last executing test programs:

16.864934842s ago: executing program 0 (id=2610):
socket(0x9, 0x1, 0xfffffffe)

16.798270496s ago: executing program 0 (id=2613):
r0 = epoll_create1(0x0)
poll(&(0x7f0000000040)=[{r0, 0x200}], 0x1, 0xdb3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100))
shutdown(r1, 0x0)
epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b})

16.398361449s ago: executing program 1 (id=2626):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000004000)={'ip6_vti0\x00', &(0x7f0000003f80)={'syztnl1\x00', 0x0, 0x29, 0xc, 0x2, 0x438f, 0xf, @ipv4={'\x00', '\xff\xff', @private=0x101}, @loopback, 0x7, 0x40, 0x9, 0x1}})

16.398024701s ago: executing program 1 (id=2628):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0x144, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in=@remote, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x0, 0x4, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@private0, 0x4d3, 0x2b}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2, 0xfffffffa, 0x401, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x2b}, 0xa, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x1fc}}, 0x4000)

16.328211958s ago: executing program 1 (id=2629):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}})

16.328036498s ago: executing program 1 (id=2630):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)

16.246282725s ago: executing program 1 (id=2631):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x2}}]}}, 0x0, 0x62}, 0x28)

16.24593035s ago: executing program 1 (id=2633):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="2f0429bd7000fbdbdf25030000000c0002000700000000000000080001000000000005000a00ff000000400007800c00018008000100", @ANYRES32], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800)

16.006654675s ago: executing program 2 (id=2641):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x38, 0x0, 0xb, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x12, 0x1, './cgroup/syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040040}, 0xc0)

15.917982497s ago: executing program 2 (id=2642):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000000, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
close(r4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127)
close(r3)

15.91771113s ago: executing program 0 (id=2643):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r0}, 0x10)

15.849545175s ago: executing program 0 (id=2644):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

15.849227425s ago: executing program 2 (id=2645):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @private2, 0x6}}}, 0x84)

15.849086421s ago: executing program 0 (id=2646):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
write$tun(r1, &(0x7f00000004c0)={@val={0x0, 0x88a8}, @val={0x0, 0x0, 0x19, 0x7, 0x101, 0x3}, @ipv6=@tcp={0x2, 0x6, '4\be', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x2d}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x2, 0x0, 0x3}}}}}, 0x4a)
r2 = socket$netlink(0x10, 0x3, 0xc)
splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf)

15.847308594s ago: executing program 2 (id=2647):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8080)

15.76721065s ago: executing program 2 (id=2648):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)

15.766832841s ago: executing program 2 (id=2649):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)={0x5fc, r1, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x5e0, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "84a128c602d33f28258289f318397cb3703d6bca6686c0f760f0b82d85c2c359"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @mcast2, 0xc01}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}]}, {0x508, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xcc, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x3b4, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xcedf, @empty, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "82fa05b3a740c0f3c57272f7452e10aa428307653d6478ac7eef6c3f6689b145"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xb, @remote, 0x8}}]}, {0x4}]}]}, 0x5fc}}, 0x0)

15.766553204s ago: executing program 0 (id=2650):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000824)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x4040040)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x28, 0x5, 0x0)
listen(r4, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10)
accept4$unix(r4, 0x0, 0x0, 0x0)
close(0x4)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

1.046240611s ago: executing program 32 (id=2633):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="2f0429bd7000fbdbdf25030000000c0002000700000000000000080001000000000005000a00ff000000400007800c00018008000100", @ANYRES32], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800)

26.362532ms ago: executing program 33 (id=2650):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000824)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x4040040)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x28, 0x5, 0x0)
listen(r4, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10)
accept4$unix(r4, 0x0, 0x0, 0x0)
close(0x4)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

0s ago: executing program 34 (id=2649):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)={0x5fc, r1, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x5e0, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "84a128c602d33f28258289f318397cb3703d6bca6686c0f760f0b82d85c2c359"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @mcast2, 0xc01}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}]}, {0x508, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xcc, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x3b4, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xcedf, @empty, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "82fa05b3a740c0f3c57272f7452e10aa428307653d6478ac7eef6c3f6689b145"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xb, @remote, 0x8}}]}, {0x4}]}]}, 0x5fc}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57929' (ED25519) to the list of known hosts.
syzkaller login: [   56.889842][ T5783] cgroup: Unknown subsys name 'net'
[   57.004133][ T5783] cgroup: Unknown subsys name 'cpuset'
[   57.011018][ T5783] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.430762][ T5783] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.587540][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.591991][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.595628][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.599589][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.602628][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.603029][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.609808][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.621091][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.630233][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.634519][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.638488][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.641405][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.646165][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.651169][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.657374][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.992276][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   66.078223][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   66.148442][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.152033][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.155392][ T5847] bridge_slave_0: entered allmulticast mode
[   66.159185][ T5847] bridge_slave_0: entered promiscuous mode
[   66.194435][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.197135][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.200232][ T5847] bridge_slave_1: entered allmulticast mode
[   66.203575][ T5847] bridge_slave_1: entered promiscuous mode
[   66.257675][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.267637][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   66.279457][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.367358][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.370452][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.373797][ T5848] bridge_slave_0: entered allmulticast mode
[   66.377856][ T5848] bridge_slave_0: entered promiscuous mode
[   66.383972][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.387242][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.390620][ T5848] bridge_slave_1: entered allmulticast mode
[   66.394476][ T5848] bridge_slave_1: entered promiscuous mode
[   66.425102][ T5847] team0: Port device team_slave_0 added
[   66.455614][ T5847] team0: Port device team_slave_1 added
[   66.460427][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.477299][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.521824][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.524323][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.527211][ T5853] bridge_slave_0: entered allmulticast mode
[   66.531226][ T5853] bridge_slave_0: entered promiscuous mode
[   66.555163][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.557704][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.567693][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.573430][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.576164][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.579059][ T5853] bridge_slave_1: entered allmulticast mode
[   66.583913][ T5853] bridge_slave_1: entered promiscuous mode
[   66.597024][ T5848] team0: Port device team_slave_0 added
[   66.600326][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.602979][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.612437][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.636460][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.640871][ T5848] team0: Port device team_slave_1 added
[   66.645049][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.695365][ T5853] team0: Port device team_slave_0 added
[   66.711422][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.714262][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.725380][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.732322][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.735241][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.746268][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.752438][ T5853] team0: Port device team_slave_1 added
[   66.791632][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.794041][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.804009][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.813980][ T5847] hsr_slave_0: entered promiscuous mode
[   66.817239][ T5847] hsr_slave_1: entered promiscuous mode
[   66.832317][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.834563][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.844874][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.903055][ T5848] hsr_slave_0: entered promiscuous mode
[   66.906364][ T5848] hsr_slave_1: entered promiscuous mode
[   66.909544][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   66.912099][ T5848] Cannot create hsr debugfs directory
[   66.945295][ T5853] hsr_slave_0: entered promiscuous mode
[   66.948071][ T5853] hsr_slave_1: entered promiscuous mode
[   66.951122][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   66.953479][ T5853] Cannot create hsr debugfs directory
[   67.243735][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.253482][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.268617][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.278318][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.352175][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.367004][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.377666][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.399914][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.457156][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.465180][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.478549][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.486377][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.582091][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.627495][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   67.650255][ T5859] Bluetooth: hci1: command tx timeout
[   67.655291][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.658361][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.689865][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.696189][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.699475][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.727227][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.730449][ T5859] Bluetooth: hci2: command tx timeout
[   67.730819][ T5854] Bluetooth: hci0: command tx timeout
[   67.754645][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   67.775395][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   67.782283][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.784569][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.803633][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.806872][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.821409][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.824604][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.834592][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.866834][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.869791][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.981475][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.037302][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.117311][ T5847] veth0_vlan: entered promiscuous mode
[   68.172119][ T5847] veth1_vlan: entered promiscuous mode
[   68.180595][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.234117][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.241405][ T5847] veth0_macvtap: entered promiscuous mode
[   68.261106][ T5847] veth1_macvtap: entered promiscuous mode
[   68.286402][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.303208][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.311276][ T5853] veth0_vlan: entered promiscuous mode
[   68.320643][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.332157][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.337189][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.352648][ T5853] veth1_vlan: entered promiscuous mode
[   68.367609][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.402667][ T5848] veth0_vlan: entered promiscuous mode
[   68.438414][ T5848] veth1_vlan: entered promiscuous mode
[   68.498596][ T5853] veth0_macvtap: entered promiscuous mode
[   68.509837][ T4672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.513085][ T4672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.534798][ T5853] veth1_macvtap: entered promiscuous mode
[   68.556063][ T4672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.561581][ T4672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.575109][ T5848] veth0_macvtap: entered promiscuous mode
[   68.591162][ T5848] veth1_macvtap: entered promiscuous mode
[   68.602952][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.616446][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.629792][ T5879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.638937][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.648829][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.655645][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.660186][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.681552][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.705125][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.722274][ T5880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.744999][ T5880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.758550][ T5880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.780192][ T5880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.825178][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.828558][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.903491][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.906786][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.970962][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.974146][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.051178][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.054345][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.170489][ T5927] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   69.181381][ T5931] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.254593][ T5933] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   69.730166][ T5854] Bluetooth: hci1: command tx timeout
[   69.809436][ T5854] Bluetooth: hci0: command tx timeout
[   69.810447][ T5859] Bluetooth: hci2: command tx timeout
[   69.850139][ T5973] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.074822][ T5981] tipc: Started in network mode
[   70.077009][ T5981] tipc: Node identity 0a2c1de7c4c2, cluster identity 4711
[   70.081827][ T5981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.097291][ T5981] syzkaller0: entered promiscuous mode
[   70.103314][ T5981] syzkaller0: entered allmulticast mode
[   70.113210][ T5981] tipc: Resetting bearer <eth:syzkaller0>
[   70.123805][ T5980] tipc: Resetting bearer <eth:syzkaller0>
[   70.148475][ T5980] tipc: Disabling bearer <eth:syzkaller0>
[   70.270919][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.274981][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.390855][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.412205][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.414552][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'.
[   70.418555][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'.
[   70.424721][ T5997] netlink: 124 bytes leftover after parsing attributes in process `syz.1.39'.
[   70.584716][ T5880] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.599436][ T5879] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.606041][ T5879] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.636486][ T5879] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.435808][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   71.438808][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.670252][ T6046] netlink: 'syz.0.60': attribute type 2 has an invalid length.
[   71.673414][ T6046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.60'.
[   71.794026][ T6051] netlink: 96 bytes leftover after parsing attributes in process `syz.0.62'.
[   71.819411][ T5859] Bluetooth: hci1: command tx timeout
[   71.889674][ T5859] Bluetooth: hci2: command tx timeout
[   71.890600][ T5854] Bluetooth: hci0: command tx timeout
[   71.953079][ T6061] netlink: 844 bytes leftover after parsing attributes in process `syz.0.67'.
[   71.959142][ T6061] Zero length message leads to an empty skb
[   71.973398][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'.
[   72.134850][ T6070] netlink: 'syz.2.71': attribute type 14 has an invalid length.
[   72.246775][ T6079] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.75'.
[   72.416920][ T6090] veth0: entered promiscuous mode
[   72.421508][ T6091] netlink: 'syz.2.81': attribute type 3 has an invalid length.
[   72.424761][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'.
[   72.447637][ T6090] veth0 (unregistering): left promiscuous mode
[   72.597018][ T6103] trusted_key: syz.1.87 sent an empty control message without MSG_MORE.
[   72.900485][ T6106] syzkaller0: entered allmulticast mode
[   72.941281][ T6106] syzkaller0 (unregistering): left allmulticast mode
[   73.343949][ T6144] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.99'.
[   73.366270][ T6142] macsec1: entered promiscuous mode
[   73.368460][ T6142] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   73.399617][ T6142] macsec1: entered allmulticast mode
[   73.401804][ T6142] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   73.465949][ T6148] Illegal XDP return value 243292454 on prog  (id 29) dev N/A, expect packet loss!
[   73.762918][ T2200] IPVS: starting estimator thread 0...
[   73.869638][ T6165] IPVS: using max 35 ests per chain, 84000 per kthread
[   73.891400][ T5854] Bluetooth: hci1: command tx timeout
[   73.970881][ T5854] Bluetooth: hci2: command tx timeout
[   74.170426][ T6181] Bluetooth: MGMT ver 1.23
[   74.314589][ T6199] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.535074][ T6215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.660650][ T6226] syz.0.134 uses obsolete (PF_INET,SOCK_PACKET)
[   75.145884][ T6265] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   75.383350][ T6281] macvlan2: entered allmulticast mode
[   75.385948][ T6281] veth1_vlan: entered allmulticast mode
[   75.400504][ T6281] veth1_vlan: left allmulticast mode
[   75.638855][ T6294] __nla_validate_parse: 1 callbacks suppressed
[   75.638872][ T6294] netlink: 44 bytes leftover after parsing attributes in process `syz.1.165'.
[   76.947002][ T6333] netlink: 'syz.0.181': attribute type 1 has an invalid length.
[   77.123774][ T6343] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.577668][ T6364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.192'.
[   78.132289][ T6385] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   78.183848][ T6387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.204'.
[   78.297789][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'.
[   78.413092][ T6396] Bluetooth: MGMT ver 1.23
[   78.467629][ T6398] vlan1: entered allmulticast mode
[   78.473850][ T6398] veth0_vlan: entered allmulticast mode
[   78.615142][ T6407] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.212'.
[   78.636428][ T6404] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.212'.
[   78.926223][ T6425] sctp: [Deprecated]: syz.2.222 (pid 6425) Use of int in maxseg socket option.
[   78.926223][ T6425] Use struct sctp_assoc_value instead
[   79.166448][ T6445] netlink: 'syz.2.230': attribute type 2 has an invalid length.
[   79.171461][ T6445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.230'.
[   80.455606][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'.
[   80.462307][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'.
[   80.466100][ T6515] netlink: 'syz.0.261': attribute type 12 has an invalid length.
[   80.499922][ T6515] netlink: 'syz.0.261': attribute type 14 has an invalid length.
[   80.535096][ T6521] bridge_slave_1: left allmulticast mode
[   80.536948][ T6521] bridge_slave_1: left promiscuous mode
[   80.539094][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.546353][ T6521] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   80.773057][ T6531] tipc: Started in network mode
[   80.775195][ T6531] tipc: Node identity 1247164c2656, cluster identity 4711
[   80.778870][ T6531] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.793240][ T6531] syzkaller0: entered promiscuous mode
[   80.800318][ T6531] syzkaller0: entered allmulticast mode
[   80.831091][ T6531] tipc: Resetting bearer <eth:syzkaller0>
[   80.838937][ T6530] tipc: Resetting bearer <eth:syzkaller0>
[   80.853479][ T6530] tipc: Disabling bearer <eth:syzkaller0>
[   81.700827][ T6605] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   81.734922][ T6609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.101239][ T6632] netlink: 60 bytes leftover after parsing attributes in process `syz.2.313'.
[   82.104947][ T6632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.313'.
[   82.638911][ T6639] netlink: 'syz.1.314': attribute type 3 has an invalid length.
[   82.988070][ T6662] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.324'.
[   83.810153][ T5859] Bluetooth: hci2: command 0x0405 tx timeout
[   83.976639][ T6738] ip6gre1: entered allmulticast mode
[   84.074656][ T6740] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   84.642200][ T6788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.374'.
[   84.655754][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'.
[   84.659098][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'.
[   84.702085][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'.
[   84.985830][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'.
[   85.766898][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'.
[   85.776774][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'.
[   85.948363][ T6889] dvmrp0: entered allmulticast mode
[   86.394780][ T6908] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   86.399329][ T6908] openvswitch: netlink: Message has 252 unknown bytes.
[   86.771386][   T47] cfg80211: failed to load regulatory.db
[   88.328852][ T7059] netlink: 'syz.1.492': attribute type 10 has an invalid length.
[   88.334018][ T7059] bridge0: port 3(macsec0) entered blocking state
[   88.336872][ T7059] bridge0: port 3(macsec0) entered disabled state
[   88.351176][ T7059] macsec0: entered allmulticast mode
[   88.353402][ T7059] veth1_macvtap: entered allmulticast mode
[   88.361880][ T7059] macsec0: entered promiscuous mode
[   88.364592][ T7059] bridge0: port 3(macsec0) entered blocking state
[   88.366728][ T7059] bridge0: port 3(macsec0) entered forwarding state
[   89.352000][ T7103] __nla_validate_parse: 1 callbacks suppressed
[   89.352012][ T7103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.510'.
[   89.664477][ T7129] netlink: 'syz.1.520': attribute type 32 has an invalid length.
[   89.756455][ T7135] vlan0: entered promiscuous mode
[   89.802824][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.526'.
[   89.935338][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'.
[   89.938953][ T7153] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   89.942895][ T7153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.196538][ T7177] netdevsim netdevsim0: loading /lib/firmware// failed with error -22
[   90.202424][ T7177] netdevsim netdevsim0: Direct firmware load for / failed with error -22
[   90.206223][ T7177] netdevsim netdevsim0: Falling back to sysfs fallback for: /
[   90.291280][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'.
[   90.982741][ T7234] netlink: 'syz.1.565': attribute type 1 has an invalid length.
[   91.026761][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'.
[   91.092976][ T7227] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.197719][ T7227] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.238915][ T7251] netlink: 'syz.1.571': attribute type 16 has an invalid length.
[   91.245797][ T7251] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.571'.
[   91.272224][ T7227] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.339035][ T7255] netlink: 'syz.0.573': attribute type 3 has an invalid length.
[   91.345725][ T7255] netlink: 132 bytes leftover after parsing attributes in process `syz.0.573'.
[   91.388823][ T7227] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.491502][ T5880] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.505324][ T5880] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.532374][ T5880] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.541613][ T5880] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.743864][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'.
[   91.746958][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'.
[   91.750328][ T7289] netlink: 'syz.1.588': attribute type 20 has an invalid length.
[   91.764893][ T5880] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.764996][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'.
[   91.767700][ T5880] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.767736][ T5880] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.767751][ T5880] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.784116][ T7289] netlink: 'syz.1.588': attribute type 20 has an invalid length.
[   92.316657][ T7342] delete_channel: no stack
[   93.008620][ T7386] netlink: 'syz.0.631': attribute type 12 has an invalid length.
[   95.416977][ T7512] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   95.458494][ T7512] bridge_slave_0: left allmulticast mode
[   95.460948][ T7512] bridge_slave_0: left promiscuous mode
[   95.462894][ T7512] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.470235][ T7512] bond0: (slave bond_slave_0): Releasing backup interface
[   95.477931][ T7512] bond0: (slave bond_slave_1): Releasing backup interface
[   95.494542][ T7512] team0: Port device team_slave_0 removed
[   95.504758][ T7522] netlink: 'syz.2.657': attribute type 10 has an invalid length.
[   95.508600][ T7512] team0: Port device team_slave_1 removed
[   95.513555][ T7512] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.515995][ T7512] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.520127][ T7512] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.522934][ T7512] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.527654][ T7512] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   95.542870][ T7522] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   95.551993][ T7522] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.560676][ T7522] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   95.578791][ T7525] syzkaller0: entered promiscuous mode
[   95.581392][ T7525] syzkaller0: entered allmulticast mode
[   95.586728][ T7522] syz.2.657 (7522) used greatest stack depth: 19896 bytes left
[   95.729175][ T7542] netlink: 'syz.1.667': attribute type 49 has an invalid length.
[   95.899056][ T7557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.133806][ T7572] ieee802154 phy0 wpan0: encryption failed: -22
[   96.884429][ T7629] __nla_validate_parse: 4 callbacks suppressed
[   96.884448][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.698'.
[   96.926019][ T7633] dvmrp8: entered allmulticast mode
[   96.932207][ T7632] dvmrp8: left allmulticast mode
[   97.064221][ T7646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.708'.
[   97.067951][ T7646] netlink: 48 bytes leftover after parsing attributes in process `syz.2.708'.
[   97.286709][ T7667] netlink: 14 bytes leftover after parsing attributes in process `syz.1.718'.
[   97.412808][ T7667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.422177][ T7667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.434010][ T7667] bond0 (unregistering): Released all slaves
[   97.762358][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'.
[   97.797810][ T7692] netlink: 'syz.2.727': attribute type 4 has an invalid length.
[   97.850741][ T7694] ip6gretap0: entered promiscuous mode
[   97.852987][ T7694] macsec1: entered allmulticast mode
[   97.859364][ T7694] ip6gretap0: entered allmulticast mode
[   97.870698][ T7694] ip6gretap0: left allmulticast mode
[   97.873010][ T7694] ip6gretap0: left promiscuous mode
[   97.992607][ T7701] netlink: 180 bytes leftover after parsing attributes in process `syz.1.731'.
[   98.333141][ T7721] ieee802154 phy0 wpan0: encryption failed: -22
[   98.555269][ T7732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.746'.
[   99.088914][ T7768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.759'.
[   99.221769][ T7779] netlink: 52 bytes leftover after parsing attributes in process `syz.2.764'.
[   99.225225][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'.
[   99.324805][ T7783] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  100.480926][ T7787] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.484333][ T7787] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.498965][ T7788] 8021q: adding VLAN 0 to HW filter on device batadv1
[  100.506074][ T7788] team0: Port device batadv1 added
[  100.548892][ T7787] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.556725][ T7787] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.611535][ T7787] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.615863][ T7787] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.675838][ T7787] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.680345][ T7787] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.783412][ T5880] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.786775][ T5880] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.801069][ T5880] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.804502][ T5880] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.816984][ T5880] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.819841][ T5880] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.831338][ T5880] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.834792][ T5880] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.066085][ T7879] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  102.073781][ T7881] netlink: 248 bytes leftover after parsing attributes in process `syz.1.809'.
[  103.078534][ T7959] netlink: 'syz.1.834': attribute type 1 has an invalid length.
[  103.414123][ T7991] netlink: 'syz.1.849': attribute type 1 has an invalid length.
[  103.806848][ T8029] vlan0: entered promiscuous mode
[  103.917169][ T8038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.866'.
[  103.931156][ T8038] netlink: 3 bytes leftover after parsing attributes in process `syz.1.866'.
[  104.141786][ T8055] netlink: 500 bytes leftover after parsing attributes in process `syz.2.874'.
[  104.247646][ T8064] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[  104.419962][ T8078] netlink: 'syz.2.885': attribute type 1 has an invalid length.
[  104.870285][ T8119] macsec1: entered promiscuous mode
[  104.872534][ T8119] macsec0: entered promiscuous mode
[  104.875431][ T8119] macsec1: entered allmulticast mode
[  104.877851][ T8119] macsec0: entered allmulticast mode
[  104.882012][ T8119] veth1_macvtap: entered allmulticast mode
[  104.992981][ T8126] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  105.007720][ T8126] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  105.541785][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'.
[  106.368772][ T8182] netlink: 76 bytes leftover after parsing attributes in process `syz.1.932'.
[  106.698926][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.705314][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.912405][ T8218] netlink: 48 bytes leftover after parsing attributes in process `syz.1.949'.
[  107.172914][ T8233] syz_tun: entered promiscuous mode
[  107.178104][ T8233] syz_tun: left promiscuous mode
[  107.406631][ T8241] syzkaller0: entered promiscuous mode
[  107.408833][ T8241] syzkaller0: entered allmulticast mode
[  108.407878][ T8262] openvswitch: netlink: Key type 251 is out of range max 32
[  108.891907][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'.
[  108.924332][ T8273] macsec0: left allmulticast mode
[  108.926459][ T8273] veth1_macvtap: left allmulticast mode
[  108.928728][ T8273] macsec0: left promiscuous mode
[  108.933016][ T8273] bridge0: port 3(macsec0) entered disabled state
[  109.150683][ T8273] bridge_slave_1: left allmulticast mode
[  109.152592][ T8273] bridge_slave_1: left promiscuous mode
[  109.158998][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.744767][ T8273] bridge_slave_0: left allmulticast mode
[  109.747144][ T8273] bridge_slave_0: left promiscuous mode
[  109.752472][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.242518][ T8312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.985'.
[  110.500665][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'.
[  110.732835][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1004'.
[  111.318333][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1016'.
[  111.322392][ T8378] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1016'.
[  111.326251][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1016'.
[  111.341215][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1017'.
[  112.372359][   T33] audit: type=1800 audit(1757604246.979:2): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1041" name="memory.events" dev="tmpfs" ino=1800 res=0 errno=0
[  112.495407][ T8456] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.498963][ T8456] syzkaller0: entered promiscuous mode
[  112.501192][ T8456] syzkaller0: entered allmulticast mode
[  112.524372][ T8456] tipc: Resetting bearer <eth:syzkaller0>
[  112.566840][ T8456] tipc: Resetting bearer <eth:syzkaller0>
[  112.605266][ T8456] tipc: Disabling bearer <eth:syzkaller0>
[  113.051886][ T8493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.055342][ T8493] syzkaller0: entered promiscuous mode
[  113.057889][ T8493] syzkaller0: entered allmulticast mode
[  113.075445][ T8493] tipc: Resetting bearer <eth:syzkaller0>
[  113.081858][ T8492] tipc: Resetting bearer <eth:syzkaller0>
[  113.093971][ T8492] tipc: Disabling bearer <eth:syzkaller0>
[  113.679289][ T8524] netlink: ct family unspecified
[  113.681447][ T8524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.855696][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'.
[  113.885834][ T8540] bridge1: entered allmulticast mode
[  114.621263][ T8605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1102'.
[  115.455650][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1115'.
[  115.462496][ T8662] netlink: 'syz.2.1115': attribute type 1 has an invalid length.
[  115.468167][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1115'.
[  115.747719][ T8689] netlink: 'syz.1.1122': attribute type 8 has an invalid length.
[  116.133422][ T8715] netlink: 'syz.2.1131': attribute type 10 has an invalid length.
[  116.189685][ T8717] netlink: 'syz.0.1132': attribute type 6 has an invalid length.
[  116.455829][ T8730] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1137'.
[  116.485237][ T8730] gretap0: entered promiscuous mode
[  116.767290][ T8743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.133364][ T8771] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1150'.
[  118.406934][ T8816] lo: entered promiscuous mode
[  118.415691][ T8816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.513908][ T8823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.515152][   T96] hid-generic 0005:0458:5505.0001: unknown main item tag 0x0
[  118.528609][   T96] hid-generic 0005:0458:5505.0001: unknown main item tag 0x0
[  118.546585][   T96] hid-generic 0005:0458:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  118.720330][ T8840] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1178'.
[  119.386928][ T8898] tipc: Started in network mode
[  119.389044][ T8898] tipc: Node identity 32650c47aaf4, cluster identity 4711
[  119.394235][ T8898] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.397848][ T8898] syzkaller0: entered promiscuous mode
[  119.400424][ T8898] syzkaller0: entered allmulticast mode
[  119.416433][ T8898] tipc: Resetting bearer <eth:syzkaller0>
[  119.421777][ T8897] tipc: Resetting bearer <eth:syzkaller0>
[  119.434447][ T8897] tipc: Disabling bearer <eth:syzkaller0>
[  119.532918][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'.
[  119.723076][ T8916] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1212'.
[  120.612998][ T8976] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  121.423822][ T9018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.427458][ T9018] syzkaller0: entered promiscuous mode
[  121.429804][ T9018] syzkaller0: entered allmulticast mode
[  121.485231][ T9018] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) !
[  121.516042][ T9018] tipc: Resetting bearer <eth:syzkaller0>
[  121.525495][ T9017] tipc: Resetting bearer <eth:syzkaller0>
[  121.540708][ T9017] tipc: Disabling bearer <eth:syzkaller0>
[  121.961304][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'.
[  122.173780][ T9049] netlink: 'syz.1.1264': attribute type 1 has an invalid length.
[  122.177583][ T9049] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1264'.
[  122.184229][ T9049] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1264'.
[  122.198008][ T9056] bridge0: port 1(syz_tun) entered blocking state
[  122.222458][ T9056] bridge0: port 1(syz_tun) entered disabled state
[  122.225323][ T9056] syz_tun: entered allmulticast mode
[  122.229177][ T9056] syz_tun: entered promiscuous mode
[  122.465890][ T9073] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1278'.
[  123.532123][ T9146] netlink: 'syz.2.1310': attribute type 10 has an invalid length.
[  124.147204][ T5854] Bluetooth: hci2: link tx timeout
[  124.149483][ T5854] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.154037][ T5854] Bluetooth: hci2: link tx timeout
[  124.156113][ T5854] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.159355][ T5854] Bluetooth: hci2: link tx timeout
[  124.161407][ T5854] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.055779][ T9248] netlink: 'syz.1.1354': attribute type 3 has an invalid length.
[  125.059104][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1354'.
[  126.128423][ T9305] netlink: 'syz.2.1378': attribute type 1 has an invalid length.
[  126.133866][ T9305] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1378'.
[  126.211061][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  126.960103][ T9326] block nbd0: server does not support multiple connections per device.
[  126.964910][ T9326] block nbd0: shutting down sockets
[  127.554188][ T9356] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1395'.
[  127.779484][ T9362] nbd0: detected capacity change from 0 to 549764202496
[  127.974907][   T57] block nbd0: Receive control failed (result -104)
[  128.374391][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  130.449978][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  130.987691][ T9460] netlink: 'syz.0.1436': attribute type 1 has an invalid length.
[  131.446139][ T9502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1457'.
[  131.460972][ T9504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1456'.
[  131.557120][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1456'.
[  131.680502][ T9527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.838166][ T9540] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  131.964971][ T9552] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  131.967961][ T9552] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  132.356780][ T9584] netlink: 'syz.2.1493': attribute type 21 has an invalid length.
[  132.365177][ T9584] IPv6: NLM_F_CREATE should be specified when creating new route
[  132.368270][ T9584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.371537][ T9584] IPv6: NLM_F_CREATE should be set when creating new route
[  132.374878][ T9584] IPv6: NLM_F_CREATE should be set when creating new route
[  132.377830][ T9584] IPv6: NLM_F_CREATE should be set when creating new route
[  132.782797][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'.
[  132.844275][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1517'.
[  132.848621][ T5919] IPVS: starting estimator thread 0...
[  132.848630][ T9637] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1517'.
[  132.865795][ T9634] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  132.949641][ T9639] IPVS: using max 39 ests per chain, 93600 per kthread
[  132.964518][ T9638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1518'.
[  133.008029][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1518'.
[  133.971449][ T9698] vlan2: entered promiscuous mode
[  133.973227][ T9698] team0: entered promiscuous mode
[  133.974938][ T9698] team_slave_0: entered promiscuous mode
[  133.977146][ T9698] team_slave_1: entered promiscuous mode
[  134.151848][ T9715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1547'.
[  134.155417][ T9715] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1547'.
[  134.428589][ T9742] netlink: 'syz.0.1560': attribute type 1 has an invalid length.
[  134.490355][ T9742] nbd: socks must be embedded in a SOCK_ITEM attr
[  134.492961][ T9742] block nbd1: shutting down sockets
[  134.545697][ T9750] netlink: 'syz.2.1564': attribute type 1 has an invalid length.
[  134.877438][ T9768] tipc: Enabled bearer <eth:vlan0>, priority 18
[  135.885370][ T9832] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  136.000521][   T96] tipc: Node number set to 2559642695
[  136.504612][ T9892] __nla_validate_parse: 10 callbacks suppressed
[  136.504627][ T9892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1626'.
[  137.064842][ T9930] netlink: 'syz.1.1641': attribute type 1 has an invalid length.
[  137.169728][ T9935] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  137.539934][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'.
[  137.543860][ T9970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1656'.
[  137.959168][T10001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.320462][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'.
[  138.324304][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'.
[  138.517874][T10043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.521882][T10043] syzkaller0: entered promiscuous mode
[  138.524271][T10043] syzkaller0: entered allmulticast mode
[  138.545991][T10043] tipc: Resetting bearer <eth:syzkaller0>
[  138.553615][T10042] tipc: Resetting bearer <eth:syzkaller0>
[  138.571263][T10042] tipc: Disabling bearer <eth:syzkaller0>
[  139.652470][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'.
[  139.708519][T10076] xt_l2tp: missing protocol rule (udp|l2tpip)
[  139.918228][   T47] IPVS: starting estimator thread 0...
[  139.970978][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1718'.
[  140.005651][T10103] tun0: tun_chr_ioctl cmd 2147767521
[  140.020552][T10096] IPVS: using max 64 ests per chain, 153600 per kthread
[  140.548905][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'.
[  140.625207][T10145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1739'.
[  140.986190][ T7491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.990953][ T7491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.082300][T10175] team0: Device ipip0 is up. Set it down before adding it as a team port
[  141.087929][T10176] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1750'.
[  141.095421][T10176] netlink: 'syz.1.1750': attribute type 5 has an invalid length.
[  143.232231][   T56] block nbd1: Receive control failed (result -107)
[  143.271674][T10277] nbd1: detected capacity change from 0 to 32
[  143.275255][ T9867] block nbd1: Dead connection, failed to find a fallback
[  143.279839][ T9867] block nbd1: shutting down sockets
[  143.282350][ T9867] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.286706][ T9867] Buffer I/O error on dev nbd1, logical block 0, async page read
[  143.291011][ T9867] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.307296][ T9867] Buffer I/O error on dev nbd1, logical block 0, async page read
[  143.310962][ T9867] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.314461][ T9867] Buffer I/O error on dev nbd1, logical block 0, async page read
[  143.317657][ T9867] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.339607][ T9867] Buffer I/O error on dev nbd1, logical block 0, async page read
[  143.342626][ T9867] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.345962][ T9867] Buffer I/O error on dev nbd1, logical block 0, async page read
[  143.349070][ T9867] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.367047][ T9867] Buffer I/O error on dev nbd1, logical block 0, async page read
[  143.372845][ T9867] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.376703][ T9867] Buffer I/O error on dev nbd1, logical block 0, async page read
[  143.394095][ T9867] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.401850][ T9867] Buffer I/O error on dev nbd1, logical block 0, async page read
[  143.414287][ T9867] ldm_validate_partition_table(): Disk read failed.
[  143.420867][ T9867] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.429742][ T9867] Buffer I/O error on dev nbd1, logical block 0, async page read
[  143.444405][ T9867] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.452267][ T9867] Buffer I/O error on dev nbd1, logical block 0, async page read
[  143.458177][ T9867] Dev nbd1: unable to read RDB block 0
[  143.471253][ T9867]  nbd1: unable to read partition table
[  143.487468][ T9867] ldm_validate_partition_table(): Disk read failed.
[  143.494863][ T9867] Dev nbd1: unable to read RDB block 0
[  143.497990][ T9867]  nbd1: unable to read partition table
[  143.643814][T10297] __nla_validate_parse: 2 callbacks suppressed
[  143.643826][T10297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1807'.
[  143.649918][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1807'.
[  143.938101][T10316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.942523][T10316] syzkaller0: entered promiscuous mode
[  143.944861][T10316] syzkaller0: entered allmulticast mode
[  143.961698][T10316] tipc: Resetting bearer <eth:syzkaller0>
[  143.965134][T10315] tipc: Resetting bearer <eth:syzkaller0>
[  143.981802][T10315] tipc: Disabling bearer <eth:syzkaller0>
[  144.272749][T10339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.481337][T10352] tipc: Enabled bearer <udp:syz2>, priority 10
[  144.710544][T10366] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.717574][T10366] syzkaller0: entered promiscuous mode
[  144.722509][T10366] syzkaller0: entered allmulticast mode
[  144.749783][T10366] tipc: Resetting bearer <eth:syzkaller0>
[  144.764832][T10365] tipc: Resetting bearer <eth:syzkaller0>
[  144.789891][T10365] tipc: Disabling bearer <eth:syzkaller0>
[  145.192278][T10404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'.
[  145.463739][T10432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1870'.
[  145.585126][T10441] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1874'.
[  145.599593][ T5919] tipc: Node number set to 873535052
[  145.646476][T10449] netlink: 'syz.1.1878': attribute type 3 has an invalid length.
[  145.656209][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'.
[  145.659913][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1879'.
[  145.905578][T10471] delete_channel: no stack
[  145.948862][T10478] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1892'.
[  146.467990][T10520] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1910'.
[  146.575834][T10527] netlink: 'syz.1.1913': attribute type 1 has an invalid length.
[  146.605282][T10527] bond0: entered promiscuous mode
[  146.622704][T10527] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.684603][T10529] 8021q: adding VLAN 0 to HW filter on device bond1
[  146.689496][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'.
[  146.692081][T10529] bond0: (slave bond1): making interface the new active one
[  146.695131][T10529] bond1: entered promiscuous mode
[  146.700537][T10529] bond0: (slave bond1): Enslaving as an active interface with an up link
[  147.120937][T10553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.123527][T10553] syzkaller0: entered promiscuous mode
[  147.125221][T10553] syzkaller0: entered allmulticast mode
[  147.136067][T10553] tipc: Resetting bearer <eth:syzkaller0>
[  147.159821][T10551] tipc: Resetting bearer <eth:syzkaller0>
[  147.179565][T10551] tipc: Disabling bearer <eth:syzkaller0>
[  147.281036][T10567] sctp: [Deprecated]: syz.1.1931 (pid 10567) Use of int in max_burst socket option.
[  147.281036][T10567] Use struct sctp_assoc_value instead
[  147.583565][T10580] syzkaller0: entered promiscuous mode
[  147.585759][T10580] syzkaller0: entered allmulticast mode
[  148.672875][T10643] __nla_validate_parse: 3 callbacks suppressed
[  148.672892][T10643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1958'.
[  148.685731][T10643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.896386][T10649] netlink: 'syz.2.1961': attribute type 13 has an invalid length.
[  149.335766][T10673] team0: Port device team_slave_0 removed
[  149.364659][T10673] team0: Port device team_slave_1 removed
[  149.368113][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.372527][T10673] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.380328][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.391471][T10673] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.403394][T10673] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  149.657897][T10691] rdma_op ffff88801dab99f0 conn xmit_rdma 0000000000000000
[  149.733709][T10696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1980'.
[  150.194486][T10721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1992'.
[  150.551366][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'.
[  150.569300][T10754] netlink: 1032 bytes leftover after parsing attributes in process `syz.2.2006'.
[  150.687220][T10762] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  151.037167][T10797] veth0_to_team: Caught tx_queue_len zero misconfig
[  151.040495][T10797] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  151.196144][T10810] netlink: 'syz.0.2033': attribute type 1 has an invalid length.
[  151.198844][T10810] netlink: 'syz.0.2033': attribute type 4 has an invalid length.
[  151.203589][T10810] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2033'.
[  151.206442][T10810] NCSI netlink: No device for ifindex 3321692160
[  151.862903][T10876] : renamed from bond_slave_0
[  151.875360][T10877] netlink: zone id is out of range
[  151.877052][T10877] netlink: zone id is out of range
[  151.878793][T10877] netlink: set zone limit has 4 unknown bytes
[  152.003982][T10894] netlink: 'syz.0.2073': attribute type 1 has an invalid length.
[  152.006857][T10894] netlink: 'syz.0.2073': attribute type 2 has an invalid length.
[  152.388995][T10925] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  152.395275][T10925] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  152.640633][T10936] netlink: 'syz.0.2093': attribute type 1 has an invalid length.
[  152.685057][T10938] syzkaller1: entered promiscuous mode
[  152.686864][T10938] syzkaller1: entered allmulticast mode
[  152.816679][T10940] netlink: 'syz.0.2095': attribute type 21 has an invalid length.
[  153.117149][T10967] netlink: 'syz.2.2107': attribute type 8 has an invalid length.
[  153.130242][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'.
[  153.411324][T10985] netlink: 'syz.1.2114': attribute type 41 has an invalid length.
[  154.010967][T11038] pim6reg1: entered promiscuous mode
[  154.013159][T11038] pim6reg1: entered allmulticast mode
[  154.225792][T11060] netlink: 'syz.1.2149': attribute type 9 has an invalid length.
[  154.514794][T11085] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2159'.
[  154.771797][T11103] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.777157][T11103] syzkaller0: entered promiscuous mode
[  154.789753][T11103] syzkaller0: entered allmulticast mode
[  154.794042][T11108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.818504][T11103] tipc: Resetting bearer <eth:syzkaller0>
[  154.823754][T11102] tipc: Resetting bearer <eth:syzkaller0>
[  154.867819][T11102] tipc: Disabling bearer <eth:syzkaller0>
[  155.007266][T11119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2174'.
[  155.134382][T11119] smc: net device bond0 applied user defined pnetid SYZ2
[  155.146443][T11119] smc: net device bond0 erased user defined pnetid SYZ2
[  155.533066][T11148] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  155.894034][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'.
[  155.895652][T11167] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2192'.
[  156.093613][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2201'.
[  156.793161][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'.
[  156.936829][T11207] bridge_slave_1: left allmulticast mode
[  156.941777][T11207] bridge_slave_1: left promiscuous mode
[  156.946201][T11207] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.961837][T11207] bridge_slave_0: left allmulticast mode
[  156.964367][T11207] bridge_slave_0: left promiscuous mode
[  156.967530][T11207] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.238728][T11218] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2214'.
[  157.243250][T11218] netlink: 245 bytes leftover after parsing attributes in process `syz.1.2214'.
[  157.486696][T11228] netlink: 'syz.1.2219': attribute type 11 has an invalid length.
[  157.722632][T11243] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621
[  157.811121][   T61] block nbd0: Possible stuck request ffff888022f90000: control (read@0,4096B). Runtime 30 seconds
[  157.961877][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2235'.
[  158.175780][T11282] netlink: 'syz.2.2245': attribute type 3 has an invalid length.
[  158.504056][T11307] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  158.507761][T11307] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  158.666168][T11310] dvmrp1: tun_chr_ioctl cmd 1074025677
[  158.674748][T11310] dvmrp1: linktype set to 805
[  160.304876][T11390] netlink: 'syz.2.2296': attribute type 30 has an invalid length.
[  161.248600][T11402] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  161.251422][T11402] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  161.268349][T11402] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  161.273448][T11402] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  161.491732][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2312'.
[  161.707881][T11455] 8021q: adding VLAN 0 to HW filter on device team0
[  161.718186][T11455] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  162.008708][T11484] openvswitch: netlink: Message has 20 unknown bytes.
[  162.019451][T11484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.135615][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'.
[  162.456735][T11519] IPVS: persistence engine module ip_vs_pe_ not found
[  162.512627][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'.
[  162.545535][T11518] netlink: 'syz.1.2344': attribute type 2 has an invalid length.
[  164.272775][T11626] sock: sock_timestamping_bind_phc: sock not bind to device
[  164.517168][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2397'.
[  164.794771][T11652] netlink: 'syz.0.2404': attribute type 1 has an invalid length.
[  164.797982][T11652] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2404'.
[  165.343557][T11684] dvmrp8: entered allmulticast mode
[  165.345928][T11685] netlink: 566 bytes leftover after parsing attributes in process `syz.1.2419'.
[  165.360430][T11684] dvmrp8: left allmulticast mode
[  166.958016][T11790] netlink: 'syz.0.2463': attribute type 15 has an invalid length.
[  167.085246][T11796] @: renamed from veth0_vlan
[  167.288273][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2472'.
[  167.314160][T11808] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2472'.
[  167.428335][T11811] !: renamed from dummy0
[  168.455736][T11845] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2485'.
[  168.761765][T11849] syzkaller1: entered promiscuous mode
[  168.765145][T11849] syzkaller1: entered allmulticast mode
[  169.321797][T11878] netlink: 'syz.1.2500': attribute type 10 has an invalid length.
[  169.350184][T11878] team0: Port device dummy0 added
[  169.354682][T11878] netlink: 'syz.1.2500': attribute type 10 has an invalid length.
[  169.358735][T11878] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  169.371504][T11878] team0: Failed to send options change via netlink (err -105)
[  169.378939][T11878] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  169.383141][T11878] team0: Port device dummy0 removed
[  169.403418][T11883] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.406760][T11883] syzkaller0: entered promiscuous mode
[  169.408888][T11883] syzkaller0: entered allmulticast mode
[  169.416438][T11883] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  169.442159][T11883] tipc: Resetting bearer <eth:syzkaller0>
[  169.447153][T11881] tipc: Resetting bearer <eth:syzkaller0>
[  169.461862][T11881] tipc: Disabling bearer <eth:syzkaller0>
[  169.816997][T11910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.827767][T11911] batman_adv: batadv0: Adding interface: ip6gretap1
[  169.831289][T11911] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.849107][T11911] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[  169.857213][T11913] sctp: [Deprecated]: syz.0.2517 (pid 11913) Use of struct sctp_assoc_value in delayed_ack socket option.
[  169.857213][T11913] Use struct sctp_sack_info instead
[  170.187974][T11939] gre2: entered allmulticast mode
[  170.363355][T11954] ipvlan0: entered promiscuous mode
[  170.462731][T11956] lo: Caught tx_queue_len zero misconfig
[  170.473997][T11944] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2530'.
[  171.244230][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2558'.
[  171.250564][T12006] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  171.341608][T12012] netlink: 'syz.1.2561': attribute type 10 has an invalid length.
[  171.354799][T12012] macvlan0: entered allmulticast mode
[  171.374501][T12014] atomic_op ffff888121d85198 conn xmit_atomic 0000000000000000
[  171.418941][T12018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2564'.
[  171.426782][T12018] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2564'.
[  171.696020][T12042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2577'.
[  171.854091][T12057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2580'.
[  172.289662][T12095] netlink: 'syz.1.2598': attribute type 7 has an invalid length.
[  172.299348][T12095] netlink: 'syz.1.2598': attribute type 8 has an invalid length.
[  172.302327][T12095] netlink: 'syz.1.2598': attribute type 13 has an invalid length.
[  172.564430][T12114] netlink: 'syz.0.2607': attribute type 1 has an invalid length.
[  173.232251][T12172] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2633'.
[  173.250743][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2634'.
[  187.890327][   T61] block nbd0: Possible stuck request ffff888022f90000: control (read@0,4096B). Runtime 60 seconds
[  188.510088][ T5296] udevd[5296]: worker [8578] /devices/virtual/block/nbd0 is taking a long time
[  188.635910][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  188.643350][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  188.647448][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  188.652415][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  188.656729][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  188.685505][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  188.689997][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  188.693551][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  188.704004][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  188.707790][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  188.830756][T12212] chnl_net:caif_netlink_parms(): no params data found
[  188.900286][T12212] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.903389][T12212] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.906643][T12212] bridge_slave_0: entered allmulticast mode
[  188.911065][T12212] bridge_slave_0: entered promiscuous mode
[  188.916016][T12212] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.919679][T12212] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.922680][T12212] bridge_slave_1: entered allmulticast mode
[  188.926777][T12212] bridge_slave_1: entered promiscuous mode
[  188.962497][T12212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.970935][T12212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.005989][T12212] team0: Port device team_slave_0 added
[  189.012193][T12212] team0: Port device team_slave_1 added
[  189.044375][T12212] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.047153][T12212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.057889][T12212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.064278][T12212] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.067144][T12212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.078166][T12212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.126762][T12212] hsr_slave_0: entered promiscuous mode
[  189.130713][T12212] hsr_slave_1: entered promiscuous mode
[  189.133822][T12212] debugfs: 'hsr0' already exists in 'hsr'
[  189.136234][T12212] Cannot create hsr debugfs directory
[  189.679694][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.684116][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.688304][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.692803][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.696852][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  189.722627][ T5859] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  189.728501][ T5859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  189.733282][ T5859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  189.737221][ T5859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  189.741428][ T5859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  189.986018][T12224] chnl_net:caif_netlink_parms(): no params data found
[  190.021420][T12226] chnl_net:caif_netlink_parms(): no params data found
[  190.114378][T12224] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.117417][T12224] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.121493][T12224] bridge_slave_0: entered allmulticast mode
[  190.125639][T12224] bridge_slave_0: entered promiscuous mode
[  190.131479][T12224] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.134616][T12224] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.137810][T12224] bridge_slave_1: entered allmulticast mode
[  190.142723][T12224] bridge_slave_1: entered promiscuous mode
[  190.204942][T12224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.208974][T12226] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.212747][T12226] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.215360][T12226] bridge_slave_0: entered allmulticast mode
[  190.218372][T12226] bridge_slave_0: entered promiscuous mode
[  190.224181][T12224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.259679][T12226] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.262328][T12226] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.265384][T12226] bridge_slave_1: entered allmulticast mode
[  190.270745][T12226] bridge_slave_1: entered promiscuous mode
[  190.275099][T12224] team0: Port device team_slave_0 added
[  190.307867][T12224] team0: Port device team_slave_1 added
[  190.312785][T12226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.333725][T12226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.361452][T12224] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.364446][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.375430][T12224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.383508][T12224] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.386527][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.398285][T12224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.422368][T12226] team0: Port device team_slave_0 added
[  190.426602][T12226] team0: Port device team_slave_1 added
[  190.480842][T12226] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.483259][T12226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.492761][T12226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.506955][T12224] hsr_slave_0: entered promiscuous mode
[  190.512058][T12224] hsr_slave_1: entered promiscuous mode
[  190.515649][T12224] debugfs: 'hsr0' already exists in 'hsr'
[  190.518068][T12224] Cannot create hsr debugfs directory
[  190.525270][T12226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.528135][T12226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.538778][T12226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.644308][T12226] hsr_slave_0: entered promiscuous mode
[  190.647700][T12226] hsr_slave_1: entered promiscuous mode
[  190.655647][T12226] debugfs: 'hsr0' already exists in 'hsr'
[  190.657932][T12226] Cannot create hsr debugfs directory
[  190.769495][ T5854] Bluetooth: hci3: command tx timeout
[  191.729522][ T5854] Bluetooth: hci4: command tx timeout
[  191.809467][ T5854] Bluetooth: hci5: command tx timeout
[  192.849627][ T5854] Bluetooth: hci3: command tx timeout
[  193.809686][ T5854] Bluetooth: hci4: command tx timeout
[  193.889616][ T5854] Bluetooth: hci5: command tx timeout
[  194.929557][ T5854] Bluetooth: hci3: command tx timeout
[  195.889794][ T5854] Bluetooth: hci4: command tx timeout
[  195.969486][ T5854] Bluetooth: hci5: command tx timeout
[  197.019708][ T5854] Bluetooth: hci3: command tx timeout
[  197.979544][ T5854] Bluetooth: hci4: command tx timeout
[  198.059494][ T5854] Bluetooth: hci5: command tx timeout
[  217.971916][   T61] block nbd0: Possible stuck request ffff888022f90000: control (read@0,4096B). Runtime 90 seconds
[  248.049646][   T11] block nbd0: Possible stuck request ffff888022f90000: control (read@0,4096B). Runtime 120 seconds
[  249.573227][ T5859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  249.577178][ T5859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  249.580537][ T5859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  249.583958][ T5859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  249.586871][ T5859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  249.743292][T12246] chnl_net:caif_netlink_parms(): no params data found
[  249.821566][T12246] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.824410][T12246] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.827298][T12246] bridge_slave_0: entered allmulticast mode
[  249.831663][T12246] bridge_slave_0: entered promiscuous mode
[  249.836329][T12246] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.839187][T12246] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.843458][T12246] bridge_slave_1: entered allmulticast mode
[  249.847392][T12246] bridge_slave_1: entered promiscuous mode
[  249.882490][T12246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.889723][T12246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.922464][T12246] team0: Port device team_slave_0 added
[  249.928095][T12246] team0: Port device team_slave_1 added
[  249.958117][T12246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.961689][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.971644][T12246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.977483][T12246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.980636][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.990653][T12246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.037611][T12246] hsr_slave_0: entered promiscuous mode
[  250.040778][T12246] hsr_slave_1: entered promiscuous mode
[  250.043703][T12246] debugfs: 'hsr0' already exists in 'hsr'
[  250.045984][T12246] Cannot create hsr debugfs directory
[  250.663806][ T5854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  250.667245][ T5854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  250.670212][ T5854] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  250.672783][ T5854] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  250.675798][ T5854] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  250.687405][ T5854] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  250.697062][ T5854] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  250.700794][ T5854] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  250.703599][ T5854] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  250.706189][ T5854] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  250.913118][T12256] chnl_net:caif_netlink_parms(): no params data found
[  250.941669][T12258] chnl_net:caif_netlink_parms(): no params data found
[  251.039595][T12256] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.042417][T12256] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.044950][T12256] bridge_slave_0: entered allmulticast mode
[  251.047751][T12256] bridge_slave_0: entered promiscuous mode
[  251.059125][T12256] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.062178][T12256] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.065283][T12256] bridge_slave_1: entered allmulticast mode
[  251.068096][T12256] bridge_slave_1: entered promiscuous mode
[  251.115970][T12258] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.119296][T12258] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.124337][T12258] bridge_slave_0: entered allmulticast mode
[  251.127545][T12258] bridge_slave_0: entered promiscuous mode
[  251.134190][T12256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.137884][T12258] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.141113][T12258] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.144031][T12258] bridge_slave_1: entered allmulticast mode
[  251.147895][T12258] bridge_slave_1: entered promiscuous mode
[  251.153051][T12256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.206644][T12258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.214685][T12258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.219175][T12256] team0: Port device team_slave_0 added
[  251.236849][T12256] team0: Port device team_slave_1 added
[  251.263331][T12258] team0: Port device team_slave_0 added
[  251.275913][T12258] team0: Port device team_slave_1 added
[  251.278659][T12256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.280940][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.289122][T12256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.303152][T12256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.305510][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.315448][T12256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.350972][T12258] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.353606][T12258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.363631][T12258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.376820][T12258] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.379430][T12258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.387534][T12258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.395669][T12256] hsr_slave_0: entered promiscuous mode
[  251.398004][T12256] hsr_slave_1: entered promiscuous mode
[  251.403614][T12256] debugfs: 'hsr0' already exists in 'hsr'
[  251.405385][T12256] Cannot create hsr debugfs directory
[  251.459081][T12258] hsr_slave_0: entered promiscuous mode
[  251.461693][T12258] hsr_slave_1: entered promiscuous mode
[  251.463806][T12258] debugfs: 'hsr0' already exists in 'hsr'
[  251.465682][T12258] Cannot create hsr debugfs directory
[  251.649414][ T5859] Bluetooth: hci6: command tx timeout
[  252.689431][ T5859] Bluetooth: hci7: command tx timeout
[  252.769482][ T5859] Bluetooth: hci8: command tx timeout
[  253.729817][ T5859] Bluetooth: hci6: command tx timeout
[  254.769510][ T5859] Bluetooth: hci7: command tx timeout
[  254.859532][ T5859] Bluetooth: hci8: command tx timeout
[  255.809511][ T5859] Bluetooth: hci6: command tx timeout
[  256.849638][ T5859] Bluetooth: hci7: command tx timeout
[  256.932647][ T5859] Bluetooth: hci8: command tx timeout
[  257.889620][ T5859] Bluetooth: hci6: command tx timeout
[  258.929640][ T5859] Bluetooth: hci7: command tx timeout
[  259.009827][ T5859] Bluetooth: hci8: command tx timeout
[  278.129760][   T11] block nbd0: Possible stuck request ffff888022f90000: control (read@0,4096B). Runtime 150 seconds
[  308.212560][   T11] block nbd0: Possible stuck request ffff888022f90000: control (read@0,4096B). Runtime 180 seconds
[  309.199487][ T5296] udevd[5296]: worker [8578] /devices/virtual/block/nbd0 timeout; kill it
[  309.203404][ T5296] udevd[5296]: seq 12108 '/devices/virtual/block/nbd0' killed
[  310.646973][ T5854] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  310.651937][ T5854] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  310.655737][ T5854] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  310.660458][ T5854] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  310.664431][ T5854] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  310.840904][T12273] chnl_net:caif_netlink_parms(): no params data found
[  310.925896][T12273] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.928814][T12273] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.932234][T12273] bridge_slave_0: entered allmulticast mode
[  310.935753][T12273] bridge_slave_0: entered promiscuous mode
[  310.940913][T12273] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.943364][T12273] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.946341][T12273] bridge_slave_1: entered allmulticast mode
[  310.949132][T12273] bridge_slave_1: entered promiscuous mode
[  310.973991][T12273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.979083][T12273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.001989][T12273] team0: Port device team_slave_0 added
[  311.005563][T12273] team0: Port device team_slave_1 added
[  311.030395][T12273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.032703][T12273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.042087][T12273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.046713][T12273] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.048971][T12273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.058514][T12273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.113911][T12273] hsr_slave_0: entered promiscuous mode
[  311.117210][T12273] hsr_slave_1: entered promiscuous mode
[  311.120658][T12273] debugfs: 'hsr0' already exists in 'hsr'
[  311.122901][T12273] Cannot create hsr debugfs directory
[  311.654245][ T5854] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  311.660334][ T5854] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  311.664585][ T5854] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  311.669092][ T5854] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  311.672587][ T5854] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  311.686885][ T5854] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  311.694174][ T5854] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  311.699634][ T5854] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  311.703561][ T5854] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  311.706748][ T5854] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  311.928601][T12283] chnl_net:caif_netlink_parms(): no params data found
[  312.011131][T12285] chnl_net:caif_netlink_parms(): no params data found
[  312.078772][T12283] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.082182][T12283] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.085243][T12283] bridge_slave_0: entered allmulticast mode
[  312.089189][T12283] bridge_slave_0: entered promiscuous mode
[  312.123643][T12283] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.126834][T12283] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.135374][T12283] bridge_slave_1: entered allmulticast mode
[  312.139634][T12283] bridge_slave_1: entered promiscuous mode
[  312.182354][T12283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.201779][T12283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.236380][T12285] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.239672][T12285] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.242791][T12285] bridge_slave_0: entered allmulticast mode
[  312.246864][T12285] bridge_slave_0: entered promiscuous mode
[  312.262620][T12285] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.265933][T12285] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.268977][T12285] bridge_slave_1: entered allmulticast mode
[  312.277563][T12285] bridge_slave_1: entered promiscuous mode
[  312.285384][T12283] team0: Port device team_slave_0 added
[  312.308768][T12283] team0: Port device team_slave_1 added
[  312.337307][T12285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.344931][T12285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.397294][T12283] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.401018][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.412535][T12283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.418771][T12285] team0: Port device team_slave_0 added
[  312.422573][T12283] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.425341][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.435577][T12283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.443903][T12285] team0: Port device team_slave_1 added
[  312.516269][T12283] hsr_slave_0: entered promiscuous mode
[  312.520332][T12283] hsr_slave_1: entered promiscuous mode
[  312.523397][T12283] debugfs: 'hsr0' already exists in 'hsr'
[  312.525788][T12283] Cannot create hsr debugfs directory
[  312.529874][T12285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.532976][T12285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.542436][T12285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.548285][T12285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.551918][T12285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.561209][T12285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.651922][T12285] hsr_slave_0: entered promiscuous mode
[  312.654905][T12285] hsr_slave_1: entered promiscuous mode
[  312.657223][T12285] debugfs: 'hsr0' already exists in 'hsr'
[  312.659001][T12285] Cannot create hsr debugfs directory
[  312.690108][ T5860] Bluetooth: hci9: command tx timeout
[  313.729608][ T5858] Bluetooth: hci10: command tx timeout
[  313.732934][ T5860] Bluetooth: hci11: command tx timeout
[  314.130114][ T5860] Bluetooth: hci3: command 0x0406 tx timeout
[  314.130934][ T5858] Bluetooth: hci4: command 0x0406 tx timeout
[  314.132672][ T5860] Bluetooth: hci5: command 0x0406 tx timeout
[  314.779702][ T5859] Bluetooth: hci9: command tx timeout
[  315.809959][ T5859] Bluetooth: hci11: command tx timeout
[  315.810180][ T5237] Bluetooth: hci10: command tx timeout
[  316.849941][ T5237] Bluetooth: hci9: command tx timeout
[  317.889729][ T5237] Bluetooth: hci10: command tx timeout
[  317.899471][ T5237] Bluetooth: hci11: command tx timeout
[  318.930147][ T5237] Bluetooth: hci9: command tx timeout
[  319.978102][ T5237] Bluetooth: hci11: command tx timeout
[  319.978201][ T5859] Bluetooth: hci10: command tx timeout
[  322.930467][   T34] INFO: task syz.1.2633:12172 blocked for more than 143 seconds.
[  322.932950][   T34]       Not tainted syzkaller #0
[  322.936651][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  322.943994][   T34] task:syz.1.2633      state:D stack:24984 pid:12172 tgid:12171 ppid:5848   task_flags:0x480140 flags:0x00004004
[  322.950600][   T34] Call Trace:
[  322.952483][   T34]  <TASK>
[  322.954008][   T34]  __schedule+0x1798/0x4cc0
[  322.955540][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.957333][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.959017][   T34]  ? __pfx___schedule+0x10/0x10
[  322.961474][   T34]  ? schedule+0x91/0x360
[  322.962992][   T34]  schedule+0x165/0x360
[  322.975912][   T34]  blk_mq_freeze_queue_wait+0xf4/0x170
[  322.977767][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  322.988943][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  322.991374][   T34]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  322.993474][   T34]  queue_limits_commit_update_frozen+0x5d/0x3e0
[  322.995450][   T34]  nbd_set_size+0x47e/0x6a0
[  322.997016][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  322.998812][   T34]  ? nla_memcpy+0x5b/0xc0
[  323.000871][   T34]  nbd_genl_size_set+0x2eb/0x3c0
[  323.002482][   T34]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  323.004285][   T34]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  323.006292][   T34]  ? bpf_lsm_capable+0x9/0x20
[  323.007962][   T34]  ? security_capable+0x7e/0x2e0
[  323.010141][   T34]  ? radix_tree_lookup+0x240/0x290
[  323.011710][   T34]  nbd_genl_reconfigure+0x409/0x1870
[  323.013521][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  323.015753][   T34]  ? __nla_parse+0x40/0x60
[  323.017328][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  323.020181][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  323.022230][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  323.024771][   T34]  ? stack_trace_save+0x9c/0xe0
[  323.026303][   T34]  genl_rcv_msg+0x60e/0x790
[  323.027782][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  323.029916][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  323.032593][   T34]  netlink_rcv_skb+0x208/0x470
[  323.034075][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.035581][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  323.037166][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  323.038816][   T34]  ? down_read+0x1ad/0x2e0
[  323.040761][   T34]  genl_rcv+0x28/0x40
[  323.042034][   T34]  netlink_unicast+0x82f/0x9e0
[  323.043490][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  323.045220][   T34]  ? netlink_sendmsg+0x642/0xb30
[  323.046844][   T34]  ? skb_put+0x11b/0x210
[  323.048276][   T34]  netlink_sendmsg+0x805/0xb30
[  323.050319][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.052040][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  323.053592][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  323.055283][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.056955][   T34]  __sock_sendmsg+0x21c/0x270
[  323.058414][   T34]  ____sys_sendmsg+0x505/0x830
[  323.060353][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  323.062055][   T34]  ? import_iovec+0x74/0xa0
[  323.063531][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  323.065044][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  323.067123][   T34]  ? __fget_files+0x2a/0x420
[  323.068606][   T34]  ? __fget_files+0x3a0/0x420
[  323.070242][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  323.071894][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  323.073891][   T34]  ? rcu_is_watching+0x15/0xb0
[  323.075479][   T34]  ? do_syscall_64+0xbe/0x3b0
[  323.076943][   T34]  do_syscall_64+0xfa/0x3b0
[  323.078361][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.080079][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.082110][   T34]  ? exc_page_fault+0x9f/0xf0
[  323.083622][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.085640][   T34] RIP: 0033:0x7f3cd798eba9
[  323.087041][   T34] RSP: 002b:00007f3cd87dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  323.089666][   T34] RAX: ffffffffffffffda RBX: 00007f3cd7bd5fa0 RCX: 00007f3cd798eba9
[  323.092320][   T34] RDX: 0000000020000800 RSI: 0000200000000200 RDI: 0000000000000004
[  323.095141][   T34] RBP: 00007f3cd7a11e19 R08: 0000000000000000 R09: 0000000000000000
[  323.097752][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  323.100349][   T34] R13: 00007f3cd7bd6038 R14: 00007f3cd7bd5fa0 R15: 00007fffe562e088
[  323.103007][   T34]  </TASK>
[  323.104102][   T34] INFO: task syz.2.2649:12206 blocked for more than 143 seconds.
[  323.106821][   T34]       Not tainted syzkaller #0
[  323.108447][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  323.111289][   T34] task:syz.2.2649      state:D stack:28360 pid:12206 tgid:12205 ppid:5847   task_flags:0x400040 flags:0x00004004
[  323.115157][   T34] Call Trace:
[  323.116251][   T34]  <TASK>
[  323.117170][   T34]  __schedule+0x1798/0x4cc0
[  323.118585][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.120209][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.121711][   T34]  ? __pfx___schedule+0x10/0x10
[  323.123181][   T34]  ? schedule+0x91/0x360
[  323.124453][   T34]  schedule+0x165/0x360
[  323.126037][   T34]  schedule_preempt_disabled+0x13/0x30
[  323.128154][   T34]  __mutex_lock+0x7e6/0x1350
[  323.129691][   T34]  ? __mutex_lock+0x5bb/0x1350
[  323.131282][   T34]  ? genl_rcv_msg+0x10d/0x790
[  323.132962][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  323.134517][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  323.136130][   T34]  ? radix_tree_lookup+0x240/0x290
[  323.137772][   T34]  genl_rcv_msg+0x10d/0x790
[  323.139189][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  323.141253][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  323.142871][   T34]  ? __asan_memcpy+0x40/0x70
[  323.144347][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  323.146066][   T34]  netlink_rcv_skb+0x208/0x470
[  323.147916][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.149520][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  323.151182][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  323.152900][   T34]  ? down_read+0x1ad/0x2e0
[  323.154272][   T34]  genl_rcv+0x28/0x40
[  323.155497][   T34]  netlink_unicast+0x82f/0x9e0
[  323.156998][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  323.159592][   T34]  ? netlink_sendmsg+0x642/0xb30
[  323.161676][   T34]  ? skb_put+0x11b/0x210
[  323.163244][   T34]  netlink_sendmsg+0x805/0xb30
[  323.164951][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.166748][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  323.168271][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  323.170026][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.171956][   T34]  __sock_sendmsg+0x21c/0x270
[  323.173458][   T34]  __sys_sendto+0x3bd/0x520
[  323.174902][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  323.176546][   T34]  ? count_memcg_event_mm+0x21/0x260
[  323.178292][   T34]  ? exc_page_fault+0x76/0xf0
[  323.179882][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  323.181523][   T34]  __x64_sys_sendto+0xde/0x100
[  323.183574][   T34]  do_syscall_64+0xfa/0x3b0
[  323.185261][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.187047][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.188915][   T34]  ? exc_page_fault+0x9f/0xf0
[  323.190468][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.192568][   T34] RIP: 0033:0x7f15b0790a3c
[  323.193990][   T34] RSP: 002b:00007f15b1617ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  323.196669][   T34] RAX: ffffffffffffffda RBX: 00007f15b1617fc0 RCX: 00007f15b0790a3c
[  323.199318][   T34] RDX: 0000000000000024 RSI: 00007f15b1618010 RDI: 0000000000000003
[  323.202199][   T34] RBP: 0000000000000000 R08: 00007f15b1617f14 R09: 000000000000000c
[  323.204937][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  323.207360][   T34] R13: 00007f15b1617f68 R14: 00007f15b1618010 R15: 0000000000000000
[  323.210701][   T34]  </TASK>
[  323.212004][   T34] INFO: task syz.0.2650:12208 blocked for more than 143 seconds.
[  323.214907][   T34]       Not tainted syzkaller #0
[  323.216641][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  323.219955][   T34] task:syz.0.2650      state:D stack:28616 pid:12208 tgid:12207 ppid:5853   task_flags:0x400140 flags:0x00004004
[  323.223853][   T34] Call Trace:
[  323.225022][   T34]  <TASK>
[  323.226009][   T34]  __schedule+0x1798/0x4cc0
[  323.227442][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.229055][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.231075][   T34]  ? __pfx___schedule+0x10/0x10
[  323.232774][   T34]  ? schedule+0x91/0x360
[  323.234268][   T34]  schedule+0x165/0x360
[  323.235765][   T34]  schedule_preempt_disabled+0x13/0x30
[  323.237503][   T34]  __mutex_lock+0x7e6/0x1350
[  323.239007][   T34]  ? __mutex_lock+0x5bb/0x1350
[  323.241055][   T34]  ? genl_rcv_msg+0x10d/0x790
[  323.242967][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  323.244692][   T34]  ? stack_trace_save+0x9c/0xe0
[  323.246610][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  323.248283][   T34]  ? radix_tree_lookup+0x240/0x290
[  323.250060][   T34]  genl_rcv_msg+0x10d/0x790
[  323.251828][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.253380][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  323.255116][   T34]  netlink_rcv_skb+0x208/0x470
[  323.256760][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.258260][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  323.260021][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  323.262244][   T34]  ? down_read+0x1ad/0x2e0
[  323.263633][   T34]  genl_rcv+0x28/0x40
[  323.265197][   T34]  netlink_unicast+0x82f/0x9e0
[  323.266778][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  323.268364][   T34]  ? netlink_sendmsg+0x642/0xb30
[  323.270214][   T34]  ? skb_put+0x11b/0x210
[  323.271800][   T34]  netlink_sendmsg+0x805/0xb30
[  323.273307][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.274929][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  323.276465][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  323.278192][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.280129][   T34]  __sock_sendmsg+0x21c/0x270
[  323.282403][   T34]  __sys_sendto+0x3bd/0x520
[  323.283986][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  323.285745][   T34]  ? fd_install+0x97/0x540
[  323.287106][   T34]  ? fd_install+0x30d/0x540
[  323.288590][   T34]  __x64_sys_sendto+0xde/0x100
[  323.290264][   T34]  do_syscall_64+0xfa/0x3b0
[  323.291946][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.293649][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.295457][   T34]  ? exc_page_fault+0x9f/0xf0
[  323.296901][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.298669][   T34] RIP: 0033:0x7fc9f2990a3c
[  323.300153][   T34] RSP: 002b:00007fc9f38acec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  323.303392][   T34] RAX: ffffffffffffffda RBX: 00007fc9f38acfc0 RCX: 00007fc9f2990a3c
[  323.306046][   T34] RDX: 0000000000000020 RSI: 00007fc9f38ad010 RDI: 0000000000000006
[  323.308377][   T34] RBP: 0000000000000000 R08: 00007fc9f38acf14 R09: 000000000000000c
[  323.310813][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  323.313450][   T34] R13: 00007fc9f38acf68 R14: 00007fc9f38ad010 R15: 0000000000000000
[  323.316027][   T34]  </TASK>
[  323.317010][   T34] 
[  323.317010][   T34] Showing all locks held in the system:
[  323.320667][   T34] 1 lock held by khungtaskd/34:
[  323.322236][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  323.325300][   T34] 2 locks held by getty/5675:
[  323.326747][   T34]  #0: ffff88810c7c50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  323.329946][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  323.333272][   T34] 2 locks held by kworker/u8:2/5709:
[  323.335180][   T34] 1 lock held by udevd/8578:
[  323.336600][   T34]  #0: ffff888106d14358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  323.339628][   T34] 6 locks held by syz.1.2633/12172:
[  323.341496][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  323.344374][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  323.347183][   T34]  #2: ffff888106e20230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870
[  323.350498][   T34]  #3: ffff888022ebdf58 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0
[  323.354266][   T34]  #4: ffff888022ebd8f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  323.358943][   T34]  #5: ffff888022ebd930 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  323.363850][   T34] 2 locks held by syz.2.2649/12206:
[  323.366170][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  323.369552][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  323.373374][   T34] 2 locks held by syz.0.2650/12208:
[  323.375391][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  323.378553][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  323.382249][   T34] 2 locks held by syz-executor/12212:
[  323.384656][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  323.387801][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  323.391150][   T34] 2 locks held by syz-executor/12224:
[  323.392964][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  323.395530][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  323.398973][   T34] 2 locks held by syz-executor/12226:
[  323.401277][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  323.405292][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  323.409075][   T34] 2 locks held by syz-executor/12246:
[  323.411997][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  323.415369][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  323.419059][   T34] 2 locks held by syz-executor/12256:
[  323.421325][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  323.424581][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  323.427670][   T34] 2 locks held by syz-executor/12258:
[  323.429582][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  323.432172][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  323.436110][   T34] 2 locks held by syz-executor/12273:
[  323.438360][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  323.441875][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  323.445764][   T34] 2 locks held by syz-executor/12283:
[  323.447995][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  323.451427][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  323.455345][   T34] 2 locks held by syz-executor/12285:
[  323.457597][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  323.461031][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  323.464884][   T34] 
[  323.465799][   T34] =============================================
[  323.465799][   T34] 
[  323.468318][   T34] NMI backtrace for cpu 1
[  323.468346][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  323.468356][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  323.468361][   T34] Call Trace:
[  323.468366][   T34]  <TASK>
[  323.468371][   T34]  dump_stack_lvl+0x189/0x250
[  323.468386][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.468396][   T34]  ? __pfx__printk+0x10/0x10
[  323.468412][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  323.468431][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  323.468451][   T34]  ? __pfx__printk+0x10/0x10
[  323.468477][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  323.468498][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  323.468516][   T34]  watchdog+0xf93/0xfe0
[  323.468538][   T34]  ? watchdog+0x1de/0xfe0
[  323.468556][   T34]  kthread+0x711/0x8a0
[  323.468568][   T34]  ? __pfx_watchdog+0x10/0x10
[  323.468578][   T34]  ? __pfx_kthread+0x10/0x10
[  323.468588][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  323.468596][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.468603][   T34]  ? __pfx_kthread+0x10/0x10
[  323.468614][   T34]  ret_from_fork+0x3fc/0x770
[  323.468630][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  323.468648][   T34]  ? __switch_to_asm+0x39/0x70
[  323.468663][   T34]  ? __switch_to_asm+0x33/0x70
[  323.468678][   T34]  ? __pfx_kthread+0x10/0x10
[  323.468689][   T34]  ret_from_fork_asm+0x1a/0x30
[  323.468740][   T34]  </TASK>
[  323.468746][   T34] Sending NMI from CPU 1 to CPUs 0:
[  323.521281][    C0] NMI backtrace for cpu 0
[  323.521297][    C0] CPU: 0 UID: 0 PID: 5709 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  323.521309][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  323.521317][    C0] Workqueue: bat_events batadv_nc_worker
[  323.521342][    C0] RIP: 0010:lock_acquire+0xc9/0x360
[  323.521362][    C0] Code: 03 11 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 c0 a0 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c <8f> 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 fa 48 c7 c7 3f
[  323.521371][    C0] RSP: 0018:ffffc9000272f8c8 EFLAGS: 00000246
[  323.521378][    C0] RAX: ffff8880209f8000 RBX: 0000000000000000 RCX: 3be5ba30381ad500
[  323.521383][    C0] RDX: 0000000000000000 RSI: ffffffff8b7d2d86 RDI: 1ffff1100527c92b
[  323.521388][    C0] RBP: ffffffff8b488957 R08: 0000000000000001 R09: 0000000000000000
[  323.521392][    C0] R10: dffffc0000000000 R11: fffffbfff1f471e7 R12: 0000000000000000
[  323.521397][    C0] R13: ffff8880293e4958 R14: 0000000000000000 R15: 0000000000000001
[  323.521401][    C0] FS:  0000000000000000(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[  323.521412][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  323.521417][    C0] CR2: 00007f8ff3287e20 CR3: 000000000df36000 CR4: 00000000000006f0
[  323.521441][    C0] Call Trace:
[  323.521446][    C0]  <TASK>
[  323.521450][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  323.521459][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  323.521467][    C0]  ? batadv_nc_purge_paths+0xe7/0x3b0
[  323.521474][    C0]  _raw_spin_lock_bh+0x36/0x50
[  323.521486][    C0]  ? batadv_nc_purge_paths+0xe7/0x3b0
[  323.521492][    C0]  ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10
[  323.521499][    C0]  batadv_nc_purge_paths+0xe7/0x3b0
[  323.521509][    C0]  batadv_nc_worker+0x328/0x610
[  323.521520][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  323.521527][    C0]  process_scheduled_works+0xae1/0x17b0
[  323.521540][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  323.521550][    C0]  worker_thread+0x8a0/0xda0
[  323.521558][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  323.521566][    C0]  ? __kthread_parkme+0x7b/0x200
[  323.521576][    C0]  kthread+0x711/0x8a0
[  323.521586][    C0]  ? __pfx_worker_thread+0x10/0x10
[  323.521592][    C0]  ? __pfx_kthread+0x10/0x10
[  323.521601][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  323.521607][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.521614][    C0]  ? __pfx_kthread+0x10/0x10
[  323.521622][    C0]  ret_from_fork+0x3fc/0x770
[  323.521631][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  323.521639][    C0]  ? __switch_to_asm+0x39/0x70
[  323.521648][    C0]  ? __switch_to_asm+0x33/0x70
[  323.521658][    C0]  ? __pfx_kthread+0x10/0x10
[  323.521667][    C0]  ret_from_fork_asm+0x1a/0x30
[  323.521680][    C0]  </TASK>
[  323.522249][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  323.615576][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  323.618625][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  323.622150][   T34] Call Trace:
[  323.623354][   T34]  <TASK>
[  323.624270][   T34]  dump_stack_lvl+0x99/0x250
[  323.625869][   T34]  ? __asan_memcpy+0x40/0x70
[  323.627619][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.629727][   T34]  ? __pfx__printk+0x10/0x10
[  323.631606][   T34]  vpanic+0x281/0x750
[  323.633347][   T34]  ? __pfx_vpanic+0x10/0x10
[  323.634964][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  323.636706][   T34]  ? preempt_schedule+0xae/0xc0
[  323.638659][   T34]  ? preempt_schedule_common+0x83/0xd0
[  323.640708][   T34]  panic+0xb9/0xc0
[  323.641958][   T34]  ? __pfx_panic+0x10/0x10
[  323.643392][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  323.645543][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  323.648065][   T34]  watchdog+0xfd2/0xfe0
[  323.649590][   T34]  ? watchdog+0x1de/0xfe0
[  323.651182][   T34]  kthread+0x711/0x8a0
[  323.652866][   T34]  ? __pfx_watchdog+0x10/0x10
[  323.654786][   T34]  ? __pfx_kthread+0x10/0x10
[  323.656678][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  323.658819][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.660917][   T34]  ? __pfx_kthread+0x10/0x10
[  323.662810][   T34]  ret_from_fork+0x3fc/0x770
[  323.664742][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  323.666775][   T34]  ? __switch_to_asm+0x39/0x70
[  323.668284][   T34]  ? __switch_to_asm+0x33/0x70
[  323.669784][   T34]  ? __pfx_kthread+0x10/0x10
[  323.671249][   T34]  ret_from_fork_asm+0x1a/0x30
[  323.672859][   T34]  </TASK>
[  323.674634][   T34] Kernel Offset: disabled
[  323.676015][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:27:37  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000080000000 RDX=0000000000000000
RSI=ffffffff8d9cd53f RDI=ffffffff8be33880 RBP=ffffffff8b481f22 RSP=ffffc9000272f948
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff8b481e50
R12=0000000000000002 R13=ffffffff8e139f20 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff8b7ab17d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbe2f507d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000ff0000000000 ff00000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888021848237 R9 =1ffff11004309046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018c1 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005577ffa8c7e8 CR3=0000000022666000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
