last executing test programs:

29.843333317s ago: executing program 2 (id=318):
syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400000000003f00000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

29.623104123s ago: executing program 2 (id=322):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x800, 0xfb4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(r2, 0x1)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty=0x500}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0)

23.374228834s ago: executing program 2 (id=322):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x800, 0xfb4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(r2, 0x1)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty=0x500}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0)

17.673963102s ago: executing program 2 (id=322):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x800, 0xfb4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(r2, 0x1)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty=0x500}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0)

11.546123331s ago: executing program 2 (id=322):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x800, 0xfb4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(r2, 0x1)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty=0x500}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0)

5.497314282s ago: executing program 2 (id=322):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x800, 0xfb4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(r2, 0x1)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty=0x500}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0)

2.124429824s ago: executing program 1 (id=659):
bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f00000000c0)=0x4, 0x4)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(0xffffffffffffffff, 0x1)
unshare(0x62040200)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYRES32], 0x4c}}, 0x40)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28)
recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1}, 0xa}, {{0x0, 0x0, 0x0}, 0x8}], 0x47, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x10121, 0x0)
shutdown(r2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x1, 0x0, @empty}}, 0x5c)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00.', @ANYRES16=r5, @ANYBLOB="0100000000000000000006000009080004000a01010114000200000000000000000000000000000000012d00070073797374656d5f753a6f626a6563745f723a73797374656d5f63726f6e5f73706f6f6c5f743a73300000000014000300ff010000000000000000000000000001"], 0x74}, 0x2, 0x34005}, 0x24000080)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

778.437398ms ago: executing program 1 (id=667):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

713.041085ms ago: executing program 1 (id=668):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x3}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)

653.625148ms ago: executing program 1 (id=669):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000001030000000000000000850000008a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94)

652.139285ms ago: executing program 1 (id=671):
syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

446.741325ms ago: executing program 1 (id=672):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/124, 0x7c}, {&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/209, 0xd1}], 0x3, &(0x7f0000000340)=""/210, 0xd2}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={<r1=>r0, 0x6, 0x600000000000, 0x4})
sendmsg$rds(r1, &(0x7f0000000cc0)={&(0x7f0000000440)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/244, 0xf4}, {&(0x7f0000000640)=""/185, 0xb9}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f0000000700)=""/228, 0xe4}, {&(0x7f0000000800)=""/135, 0x87}], 0x5, &(0x7f0000000b40)=[@cswp={0x58, 0x114, 0x7, {{0xc, 0x2}, &(0x7f0000000940)=0x8000, &(0x7f0000000980)=0xc6, 0x7, 0x8, 0x8000000000000001, 0x5, 0x4, 0xfff}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x3}, @mask_fadd={0x58, 0x114, 0x8, {{0xd8, 0x1}, &(0x7f00000009c0)=0x7fffffffffffffff, &(0x7f0000000a00)=0x1, 0xff, 0x8, 0x49eb3515, 0x2, 0x1, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x2}, &(0x7f0000000a40)=0x40, &(0x7f0000000a80)=0x3, 0x7fffffffffffffff, 0x81, 0x37, 0x4, 0x1d, 0x346}}, @mask_cswp={0x58, 0x114, 0x9, {{0xa6, 0x2}, &(0x7f0000000ac0)=0xf, &(0x7f0000000b00)=0x800, 0xb, 0x800, 0x5, 0x4, 0x1, 0x8}}], 0x178, 0x40881}, 0x40c2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r2, @ANYBLOB="0100000000000000000001000000080001000000000014000480050603000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0)

154.734882ms ago: executing program 0 (id=679):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0xfcb2303e58a92de9)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20044084}, 0x800)
recvmmsg(r2, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000040)="040910bc995fce1c8107070400", 0xd)

82.805875ms ago: executing program 0 (id=680):
syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

81.381836ms ago: executing program 0 (id=681):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0xc, 0x81, 0xe})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={<r2=>0x0}, &(0x7f0000000100)=0xc)
r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={<r4=>0x0}, &(0x7f0000000180)=0xc)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x7ff, 0x18}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2c}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x20040000)
r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={<r6=>0x0, @in6={{0xa, 0x4e23, 0xffff, @private2, 0x8}}, 0x7, 0x40}, &(0x7f0000000340)=0x90)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000380)={r6, 0x81}, 0xc) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x6, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe489, 0x0, 0x0, 0x0, 0x144}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8001}, @exit]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x37, &(0x7f0000000480)=""/55, 0x41100, 0x41, '\x00', 0x0, @fallback=0x9, r0, 0x8, &(0x7f00000004c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x3, 0xf9d, 0x50}, 0x10, 0xffffffffffffffff, r0, 0x4, &(0x7f0000000540)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000580)=[{0x0, 0x3, 0xd, 0x7}, {0x1, 0x5, 0xd, 0x9}, {0x1, 0x2, 0xe, 0x4}, {0x1, 0x3, 0x10, 0xa}], 0x10, 0x4}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0, <r8=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000680)=r7}, 0x20) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='kyber_throttled\x00', r0, 0x0, 0x3}, 0x18) (async)
ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000780)="7c331563b5938a7c9a60437d74f5af07683faf8fe9eb42ef47ec7ed5e08e24ea9f748cd04e643d92619ac748157835132a0b6a8a9774c6093be8b5cf703d8424d62831a1ce71189b07da757840fb3b871978f187a788fb5e1ead6390349563541d15ad71128751c0ef29fecff45b307559d1cd5a61fdfbbfd82578c9d8c3e321b7ceaef8ecafb0b44cd7ac72") (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r9)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_emit_ethernet(0x53b, &(0x7f0000000880)={@random="4f3da003613f", @remote, @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@ipv6={0x86dd, @generic={0x3, 0x6, "dbe551", 0x501, 0x62, 0x0, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x34}, {[@srh={0x88, 0x6, 0x4, 0x3, 0x7e, 0x0, 0x100, [@remote, @private1, @remote]}, @routing={0x32, 0x8, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @private1]}, @hopopts={0x0, 0x25, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @calipso={0x7, 0x28, {0x1, 0x8, 0xfe, 0x9, [0x200, 0xc, 0x400, 0x7]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf9}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @generic={0x9b, 0x94, "48857db4bfb19ff995eae485e5ec8e1ce8b749aa130df1187e7df62d9b778a2815b25c9f98d04bd0ca43355f118e68fb74d04ccd0bbbd2b2ada336c28c02cbcd67fdde155176a6ec2ba4013664475acabb91f84a8352a277b59c92039357de00365a23da97922676cd193b077b6c3d673094099060a9f3cec62884a7a24e6d8655616a89b18e994ac93822fc290b4c86255412f3"}, @pad1, @pad1, @generic={0x2, 0x3e, "e2974ba0ee7e375c2ef40590a869f673f6488d67713bc5800fcad76b5134b0ab6ce117ee151075172f00e7bb0b9b311fb68dee4194999b48ef6a7b22264e"}]}, @dstopts={0x62, 0x1e, '\x00', [@generic={0x5, 0xe7, "34d5acbb23560b95442fab871fe94c790a01373d8906692f4805aa3e46a1e21e07b4ea526bf4237fe8f90a850d15dc8bf685abcefb65c42f12c2b434aa81b821ba66abfd0bb40f4debda8d416642646bd11eaad75289a3828d483e55b244cd10cc509a53c0972f2284138b8664fef7ac1ace000558a28b401463c6a5e44f9e368ec10acd6b1ac122ee29d2d28342d62b19f0e779dcb97179c28fcbd6d4340a3363e521238c7624fd66b90cd8ee2f9dac09b2530eddec799902f62300993ca3b7c5b7060bf1667df849f019ba3477f61ff67683c343302472b90892d21b2bdf952f5a3411917d04"}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x97c8}]}, @srh={0x5e, 0x4, 0x4, 0x2, 0x4, 0x70, 0x1, [@dev={0xfe, 0x80, '\x00', 0xb}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x5d, 0x0, 0x9, 0x0, 0x0, 0x0, 0x65}, @fragment={0x2, 0x0, 0x29, 0x0, 0x0, 0x7, 0x67}, @hopopts={0x2f, 0x13, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0x93, "e291a0b4ec94748a4289bf76d396fcce1b2cbb5c8258942f747e8ec1a21e540c1960780276e2d72d42c5909b87a886e2ad6a267124ef59dd22dc7b0a837fda5a42ad3f169a68a8a80b924d7975a210f23f4ac84a5de9f19dd71b2388ace0ab45105bfdf2f001aa60b87c4a683bc5eaf20819d6fc827e18d2665ddb2e448057f7b42f973ef30a60fa5b49f08a1c62baee038bd8"}, @enc_lim={0x4, 0x1, 0x28}]}, @srh={0x3, 0xa, 0x4, 0x5, 0x79, 0x78, 0xd, [@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @dev={0xfe, 0x80, '\x00', 0x3f}, @mcast1]}, @hopopts={0x0, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x30}, @jumbo={0xc2, 0x4, 0xaac}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xa}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x28e7}]}], "89673c6fb05159a49d043ef321554e1e8882d8b8683767e11b4f0ccf28e582c0de380a5055ff855abb8a03e54dcb7697aefe047932bb1e7c623568016f8177877510ad456f3cf4e8bd6e58f25ec5414780005595b578ab148b01eef60ceeb6d65e014277cea97223234747203d6fcf1d56ed3bfa88f8a315381f6ab41c731d03006682a51cdf84f9fd516df023580672b4ba91e4e0973a38152f65cc83af05141099652cf2eeb81b9a22c57d94c4828a80db21efc96dfef55be8e5be56f8697572554c276af799e6056dc5e319ef3b3240152b269ed537064bee01e9a7aee2ce3d47ed5325adfdfc90"}}}}}, &(0x7f0000000dc0)={0x1, 0x3, [0xf9, 0x5de, 0x658, 0xa52]}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000e40)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x220, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x27cb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r0}, &(0x7f0000000f80), &(0x7f0000000fc0)=r7}, 0x20) (async)
r12 = openat$cgroup_ro(r0, &(0x7f0000001040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r0, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000010c0)=[0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf1, &(0x7f0000001140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x82, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) (async)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f0000001380), &(0x7f00000013c0)=0x4)
sendmsg$NL80211_CMD_DISCONNECT(r12, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x48, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x39}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
listen(r5, 0x800) (async)
syz_extract_tcp_res$synack(&(0x7f0000001540), 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001580)={0x8, 0x0, 0x6, 0x3, r6}, 0x10)
connect$pppl2tp(r12, &(0x7f00000015c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r10, 0x1, 0x4, 0x2, 0x2, {0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}}}, 0x3a) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000001600)={"adcf8cc38f2489d73e3b4373d7e92bae", <r13=>0x0, 0x0, {0x4, 0x4}, {0xfffffffffffffffb, 0x4}, 0x1, [0x80, 0xeb6, 0xffffffffffffffff, 0x1e3, 0x8000000000000001, 0x0, 0x48, 0x0, 0x1, 0x1, 0x80000000, 0x2, 0x74, 0xadb5, 0xffffffff, 0x8]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000001700)={{r0}, r13, 0x2, @unused=[0x100000000, 0x7f, 0x1, 0x1], @devid})

4.645974ms ago: executing program 0 (id=682):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000001032020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94)

2.036345ms ago: executing program 0 (id=683):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c0001802c00c735d12a9a4fbeb500000000000000000000000000001400040000000000000000000000fbffe00000010c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0800074000000000100006800c0003800400020000000000"], 0xa4}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000410000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a0101000000f3ff000000010000000900030073797a310000000014000480080002401000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000040000480240001800b00010072656a656374000014000280050002000800020008000140000000854c9138cf7bdd04006f7366000c000280080001400000001408000b40000000000900010073797a3000"], 0xf0}}, 0x0) (async)
r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
write$cgroup_int(r1, 0x0, 0x0) (async)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, 0x0, 0xc000) (async)
ioctl$int_in(r1, 0x5421, 0x0) (async)
openat$cgroup_ro(r1, &(0x7f00000003c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000800000600000000009fc222bd0400", @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000003000000010000000d00"/28], 0x50)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003000)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@generic="76ae529d48"]}, 0x1c}}, 0x20008040) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x1, 0x1000, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0xe}, 0xfffffefa) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)={0xc8, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@generic="31748d9a9161812f1e6ce02a2021179fc7aed0c34ac004bc7e5f9c20a9d48684a94c668f687a2c2eacfce208f95df80290c644d9874cff9184cbaa0a031ac33f845ba0c9ceed9d729058a0556ba7ecfc50f59819f0f011b960d439c931edfe2c2e681b5d4163628e0a6717d4d7db39503830f7b8aa172f16d197ddbc2334f20de30d581ccc81890ff0867294a7", @typed={0x8, 0xf4, 0x0, 0x0, @fd=r0}, @typed={0x1d, 0x2d, 0x0, 0x0, @str='blkio.bfq.avg_queue_size\x00'}]}, 0xc8}], 0x1, 0x0, 0x0, 0xc010}, 0x0) (async)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200002ec6ae6fa497d5beb5e3aa252345140000f65289d0403df53ad900b70300000000000085000000d1000000bc8900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000005000000b700007a0000000095000300000000003fccc4d354306186ba143ff47d5830c241d066641f92"], &(0x7f0000000980)='GPL\x00', 0xb0e2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r10, {0xc, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001080002"], 0x38}}, 0x0) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)='%+9llu \x00'}, 0x20)

0s ago: executing program 0 (id=688):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x88c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x20, 0x1, 0x1, 0x10, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x68, 0x0, 0xc4, 0x0, 0x0, @empty, @empty}}}})
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)={0x1fc, r5, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa84a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xb471, @mcast2, 0x4f}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81c000}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "21f2d68771b809b6088e9108bf807914b525dff6ff67a5223d91a0152f7f15"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "18157056914a0528b64c8b3d412f2f8552a52937610ab28c0977d5d90db8e0e8"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8d1d8488ec996a432898e2b107e1c88bcf5fba77ce39"}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8000000}, 0x40880)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1c5}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x39d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6fc}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000104}, 0x10)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000080), 0x6})
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000514010028bd7010fedbdf25080001bae6b250e654af2c07ad050f87b8be329e891d4e74fc6550fb0f39f06b23758b4b85682d6f43f147549cd898f6f8568555a39ae9e0b88515e96a7a5e0fa5ba1373ceae385f22322d5450fe7d077899e6421da094e6a943ae1ab145fb1dfe847dfe5717fa9f619c5005478126909f5e49"], 0x20}, 0x1, 0x0, 0x0, 0x44811}, 0x40000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:17736' (ED25519) to the list of known hosts.
syzkaller login: [   48.209986][ T5745] cgroup: Unknown subsys name 'net'
[   48.331122][ T5745] cgroup: Unknown subsys name 'cpuset'
[   48.336828][ T5745] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.595129][ T5745] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.835535][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.844691][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.848309][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.851982][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.855569][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.886481][ T5204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.889984][ T5204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.894253][ T5204] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.897787][ T5204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.901194][ T5204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.918017][ T5204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.921785][ T5204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.925285][ T5204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.928839][ T5204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.932866][ T5204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.173634][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   53.201767][ T5813] chnl_net:caif_netlink_parms(): no params data found
[   53.227431][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   53.303354][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.307263][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.310325][ T5817] bridge_slave_0: entered allmulticast mode
[   53.314086][ T5817] bridge_slave_0: entered promiscuous mode
[   53.346755][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.349061][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.351309][ T5817] bridge_slave_1: entered allmulticast mode
[   53.354655][ T5817] bridge_slave_1: entered promiscuous mode
[   53.357862][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.360156][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.362457][ T5813] bridge_slave_0: entered allmulticast mode
[   53.365727][ T5813] bridge_slave_0: entered promiscuous mode
[   53.382259][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.384931][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.387206][ T5819] bridge_slave_0: entered allmulticast mode
[   53.389883][ T5819] bridge_slave_0: entered promiscuous mode
[   53.392484][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.395608][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.397957][ T5813] bridge_slave_1: entered allmulticast mode
[   53.400728][ T5813] bridge_slave_1: entered promiscuous mode
[   53.411382][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.414806][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.417224][ T5819] bridge_slave_1: entered allmulticast mode
[   53.420194][ T5819] bridge_slave_1: entered promiscuous mode
[   53.440272][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.456803][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.472814][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.478081][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.494986][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.516336][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.520996][ T5817] team0: Port device team_slave_0 added
[   53.533462][ T5817] team0: Port device team_slave_1 added
[   53.563630][ T5819] team0: Port device team_slave_0 added
[   53.579661][ T5813] team0: Port device team_slave_0 added
[   53.591787][ T5819] team0: Port device team_slave_1 added
[   53.604964][ T5813] team0: Port device team_slave_1 added
[   53.608226][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.610857][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.620297][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.633523][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.636505][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.646453][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.658179][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.660820][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.671748][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.676008][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.678335][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.687209][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.716343][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.718595][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.726962][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.731157][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.733292][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.741632][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.755529][ T5819] hsr_slave_0: entered promiscuous mode
[   53.758047][ T5819] hsr_slave_1: entered promiscuous mode
[   53.816573][ T5813] hsr_slave_0: entered promiscuous mode
[   53.818959][ T5813] hsr_slave_1: entered promiscuous mode
[   53.821300][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.825909][ T5813] Cannot create hsr debugfs directory
[   53.832842][ T5817] hsr_slave_0: entered promiscuous mode
[   53.836299][ T5817] hsr_slave_1: entered promiscuous mode
[   53.839070][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.842166][ T5817] Cannot create hsr debugfs directory
[   54.106437][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.116447][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.136997][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.141082][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.180318][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.192507][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.198878][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.216081][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.232086][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.241490][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.248191][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.255021][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.345102][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.365977][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.377785][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   54.387880][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.392439][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.394963][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.407416][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.409842][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.422910][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[   54.433395][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.435785][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.442256][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   54.476980][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.479783][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.488590][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.490829][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.494017][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.496270][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.511665][ T5813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.515972][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.683355][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.690417][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.695712][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.758727][ T5813] veth0_vlan: entered promiscuous mode
[   54.762808][ T5819] veth0_vlan: entered promiscuous mode
[   54.775962][ T5813] veth1_vlan: entered promiscuous mode
[   54.782881][ T5819] veth1_vlan: entered promiscuous mode
[   54.796429][ T5817] veth0_vlan: entered promiscuous mode
[   54.805797][ T5817] veth1_vlan: entered promiscuous mode
[   54.831202][ T5813] veth0_macvtap: entered promiscuous mode
[   54.847177][ T5819] veth0_macvtap: entered promiscuous mode
[   54.853672][ T5813] veth1_macvtap: entered promiscuous mode
[   54.866688][ T5819] veth1_macvtap: entered promiscuous mode
[   54.883242][ T5817] veth0_macvtap: entered promiscuous mode
[   54.890505][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.903490][ T5817] veth1_macvtap: entered promiscuous mode
[   54.918396][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.923031][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.926327][ T5815] Bluetooth: hci1: command tx timeout
[   54.926350][ T5204] Bluetooth: hci0: command tx timeout
[   54.935967][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.945409][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.948953][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.952429][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.957033][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.971981][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.976146][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.979687][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.983208][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.004451][ T5204] Bluetooth: hci2: command tx timeout
[   55.007907][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.028345][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.040275][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.043214][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.048976][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.052045][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.122212][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.128843][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.161177][ T3603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.169731][ T3603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.179916][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.187584][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.210825][ T3603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.213493][ T3603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.225360][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.227938][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.243823][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.257425][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.260460][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.368824][ T5884] Bluetooth: MGMT ver 1.23
[   55.454257][ T5888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5'.
[   55.560124][ T5890] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET)
[   55.572841][ T5892] netlink: 'syz.0.7': attribute type 2 has an invalid length.
[   55.576478][ T5892] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7'.
[   55.627142][ T5895] netlink: 'syz.2.8': attribute type 10 has an invalid length.
[   55.730792][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   55.791600][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'.
[   55.901349][ T5904] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.934822][ T5907] netlink: 'syz.1.13': attribute type 5 has an invalid length.
[   55.938111][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   55.950850][ T5904] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   56.156434][ T5916] Cannot find add_set index 0 as target
[   56.215756][ T5925] sctp: [Deprecated]: syz.0.19 (pid 5925) Use of struct sctp_assoc_value in delayed_ack socket option.
[   56.215756][ T5925] Use struct sctp_sack_info instead
[   56.223023][ T5925] netlink: 'syz.0.19': attribute type 1 has an invalid length.
[   56.237921][ T5925] veth3: entered promiscuous mode
[   56.241642][ T5925] team0: Port device veth3 added
[   56.248807][ T5925] erspan0: entered allmulticast mode
[   56.264754][ T5925] team0: Port device erspan0 added
[   56.503135][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'.
[   56.506487][ T5933] Zero length message leads to an empty skb
[   56.803636][ T5944] lo speed is unknown, defaulting to 1000
[   56.806472][ T5944] lo speed is unknown, defaulting to 1000
[   56.811079][ T5944] lo speed is unknown, defaulting to 1000
[   56.821933][ T5944] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   56.831670][ T5944] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   56.857328][ T5944] lo speed is unknown, defaulting to 1000
[   56.862132][ T5944] lo speed is unknown, defaulting to 1000
[   56.866924][ T5944] lo speed is unknown, defaulting to 1000
[   57.022861][ T5204] Bluetooth: hci0: command tx timeout
[   57.022880][ T5815] Bluetooth: hci1: command tx timeout
[   57.085725][ T5815] Bluetooth: hci2: command tx timeout
[   57.117370][ T5955] netlink: 'syz.2.30': attribute type 1 has an invalid length.
[   57.121870][ T5955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.531870][ T5991] batman_adv: batadv0: Adding interface: dummy0
[   57.534166][ T5991] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.542435][ T5991] batman_adv: batadv0: Interface activated: dummy0
[   57.634315][ T5998] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   57.650106][ T5998] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   57.736167][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'.
[   57.939655][ T5291] lo speed is unknown, defaulting to 1000
[   58.034278][ T6034] netlink: 92 bytes leftover after parsing attributes in process `syz.1.53'.
[   58.037904][ T6034] netlink: 92 bytes leftover after parsing attributes in process `syz.1.53'.
[   58.087374][ T6036] ip6t_srh: unknown srh invflags 4000
[   58.109485][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'.
[   58.322092][ T6050] batman_adv: batadv0: Interface deactivated: dummy0
[   58.326277][ T6050] batman_adv: batadv0: Removing interface: dummy0
[   58.336675][ T6050] bridge_slave_0: left allmulticast mode
[   58.338840][ T6050] bridge_slave_0: left promiscuous mode
[   58.341229][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.353101][ T6050] bridge_slave_1: left allmulticast mode
[   58.356473][ T6050] bridge_slave_1: left promiscuous mode
[   58.358966][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.378004][ T6050] bond0: (slave bond_slave_0): Releasing backup interface
[   58.392969][ T6050] bond0: (slave bond_slave_1): Releasing backup interface
[   58.415954][ T6050] team0: Port device team_slave_0 removed
[   58.427914][ T6050] team0: Port device team_slave_1 removed
[   58.430805][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.433294][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.445222][ T6056] netlink: 'syz.1.60': attribute type 1 has an invalid length.
[   58.450776][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.453379][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.749403][ T6079] netlink: 'syz.1.70': attribute type 2 has an invalid length.
[   59.094092][ T5815] Bluetooth: hci0: command tx timeout
[   59.094845][ T5204] Bluetooth: hci1: command tx timeout
[   59.164279][ T5204] Bluetooth: hci2: command tx timeout
[   59.257768][ T6107] netlink: 'syz.0.84': attribute type 1 has an invalid length.
[   59.710325][ T6138] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.764987][ T6144] netlink: 'syz.1.101': attribute type 2 has an invalid length.
[   59.813624][ T6148] netlink: 'syz.1.102': attribute type 1 has an invalid length.
[   60.592365][ T6190] warning: `syz.1.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.607431][ T6190] xt_TCPMSS: Only works on TCP SYN packets
[   60.616233][ T6192] __nla_validate_parse: 19 callbacks suppressed
[   60.616242][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'.
[   61.082904][ T6217] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.164614][ T5204] Bluetooth: hci0: command tx timeout
[   61.176849][ T5204] Bluetooth: hci1: command tx timeout
[   61.187218][ T6217] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.209003][ T6229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.244269][ T5204] Bluetooth: hci2: command tx timeout
[   61.279599][ T6217] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.380113][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'.
[   61.480886][ T6217] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.516414][ T6217] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.535852][ T6217] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.552838][ T6217] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.603065][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'.
[   61.607438][ T6255] tipc: Started in network mode
[   61.609221][ T6255] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   61.612251][ T6255] tipc: Enabled bearer <eth:vlan0>, priority 18
[   61.732900][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'.
[   61.873237][ T6281] bridge_slave_0: default FDB implementation only supports local addresses
[   61.948517][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'.
[   62.022503][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.154'.
[   62.030020][ T6294] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   62.051596][ T6294] bond1: entered promiscuous mode
[   62.053464][ T6294] bond1: entered allmulticast mode
[   62.057319][ T6294] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.231900][ T6308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.242380][ T6308] netlink: 'syz.1.158': attribute type 3 has an invalid length.
[   62.250401][ T6308] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.158'.
[   62.705103][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.166'.
[   62.734730][   T47] tipc: Node number set to 10005162
[   63.139971][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'.
[   63.170163][ T6370] openvswitch: netlink: IP tunnel dst address not specified
[   63.173204][ T6370] bridge_slave_0: default FDB implementation only supports local addresses
[   63.226308][ T6374] batadv1: entered allmulticast mode
[   63.272729][ T6379] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614)
[   63.277319][ T6379] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   63.285658][ T6378] lo speed is unknown, defaulting to 1000
[   63.312551][ T6383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.186'.
[   63.430062][ T6391] netlink: 'syz.2.186': attribute type 83 has an invalid length.
[   63.556492][ T6396] syz.2.191 (6396) used obsolete PPPIOCDETACH ioctl
[   63.703730][ T6406] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.766892][ T6412] dummy0: entered promiscuous mode
[   63.769196][ T6412] dummy0: entered allmulticast mode
[   63.883841][ T6419] netlink: 'syz.1.200': attribute type 1 has an invalid length.
[   64.032894][ T6426] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   64.245039][ T6446] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   64.248821][ T6446] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   64.252616][ T6446] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   64.256588][ T6446] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   64.303688][ T6450] netlink: 'syz.1.211': attribute type 2 has an invalid length.
[   64.372150][ T6457] openvswitch: netlink: Missing key (keys=40, expected=100)
[   64.620800][ T6480] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   64.624955][ T6480] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   64.816972][ T6487] ieee802154 phy0 wpan0: encryption failed: -90
[   65.256364][ T5815] Bluetooth: hci2: command 0x0405 tx timeout
[   65.421877][ T6508] lo speed is unknown, defaulting to 1000
[   65.898575][ T6543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   65.985370][ T6548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.078046][ T6556] __nla_validate_parse: 8 callbacks suppressed
[   66.078057][ T6556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.247'.
[   66.086555][ T6548] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   66.090293][ T6556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.247'.
[   66.095723][ T6556] netlink: 'syz.1.247': attribute type 10 has an invalid length.
[   66.102503][ T6556] batman_adv: batadv0: Adding interface: netdevsim0
[   66.105557][ T6556] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.114597][ T6556] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   66.161047][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'.
[   66.181902][ T6560] netlink: 32 bytes leftover after parsing attributes in process `syz.1.249'.
[   66.566223][ T6594] tipc: Started in network mode
[   66.570784][ T6594] tipc: Node identity -:, cluster identity 4711
[   66.578001][ T6594] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   66.930715][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'.
[   66.950659][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'.
[   67.033528][ T6628] bridge_slave_0: default FDB implementation only supports local addresses
[   67.049380][ T6632] netlink: 17 bytes leftover after parsing attributes in process `syz.0.272'.
[   67.155680][ T6642] netlink: 'syz.2.277': attribute type 6 has an invalid length.
[   67.157036][ T6640] netlink: 'syz.1.276': attribute type 21 has an invalid length.
[   67.166724][ T6640] IPv6: NLM_F_CREATE should be specified when creating new route
[   67.169919][ T6640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.172955][ T6640] IPv6: NLM_F_CREATE should be set when creating new route
[   67.175456][ T6640] IPv6: NLM_F_CREATE should be set when creating new route
[   67.177866][ T6640] IPv6: NLM_F_CREATE should be set when creating new route
[   67.286487][ T6648] 8021q: VLANs not supported on ip_vti0
[   67.337479][ T6645] lo speed is unknown, defaulting to 1000
[   67.386281][ T6653] netlink: 'syz.0.278': attribute type 13 has an invalid length.
[   67.392809][ T6653] netlink: 'syz.0.278': attribute type 17 has an invalid length.
[   67.401997][ T6653] gretap0: refused to change device tx_queue_len
[   67.408549][ T6653] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   67.485851][ T6667] openvswitch: netlink: IPv6 tunnel dst address is zero
[   67.489929][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'.
[   67.630321][ T6676] netlink: zone id is out of range
[   67.642998][ T6676] netlink: zone id is out of range
[   67.650203][ T6676] netlink: zone id is out of range
[   67.660519][ T6676] netlink: zone id is out of range
[   67.662288][ T6676] netlink: zone id is out of range
[   67.664449][ T6676] netlink: zone id is out of range
[   67.666880][ T6676] netlink: zone id is out of range
[   67.669153][ T6676] netlink: zone id is out of range
[   68.463500][ T6743] team0: Device vlan2 is already an upper device of the team interface
[   68.658769][ T6756] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   68.662401][ T6756] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.724598][ T6760] syz.0.315: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   68.732359][ T6760] CPU: 0 UID: 0 PID: 6760 Comm: syz.0.315 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   68.732404][ T6760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   68.732412][ T6760] Call Trace:
[   68.732418][ T6760]  <TASK>
[   68.732423][ T6760]  dump_stack_lvl+0x189/0x250
[   68.732447][ T6760]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[   68.732462][ T6760]  ? __pfx_dump_stack_lvl+0x10/0x10
[   68.732477][ T6760]  ? __pfx__printk+0x10/0x10
[   68.732490][ T6760]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   68.732504][ T6760]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   68.732522][ T6760]  warn_alloc+0x214/0x310
[   68.732534][ T6760]  ? stack_depot_save_flags+0x429/0x900
[   68.732551][ T6760]  ? __pfx_warn_alloc+0x10/0x10
[   68.732586][ T6760]  ? kasan_save_track+0x4f/0x80
[   68.732605][ T6760]  ? xskq_create+0x56/0x170
[   68.732620][ T6760]  ? xsk_init_queue+0xb0/0x110
[   68.732634][ T6760]  ? xsk_setsockopt+0x43f/0x710
[   68.732647][ T6760]  ? do_sock_setsockopt+0x25a/0x3e0
[   68.732656][ T6760]  ? __x64_sys_setsockopt+0x18b/0x220
[   68.732665][ T6760]  ? do_syscall_64+0xfa/0x3b0
[   68.732674][ T6760]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.732690][ T6760]  __vmalloc_node_range_noprof+0x125/0x12f0
[   68.732722][ T6760]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   68.732739][ T6760]  ? __kasan_kmalloc+0x93/0xb0
[   68.732748][ T6760]  vmalloc_user_noprof+0xad/0xf0
[   68.732758][ T6760]  ? xskq_create+0xbf/0x170
[   68.732773][ T6760]  xskq_create+0xbf/0x170
[   68.732790][ T6760]  xsk_init_queue+0xb0/0x110
[   68.732806][ T6760]  xsk_setsockopt+0x43f/0x710
[   68.732822][ T6760]  ? __pfx_xsk_setsockopt+0x10/0x10
[   68.732835][ T6760]  ? __lock_acquire+0xab9/0xd20
[   68.732857][ T6760]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   68.732868][ T6760]  ? __pfx_xsk_setsockopt+0x10/0x10
[   68.732881][ T6760]  do_sock_setsockopt+0x25a/0x3e0
[   68.732895][ T6760]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   68.732911][ T6760]  ? __fget_files+0x2a/0x420
[   68.732930][ T6760]  __x64_sys_setsockopt+0x18b/0x220
[   68.732947][ T6760]  do_syscall_64+0xfa/0x3b0
[   68.732955][ T6760]  ? lockdep_hardirqs_on+0x9c/0x150
[   68.732969][ T6760]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.732980][ T6760]  ? exc_page_fault+0x9f/0xf0
[   68.732998][ T6760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.733009][ T6760] RIP: 0033:0x7f21d778e929
[   68.733020][ T6760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.733029][ T6760] RSP: 002b:00007f21d55d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   68.733041][ T6760] RAX: ffffffffffffffda RBX: 00007f21d79b6080 RCX: 00007f21d778e929
[   68.733049][ T6760] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[   68.733055][ T6760] RBP: 00007f21d7810b39 R08: 0000000000000004 R09: 0000000000000000
[   68.733062][ T6760] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.733068][ T6760] R13: 0000000000000000 R14: 00007f21d79b6080 R15: 00007ffc9ade0988
[   68.733082][ T6760]  </TASK>
[   68.733184][ T6760] Mem-Info:
[   68.848098][ T6760] active_anon:5440 inactive_anon:0 isolated_anon:0
[   68.848098][ T6760]  active_file:1062 inactive_file:38204 isolated_file:0
[   68.848098][ T6760]  unevictable:1768 dirty:1544 writeback:0
[   68.848098][ T6760]  slab_reclaimable:9282 slab_unreclaimable:52445
[   68.848098][ T6760]  mapped:19222 shmem:2439 pagetables:923
[   68.848098][ T6760]  sec_pagetables:0 bounce:0
[   68.848098][ T6760]  kernel_misc_reclaimable:0
[   68.848098][ T6760]  free:303217 free_pcp:21506 free_cma:0
[   68.865604][ T6760] Node 0 active_anon:11596kB inactive_anon:0kB active_file:2824kB inactive_file:22572kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43040kB dirty:5752kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5760kB pagetables:2088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   68.879232][ T6760] Node 1 active_anon:10164kB inactive_anon:0kB active_file:1424kB inactive_file:130244kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33848kB dirty:424kB writeback:0kB shmem:4800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5768kB pagetables:1604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   68.892569][ T6760] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   68.904398][ T6760] lowmem_reserve[]: 0 815 815 815 815
[   68.906683][ T6760] Node 0 DMA32 free:419072kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11596kB inactive_anon:0kB active_file:2824kB inactive_file:22572kB unevictable:3536kB writepending:5752kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:37460kB local_pcp:19304kB free_cma:0kB
[   68.919435][ T6760] lowmem_reserve[]: 0 0 0 0 0
[   68.921589][ T6760] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   68.935888][ T6760] lowmem_reserve[]: 0 0 854 854 854
[   68.938178][ T6760] Node 1 Normal free:319944kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10164kB inactive_anon:0kB active_file:1424kB inactive_file:130244kB unevictable:3536kB writepending:424kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:48164kB local_pcp:19020kB free_cma:0kB
[   68.951028][ T6760] lowmem_reserve[]: 0 0 0 0 0
[   68.952889][ T6760] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   68.958185][ T6760] Node 0 DMA32: 4*4kB (UE) 12*8kB (UME) 27*16kB (UM) 357*32kB (UM) 59*64kB (UM) 17*128kB (UM) 11*256kB (UM) 4*512kB (ME) 5*1024kB (ME) 3*2048kB (UM) 94*4096kB (M) = 419072kB
[   68.963727][ T6760] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   68.969638][ T6760] Node 1 Normal: 984*4kB (UME) 348*8kB (UM) 421*16kB (UME) 105*32kB (UM) 37*64kB (UM) 26*128kB (UME) 18*256kB (UM) 8*512kB (M) 4*1024kB (ME) 5*2048kB (M) 67*4096kB (M) = 319984kB
[   68.976130][ T6760] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   68.979473][ T6760] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   68.982500][ T6760] 41705 total pagecache pages
[   68.984428][ T6760] 0 pages in swap cache
[   68.985866][ T6760] Free swap  = 124996kB
[   68.987261][ T6760] Total swap = 124996kB
[   68.988698][ T6760] 786301 pages RAM
[   68.990007][ T6760] 0 pages HighMem/MovableOnly
[   68.991799][ T6760] 240368 pages reserved
[   68.993179][ T6760] 0 pages cma reserved
[   69.460478][ T6762] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   69.486629][   T27] wlan1: Trigger new scan to find an IBSS to join
[   69.746646][ T5819] syz-executor (5819) used greatest stack depth: 19416 bytes left
[   69.800729][ T6756] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.808349][ T6756] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.829222][   T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.883546][ T6756] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.894042][ T6756] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.911694][   T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.976724][ T6756] batman_adv: batadv0: Removing interface: netdevsim0
[   69.979601][ T6756] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.982827][ T6756] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.006296][ T6781] netlink: 152 bytes leftover after parsing attributes in process `syz.0.325'.
[   70.011961][   T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.037449][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.043544][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.059233][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.064729][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.067910][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.134831][   T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.186465][ T6756] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.189291][ T6756] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.193143][ T6785] lo speed is unknown, defaulting to 1000
[   70.215704][ T6756] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.218946][ T6756] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.235723][ T6756] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.238446][ T6756] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.259010][ T6756] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.274729][ T6756] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.299197][ T6795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.329'.
[   70.425121][   T12] bridge_slave_1: left allmulticast mode
[   70.427256][   T12] bridge_slave_1: left promiscuous mode
[   70.430613][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.448492][   T12] bridge_slave_0: left allmulticast mode
[   70.451085][   T12] bridge_slave_0: left promiscuous mode
[   70.453576][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.808258][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.815182][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.820391][   T12] bond0 (unregistering): Released all slaves
[   71.011005][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.013426][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.222815][ T6785] chnl_net:caif_netlink_parms(): no params data found
[   71.348695][ T6850] bridge_slave_0: default FDB implementation only supports local addresses
[   71.394411][   T12] hsr_slave_0: left promiscuous mode
[   71.399745][   T12] hsr_slave_1: left promiscuous mode
[   71.402328][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.421856][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.434996][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.437934][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.453696][   T12] veth1_macvtap: left promiscuous mode
[   71.458469][   T12] veth0_macvtap: left promiscuous mode
[   71.460896][   T12] veth1_vlan: left promiscuous mode
[   71.465740][   T12] veth0_vlan: left promiscuous mode
[   71.508043][ T6861] No such timeout policy "syz0"
[   71.519260][ T6861] netlink: 48 bytes leftover after parsing attributes in process `syz.0.343'.
[   71.828566][   T12] team0 (unregistering): Port device team_slave_1 removed
[   71.854253][   T12] team0 (unregistering): Port device team_slave_0 removed
[   72.134465][ T5815] Bluetooth: hci2: command tx timeout
[   72.177244][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'.
[   72.268819][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.273833][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.279214][ T6785] bridge_slave_0: entered allmulticast mode
[   72.283505][ T6785] bridge_slave_0: entered promiscuous mode
[   72.293318][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.299268][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.302305][ T6785] bridge_slave_1: entered allmulticast mode
[   72.307656][ T6785] bridge_slave_1: entered promiscuous mode
[   72.416824][ T6785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.421739][ T6785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.444228][   T27] wlan1: Trigger new scan to find an IBSS to join
[   72.520029][ T6785] team0: Port device team_slave_0 added
[   72.540295][ T6785] team0: Port device team_slave_1 added
[   72.562241][ T6882] x_tables: duplicate underflow at hook 2
[   72.567968][ T6882] netlink: 128 bytes leftover after parsing attributes in process `syz.1.349'.
[   72.611126][ T6882] bridge_slave_0: default FDB implementation only supports local addresses
[   72.622671][ T6785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.639702][ T6785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.664092][ T6785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.670021][ T6785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.672789][ T6785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.683795][ T6785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.776893][ T6785] hsr_slave_0: entered promiscuous mode
[   72.780057][ T6785] hsr_slave_1: entered promiscuous mode
[   73.560926][ T6785] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.577677][ T6785] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.597189][ T6785] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.609696][ T6785] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.617290][ T6943] netlink: 68 bytes leftover after parsing attributes in process `syz.0.365'.
[   73.623172][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'.
[   73.630855][ T6943] vlan2: entered promiscuous mode
[   73.632583][ T6943] dummy0: entered promiscuous mode
[   73.765890][ T6785] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.802147][ T6785] 8021q: adding VLAN 0 to HW filter on device team0
[   73.810203][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.813137][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.821948][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.824716][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.933783][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'.
[   74.030979][ T6785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.088802][ T6785] veth0_vlan: entered promiscuous mode
[   74.092070][ T6978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.370'.
[   74.104860][ T6785] veth1_vlan: entered promiscuous mode
[   74.130250][ T6785] veth0_macvtap: entered promiscuous mode
[   74.139655][ T6785] veth1_macvtap: entered promiscuous mode
[   74.153871][ T6785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.167921][ T6785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.176419][ T6785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.181667][ T6785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.186558][ T6785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.195971][ T6785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.206378][ T5815] Bluetooth: hci2: command tx timeout
[   74.277193][ T6981] IPVS: Scheduler module ip_vs_sip not found
[   74.347411][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.350603][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.396086][ T3603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.398722][ T3603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.572221][ T7011] netlink: 3 bytes leftover after parsing attributes in process `syz.0.375'.
[   74.592189][ T7011] batadv1: entered promiscuous mode
[   74.595840][ T7011] batadv1: entered allmulticast mode
[   74.620479][ T7016] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:0
[   74.699414][ T7020] rdma_op ffff88812423b9f0 conn xmit_rdma 0000000000000000
[   74.769953][ T7025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.379'.
[   74.782355][ T7025] netlink: 120 bytes leftover after parsing attributes in process `syz.1.379'.
[   74.788568][ T7025] bridge_slave_0: default FDB implementation only supports local addresses
[   74.860957][ T7031] net_ratelimit: 6 callbacks suppressed
[   74.860971][ T7031] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   75.484833][   T27] wlan1: Trigger new scan to find an IBSS to join
[   75.541694][ T7070] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   76.025466][ T5842] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.417478][ T1088] wlan1: Creating new IBSS network, BSSID 52:e9:af:72:29:00
[   76.484832][ T5204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.488990][ T5204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.508265][ T5204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.518238][ T5204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.525347][ T5204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.588176][ T7101] lo speed is unknown, defaulting to 1000
[   76.657216][ T7110] openvswitch: netlink: IP tunnel TTL not specified.
[   76.841894][ T7101] chnl_net:caif_netlink_parms(): no params data found
[   76.907507][ T7132] __nla_validate_parse: 4 callbacks suppressed
[   76.907521][ T7132] netlink: 44 bytes leftover after parsing attributes in process `syz.1.412'.
[   76.917621][ T7128] bridge0: port 3(ipvlan3) entered blocking state
[   76.920268][ T7128] bridge0: port 3(ipvlan3) entered disabled state
[   76.923043][ T7128] ipvlan3: entered allmulticast mode
[   76.925602][ T7128] bridge0: entered allmulticast mode
[   76.929868][ T7128] ipvlan3: left allmulticast mode
[   76.931942][ T7128] bridge0: left allmulticast mode
[   76.965777][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.968273][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.970955][ T7101] bridge_slave_0: entered allmulticast mode
[   76.976198][ T7101] bridge_slave_0: entered promiscuous mode
[   76.983439][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.994091][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.997133][ T7101] bridge_slave_1: entered allmulticast mode
[   77.001006][ T7101] bridge_slave_1: entered promiscuous mode
[   77.050825][ T7101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.060599][ T7101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.096107][ T7146] netlink: 40 bytes leftover after parsing attributes in process `syz.1.414'.
[   77.102393][ T7101] team0: Port device team_slave_0 added
[   77.119035][ T7101] team0: Port device team_slave_1 added
[   77.132431][ T7148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.196367][ T7148] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   77.202549][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.214115][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.240514][ T7101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.274326][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.280401][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.304506][ T7101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.426440][ T5842] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.446625][ T7101] hsr_slave_0: entered promiscuous mode
[   77.449892][ T7101] hsr_slave_1: entered promiscuous mode
[   77.452721][ T7101] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.456483][ T7101] Cannot create hsr debugfs directory
[   77.460359][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'.
[   77.482626][ T7160] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   77.487061][ T7160] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   77.666476][ T5842] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.711199][ T7173] x_tables: duplicate underflow at hook 1
[   77.749706][ T5842] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.825315][ T7177] netlink: 120 bytes leftover after parsing attributes in process `syz.1.428'.
[   77.895775][ T5842] bridge_slave_1: left allmulticast mode
[   77.897980][ T5842] bridge_slave_1: left promiscuous mode
[   77.904469][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.916998][ T5842] bridge_slave_0: left allmulticast mode
[   77.918914][ T5842] bridge_slave_0: left promiscuous mode
[   77.920824][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.150465][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.157151][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.161458][ T5842] bond0 (unregistering): Released all slaves
[   78.377438][ T7191] lo speed is unknown, defaulting to 1000
[   78.579561][ T5842] hsr_slave_0: left promiscuous mode
[   78.584641][ T5842] hsr_slave_1: left promiscuous mode
[   78.587440][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.590447][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.600433][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.604493][ T5204] Bluetooth: hci2: command tx timeout
[   78.612763][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.639062][ T5842] veth1_macvtap: left promiscuous mode
[   78.641427][ T5842] veth0_macvtap: left promiscuous mode
[   78.651832][ T5842] veth1_vlan: left promiscuous mode
[   78.656665][ T5842] veth0_vlan: left promiscuous mode
[   79.016801][ T5842] team0 (unregistering): Port device team_slave_1 removed
[   79.037608][ T5842] team0 (unregistering): Port device team_slave_0 removed
[   79.301476][ T7101] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.310204][ T7101] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.317342][ T7101] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.323214][ T7101] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.428394][ T7101] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.446020][ T7101] 8021q: adding VLAN 0 to HW filter on device team0
[   79.453402][ T7094] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.456584][ T7094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.471673][ T7094] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.474623][ T7094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.552583][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'.
[   79.669719][ T7101] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.720355][ T7101] veth0_vlan: entered promiscuous mode
[   79.729157][ T7101] veth1_vlan: entered promiscuous mode
[   79.754741][ T7101] veth0_macvtap: entered promiscuous mode
[   79.761618][ T7101] veth1_macvtap: entered promiscuous mode
[   79.772106][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.812728][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.818583][ T7101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.821581][ T7101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.824668][ T7101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.827438][ T7101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.900802][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.903465][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.939420][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.942390][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.179076][ T7265] netlink: 32 bytes leftover after parsing attributes in process `syz.0.452'.
[   80.188122][ T7265] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   80.193431][ T7265] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.197737][ T7265] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.255629][  T788] cfg80211: failed to load regulatory.db
[   81.269226][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'.
[   81.343529][ T7299] IPVS: set_ctl: invalid protocol: 185 127.0.0.1:20001
[   81.374938][ T7303] xt_ipcomp: unknown flags F7
[   81.382029][ T7303] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[   81.531895][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'.
[   81.537362][ T7314] netlink: 248 bytes leftover after parsing attributes in process `syz.1.472'.
[   81.657874][ T7318] netlink: 'syz.1.473': attribute type 12 has an invalid length.
[   81.660948][ T7318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.473'.
[   81.821056][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.237287][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.240530][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.243399][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.248290][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.256119][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.298562][ T7338] lo speed is unknown, defaulting to 1000
[   82.465702][ T7338] chnl_net:caif_netlink_parms(): no params data found
[   82.544668][ T7355] openvswitch: netlink: IPv6 tunnel dst address is zero
[   82.577894][ T7338] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.580882][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.583486][ T7338] bridge_slave_0: entered allmulticast mode
[   82.608025][ T7338] bridge_slave_0: entered promiscuous mode
[   82.623474][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.632948][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.640393][ T7338] bridge_slave_1: entered allmulticast mode
[   82.643470][ T7338] bridge_slave_1: entered promiscuous mode
[   82.736801][ T7338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.741967][ T7338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.783206][ T7338] team0: Port device team_slave_0 added
[   82.788722][ T7338] team0: Port device team_slave_1 added
[   82.836064][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.839059][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.853743][ T7338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.867440][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.870377][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.880142][ T7338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.963540][ T7338] hsr_slave_0: entered promiscuous mode
[   82.969945][ T7338] hsr_slave_1: entered promiscuous mode
[   83.379290][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.428397][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.484871][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.654528][   T13] bridge_slave_1: left allmulticast mode
[   83.658341][   T13] bridge_slave_1: left promiscuous mode
[   83.660830][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.668343][   T13] bridge_slave_0: left allmulticast mode
[   83.670618][   T13] bridge_slave_0: left promiscuous mode
[   83.673039][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.896268][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.918478][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.922409][   T13] bond0 (unregistering): Released all slaves
[   83.936640][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'.
[   84.053764][ T7434] xt_HMARK: proto mask must be zero with L3 mode
[   84.080458][ T7434] raw_sendmsg: syz.1.506 forgot to set AF_INET. Fix it!
[   84.267715][   T13] hsr_slave_0: left promiscuous mode
[   84.270690][   T13] hsr_slave_1: left promiscuous mode
[   84.273476][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.283846][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.284916][ T5815] Bluetooth: hci2: command tx timeout
[   84.290329][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.297805][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.311625][   T13] veth1_macvtap: left promiscuous mode
[   84.316153][   T13] veth0_macvtap: left promiscuous mode
[   84.319132][   T13] veth1_vlan: left promiscuous mode
[   84.321418][   T13] veth0_vlan: left promiscuous mode
[   84.682993][   T13] team0 (unregistering): Port device team_slave_1 removed
[   84.710325][   T13] team0 (unregistering): Port device team_slave_0 removed
[   85.148674][ T7338] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.162873][ T7338] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.168965][ T7338] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.198826][ T7338] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.228764][ T7472] tipc: New replicast peer: 0.0.0.0
[   85.230640][ T7472] tipc: Enabled bearer <udp:syz2>, priority 10
[   85.311466][ T7472] lo speed is unknown, defaulting to 1000
[   85.410673][   T24] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 0/3
[   85.415706][   T24] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[   85.444473][ T7338] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.492801][ T7338] 8021q: adding VLAN 0 to HW filter on device team0
[   85.551172][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.554285][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.575902][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.578938][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.606293][ T7504] netlink: 52 bytes leftover after parsing attributes in process `syz.0.518'.
[   85.612904][ T7472] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   85.614015][ T7504] netlink: 52 bytes leftover after parsing attributes in process `syz.0.518'.
[   85.619427][ T7504] netlink: 52 bytes leftover after parsing attributes in process `syz.0.518'.
[   85.640840][ T7498] netlink: 1 bytes leftover after parsing attributes in process `syz.0.518'.
[   85.829333][ T7514] netlink: 36 bytes leftover after parsing attributes in process `syz.1.520'.
[   85.962902][ T7338] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.015881][ T7338] veth0_vlan: entered promiscuous mode
[   86.032076][ T7338] veth1_vlan: entered promiscuous mode
[   86.061947][ T7338] veth0_macvtap: entered promiscuous mode
[   86.068012][ T7338] veth1_macvtap: entered promiscuous mode
[   86.081697][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.100510][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.108657][ T7338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.111446][ T7338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.115743][ T7338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.119650][ T7338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.190055][ T7545] netlink: 'syz.0.530': attribute type 2 has an invalid length.
[   86.193071][ T7545] netlink: 'syz.0.530': attribute type 2 has an invalid length.
[   86.206562][ T7545] netlink: 'syz.0.530': attribute type 1 has an invalid length.
[   86.246247][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.249245][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.291220][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.533'.
[   86.294546][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.297942][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.365823][ T5815] Bluetooth: hci2: command tx timeout
[   86.459731][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'.
[   86.463859][ T7563] netlink: 248 bytes leftover after parsing attributes in process `syz.0.536'.
[   86.504745][ T7558] netlink: 'syz.1.534': attribute type 11 has an invalid length.
[   86.512917][ T7558] syzkaller1: entered promiscuous mode
[   86.517256][ T7558] syzkaller1: entered allmulticast mode
[   86.560551][ T7565] block nbd0: Unsupported socket: shutdown callout must be supported.
[   86.584860][ T7565] batadv0: entered promiscuous mode
[   86.587870][ T7565] batadv0: entered allmulticast mode
[   86.922563][ T7588] netlink: 'syz.0.542': attribute type 17 has an invalid length.
[   86.927880][ T7588] netlink: 2 bytes leftover after parsing attributes in process `syz.0.542'.
[   86.931227][ T7588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.946888][ T5843] lo speed is unknown, defaulting to 1000
[   86.948792][ T5843] syz1: Port: 1 Link ACTIVE
[   87.034917][ T7601] delete_channel: no stack
[   87.090147][ T7608] netlink: 'syz.1.548': attribute type 3 has an invalid length.
[   87.093319][ T7608] netlink: 'syz.1.548': attribute type 3 has an invalid length.
[   87.280970][ T7622] xt_connbytes: Forcing CT accounting to be enabled
[   87.285032][ T7622] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[   87.592439][ T7638] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[   87.823389][ T7643] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[   87.827819][ T7643] netlink: 'syz.0.559': attribute type 2 has an invalid length.
[   87.886090][ T5841] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.594483][   T10] tipc: Node number set to 1466248749
[   88.680624][ T5204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.685499][ T5204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.691568][ T5204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.706474][ T5204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.709906][ T5204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.752059][ T7663] lo speed is unknown, defaulting to 1000
[   88.879022][ T7663] chnl_net:caif_netlink_parms(): no params data found
[   88.955422][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.958232][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.961544][ T7663] bridge_slave_0: entered allmulticast mode
[   88.965430][ T7663] bridge_slave_0: entered promiscuous mode
[   88.968580][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.970844][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.973210][ T7663] bridge_slave_1: entered allmulticast mode
[   88.976379][ T7663] bridge_slave_1: entered promiscuous mode
[   89.019525][ T7663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.030638][ T7684] can: request_module (can-proto-0) failed.
[   89.033826][ T7663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.062633][ T7663] team0: Port device team_slave_0 added
[   89.068414][ T7663] team0: Port device team_slave_1 added
[   89.090266][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.093087][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.104651][ T7663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.112267][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.115742][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.125363][ T7663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.186882][ T7663] hsr_slave_0: entered promiscuous mode
[   89.189833][ T7663] hsr_slave_1: entered promiscuous mode
[   89.192608][ T7663] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.195677][ T7663] Cannot create hsr debugfs directory
[   89.537886][ T7710] sctp: [Deprecated]: syz.0.576 (pid 7710) Use of int in maxseg socket option.
[   89.537886][ T7710] Use struct sctp_assoc_value instead
[   89.572437][ T5841] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.639218][ T5841] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.688591][ T5841] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.709656][ T7715] netlink: 'syz.1.578': attribute type 1 has an invalid length.
[   89.726628][ T7715] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.740430][ T7715] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.742941][ T7715] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   89.749272][ T7715] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   89.816570][ T7715] gretap1: entered promiscuous mode
[   89.822540][ T7715] bond2: (slave gretap1): making interface the new active one
[   89.828924][ T7715] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   89.858707][ T7715] bond2: entered promiscuous mode
[   89.862567][ T7715] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   89.868202][ T7715] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   89.873092][ T7715] bond2: left promiscuous mode
[   89.901575][ T5841] bridge_slave_1: left allmulticast mode
[   89.904244][ T5841] bridge_slave_1: left promiscuous mode
[   89.906810][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.910973][ T5841] bridge_slave_0: left allmulticast mode
[   89.912875][ T5841] bridge_slave_0: left promiscuous mode
[   89.917021][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.042548][ T7724] __nla_validate_parse: 7 callbacks suppressed
[   90.042560][ T7724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.582'.
[   90.176830][ T5841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.182900][ T5841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.188570][ T5841] bond0 (unregistering): Released all slaves
[   90.269013][ T7727] netlink: 'syz.1.583': attribute type 1 has an invalid length.
[   90.272316][ T7727] netlink: 228 bytes leftover after parsing attributes in process `syz.1.583'.
[   90.369101][ T7731] netlink: 136 bytes leftover after parsing attributes in process `syz.1.584'.
[   90.385533][ T7731] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   90.565645][ T5841] hsr_slave_0: left promiscuous mode
[   90.568426][ T5841] hsr_slave_1: left promiscuous mode
[   90.571944][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.577997][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.586355][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.589589][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.608292][ T5841] veth1_macvtap: left promiscuous mode
[   90.611463][ T5841] veth0_macvtap: left promiscuous mode
[   90.613641][ T5841] veth1_vlan: left promiscuous mode
[   90.616549][ T5841] veth0_vlan: left promiscuous mode
[   90.765972][ T5815] Bluetooth: hci2: command tx timeout
[   90.955937][ T5841] team0 (unregistering): Port device team_slave_1 removed
[   90.987876][ T5841] team0 (unregistering): Port device team_slave_0 removed
[   91.233257][ T7751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.236287][ T7752] syzkaller0: entered promiscuous mode
[   91.237294][ T7757] netlink: 'syz.0.588': attribute type 1 has an invalid length.
[   91.242445][ T7752] syzkaller0: entered allmulticast mode
[   91.248309][ T7757] netlink: 'syz.0.588': attribute type 1 has an invalid length.
[   91.254436][ T7755] tipc: Resetting bearer <eth:syzkaller0>
[   91.322180][ T7743] tipc: Resetting bearer <eth:syzkaller0>
[   91.335894][ T7743] tipc: Disabling bearer <eth:syzkaller0>
[   91.402037][ T7663] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.417848][ T7663] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.426833][ T7663] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.440737][ T7663] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.536443][ T7663] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.547423][ T7663] 8021q: adding VLAN 0 to HW filter on device team0
[   91.552686][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.555206][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.576366][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.578784][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.620466][ T7781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'.
[   91.624496][ T7781] netlink: 'syz.0.594': attribute type 21 has an invalid length.
[   91.627076][ T7781] netlink: 132 bytes leftover after parsing attributes in process `syz.0.594'.
[   91.712883][ T7788] syzkaller1: entered promiscuous mode
[   91.716285][ T7788] syzkaller1: entered allmulticast mode
[   91.720248][ T7663] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.746640][ T7663] veth0_vlan: entered promiscuous mode
[   91.752276][ T7663] veth1_vlan: entered promiscuous mode
[   91.769926][ T7663] veth0_macvtap: entered promiscuous mode
[   91.773505][ T7663] veth1_macvtap: entered promiscuous mode
[   91.783847][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.791897][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.798981][ T7663] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.802008][ T7663] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.806492][ T7663] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.809825][ T7663] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.879450][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.882019][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.901592][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.905856][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.099967][ T7801] netlink: 'syz.0.599': attribute type 3 has an invalid length.
[   92.209073][ T7808] netlink: 'syz.0.602': attribute type 4 has an invalid length.
[   92.268524][ T7808] netlink: 256 bytes leftover after parsing attributes in process `syz.0.602'.
[   92.381164][ T7814] netlink: 'syz.0.604': attribute type 10 has an invalid length.
[   92.385680][ T7814] batadv0: left promiscuous mode
[   92.387575][ T7814] batadv0: left allmulticast mode
[   92.394549][ T7814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.398578][ T7814] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   93.029051][ T7822] xt_l2tp: invalid flags combination: 4
[   93.192600][ T7830] ieee802154 phy0 wpan0: encryption failed: -90
[   93.501429][ T7849] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   93.507168][ T7849] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   93.583011][ T7847] lo speed is unknown, defaulting to 1000
[   94.112040][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.041238][ T5204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   95.045568][ T5204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   95.048928][ T5204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   95.052842][ T5204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   95.056622][ T5204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   95.098133][ T7887] lo speed is unknown, defaulting to 1000
[   95.144231][ T7893] netlink: 'syz.0.632': attribute type 10 has an invalid length.
[   95.170043][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.633'.
[   95.286764][ T7887] chnl_net:caif_netlink_parms(): no params data found
[   95.400547][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.402847][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.406519][ T7887] bridge_slave_0: entered allmulticast mode
[   95.410123][ T7887] bridge_slave_0: entered promiscuous mode
[   95.415645][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.418354][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.421413][ T7887] bridge_slave_1: entered allmulticast mode
[   95.425958][ T7887] bridge_slave_1: entered promiscuous mode
[   95.466356][ T7887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.472171][ T7887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.504853][ T7887] team0: Port device team_slave_0 added
[   95.508732][ T7887] team0: Port device team_slave_1 added
[   95.531665][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.536204][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.546394][ T7887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.550879][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.553070][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.561569][ T7887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.596604][ T7887] hsr_slave_0: entered promiscuous mode
[   95.599064][ T7887] hsr_slave_1: entered promiscuous mode
[   95.622965][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'.
[   95.811645][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.830337][ T7924] netlink: 'syz.0.641': attribute type 2 has an invalid length.
[   95.832843][ T7924] netlink: 164 bytes leftover after parsing attributes in process `syz.0.641'.
[   95.878986][ T7928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.644'.
[   95.900400][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.910749][ T7928] netlink: 'syz.1.644': attribute type 1 has an invalid length.
[   95.988962][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'.
[   96.708644][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.838596][   T12] bridge_slave_1: left allmulticast mode
[   96.841226][   T12] bridge_slave_1: left promiscuous mode
[   96.843206][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.856409][   T12] bridge_slave_0: left allmulticast mode
[   96.858202][   T12] bridge_slave_0: left promiscuous mode
[   96.860015][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.075174][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.079605][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.084220][ T5815] Bluetooth: hci2: command tx timeout
[   97.086629][   T12] bond0 (unregistering): Released all slaves
[   97.151393][ T7955] --map-set only usable from mangle table
[   97.394748][   T12] hsr_slave_0: left promiscuous mode
[   97.398209][   T12] hsr_slave_1: left promiscuous mode
[   97.400657][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.403097][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.408996][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.411846][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.421323][   T12] veth1_macvtap: left promiscuous mode
[   97.423170][   T12] veth0_macvtap: left promiscuous mode
[   97.428868][   T12] veth1_vlan: left promiscuous mode
[   97.430734][   T12] veth0_vlan: left promiscuous mode
[   97.782607][   T12] team0 (unregistering): Port device team_slave_1 removed
[   97.808723][   T12] team0 (unregistering): Port device team_slave_0 removed
[   98.044236][ T7969] lo speed is unknown, defaulting to 1000
[   98.307267][ T7996] netpci0: tun_chr_ioctl cmd 1074025681
[   98.310960][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'.
[   98.371179][ T7887] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   98.377136][ T7887] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   98.386529][ T7887] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   98.390872][ T7887] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   98.452241][ T7887] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.480869][ T7887] 8021q: adding VLAN 0 to HW filter on device team0
[   98.487473][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.490001][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.523833][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.526616][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.573126][ T7887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   98.644588][ T8017] netlink: 'syz.0.666': attribute type 4 has an invalid length.
[   98.676681][ T8026] netlink: 'syz.1.668': attribute type 2 has an invalid length.
[   98.680733][ T8027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.668'.
[   98.685566][ T8027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.668'.
[   98.715537][ T7887] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.776921][ T7887] veth0_vlan: entered promiscuous mode
[   98.783107][ T7887] veth1_vlan: entered promiscuous mode
[   98.792374][ T8034] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   98.796815][ T8034] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   98.805109][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'.
[   98.814316][ T8034] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   98.817853][ T8034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.831761][ T7887] veth0_macvtap: entered promiscuous mode
[   98.840153][ T7887] veth1_macvtap: entered promiscuous mode
[   98.865033][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.871705][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.887344][ T7887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.890188][ T7887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.892977][ T7887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.897117][ T7887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.955080][ T3603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.957599][ T3603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.971613][ T8041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.674'.
[   98.986735][ T3603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.989221][ T3603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.164945][ T5204] Bluetooth: hci2: command tx timeout
[  114.525631][   T27] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  132.447503][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.449622][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  137.566725][ T5862] ------------[ cut here ]------------
[  137.569024][ T5862] workqueue: cannot queue hci_conn_timeout on wq hci2
[  137.571506][ T5862] WARNING: CPU: 0 PID: 5862 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0
[  137.574415][ T5862] Modules linked in:
[  137.576485][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: kworker/0:4 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  137.581981][ T5862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.586155][ T5862] Workqueue: events l2cap_chan_timeout
[  137.588473][ T5862] RIP: 0010:__queue_work+0xd62/0xfe0
[  137.590707][ T5862] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  137.598807][ T5862] RSP: 0018:ffffc90003b7f7a8 EFLAGS: 00010046
[  137.601389][ T5862] RAX: 2b2befb35c632400 RBX: 0000000000000020 RCX: ffff8880205dd640
[  137.604668][ T5862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  137.607788][ T5862] RBP: 1ffff11024684f38 R08: ffff88804b024293 R09: 1ffff11009604852
[  137.611045][ T5862] R10: dffffc0000000000 R11: ffffed1009604853 R12: dffffc0000000000
[  137.614273][ T5862] R13: ffff888028414960 R14: ffff88801a494008 R15: ffff888123427978
[  137.617491][ T5862] FS:  0000000000000000(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  137.620726][ T5862] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  137.623285][ T5862] CR2: 00007fd7be85c7e4 CR3: 000000000df38000 CR4: 00000000000006f0
[  137.626521][ T5862] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  137.629474][ T5862] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  137.632011][ T5862] Call Trace:
[  137.633071][ T5862]  <TASK>
[  137.634034][ T5862]  ? __queue_delayed_work+0xe1/0x2d0
[  137.635759][ T5862]  queue_delayed_work_on+0x18b/0x280
[  137.637509][ T5862]  ? __pfx___cancel_work+0x10/0x10
[  137.639703][ T5862]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  137.642205][ T5862]  ? hci_conn_drop+0x14d/0x280
[  137.644205][ T5862]  l2cap_chan_del+0x285/0x5e0
[  137.646077][ T5862]  l2cap_chan_close+0x597/0x980
[  137.647943][ T5862]  ? __pfx_l2cap_chan_close+0x10/0x10
[  137.649880][ T5862]  ? process_scheduled_works+0x9ef/0x17b0
[  137.651745][ T5862]  l2cap_chan_timeout+0x158/0x390
[  137.653827][ T5862]  ? process_scheduled_works+0x9ef/0x17b0
[  137.656181][ T5862]  process_scheduled_works+0xae1/0x17b0
[  137.658376][ T5862]  ? __pfx_process_scheduled_works+0x10/0x10
[  137.660540][ T5862]  worker_thread+0x8a0/0xda0
[  137.662054][ T5862]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  137.664080][ T5862]  ? __kthread_parkme+0x7b/0x200
[  137.665844][ T5862]  kthread+0x711/0x8a0
[  137.667554][ T5862]  ? __pfx_worker_thread+0x10/0x10
[  137.669682][ T5862]  ? __pfx_kthread+0x10/0x10
[  137.671630][ T5862]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.673803][ T5862]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.675901][ T5862]  ? __pfx_kthread+0x10/0x10
[  137.677729][ T5862]  ret_from_fork+0x3fc/0x770
[  137.679474][ T5862]  ? __pfx_ret_from_fork+0x10/0x10
[  137.681119][ T5862]  ? __switch_to_asm+0x39/0x70
[  137.682701][ T5862]  ? __switch_to_asm+0x33/0x70
[  137.684235][ T5862]  ? __pfx_kthread+0x10/0x10
[  137.685710][ T5862]  ret_from_fork_asm+0x1a/0x30
[  137.687265][ T5862]  </TASK>
[  137.688506][ T5862] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  137.691479][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: kworker/0:4 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  137.696292][ T5862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.699874][ T5862] Workqueue: events l2cap_chan_timeout
[  137.701636][ T5862] Call Trace:
[  137.702740][ T5862]  <TASK>
[  137.703730][ T5862]  dump_stack_lvl+0x99/0x250
[  137.705254][ T5862]  ? __asan_memcpy+0x40/0x70
[  137.706758][ T5862]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.708440][ T5862]  ? __pfx__printk+0x10/0x10
[  137.710105][ T5862]  panic+0x2db/0x790
[  137.711383][ T5862]  ? __pfx_panic+0x10/0x10
[  137.712828][ T5862]  ? show_trace_log_lvl+0x4fb/0x550
[  137.714505][ T5862]  ? ret_from_fork_asm+0x1a/0x30
[  137.716178][ T5862]  __warn+0x31b/0x4b0
[  137.717483][ T5862]  ? __queue_work+0xd62/0xfe0
[  137.719300][ T5862]  ? __queue_work+0xd62/0xfe0
[  137.721310][ T5862]  report_bug+0x2be/0x4f0
[  137.723118][ T5862]  ? __queue_work+0xd62/0xfe0
[  137.725039][ T5862]  ? __queue_work+0xd62/0xfe0
[  137.726733][ T5862]  ? __queue_work+0xd64/0xfe0
[  137.728233][ T5862]  handle_bug+0x84/0x160
[  137.729662][ T5862]  exc_invalid_op+0x1a/0x50
[  137.731268][ T5862]  asm_exc_invalid_op+0x1a/0x20
[  137.733268][ T5862] RIP: 0010:__queue_work+0xd62/0xfe0
[  137.735437][ T5862] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  137.742043][ T5862] RSP: 0018:ffffc90003b7f7a8 EFLAGS: 00010046
[  137.744090][ T5862] RAX: 2b2befb35c632400 RBX: 0000000000000020 RCX: ffff8880205dd640
[  137.746560][ T5862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  137.749463][ T5862] RBP: 1ffff11024684f38 R08: ffff88804b024293 R09: 1ffff11009604852
[  137.752766][ T5862] R10: dffffc0000000000 R11: ffffed1009604853 R12: dffffc0000000000
[  137.755996][ T5862] R13: ffff888028414960 R14: ffff88801a494008 R15: ffff888123427978
[  137.759202][ T5862]  ? __queue_work+0xd61/0xfe0
[  137.761159][ T5862]  ? __queue_delayed_work+0xe1/0x2d0
[  137.763238][ T5862]  queue_delayed_work_on+0x18b/0x280
[  137.764982][ T5862]  ? __pfx___cancel_work+0x10/0x10
[  137.766640][ T5862]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  137.768483][ T5862]  ? hci_conn_drop+0x14d/0x280
[  137.770337][ T5862]  l2cap_chan_del+0x285/0x5e0
[  137.772033][ T5862]  l2cap_chan_close+0x597/0x980
[  137.773602][ T5862]  ? __pfx_l2cap_chan_close+0x10/0x10
[  137.775343][ T5862]  ? process_scheduled_works+0x9ef/0x17b0
[  137.777217][ T5862]  l2cap_chan_timeout+0x158/0x390
[  137.779097][ T5862]  ? process_scheduled_works+0x9ef/0x17b0
[  137.781230][ T5862]  process_scheduled_works+0xae1/0x17b0
[  137.783328][ T5862]  ? __pfx_process_scheduled_works+0x10/0x10
[  137.785747][ T5862]  worker_thread+0x8a0/0xda0
[  137.787490][ T5862]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  137.790090][ T5862]  ? __kthread_parkme+0x7b/0x200
[  137.792145][ T5862]  kthread+0x711/0x8a0
[  137.793640][ T5862]  ? __pfx_worker_thread+0x10/0x10
[  137.795710][ T5862]  ? __pfx_kthread+0x10/0x10
[  137.797276][ T5862]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.798969][ T5862]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.800870][ T5862]  ? __pfx_kthread+0x10/0x10
[  137.802438][ T5862]  ret_from_fork+0x3fc/0x770
[  137.804175][ T5862]  ? __pfx_ret_from_fork+0x10/0x10
[  137.806439][ T5862]  ? __switch_to_asm+0x39/0x70
[  137.808328][ T5862]  ? __switch_to_asm+0x33/0x70
[  137.810176][ T5862]  ? __pfx_kthread+0x10/0x10
[  137.812054][ T5862]  ret_from_fork_asm+0x1a/0x30
[  137.813787][ T5862]  </TASK>
[  137.815580][ T5862] Kernel Offset: disabled
[  137.817138][ T5862] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:07:57  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003b7ef50
R8 =ffff888108b78237 R9 =1ffff1102116f046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48cf R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd7be85c7e4 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ff00 XMM01=0000000000000000 0000000000000000
XMM02=ffff000000000000 0000000000000000 XMM03=0000000000000000 000000000000ffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=aa93499849d62800 RBX=ffffffff81974d58 RCX=aa93499849d62800 RDX=0000000000000001
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d1000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd7be8889c7 CR3=0000000026884000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000001cb341d0 0000000000000005 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
