] lo speed is unknown, defaulting to 1000
[   91.643631][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'.
[   91.706244][ T8014] team0: Device ipip0 is up. Set it down before adding it as a team port
[   91.740661][ T8010] lo speed is unknown, defaulting to 1000
[   91.992303][ T8034] "syz.2.548" (8034) uses obsolete ecb(arc4) skcipher
[   92.117560][ T8043] team0: Port device geneve0 removed
[   92.122378][ T8043] bond2: (slave batadv1): Releasing active interface
[   92.139924][ T5873] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.150984][ T5873] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.153665][ T5873] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.156415][ T5873] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.159816][ T7239] tipc: Resetting bearer <eth:team0>
[   92.167999][ T8043] team0: Mode changed to "broadcast"
[   92.177997][ T8043] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[   92.407640][ T8063] validate_nla: 7 callbacks suppressed
[   92.407650][ T8063] netlink: 'syz.1.557': attribute type 1 has an invalid length.
[   92.451061][ T8066] tipc: MTU too low for tipc bearer
[   92.829395][ T8082] netlink: 'syz.0.563': attribute type 3 has an invalid length.
[   93.107374][ T8090] netlink: 'syz.0.565': attribute type 4 has an invalid length.
[   93.108174][ T8091] netlink: 'syz.0.565': attribute type 4 has an invalid length.
[   93.115108][ T8090] netlink: 'syz.0.565': attribute type 4 has an invalid length.
[   94.013197][ T8133] lo speed is unknown, defaulting to 1000
[   94.309305][ T8139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.312523][ T8139] syzkaller0: entered promiscuous mode
[   94.314286][ T8139] syzkaller0: entered allmulticast mode
[   94.316868][ T8141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   94.330323][ T8141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   94.334220][ T8141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   94.336759][ T8141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   94.339804][ T8141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   94.344462][ T8141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   94.347044][ T8141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   94.350950][ T8141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   94.353601][ T8141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   94.356508][ T8141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   94.402977][ T8138] tipc: Resetting bearer <eth:syzkaller0>
[   94.424847][ T8138] tipc: Disabling bearer <eth:syzkaller0>
[   94.636958][ T8148] syzkaller0: entered promiscuous mode
[   94.638761][ T8148] syzkaller0: entered allmulticast mode
[   94.646427][ T8150] netlink: 'syz.1.582': attribute type 1 has an invalid length.
[   94.656090][ T8150] netlink: 'syz.1.582': attribute type 2 has an invalid length.
[   94.820698][ T8163] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[   94.828907][ T8163] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   94.883997][ T8167] syzkaller1: entered promiscuous mode
[   94.886133][ T8167] syzkaller1: entered allmulticast mode
[   95.008953][ T8171] __nla_validate_parse: 6 callbacks suppressed
[   95.008962][ T8171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.588'.
[   95.052665][ T8171] bond3: entered promiscuous mode
[   95.054565][ T8171] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.074030][ T8174] netlink: 48 bytes leftover after parsing attributes in process `syz.2.588'.
[   95.115627][ T8171] bond3 (unregistering): Released all slaves
[   95.212859][ T8177] netlink: 36 bytes leftover after parsing attributes in process `syz.0.587'.
[   95.222419][ T8177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.587'.
[   95.233096][ T8177] netlink: 36 bytes leftover after parsing attributes in process `syz.0.587'.
[   95.242669][ T8177] netlink: 36 bytes leftover after parsing attributes in process `syz.0.587'.
[   95.437359][ T8191] netlink: 'syz.2.592': attribute type 1 has an invalid length.
[   95.458073][ T8191] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.486111][ T8191] bond3: (slave veth5): Enslaving as an active interface with a down link
[   95.494769][ T8191] gretap1: entered promiscuous mode
[   95.499281][ T8191] bond3: (slave gretap1): making interface the new active one
[   95.503331][ T8191] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   95.516609][ T8191] macvlan2: entered promiscuous mode
[   95.519038][ T8191] macvlan2: entered allmulticast mode
[   95.522057][ T8191] bond3: entered promiscuous mode
[   95.525090][ T8191] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   95.528603][ T8191] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   95.537674][ T8191] bond3: left promiscuous mode
[   95.649903][ T8202] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[   95.657823][ T8202] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   95.663704][ T8202] netlink: 'syz.1.597': attribute type 12 has an invalid length.
[   95.723394][ T8206] netlink: 'syz.2.599': attribute type 4 has an invalid length.
[   95.774920][ T8206] lo speed is unknown, defaulting to 1000
[   95.986649][ T8220] lo speed is unknown, defaulting to 1000
[   96.124273][ T8239] tipc: Cannot configure node identity twice
[   96.167959][ T8227] lo speed is unknown, defaulting to 1000
[   96.496805][ T8262] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   96.501703][ T8262] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   96.635285][ T8268] lo speed is unknown, defaulting to 1000
[   96.854882][ T8272] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.615'.
[   97.068817][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'.
[   97.199754][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'.
[   97.226478][ T8281] syz_tun (unregistering): left allmulticast mode
[   97.467387][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.624'.
[   97.514047][ T8310] tipc: Resetting bearer <eth:team0>
[   97.542173][ T8312] gretap0: entered promiscuous mode
[   97.545789][ T8312] gretap0: left promiscuous mode
[   97.598998][ T8315] geneve1: Caught tx_queue_len zero misconfig
[   98.028738][ T8353] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   98.033702][ T8353] tipc: Enabled bearer <udp:syz0>, priority 10
[   98.086675][ T8364] ieee802154 phy0 wpan0: encryption failed: -22
[   98.097062][ T8366] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   98.594106][ T8401] tipc: Resetting bearer <eth:team0>
[   98.616191][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.620621][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.624105][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.627577][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.713618][ T8414] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   98.857522][ T8423] netlink: 'syz.2.657': attribute type 83 has an invalid length.
[   99.040381][   T10] tipc: Node number set to 2827595619
[   99.044039][ T8437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.047384][ T8437] syzkaller0: entered promiscuous mode
[   99.051792][ T8437] syzkaller0: entered allmulticast mode
[   99.063225][ T8437] tipc: Resetting bearer <eth:syzkaller0>
[   99.070812][ T8443] netlink: 'syz.1.663': attribute type 1 has an invalid length.
[   99.074385][ T8437] tipc: Disabling bearer <eth:syzkaller0>
[   99.911005][ T8461] batman_adv: batadv0: Adding interface: ip6gretap1
[   99.913315][ T8461] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.924310][ T8461] batman_adv: batadv0: Interface activated: ip6gretap1
[   99.985865][ T8467] netlink: 'syz.0.670': attribute type 1 has an invalid length.
[  100.013751][ T8467] 8021q: adding VLAN 0 to HW filter on device bond3
[  100.037975][ T8467] bond3: (slave ip6gretap1): making interface the new active one
[  100.043739][ T8467] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  100.064799][ T8467] veth9: entered promiscuous mode
[  100.068691][ T8467] bond3: (slave veth9): Enslaving as an active interface with a down link
[  100.078057][ T8467] erspan0: entered allmulticast mode
[  100.083569][ T8467] bond3: (slave erspan0): Enslaving as an active interface with an up link
[  100.085437][ T8474] __nla_validate_parse: 14 callbacks suppressed
[  100.085446][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'.
[  100.114035][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'.
[  100.117316][ T8474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.154797][ T8480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.675'.
[  100.158480][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'.
[  100.169874][ T8474] bridge2: entered allmulticast mode
[  100.169969][ T8476] netlink: 'syz.1.674': attribute type 1 has an invalid length.
[  100.198034][ T8480] bond4: entered promiscuous mode
[  100.202586][ T8480] bond4: entered allmulticast mode
[  100.205195][ T8480] 8021q: adding VLAN 0 to HW filter on device bond4
[  100.208201][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'.
[  100.272705][ T8495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.678'.
[  100.322161][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.679'.
[  100.328338][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'.
[  100.362324][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'.
[  100.389705][ T8491] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  100.422395][ T8513] geneve4: entered promiscuous mode
[  100.493690][ T8518] can: request_module (can-proto-3) failed.
[  100.529490][ T8528] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.688'.
[  100.539053][ T8529] netlink: 'syz.0.687': attribute type 5 has an invalid length.
[  100.577283][   T98] block nbd1: Possible stuck request ffff8880220b0000: control (read@0,1024B). Runtime 30 seconds
[  100.582606][   T98] block nbd1: Possible stuck request ffff8880220b0200: control (read@1024,1024B). Runtime 30 seconds
[  100.586584][   T98] block nbd1: Possible stuck request ffff8880220b0400: control (read@2048,1024B). Runtime 30 seconds
[  100.591327][   T98] block nbd1: Possible stuck request ffff8880220b0600: control (read@3072,1024B). Runtime 30 seconds
[  100.819747][ T8549] lo speed is unknown, defaulting to 1000
[  101.507182][ T6307] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  101.509786][ T6307] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  101.521348][ T6307] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 7/9
[  101.526703][ T6307] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[  101.709225][ T8586] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.742199][ T8578] pim6reg: entered allmulticast mode
[  101.744423][ T8581] pim6reg: left allmulticast mode
[  101.828054][ T8578] pim6reg: entered allmulticast mode
[  101.916137][ T8595] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  101.921580][ T8595] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  101.926252][ T8595] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  102.060680][ T8604] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  102.064267][ T8604] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  102.658878][ T8607] lo speed is unknown, defaulting to 1000
[  103.213107][ T8631] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  103.285495][ T8637] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  103.289860][ T8637] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  103.335179][ T8637] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  103.339067][ T8637] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  103.351161][ T8643] syzkaller1: entered promiscuous mode
[  103.353078][ T8643] syzkaller1: entered allmulticast mode
[  103.389600][ T8637] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  103.393304][ T8637] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  103.493442][ T8637] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  103.497298][ T8637] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  103.628649][ T5716] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.639484][ T5716] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  103.676067][ T5716] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.678978][ T5716] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  103.686717][ T5716] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.689999][ T5716] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  103.701961][ T5873] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.704886][ T5873] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  103.809164][ T8683] netlink: 'syz.2.732': attribute type 3 has an invalid length.
[  103.813716][ T8683] netlink: 'syz.2.732': attribute type 3 has an invalid length.
[  103.943280][ T8698] sctp: [Deprecated]: syz.2.736 (pid 8698) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.943280][ T8698] Use struct sctp_sack_info instead
[  103.953172][ T8699] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  103.956672][ T8699] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  104.175615][ T8714] lo speed is unknown, defaulting to 1000
[  104.346750][ T8714] dvmrp1: entered allmulticast mode
[  104.515641][ T8723] dvmrp1: left allmulticast mode
[  104.634080][ T8724] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.634606][ T8726] netlink: 'syz.1.743': attribute type 11 has an invalid length.
[  104.637983][ T8724] 8021q: adding VLAN 0 to HW filter on device team0
[  104.642522][ T8724] tipc: Resetting bearer <eth:team0>
[  104.644844][ T8724] tipc: Resetting bearer <eth:team0>
[  104.648080][ T8724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.853101][ T8751] netlink: 'syz.2.751': attribute type 1 has an invalid length.
[  104.978836][ T8759] tbf_change: 23 callbacks suppressed
[  104.978849][ T8759] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  105.129761][ T8770] lo speed is unknown, defaulting to 1000
[  106.205073][ T8796] lo speed is unknown, defaulting to 1000
[  106.365716][ T8809] netlink: 'syz.1.770': attribute type 29 has an invalid length.
[  106.369671][ T8808] netlink: 'syz.1.770': attribute type 29 has an invalid length.
[  106.374123][ T8808] __nla_validate_parse: 22 callbacks suppressed
[  106.374132][ T8808] netlink: 596 bytes leftover after parsing attributes in process `syz.1.770'.
[  106.385346][ T8808] netlink: 60 bytes leftover after parsing attributes in process `syz.1.770'.
[  106.388989][ T8809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.770'.
[  106.523709][ T8819] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  106.526278][ T8819] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  106.843925][ T8844] syzkaller1: entered allmulticast mode
[  106.849849][ T8844] syzkaller1: left allmulticast mode
[  107.013478][ T8854] netlink: 'syz.0.782': attribute type 5 has an invalid length.
[  107.017556][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.782'.
[  107.302292][ T8861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.784'.
[  107.349614][ T8864] pim6reg1: entered promiscuous mode
[  107.352083][ T8864] pim6reg1: entered allmulticast mode
[  107.467443][ T8865] netlink: 32 bytes leftover after parsing attributes in process `syz.1.785'.
[  107.493661][ T8865] 8021q: adding VLAN 0 to HW filter on device bond4
[  107.497144][ T8865] bond4: entered promiscuous mode
[  107.499855][ T8865] team0: Port device bond4 added
[  107.558047][ T8868] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  107.607879][ T8870] netlink: 'syz.1.787': attribute type 1 has an invalid length.
[  107.613143][ T8870] netlink: 88 bytes leftover after parsing attributes in process `syz.1.787'.
[  107.619775][ T8870] netlink: 'syz.1.787': attribute type 8 has an invalid length.
[  107.624109][ T8870] netlink: 52 bytes leftover after parsing attributes in process `syz.1.787'.
[  107.672166][ T8879] netlink: 256 bytes leftover after parsing attributes in process `syz.2.790'.
[  107.675567][ T8879] unsupported nlmsg_type 40
[  108.261332][ T8916] netlink: 27 bytes leftover after parsing attributes in process `syz.0.801'.
[  108.634787][ T8933] tap0: tun_chr_ioctl cmd 1074025675
[  108.636611][ T8933] tap0: persist disabled
[  109.291462][ T8977] pimreg: entered allmulticast mode
[  109.295154][ T8977] pimreg: left allmulticast mode
[  109.382620][ T8977] bond4: entered promiscuous mode
[  109.384998][ T8977] bond4: entered allmulticast mode
[  109.387592][ T8977] 8021q: adding VLAN 0 to HW filter on device bond4
[  109.463589][ T8983] netlink: 'syz.2.820': attribute type 10 has an invalid length.
[  109.468747][ T8983] syzkaller0 speed is unknown, defaulting to 1000
[  109.473126][ T8983] syzkaller0 speed is unknown, defaulting to 1000
[  109.476069][ T8983] syzkaller0 speed is unknown, defaulting to 1000
[  109.483200][ T8983] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  109.493124][ T8983] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  109.508542][ T8983] syzkaller0 speed is unknown, defaulting to 1000
[  109.512628][ T8983] syzkaller0 speed is unknown, defaulting to 1000
[  109.516816][ T8983] syzkaller0 speed is unknown, defaulting to 1000
[  109.559382][ T8985] ip6tnl1: entered allmulticast mode
[  109.907398][ T9013] netlink: 'syz.1.828': attribute type 1 has an invalid length.
[  110.228145][ T9027] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  110.836944][ T9058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.844188][ T9058] netlink: 'syz.2.841': attribute type 1 has an invalid length.
[  110.959911][ T9063] netlink: 'syz.1.843': attribute type 1 has an invalid length.
[  110.982805][ T9063] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  111.107247][ T9069] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1
[  111.564390][ T9094] __nla_validate_parse: 12 callbacks suppressed
[  111.564399][ T9094] netlink: 76 bytes leftover after parsing attributes in process `syz.1.850'.
[  112.271912][ T9108] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  112.291444][ T9108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  112.353752][ T9114] netlink: 80 bytes leftover after parsing attributes in process `syz.0.857'.
[  112.357919][ T9114] netlink: 80 bytes leftover after parsing attributes in process `syz.0.857'.
[  112.428998][ T9123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.856'.
[  112.434821][ T9123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.856'.
[  112.438869][ T9123] netlink: 47 bytes leftover after parsing attributes in process `syz.1.856'.
[  112.447404][ T9122] netlink: 64 bytes leftover after parsing attributes in process `syz.2.859'.
[  112.452576][ T9122] tipc: Resetting bearer <eth:team0>
[  112.566691][ T9130] lo speed is unknown, defaulting to 1000
[  112.569604][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'.
[  112.687078][ T9138] IPVS: persistence engine module ip_vs_pe_ not found
[  112.688801][ T9130] syzkaller0 speed is unknown, defaulting to 1000
[  113.247734][ T9146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.866'.
[  113.273909][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'.
[  113.615614][ T9156] bond3: (slave veth5): Releasing active interface
[  113.618128][ T9156] bond3: (slave veth5): the permanent HWaddr of slave - 2a:7f:13:55:74:79 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  113.630987][ T9156] bond3: (slave gretap1): Releasing active interface
[  113.634780][ T9156] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  113.637412][ T9156] batman_adv: batadv0: Removing interface: ip6gretap1
[  113.696517][ T9157] netlink: 'syz.2.870': attribute type 10 has an invalid length.
[  113.705360][ T9157] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.708488][ T9157] bond0: (slave wlan1): Opening slave failed
[  114.218438][ T9188] bridge: RTM_NEWNEIGH with invalid ether address
[  114.260998][ T9190] netlink: 'syz.0.878': attribute type 1 has an invalid length.
[  114.297641][ T9190] 8021q: adding VLAN 0 to HW filter on device bond5
[  114.348164][ T9197] !: renamed from dummy0 (while UP)
[  114.392597][ T9206] netlink: 'syz.0.882': attribute type 1 has an invalid length.
[  114.395247][ T9206] netlink: 'syz.0.882': attribute type 4 has an invalid length.
[  114.398313][ T9206] netlink: 'syz.0.882': attribute type 1 has an invalid length.
[  114.401049][ T9206] netlink: 'syz.0.882': attribute type 4 has an invalid length.
[  114.403915][ T9206] netlink: 'syz.0.882': attribute type 1 has an invalid length.
[  114.505258][ T9218] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.587561][ T9227] tc_dump_action: action bad kind
[  114.635715][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.653760][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.325115][ T9243] validate_nla: 62 callbacks suppressed
[  115.325124][ T9243] netlink: 'syz.0.894': attribute type 4 has an invalid length.
[  115.337186][ T9243] netlink: 'syz.0.894': attribute type 4 has an invalid length.
[  115.642311][ T9254] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  115.646950][ T9254] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  115.705610][ T9254] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  115.710528][ T9254] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  115.758990][ T9254] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  115.762931][ T9254] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  115.787577][ T9270] netlink: 'syz.2.901': attribute type 1 has an invalid length.
[  115.817758][ T9254] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  115.822818][ T9254] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  115.883107][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  115.886155][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  115.897431][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  115.901445][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  115.912429][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  115.915305][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  115.929672][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  115.936994][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  116.280945][ T9301] sctp: [Deprecated]: syz.1.912 (pid 9301) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.280945][ T9301] Use struct sctp_sack_info instead
[  116.927054][ T9339] __nla_validate_parse: 51 callbacks suppressed
[  116.927064][ T9339] netlink: 120 bytes leftover after parsing attributes in process `syz.1.920'.
[  116.969964][ T9337] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  116.975673][ T9337] netlink: 'syz.2.919': attribute type 4 has an invalid length.
[  117.102423][ T9344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.205165][ T9353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.926'.
[  117.363383][ T9371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.930'.
[  117.685949][ T9388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.934'.
[  117.776587][ T9395] lo speed is unknown, defaulting to 1000
[  117.872185][ T9407] netlink: 76 bytes leftover after parsing attributes in process `syz.0.939'.
[  117.877341][ T9407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'.
[  117.988681][ T9414] Unsupported ieee802154 address type: 0
[  118.277966][ T9421] netlink: 284 bytes leftover after parsing attributes in process `syz.2.941'.
[  118.281530][ T9421] openvswitch: netlink: Flow key attr not present in new flow.
[  118.317780][ T9423] netlink: 'syz.2.942': attribute type 4 has an invalid length.
[  118.324215][ T9423] netlink: 'syz.2.942': attribute type 4 has an invalid length.
[  119.024904][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'.
[  119.049638][ T9441] team1: entered promiscuous mode
[  119.051958][ T9441] team1: entered allmulticast mode
[  119.200960][ T9444] xt_limit: Overflow, try lower: 271964/0
[  119.248421][ T9452] netlink: 'syz.0.950': attribute type 13 has an invalid length.
[  119.248448][ T9451] netlink: 'syz.0.950': attribute type 13 has an invalid length.
[  119.268948][ T9452] tipc: Resetting bearer <eth:team0>
[  119.291087][ T9451] tipc: Resetting bearer <eth:team0>
[  119.352323][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'.
[  119.439312][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.953'.
[  119.446530][ T9464] bond0: Caught tx_queue_len zero misconfig
[  119.657036][ T9489] lo speed is unknown, defaulting to 1000
[  119.952125][ T9510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.262161][ T9540] netlink: 'syz.0.974': attribute type 26 has an invalid length.
[  120.538103][ T9549] policy can only be matched on NF_INET_PRE_ROUTING
[  120.538120][ T9549] unable to load match
[  121.053982][ T9577] lo speed is unknown, defaulting to 1000
[  122.046615][ T9603] ip6tnl2: entered promiscuous mode
[  122.201769][ T9617] __nla_validate_parse: 13 callbacks suppressed
[  122.201778][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'.
[  122.228883][ T9622] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1002'.
[  122.230541][ T9625] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1003'.
[  122.235156][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'.
[  122.236896][ T9625] netlink: 'syz.2.1003': attribute type 1 has an invalid length.
[  122.258411][ T9625] 8021q: adding VLAN 0 to HW filter on device bond5
[  122.269345][ T9625] bond5: (slave gretap3): making interface the new active one
[  122.272494][ T9625] bond5: (slave gretap3): Enslaving as an active interface with an up link
[  122.276941][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1003'.
[  122.283629][ T9625] macsec1: entered promiscuous mode
[  122.285442][ T9625] bond0: entered promiscuous mode
[  122.288769][ T9625] bond0: left promiscuous mode
[  122.366675][ T9635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1005'.
[  122.399567][ T9640] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1006'.
[  122.427126][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'.
[  122.548988][ T9651] IPVS: set_ctl: invalid protocol: 60368 172.20.20.187:20001
[  122.640608][ T9651] nbd2: detected capacity change from 0 to 127
[  122.645802][   T56] block nbd2: Receive control failed (result -104)
[  122.752323][ T9654] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1010'.
[  122.784866][ T9656] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1011'.
[  122.807851][ T9656] 8021q: adding VLAN 0 to HW filter on device bond6
[  122.861306][ T9656] bond6 (unregistering): Released all slaves
[  123.266094][ T9682] lo speed is unknown, defaulting to 1000
[  123.498489][ T9706] hsr_slave_0: left promiscuous mode
[  123.573387][ T9710] netlink: 'syz.2.1028': attribute type 15 has an invalid length.
[  123.592147][ T9712] netlink: 'syz.0.1029': attribute type 7 has an invalid length.
[  123.604897][ T9712] : entered promiscuous mode
[  123.801506][ T5847] Bluetooth: hci2: link tx timeout
[  123.803665][ T5847] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.074754][ T9736] netlink: 'syz.2.1036': attribute type 1 has an invalid length.
[  124.112079][ T9736] 8021q: adding VLAN 0 to HW filter on device bond6
[  124.121325][ T9736] ipvlan2: entered allmulticast mode
[  124.123095][ T9736] bond6: entered allmulticast mode
[  124.141081][ T9736] bond6: (slave gretap4): making interface the new active one
[  124.143614][ T9736] gretap4: entered allmulticast mode
[  124.146119][ T9736] bond6: (slave gretap4): Enslaving as an active interface with an up link
[  124.247070][ T9746] lo: Caught tx_queue_len zero misconfig
[  124.440267][ T5847] Bluetooth: hci2: link tx timeout
[  124.442520][ T5847] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.449105][ T9753] veth7: entered promiscuous mode
[  124.750860][ T9757] netlink: 'syz.0.1042': attribute type 1 has an invalid length.
[  124.754060][ T9757] netlink: 'syz.0.1042': attribute type 1 has an invalid length.
[  124.828214][ T9757] netlink: 'syz.0.1042': attribute type 1 has an invalid length.
[  124.859770][ T9757] 8021q: adding VLAN 0 to HW filter on device bond6
[  124.864761][ T9757] netlink: 'syz.0.1042': attribute type 1 has an invalid length.
[  124.868928][ T9757] netlink: 'syz.0.1042': attribute type 1 has an invalid length.
[  124.873162][ T9757] netlink: 'syz.0.1042': attribute type 1 has an invalid length.
[  125.207311][ T9777] lo speed is unknown, defaulting to 1000
[  125.475042][ T9800] geneve5: entered promiscuous mode
[  125.476840][ T9800] geneve5: entered allmulticast mode
[  125.479573][ T5873] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 36316 - 0
[  125.485985][ T5873] netdevsim netdevsim1 eth0: set [1, 3] type 2 family 0 port 57305 - 0
[  125.488760][ T5873] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 36316 - 0
[  125.492109][ T5873] netdevsim netdevsim1 eth1: set [1, 3] type 2 family 0 port 57305 - 0
[  125.509742][ T5873] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 36316 - 0
[  125.514321][ T5873] netdevsim netdevsim1 eth2: set [1, 3] type 2 family 0 port 57305 - 0
[  125.547571][ T5873] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 36316 - 0
[  125.550878][ T5873] netdevsim netdevsim1 eth3: set [1, 3] type 2 family 0 port 57305 - 0
[  125.812591][ T9822] raw_sendmsg: syz.1.1059 forgot to set AF_INET. Fix it!
[  125.843048][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[  126.116219][ T9852] sit1: entered promiscuous mode
[  126.143087][ T9854] lo speed is unknown, defaulting to 1000
[  126.295346][ T9866] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.311097][ T9866] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  126.578952][ T9880] lo speed is unknown, defaulting to 1000
[  126.892994][ T9904] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  127.179786][ T9911] 8021q: adding VLAN 0 to HW filter on device bond7
[  127.448364][ T9917] __nla_validate_parse: 23 callbacks suppressed
[  127.448374][ T9917] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.1087'.
[  127.575678][ T9922] validate_nla: 66 callbacks suppressed
[  127.575687][ T9922] netlink: 'syz.1.1089': attribute type 1 has an invalid length.
[  127.586125][ T9922] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1089'.
[  127.592020][ T9922] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1089'.
[  127.661462][ T9923] 8021q: adding VLAN 0 to HW filter on device bond5
[  127.898784][ T9930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1091'.
[  128.468252][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'.
[  128.528180][ T9947] sctp: [Deprecated]: syz.1.1098 (pid 9947) Use of int in max_burst socket option deprecated.
[  128.528180][ T9947] Use struct sctp_assoc_value instead
[  128.644602][ T9954] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1100'.
[  128.648684][ T9955] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1100'.
[  128.656485][ T9955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1100'.
[  128.658389][ T9914] Set syz1 is full, maxelem 65536 reached
[  128.662811][ T9954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1100'.
[  128.761906][ T9966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.765298][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'.
[  129.217247][ T9994] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  129.251917][ T9996] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  129.324584][T10001] tc_dump_action: action bad kind
[  129.970030][T10020] netlink: 'syz.1.1120': attribute type 11 has an invalid length.
[  130.040666][ T5296] udevd[5296]: worker [5846] /devices/virtual/block/nbd1 is taking a long time
[  130.072109][T10025] netlink: 'syz.1.1121': attribute type 10 has an invalid length.
[  130.309420][T10035] openvswitch: netlink: Message has 24 unknown bytes.
[  130.313281][T10035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.650628][   T98] block nbd1: Possible stuck request ffff8880220b0000: control (read@0,1024B). Runtime 60 seconds
[  130.654281][   T98] block nbd1: Possible stuck request ffff8880220b0200: control (read@1024,1024B). Runtime 60 seconds
[  130.658045][   T98] block nbd1: Possible stuck request ffff8880220b0400: control (read@2048,1024B). Runtime 60 seconds
[  130.661777][   T98] block nbd1: Possible stuck request ffff8880220b0600: control (read@3072,1024B). Runtime 60 seconds
[  131.458079][T10093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.531645][T10095] geneve6: entered promiscuous mode
[  131.533438][T10095] geneve6: entered allmulticast mode
[  131.536091][ T5909] lo speed is unknown, defaulting to 1000
[  131.539119][T10101] netlink: 'syz.2.1141': attribute type 4 has an invalid length.
[  131.542237][ T5909] syz0: Port: 1 Link DOWN
[  131.546761][ T5716] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  131.558963][ T5716] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  131.566956][ T5716] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 36316 - 0
[  131.577841][ T5716] netdevsim netdevsim1 eth0: unset [1, 3] type 2 family 0 port 57305 - 0
[  131.580960][ T5716] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  131.583753][ T5716] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  131.586981][ T5716] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 36316 - 0
[  131.589801][ T5716] netdevsim netdevsim1 eth1: unset [1, 3] type 2 family 0 port 57305 - 0
[  131.598091][ T5909] lo speed is unknown, defaulting to 1000
[  131.606889][T10111] netlink: 'syz.1.1143': attribute type 6 has an invalid length.
[  131.610267][ T5716] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  131.613601][ T5716] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  131.616985][ T5716] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 36316 - 0
[  131.621028][T10111] netlink: 'syz.1.1143': attribute type 5 has an invalid length.
[  131.627854][ T5716] netdevsim netdevsim1 eth2: unset [1, 3] type 2 family 0 port 57305 - 0
[  131.635114][ T5716] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  131.638502][ T5716] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  131.642105][ T5716] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 36316 - 0
[  131.645821][ T5716] netdevsim netdevsim1 eth3: unset [1, 3] type 2 family 0 port 57305 - 0
[  131.649514][ T5716] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  131.662184][ T5716] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  131.665037][ T5716] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  131.667807][ T5716] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  131.713874][T10121] netlink: 'syz.1.1146': attribute type 1 has an invalid length.
[  131.745932][T10121] 8021q: adding VLAN 0 to HW filter on device bond6
[  131.758037][T10128] netlink: 'syz.1.1146': attribute type 1 has an invalid length.
[  131.887649][T10153] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  131.921633][T10150] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2
[  131.957172][T10161] netlink: 'syz.2.1157': attribute type 1 has an invalid length.
[  132.000548][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[  132.087956][T10170] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  132.193049][T10183] bridge8: entered promiscuous mode
[  132.195366][T10183] bridge8: entered allmulticast mode
[  132.229428][T10186] openvswitch: netlink: Flow key attr not present in new flow.
[  132.233546][T10185] delete_channel: no stack
[  132.288477][T10191] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  132.299858][T10195] team0: Device gtp0 is of different type
[  132.466646][T10213] __nla_validate_parse: 21 callbacks suppressed
[  132.466656][T10213] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1173'.
[  132.473472][T10213] 8021q: VLANs not supported on ipvlan1
[  132.484716][T10213] macsec2: entered promiscuous mode
[  132.487040][T10213] macsec2: entered allmulticast mode
[  132.516180][T10217] syzkaller1: entered promiscuous mode
[  132.519470][T10217] syzkaller1: entered allmulticast mode
[  132.568733][T10223] lo speed is unknown, defaulting to 1000
[  132.696878][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1178'.
[  132.743336][T10223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1177'.
[  132.747888][T10223] netlink: 'syz.1.1177': attribute type 13 has an invalid length.
[  132.751635][T10223] netlink: 'syz.1.1177': attribute type 17 has an invalid length.
[  132.759192][T10223] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  132.832064][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'.
[  133.526842][T10250] netlink: 'syz.0.1183': attribute type 2 has an invalid length.
[  133.530336][T10250] netlink: 'syz.0.1183': attribute type 2 has an invalid length.
[  133.533804][T10250] netlink: 'syz.0.1183': attribute type 2 has an invalid length.
[  133.537186][T10250] netlink: 'syz.0.1183': attribute type 2 has an invalid length.
[  133.542622][T10250] netlink: 'syz.0.1183': attribute type 2 has an invalid length.
[  133.546152][T10250] netlink: 'syz.0.1183': attribute type 2 has an invalid length.
[  133.549546][T10250] netlink: 'syz.0.1183': attribute type 2 has an invalid length.
[  133.553405][T10250] netlink: 'syz.0.1183': attribute type 2 has an invalid length.
[  133.767936][T10260] bond5: (slave gretap3): Releasing active interface
[  133.780634][T10260] bond6: (slave gretap4): Releasing active interface
[  133.783564][T10260] gretap4: left allmulticast mode
[  133.798456][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'.
[  134.693513][T10272] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1191'.
[  134.729869][T10280] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.807831][T10290] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  134.870632][ T5716] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  134.879646][T10295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1198'.
[  134.964630][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'.
[  135.047995][T10309] IPVS: Scheduler module ip_vs_sip not found
[  135.085922][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'.
[  135.104984][T10323] ip6tnl2: entered promiscuous mode
[  135.108045][T10323] ip6tnl2: entered allmulticast mode
[  135.113523][T10323] team0: Device ip6tnl2 is of different type
[  135.138652][T10320] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1204'.
[  135.194455][T10327] syz_tun: entered allmulticast mode
[  135.270792][T10327] erspan0: left allmulticast mode
[  135.302349][T10327] tipc: Resetting bearer <eth:team0>
[  135.311732][T10327] vlan0: left promiscuous mode
[  135.319703][T10327] veth7: left promiscuous mode
[  135.324787][T10327] geneve2: left promiscuous mode
[  135.326592][T10327] geneve2: left allmulticast mode
[  135.334628][T10327] geneve3: left promiscuous mode
[  135.343589][T10327] macsec0: left allmulticast mode
[  135.345417][T10327] macsec0: left promiscuous mode
[  135.347314][T10327] macsec1: left promiscuous mode
[  135.349185][T10327] macsec1: left allmulticast mode
[  135.356625][T10327] bridge4: left allmulticast mode
[  135.368692][T10327] veth9: left promiscuous mode
[  135.371546][T10327] bond4: left promiscuous mode
[  135.373175][T10327] bond4: left allmulticast mode
[  135.402913][T10327] team1: left promiscuous mode
[  135.404731][T10327] team1: left allmulticast mode
[  135.412856][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.416479][   T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 19999 - 0
[  135.421285][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.424755][   T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 19999 - 0
[  135.448309][T10334] 8021q: adding VLAN 0 to HW filter on device bond7
[  135.452387][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.455136][   T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 19999 - 0
[  135.459126][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.463878][   T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 19999 - 0
[  135.617514][T10348] 8021q: adding VLAN 0 to HW filter on device bond8
[  135.620798][T10351] vlan0: entered promiscuous mode
[  135.636396][T10348] 8021q: adding VLAN 0 to HW filter on device bond8
[  135.639292][T10348] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  135.643708][T10348] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  135.684068][T10355] veth11: entered promiscuous mode
[  135.687469][T10355] bond8: (slave veth11): Enslaving as an active interface with a down link
[  135.726991][T10363] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  135.736441][T10364] only policy match revision 0 supported
[  135.736450][T10364] unable to load match
[  135.840441][T10372] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  135.873642][T10372] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  135.934317][T10372] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  135.974175][T10372] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  136.063773][ T5873] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  136.066769][ T5873] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  136.088068][ T5873] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  136.097719][ T5873] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  136.998374][T10428] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.065324][T10432] team0: Unable to change to the same mode the team is in
[  137.117227][T10436] sctp: [Deprecated]: syz.2.1237 (pid 10436) Use of int in maxseg socket option.
[  137.117227][T10436] Use struct sctp_assoc_value instead
[  137.802577][T10447] tunl0: Caught tx_queue_len zero misconfig
[  137.843596][T10451] __nla_validate_parse: 6 callbacks suppressed
[  137.843606][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1241'.
[  137.853274][T10451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1241'.
[  137.902609][T10455] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1244'.
[  137.917685][T10457] lo speed is unknown, defaulting to 1000
[  137.932204][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1246'.
[  137.935935][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1246'.
[  137.972395][T10463] netlink: zone id is out of range
[  137.974348][T10463] netlink: zone id is out of range
[  137.976346][T10463] netlink: zone id is out of range
[  137.978243][T10463] netlink: zone id is out of range
[  137.980025][T10463] netlink: zone id is out of range
[  137.982138][T10463] netlink: zone id is out of range
[  137.984171][T10463] netlink: zone id is out of range
[  137.985987][T10463] netlink: zone id is out of range
[  137.987975][T10463] netlink: zone id is out of range
[  137.993123][T10463] netlink: zone id is out of range
[  138.094950][T10474] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1251'.
[  138.097958][T10474] netem: invalid attributes len -16
[  138.099836][T10474] netem: change failed
[  138.140342][T10472] nbd3: detected capacity change from 0 to 127
[  138.144822][   T56] block nbd3: Receive control failed (result -32)
[  138.145772][ T6516] block nbd3: Send control failed (result -32)
[  138.149357][ T6516] block nbd3: Request send failed, requeueing
[  138.160392][ T6516] block nbd3: Dead connection, failed to find a fallback
[  138.165267][   T61] block nbd3: Dead connection, failed to find a fallback
[  138.168292][   T61] block nbd3: shutting down sockets
[  138.172649][   T61] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.176767][   T61] Buffer I/O error on dev nbd3, logical block 0, async page read
[  138.180915][ T6516] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.187991][ T6516] Buffer I/O error on dev nbd3, logical block 1, async page read
[  138.194443][ T6516] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.198370][ T6516] Buffer I/O error on dev nbd3, logical block 2, async page read
[  138.202926][ T6516] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.207646][ T6516] Buffer I/O error on dev nbd3, logical block 3, async page read
[  138.211553][ T6516] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.215399][ T6516] Buffer I/O error on dev nbd3, logical block 0, async page read
[  138.218924][ T6516] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.230664][ T6516] Buffer I/O error on dev nbd3, logical block 1, async page read
[  138.234270][ T6516] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.238088][ T6516] Buffer I/O error on dev nbd3, logical block 2, async page read
[  138.245722][ T6516] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.249466][ T6516] Buffer I/O error on dev nbd3, logical block 3, async page read
[  138.256098][ T6516] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.261110][ T6516] Buffer I/O error on dev nbd3, logical block 0, async page read
[  138.264554][ T6516] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.271793][ T6516] Buffer I/O error on dev nbd3, logical block 1, async page read
[  138.276775][T10487] validate_nla: 15 callbacks suppressed
[  138.276784][T10487] netlink: 'syz.2.1256': attribute type 4 has an invalid length.
[  138.284699][ T6516] ldm_validate_partition_table(): Disk read failed.
[  138.292959][T10488] netlink: 'syz.2.1256': attribute type 4 has an invalid length.
[  138.297051][ T6516] Dev nbd3: unable to read RDB block 0
[  138.307172][ T6516]  nbd3: unable to read partition table
[  138.323349][ T6516] ldm_validate_partition_table(): Disk read failed.
[  138.337214][ T6516] Dev nbd3: unable to read RDB block 0
[  138.357445][ T6516]  nbd3: unable to read partition table
[  138.473865][T10493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  138.578109][T10513] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  138.586025][T10514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1263'.
[  138.759742][T10532] netlink: 'syz.0.1268': attribute type 4 has an invalid length.
[  138.767258][T10534] netlink: 'syz.1.1269': attribute type 4 has an invalid length.
[  138.773034][T10534] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1269'.
[  138.776634][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'.
[  138.787826][ T5873] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  138.787919][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'.
[  138.793840][T10536] netlink: 'syz.2.1270': attribute type 1 has an invalid length.
[  138.818849][T10536] bond7: entered promiscuous mode
[  138.821992][T10536] 8021q: adding VLAN 0 to HW filter on device bond7
[  138.834044][T10536] 8021q: adding VLAN 0 to HW filter on device bond7
[  138.836401][T10536] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[  138.843094][T10536] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  138.853750][T10536] bond7: (slave wireguard0): making interface the new active one
[  138.856321][T10536] wireguard0: entered promiscuous mode
[  138.858873][T10536] bond7: (slave wireguard0): Enslaving as an active interface with an up link
[  138.862825][ T5873] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  138.865569][ T5873] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  138.868246][ T5873] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  138.885855][T10536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  138.888317][T10536] IPv6: NLM_F_CREATE should be set when creating new route
[  138.890856][T10536] IPv6: NLM_F_CREATE should be set when creating new route
[  138.893568][T10536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  138.903228][T10536] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address
[  138.909329][T10536] bond7: (slave wireguard1): Enslaving as a backup interface with an up link
[  138.967749][T10560] lo speed is unknown, defaulting to 1000
[  139.220201][T10570] nbd4: detected capacity change from 0 to 127
[  139.225625][   T57] block nbd4: Receive control failed (result -32)
[  139.229272][ T6516] block nbd4: Dead connection, failed to find a fallback
[  139.232815][ T6516] block nbd4: shutting down sockets
[  139.236263][ T6516] ldm_validate_partition_table(): Disk read failed.
[  139.239871][ T6516] Dev nbd4: unable to read RDB block 0
[  139.276249][ T6516]  nbd4: unable to read partition table
[  139.292826][ T6516] ldm_validate_partition_table(): Disk read failed.
[  139.302953][ T6516] Dev nbd4: unable to read RDB block 0
[  139.331405][ T6516]  nbd4: unable to read partition table
[  139.632703][T10586] netlink: 'syz.1.1283': attribute type 4 has an invalid length.
[  139.676812][T10588] syzkaller1: entered promiscuous mode
[  139.678788][T10588] syzkaller1: entered allmulticast mode
[  139.789965][T10592] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.793406][T10592] syzkaller0: entered promiscuous mode
[  139.795336][T10592] syzkaller0: entered allmulticast mode
[  139.821287][T10592] tipc: Resetting bearer <eth:syzkaller0>
[  139.875359][T10591] tipc: Resetting bearer <eth:syzkaller0>
[  139.885789][T10591] tipc: Disabling bearer <eth:syzkaller0>
[  140.127787][T10615] pimreg: entered allmulticast mode
[  140.131907][T10615] syz_tun: left allmulticast mode
[  140.133778][T10615] pimreg: left allmulticast mode
[  140.211968][T10624] bond8: entered promiscuous mode
[  140.213680][T10624] bond8: entered allmulticast mode
[  140.215698][T10624] 8021q: adding VLAN 0 to HW filter on device bond8
[  140.235988][T10630] netem: unknown loss type 12
[  140.237813][T10630] netem: change failed
[  140.273433][T10621] ip6tnl0: entered allmulticast mode
[  140.585430][T10649] lo speed is unknown, defaulting to 1000
[  141.033968][T10671] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.037615][T10671] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  141.053626][T10669] rdma_rxe: rxe_newlink: failed to add lo
[  141.072438][T10669] 8021q: adding VLAN 0 to HW filter on device team0
[  141.074929][T10669] tipc: Resetting bearer <eth:team0>
[  141.077285][T10669] tipc: Resetting bearer <eth:team0>
[  141.094624][T10669] macvlan3: entered allmulticast mode
[  141.096880][T10669] veth1_vlan: entered allmulticast mode
[  141.104267][T10669] veth1_vlan: left allmulticast mode
[  141.141217][T10671] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.155380][T10671] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  141.210826][T10682] netlink: 'syz.0.1309': attribute type 28 has an invalid length.
[  141.229209][T10671] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.237257][T10671] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  141.303321][T10671] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.306875][T10671] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  141.362990][ T7182] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.365825][ T7182] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  141.387791][ T7182] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.391496][ T7182] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  141.405751][ T5873] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.409197][ T5873] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  141.422868][ T5873] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.426404][ T5873] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  141.708561][T10704] netlink: 'syz.1.1314': attribute type 13 has an invalid length.
[  141.719460][T10704] netlink: 'syz.1.1314': attribute type 17 has an invalid length.
[  141.765128][T10704] 8021q: adding VLAN 0 to HW filter on device team0
[  141.772897][   T47] lo speed is unknown, defaulting to 1000
[  141.778591][   T47] syz0: Port: 1 Link ACTIVE
[  141.781959][   T47] lo speed is unknown, defaulting to 1000
[  142.249969][T10732] netlink: 'syz.1.1323': attribute type 2 has an invalid length.
[  142.449819][T10738] delete_channel: no stack
[  142.838136][T10787] ip6tnl4: entered promiscuous mode
[  142.839938][T10787] ip6tnl4: entered allmulticast mode
[  142.843609][T10787] team0: Device ip6tnl4 is up. Set it down before adding it as a team port
[  143.024515][T10788] lo speed is unknown, defaulting to 1000
[  143.149714][T10797] lo speed is unknown, defaulting to 1000
[  143.255697][T10799] team0: Device gtp0 is of different type
[  143.509493][T10819] validate_nla: 65 callbacks suppressed
[  143.509502][T10819] netlink: 'syz.1.1348': attribute type 142 has an invalid length.
[  143.956887][T10852] __nla_validate_parse: 95 callbacks suppressed
[  143.956897][T10852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1359'.
[  144.251638][T10862] net_ratelimit: 19 callbacks suppressed
[  144.251652][T10862] openvswitch: netlink: Flow key attribute not present in set flow.
[  144.346267][T10865] netlink: 'syz.0.1364': attribute type 13 has an invalid length.
[  144.349634][T10865] netlink: 'syz.0.1364': attribute type 17 has an invalid length.
[  144.406420][T10865] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.413338][T10865] 8021q: adding VLAN 0 to HW filter on device team0
[  144.415765][T10865] tipc: Resetting bearer <eth:team0>
[  144.417892][T10865] tipc: Resetting bearer <eth:team0>
[  144.422253][T10865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.508049][T10869] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1365'.
[  144.676919][T10875] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1367'.
[  144.717872][T10878] macsec3: entered promiscuous mode
[  144.719713][T10878] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  144.728478][T10878] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  144.803918][T10883] syz_tun: entered allmulticast mode
[  144.947523][T10910] netlink: 'syz.1.1375': attribute type 1 has an invalid length.
[  144.966755][T10910] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  144.976429][T10916] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1377'.
[  145.018977][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'.
[  145.059364][T10920] netlink: 'syz.0.1378': attribute type 12 has an invalid length.
[  160.193651][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  160.197771][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  160.201389][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  160.205098][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  160.208426][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  160.337794][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  160.341308][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  160.344151][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  160.347069][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  160.349593][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  160.494546][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  160.497801][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  160.501027][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  160.503587][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  160.506322][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  162.240271][ T5847] Bluetooth: hci3: command tx timeout
[  162.400306][ T5847] Bluetooth: hci4: command tx timeout
[  162.560292][ T5847] Bluetooth: hci5: command tx timeout
[  164.320255][ T5847] Bluetooth: hci3: command tx timeout
[  164.480193][ T5847] Bluetooth: hci4: command tx timeout
[  164.640188][ T5847] Bluetooth: hci5: command tx timeout
[  166.400255][ T5847] Bluetooth: hci3: command tx timeout
[  166.560314][ T5847] Bluetooth: hci4: command tx timeout
[  166.720229][ T5847] Bluetooth: hci5: command tx timeout
[  168.480252][ T5847] Bluetooth: hci3: command tx timeout
[  168.640234][ T5847] Bluetooth: hci4: command tx timeout
[  168.800311][ T5847] Bluetooth: hci5: command tx timeout
[  175.602537][ T5847] Bluetooth: hci1: command 0x0406 tx timeout
[  184.545992][ T5296] udevd[5296]: worker [6514] /devices/virtual/block/nbd2 is taking a long time
[  221.612012][   T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  221.616391][   T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  221.621440][   T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  221.626882][   T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  221.630571][   T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  221.634234][   T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  221.637921][   T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  221.641788][   T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  221.645011][   T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  221.649618][   T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  221.654121][   T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  221.658005][   T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  221.661406][   T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  221.664918][   T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  221.701936][   T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  250.020073][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  250.022662][    C0] rcu: 	0-....: (1 GPs behind) idle=802c/1/0x4000000000000000 softirq=49103/49104 fqs=5248
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  250.028526][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  250.031258][    C0] rcu: 	 number:     5254          0            0
[  250.033819][    C0] rcu: 	cputime:      244          0        52232   ==> 52500(ms)
[  250.036945][    C0] rcu: 	(t=10502 jiffies g=27437 q=1480 ncpus=2)
[  250.039477][    C0] CPU: 0 UID: 0 PID: 10922 Comm: syz.2.1379 Not tainted syzkaller #0 PREEMPT(full) 
[  250.039490][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.039497][    C0] RIP: 0010:lock_is_held_type+0x137/0x190
[  250.039512][    C0] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 f9 63 26 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[  250.039521][    C0] RSP: 0018:ffffc90006496fc8 EFLAGS: 00000206
[  250.039532][    C0] RAX: 2aed4c9618aa1d00 RBX: 0000000000000001 RCX: 2aed4c9618aa1d00
[  250.039539][    C0] RDX: ffff8880209b1cc0 RSI: ffffffff8dba85e4 RDI: ffffffff8be33800
[  250.039546][    C0] RBP: 00000000ffffffff R08: ffff8880209b1cc0 R09: 0000000000000002
[  250.039553][    C0] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000246
[  250.039559][    C0] R13: ffff8880209b1cc0 R14: ffffffff8e139ee0 R15: 0000000000000002
[  250.039566][    C0] FS:  00007f268e97f6c0(0000) GS:ffff8880b8616000(0000) knlGS:0000000000000000
[  250.039574][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  250.039581][    C0] CR2: 0000001b32063fff CR3: 00000000339f4000 CR4: 00000000000006f0
[  250.039615][    C0] Call Trace:
[  250.039622][    C0]  <TASK>
[  250.039630][    C0]  qdisc_lookup_rcu+0x381/0x6d0
[  250.039647][    C0]  qdisc_tree_reduce_backlog+0x1b2/0x480
[  250.039659][    C0]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  250.039674][    C0]  pie_change+0x913/0xc40
[  250.039702][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  250.039717][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.039727][    C0]  ? __pfx_pie_change+0x10/0x10
[  250.039738][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  250.039759][    C0]  ? timer_init_key+0x171/0x2d0
[  250.039773][    C0]  ? __pfx_pie_init+0x10/0x10
[  250.039784][    C0]  pie_init+0x2a3/0x3f0
[  250.039797][    C0]  qdisc_create+0x7ac/0xea0
[  250.039815][    C0]  tc_modify_qdisc+0x1538/0x20e0
[  250.039838][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  250.039869][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  250.039880][    C0]  rtnetlink_rcv_msg+0x77c/0xb70
[  250.039893][    C0]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  250.039902][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  250.039910][    C0]  ? ref_tracker_free+0x63a/0x7d0
[  250.039924][    C0]  ? __asan_memcpy+0x40/0x70
[  250.039935][    C0]  ? __pfx_ref_tracker_free+0x10/0x10
[  250.039954][    C0]  netlink_rcv_skb+0x208/0x470
[  250.039965][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  250.039976][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  250.039993][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  250.040008][    C0]  netlink_unicast+0x82f/0x9e0
[  250.040068][    C0]  ? __pfx_netlink_unicast+0x10/0x10
[  250.040083][    C0]  ? netlink_sendmsg+0x642/0xb30
[  250.040091][    C0]  ? skb_put+0x11b/0x210
[  250.040105][    C0]  netlink_sendmsg+0x805/0xb30
[  250.040121][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.040133][    C0]  ? aa_sock_msg_perm+0xf1/0x1d0
[  250.040144][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  250.040155][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.040166][    C0]  __sock_sendmsg+0x21c/0x270
[  250.040182][    C0]  ____sys_sendmsg+0x505/0x830
[  250.040196][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  250.040214][    C0]  ? import_iovec+0x74/0xa0
[  250.040227][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  250.040240][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.040274][    C0]  ? __fget_files+0x2a/0x420
[  250.040283][    C0]  ? __fget_files+0x3a0/0x420
[  250.040299][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  250.040312][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  250.040330][    C0]  ? rcu_is_watching+0x15/0xb0
[  250.040344][    C0]  ? do_syscall_64+0xbe/0x3b0
[  250.040357][    C0]  do_syscall_64+0xfa/0x3b0
[  250.040366][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.040375][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.040385][    C0]  ? exc_page_fault+0x9f/0xf0
[  250.040396][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.040406][    C0] RIP: 0033:0x7f268db8ebe9
[  250.040417][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.040426][    C0] RSP: 002b:00007f268e97f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  250.040437][    C0] RAX: ffffffffffffffda RBX: 00007f268ddc5fa0 RCX: 00007f268db8ebe9
[  250.040444][    C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  250.040450][    C0] RBP: 00007f268dc11e19 R08: 0000000000000000 R09: 0000000000000000
[  250.040456][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.040462][    C0] R13: 00007f268ddc6038 R14: 00007f268ddc5fa0 R15: 00007ffcd0158da8
[  250.040480][    C0]  </TASK>
[  251.748445][ T5296] udevd[5296]: worker [5846] /devices/virtual/block/nbd1 timeout; kill it
[  251.752232][ T5296] udevd[5296]: seq 11015 '/devices/virtual/block/nbd1' killed

VM DIAGNOSIS:
02:15:57  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073f0
R8 =ffff888106c68237 R9 =1ffff11020d8d046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99aff8f4 R14=ffffffff99df4420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f268e97f6c0 ffffffff 00c00000
GS =0000 ffff8880b8616000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32063fff CR3=00000000339f4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f268dd97498 00007f268dd97470 XMM03=00007f268dd974a8 00007f268dd974a0
XMM04=00007f268e8fd100 00007f268dd97460 XMM05=00007f268dd97478 00007f268dd974c0
XMM06=00007f268dd974b8 00007f268dd974b0 XMM07=00007f268dd974a8 00007f268dd974a0
XMM08=0000000000000000 00007f268dc12ee7 XMM09=0000000000000000 00007f268dc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000080000000 RBX=ffffffff8b7ccb32 RCX=61c8864680b583eb RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8da09bc0 RBP=ffffc9000304f050 RSP=ffffc9000304ef80
R8 =ffffc9000304f0df R9 =0000000000000000 R10=ffffc9000304f0b8 R11=fffff52000609e1c
R12=dffffc0000000000 R13=ffff88811474e000 R14=0000000000000a02 R15=1ffff92000609df8
RIP=ffffffff8b7a5284 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6c2e6f7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f6c2db976c3 00007f6c2db976c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=7b8003087a800a05 7a8004000000003f XMM07=0002100000000000 018810000004128e
XMM08=0800000800010000 0808060a0000003e XMM09=6b5f5f2e636f6c6c 615f79656b5f7074
XMM10=3631306139666666 66666666660a7965 XMM11=6574756f725f7074 636d206220303438
XMM12=7574726976207374 6962203834202c6c XMM13=6d6567616e616d20 7265776f700a6c61
XMM14=6f72702f0000000d 00000a0a3a746e65 XMM15=000000060000006f 666e697570632f63
