last executing test programs:

34.650403251s ago: executing program 1:
socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xffff0000, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x10, 0x1ff}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r0}, 0x6c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
bind$packet(r4, &(0x7f0000000240)={0x11, 0x19, r6, 0x1, 0x0, 0x6, @dev}, 0x14)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000000010000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b702000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

34.339330288s ago: executing program 1:
unshare(0x4000400)
unshare(0x38020000)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x90)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@ifindex, r0, 0x11, 0x0, 0x0, @link_id}, 0x20)
r3 = socket(0x200000100000011, 0x803, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f0000000100)="4dcdc7d96a760000000600050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)

33.311429214s ago: executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x4, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x50}}, 0x0)

33.142187681s ago: executing program 3:
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)

33.096449631s ago: executing program 1:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x82, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x178, 0xc, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77)
r2 = accept$alg(r1, 0x0, 0x0)
sendfile(r2, r0, 0x0, 0x7ffff000)

33.018707948s ago: executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6)

32.851488808s ago: executing program 3:
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x0)

32.657158575s ago: executing program 3:
syz_emit_ethernet(0x97, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x61, 0x11, 0x0, @local, @local, {[@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x60, 0x0, [@loopback, @loopback, @dev]}, @routing], {0x0, 0x0, 0x21, 0x0, @opaque="6fb04815fe064e08e31a57b94a3c0f5374da521ad9563539c1"}}}}}}, 0x0)

32.554226168s ago: executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x10, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @md5sig={0x13, 0x12, "c851616c0500cb080000000000e79490"}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @mptcp=@capable={0x1e, 0xc}]}}}}}}}, 0x0)

32.389094653s ago: executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10)

32.026194311s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)

31.652824352s ago: executing program 0:
syz_emit_ethernet(0x97, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x61, 0x11, 0x0, @local, @local, {[@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x60, 0x0, [@loopback, @loopback, @dev]}, @routing], {0x0, 0x0, 0x21, 0x0, @opaque="6fb04815fe064e08e31a57b94a3c0f5374da521ad9563539c1"}}}}}}, 0x0)

31.520430537s ago: executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x10, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @md5sig={0x13, 0x12, "c851616c0500cb080000000000e79490"}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @mptcp=@capable={0x1e, 0xc}]}}}}}}}, 0x0)

31.37674398s ago: executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)

31.272097068s ago: executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467)

31.22014323s ago: executing program 4:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

31.212490347s ago: executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x0)

31.167948374s ago: executing program 4:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x6, 0x0, 0xc8)

31.136657831s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

31.082515895s ago: executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000000751affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

31.041644554s ago: executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x22040815, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)

30.998460229s ago: executing program 2:
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="2105000b1e85b11c60b11300001142"], 0x0)

30.942407659s ago: executing program 2:
socket$inet6_sctp(0xa, 0x0, 0x84)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000027c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket(0x0, 0x803, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x30}}, 0x0)

30.363010973s ago: executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'batadv_slave_1\x00', 0x400})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x4)

30.116698505s ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)

30.015810712s ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', <r1=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={<r3=>0x0}, &(0x7f00000013c0)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000130001032a0370000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000a000100000000000000", @ANYRES32=r3], 0x34}}, 0x0)

2.00299083s ago: executing program 1:
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0809000300", 0x33fe0}], 0x1}, 0x0)

872.655232ms ago: executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000200000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7000000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = socket(0x0, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040), 0x4)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xa0179e12})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r2, 0x5)
setsockopt(r3, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
sendmmsg(r3, &(0x7f0000002980), 0x400000000000239, 0x0)

341.300359ms ago: executing program 0:
socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xffff0000, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x10, 0x1ff}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r0}, 0x6c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
bind$packet(r4, &(0x7f0000000240)={0x11, 0x19, r6, 0x1, 0x0, 0x6, @dev}, 0x14)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000000010000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b702000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

0s ago: executing program 4:
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d8c795dd0ab0a9c457007d002ae359e2b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107c35a8081587d3dc42a0bc0d0c5e85c3", 0x66}], 0x1}, 0x8400)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts.
2024/06/14 18:46:52 fuzzer started
2024/06/14 18:46:52 dialing manager at 10.128.0.169:30016
[   77.299693][ T5095] cgroup: Unknown subsys name 'net'
[   77.452982][ T5095] cgroup: Unknown subsys name 'rlimit'
2024/06/14 18:46:54 starting 5 executor processes
[   78.896501][ T5101] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   79.992956][ T5129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.995245][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.002690][ T5129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.017410][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.020755][ T5131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.025258][ T5129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.033585][ T5130] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   80.043372][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.050325][ T5130] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   80.054334][ T5129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.060671][ T5131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.070174][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.077981][ T5131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.082851][ T5132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   80.099396][ T5129] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   80.103378][ T5133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.107634][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.115179][ T5133] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   80.121832][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.128537][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.135588][ T5129] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   80.149802][ T5133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.150063][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   80.164662][ T4490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   80.165157][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.179876][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.190447][ T5129] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   80.204483][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   80.211894][ T5129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   80.221485][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   80.895618][ T5117] chnl_net:caif_netlink_parms(): no params data found
[   80.911665][ T5115] chnl_net:caif_netlink_parms(): no params data found
[   80.988828][ T5118] chnl_net:caif_netlink_parms(): no params data found
[   81.020372][ T5124] chnl_net:caif_netlink_parms(): no params data found
[   81.123261][ T5116] chnl_net:caif_netlink_parms(): no params data found
[   81.212995][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.221139][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.229855][ T5115] bridge_slave_0: entered allmulticast mode
[   81.237787][ T5115] bridge_slave_0: entered promiscuous mode
[   81.257583][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.264757][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.272654][ T5115] bridge_slave_1: entered allmulticast mode
[   81.280216][ T5115] bridge_slave_1: entered promiscuous mode
[   81.302413][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.309917][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.317681][ T5117] bridge_slave_0: entered allmulticast mode
[   81.324787][ T5117] bridge_slave_0: entered promiscuous mode
[   81.385326][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.392825][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.400549][ T5117] bridge_slave_1: entered allmulticast mode
[   81.408293][ T5117] bridge_slave_1: entered promiscuous mode
[   81.468206][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.475500][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.483612][ T5118] bridge_slave_0: entered allmulticast mode
[   81.491286][ T5118] bridge_slave_0: entered promiscuous mode
[   81.500196][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.508045][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.515654][ T5118] bridge_slave_1: entered allmulticast mode
[   81.523243][ T5118] bridge_slave_1: entered promiscuous mode
[   81.553800][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.615435][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.640921][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.654308][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.676277][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.684168][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.691760][ T5124] bridge_slave_0: entered allmulticast mode
[   81.699463][ T5124] bridge_slave_0: entered promiscuous mode
[   81.708680][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.715795][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.723283][ T5124] bridge_slave_1: entered allmulticast mode
[   81.730952][ T5124] bridge_slave_1: entered promiscuous mode
[   81.803170][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.816863][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.856313][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.864975][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.872750][ T5116] bridge_slave_0: entered allmulticast mode
[   81.880302][ T5116] bridge_slave_0: entered promiscuous mode
[   81.889685][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.896850][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.904301][ T5116] bridge_slave_1: entered allmulticast mode
[   81.911472][ T5116] bridge_slave_1: entered promiscuous mode
[   81.922990][ T5115] team0: Port device team_slave_0 added
[   81.932777][ T5117] team0: Port device team_slave_0 added
[   81.976897][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.016381][ T5115] team0: Port device team_slave_1 added
[   82.036677][ T5117] team0: Port device team_slave_1 added
[   82.058825][ T5118] team0: Port device team_slave_0 added
[   82.070045][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.103680][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.129341][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.136454][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.163429][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.193235][ T5118] team0: Port device team_slave_1 added
[   82.227756][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.238379][ T5129] Bluetooth: hci4: command tx timeout
[   82.238498][ T5126] Bluetooth: hci0: command tx timeout
[   82.244405][ T5121] Bluetooth: hci1: command tx timeout
[   82.251442][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.263146][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.289565][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.309163][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.316140][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.342235][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.353930][ T5121] Bluetooth: hci3: command tx timeout
[   82.353953][ T5126] Bluetooth: hci2: command tx timeout
[   82.375770][ T5124] team0: Port device team_slave_0 added
[   82.408423][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.415436][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.448131][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.467333][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.474415][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.501038][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.514403][ T5124] team0: Port device team_slave_1 added
[   82.525601][ T5116] team0: Port device team_slave_0 added
[   82.534861][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.542220][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.569069][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.625675][ T5115] hsr_slave_0: entered promiscuous mode
[   82.632793][ T5115] hsr_slave_1: entered promiscuous mode
[   82.644968][ T5116] team0: Port device team_slave_1 added
[   82.671449][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.678569][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.705089][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.773478][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.781096][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.811226][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.847280][ T5117] hsr_slave_0: entered promiscuous mode
[   82.853956][ T5117] hsr_slave_1: entered promiscuous mode
[   82.860511][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.869373][ T5117] Cannot create hsr debugfs directory
[   82.877416][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.884769][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.912297][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.926033][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.933132][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.959209][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.125476][ T5118] hsr_slave_0: entered promiscuous mode
[   83.132727][ T5118] hsr_slave_1: entered promiscuous mode
[   83.139232][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   83.146808][ T5118] Cannot create hsr debugfs directory
[   83.185044][ T5124] hsr_slave_0: entered promiscuous mode
[   83.191842][ T5124] hsr_slave_1: entered promiscuous mode
[   83.200911][ T5124] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   83.208654][ T5124] Cannot create hsr debugfs directory
[   83.342537][ T5116] hsr_slave_0: entered promiscuous mode
[   83.351650][ T5116] hsr_slave_1: entered promiscuous mode
[   83.359528][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   83.368080][ T5116] Cannot create hsr debugfs directory
[   83.781446][ T5117] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.801169][ T5117] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.812146][ T5117] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.822931][ T5117] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.906682][ T5115] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   83.927514][ T5115] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   83.962834][ T5115] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   83.990695][ T5115] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   84.084240][ T5118] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   84.129099][ T5118] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   84.143794][ T5118] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   84.155216][ T5118] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   84.213221][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.225145][ T5124] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   84.240912][ T5124] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   84.252667][ T5124] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   84.282335][ T5117] 8021q: adding VLAN 0 to HW filter on device team0
[   84.291336][ T5124] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   84.318284][ T5121] Bluetooth: hci0: command tx timeout
[   84.327198][ T5126] Bluetooth: hci4: command tx timeout
[   84.333423][ T5121] Bluetooth: hci1: command tx timeout
[   84.370784][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.378718][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.397822][ T5121] Bluetooth: hci2: command tx timeout
[   84.414605][ T5121] Bluetooth: hci3: command tx timeout
[   84.472646][ T5116] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   84.485299][ T5116] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   84.496632][ T5116] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   84.513782][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.520964][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.569440][ T5116] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   84.652256][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.693221][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.775258][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.814153][ T5118] 8021q: adding VLAN 0 to HW filter on device team0
[   84.860651][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.867932][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.936651][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.944179][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.019261][ T5115] 8021q: adding VLAN 0 to HW filter on device team0
[   85.077768][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.096765][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.117057][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.124601][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.136282][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.143730][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.210554][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.239833][ T5124] 8021q: adding VLAN 0 to HW filter on device team0
[   85.295691][ T5116] 8021q: adding VLAN 0 to HW filter on device team0
[   85.330119][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.340249][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.359702][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.368570][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.406762][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.414425][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.436388][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.446865][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.685216][ T5117] veth0_vlan: entered promiscuous mode
[   85.785988][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.809775][ T5117] veth1_vlan: entered promiscuous mode
[   85.976941][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.039965][ T5118] veth0_vlan: entered promiscuous mode
[   86.062799][ T5117] veth0_macvtap: entered promiscuous mode
[   86.130660][ T5117] veth1_macvtap: entered promiscuous mode
[   86.162656][ T5118] veth1_vlan: entered promiscuous mode
[   86.264492][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.324292][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.344199][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.362579][ T5118] veth0_macvtap: entered promiscuous mode
[   86.392798][ T5117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.406111][ T5121] Bluetooth: hci1: command tx timeout
[   86.412167][ T5126] Bluetooth: hci4: command tx timeout
[   86.412178][ T5129] Bluetooth: hci0: command tx timeout
[   86.423946][ T5117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.432996][ T5117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.442741][ T5117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.480364][ T5121] Bluetooth: hci3: command tx timeout
[   86.483576][ T5118] veth1_macvtap: entered promiscuous mode
[   86.486192][ T5121] Bluetooth: hci2: command tx timeout
[   86.606238][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.664258][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.678772][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.691247][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.705243][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.720565][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.733507][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.763230][ T5124] veth0_vlan: entered promiscuous mode
[   86.792824][ T5118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.808254][ T5118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.817111][ T5118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.825860][ T5118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.885027][ T5124] veth1_vlan: entered promiscuous mode
[   86.910640][ T5115] veth0_vlan: entered promiscuous mode
[   86.925686][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.936406][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.996745][ T5115] veth1_vlan: entered promiscuous mode
[   87.069818][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.084117][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.150856][ T5124] veth0_macvtap: entered promiscuous mode
[   87.172756][ T5124] veth1_macvtap: entered promiscuous mode
[   87.196305][ T5116] veth0_vlan: entered promiscuous mode
[   87.214747][ T5115] veth0_macvtap: entered promiscuous mode
[   87.233608][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.242839][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.273988][ T5116] veth1_vlan: entered promiscuous mode
[   87.292465][ T5115] veth1_macvtap: entered promiscuous mode
[   87.435431][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.449938][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.461774][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.470453][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.488994][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.505254][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.528610][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.551124][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.565703][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.602666][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.618663][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.632401][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.647609][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.662510][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.683985][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.697800][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.709835][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.747574][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.771879][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.828926][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.857785][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.877772][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.900165][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.922101][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.934697][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.959776][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.983492][ T5124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.007099][ T5124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.017296][ T5124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.045864][ T5124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.100666][ T5115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.149050][ T5115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.177130][ T5115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.187544][ T5115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.266228][ T5116] veth0_macvtap: entered promiscuous mode
[   88.327621][ T5215] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[   88.419899][ T5215] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   88.484135][ T5121] Bluetooth: hci1: command tx timeout
[   88.488365][ T5116] veth1_macvtap: entered promiscuous mode
[   88.490447][ T5126] Bluetooth: hci4: command tx timeout
[   88.496168][ T5129] Bluetooth: hci0: command tx timeout
[   88.561353][ T5129] Bluetooth: hci2: command tx timeout
[   88.561366][ T5121] Bluetooth: hci3: command tx timeout
[   88.652063][ T5223] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   88.708749][ T4546] udevd[4546]: worker [5168] terminated by signal 33 (Unknown signal 33)
[   88.736185][ T4546] udevd[4546]: worker [5168] failed while handling '/devices/virtual/block/loop3'
[   88.827964][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.861994][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.894210][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.925505][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.967146][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.985910][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.004750][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.018678][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.032955][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.063309][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.097207][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.125892][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.148353][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.160105][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.175947][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.191805][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.193722][   T29] audit: type=1804 audit(1718390825.172:2): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2053070312/syzkaller.GvRTBU/9/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0
[   89.204919][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.257495][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.275573][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.293083][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.380381][ T5116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.390105][ T5116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.399726][ T5116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.415482][ T5116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.433109][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.457555][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.542643][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.569452][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.598799][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.606951][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.827069][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.849581][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.988938][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.030756][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.309823][ T5248] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[   90.458886][ T5248] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   91.809711][ T5286] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[   91.922780][ T5286] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   92.141551][ T5290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[   92.184046][ T5290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[   92.411755][   T45] cfg80211: failed to load regulatory.db
[   92.464658][ T5290] syzkaller0: entered promiscuous mode
[   92.507171][ T5290] syzkaller0: entered allmulticast mode
[   93.718583][   T29] audit: type=1804 audit(1718390829.692:3): pid=5319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3731478560/syzkaller.wSQptx/8/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0
[   93.854019][ T5324] Bluetooth: MGMT ver 1.22
[   94.268365][ T5330] Illegal XDP return value 4294967294 on prog  (id 9) dev N/A, expect packet loss!
[   96.703886][ T5357] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[   96.840411][ T5357] 8021q: adding VLAN 0 to HW filter on device team0
[   96.920168][ T5357] bond0: (slave team0): Enslaving as an active interface with an up link
[   96.939440][ T5358] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[   97.306282][ T5371] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE.
[   97.412652][ T5376] bridge_slave_0: left allmulticast mode
[   97.420281][ T5376] bridge_slave_0: left promiscuous mode
[   97.446640][ T5376] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.474652][ T5376] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   98.013208][   T29] audit: type=1804 audit(1718390833.992:4): pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2053070312/syzkaller.GvRTBU/17/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0
[   98.067799][ T5398] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[   98.423417][ T5410] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[   98.883884][ T5427] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.082704][ T5436] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.226363][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[   99.406719][ T5450] vlan2: entered promiscuous mode
[   99.879489][ T5465] Cannot find add_set index 0 as target
[  100.473907][ T5487] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET)
[  101.800011][ T5533] bridge_slave_0: left allmulticast mode
[  101.806803][ T5533] bridge_slave_0: left promiscuous mode
[  101.813002][ T5533] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.854587][ T5533] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  102.027217][ T5541] macvlan2: entered allmulticast mode
[  102.044229][ T5541] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  102.057355][ T5541] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  102.092566][ T5541] team0: Port device macvlan2 added
[  102.704162][ T5567] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  103.697892][ T5608] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  103.732548][ T5612] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[  103.763520][ T5612] netlink: 'syz-executor.1': attribute type 39 has an invalid length.
[  104.177144][ T5630] macvlan2: entered allmulticast mode
[  104.183007][ T5630] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  104.208301][ T5630] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  104.262658][ T5630] team0: Port device macvlan2 added
[  104.423937][ T5641] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  104.747442][ T5655] vlan2: entered promiscuous mode
[  105.246081][ T5670] syzkaller0: refused to change device tx_queue_len
[  105.523513][ T5683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  105.831812][ T5696] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.4'.
[  106.429351][ T5734] team0: Port device macvlan1 added
[  106.537292][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  106.570009][ T5740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  106.577796][ T5740] IPv6: NLM_F_CREATE should be set when creating new route
[  106.589246][ T5740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  106.596659][ T5740] IPv6: NLM_F_CREATE should be set when creating new route
[  106.618861][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  107.468002][ T5794] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  107.894430][ T5826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  108.042202][ T5832] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  109.059619][ T5858] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  109.776815][ T5846] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  110.177560][ T5885] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1
[  110.685359][ T5909] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  110.706822][ T5909] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.4'.
[  110.830050][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  110.911000][ T5923] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[  111.160982][ T5933] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  111.232142][ T5933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  111.835815][ T5952] syz-executor.2[5952] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  111.835991][ T5952] syz-executor.2[5952] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  111.946921][ T5957] veth1_virt_wifi: entered allmulticast mode
[  112.523513][ T5989] syz-executor.1[5989] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  112.523703][ T5989] syz-executor.1[5989] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  112.985850][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888011f2d400: rx timeout, send abort
[  113.283170][ T6022] Zero length message leads to an empty skb
[  113.507286][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888011f2d400: abort rx timeout. Force session deactivation
[  113.546764][ T6033] veth1_virt_wifi: entered allmulticast mode
[  113.966492][ T6050] IPv6: NLM_F_REPLACE set, but no existing node found!
[  114.030373][ T6047] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  114.097127][ T6047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.445712][ T6072] veth1_virt_wifi: entered allmulticast mode
[  114.447362][ T6070] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  115.193006][   T29] audit: type=1800 audit(1718390851.172:5): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1960 res=0 errno=0
[  115.206040][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  115.339658][ T6106] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'.
[  116.470128][ T6137] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'.
[  116.499909][ T6137] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  116.750584][ T6146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  116.936496][ T6149] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  116.948015][ T6149] tipc: Invalid UDP bearer configuration
[  116.948122][ T6149] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  117.771492][ T6168] smc: net device ip6_vti0 applied user defined pnetid SYZ0
[  117.863558][   T29] audit: type=1800 audit(1718390853.832:6): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1964 res=0 errno=0
[  118.114704][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  118.993654][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  119.228242][ T6210] team1: Mode "" not found
[  119.710460][ T6204] --map-set only usable from mangle table
[  120.063444][ T6245] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  120.211360][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  120.308658][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  120.534201][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  120.694533][ T6276] erspan0: entered promiscuous mode
[  120.708716][ T6276] vlan2: entered promiscuous mode
[  120.731165][ T6276] erspan0: left promiscuous mode
[  120.806463][ T6280] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  120.813774][ T6280] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  120.850133][ T6280] hsr_slave_0: left promiscuous mode
[  120.858767][ T6280] hsr_slave_1: left promiscuous mode
[  120.995779][ T6284] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'.
[  121.473528][ T6306] erspan0: entered promiscuous mode
[  121.487388][ T6306] vlan2: entered promiscuous mode
[  121.500399][ T6306] erspan0: left promiscuous mode
[  121.756503][ T6316] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  121.763089][ T6316] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  121.781227][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  121.817198][ T6316] hsr_slave_0: left promiscuous mode
[  122.061238][ T6316] hsr_slave_1: left promiscuous mode
[  122.270607][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  122.619676][ T6328] team1: Mode "" not found
[  122.665525][ T6341] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  122.725720][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  122.942162][ T6354] erspan0: entered promiscuous mode
[  122.954749][ T6354] vlan2: entered promiscuous mode
[  122.964845][ T6354] erspan0: left promiscuous mode
[  123.109967][ T6358] IPv6: NLM_F_REPLACE set, but no existing node found!
[  123.202989][ T6360] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.4'.
[  123.223779][ T6360] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16)
[  123.455570][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  123.785794][ T6382] erspan0: entered promiscuous mode
[  123.799630][ T6382] vlan2: entered promiscuous mode
[  123.813431][ T6382] erspan0: left promiscuous mode
[  124.025690][ T6395] (unnamed net_device) (uninitialized): option use_carrier: invalid value (8)
[  124.215483][ T6404] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  124.445132][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  124.708914][ T6422] erspan0: entered promiscuous mode
[  124.714479][ T6422] vlan2: entered promiscuous mode
[  124.757792][ T6422] erspan0: left promiscuous mode
[  125.110017][ T6433] lo: entered allmulticast mode
[  125.327325][ T6441] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'.
[  125.580793][ T6444] team_slave_0: entered promiscuous mode
[  125.587897][ T6444] team_slave_1: entered promiscuous mode
[  125.617438][ T6444] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  125.648704][ T6444] team_slave_0: left promiscuous mode
[  125.654460][ T6444] team_slave_1: left promiscuous mode
[  125.877943][ T6455] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  126.575880][ T6489] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  126.610834][ T6493] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'.
[  127.016760][ T6517] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'.
[  127.199826][ T6529] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  127.824012][ T6565] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  128.333082][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  128.961174][ T6611] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'.
[  128.996839][ T6611] sysfs: cannot create duplicate filename '/class/ieee80211/ü!ô'
[  129.015810][ T6611] CPU: 0 PID: 6611 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0
[  129.026563][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  129.036756][ T6611] Call Trace:
[  129.040076][ T6611]  <TASK>
[  129.043304][ T6611]  dump_stack_lvl+0x241/0x360
[  129.048253][ T6611]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.053550][ T6611]  ? __pfx__printk+0x10/0x10
[  129.058292][ T6611]  ? sysfs_warn_dup+0x51/0xa0
[  129.063222][ T6611]  ? kmalloc_trace_noprof+0x19c/0x2c0
[  129.069228][ T6611]  sysfs_warn_dup+0x8e/0xa0
[  129.073880][ T6611]  sysfs_do_create_link_sd+0xbe/0x110
[  129.079482][ T6611]  device_add_class_symlinks+0x1c5/0x250
[  129.085464][ T6611]  device_add+0x553/0xbf0
[  129.089870][ T6611]  wiphy_register+0x1d3f/0x2b30
[  129.094813][ T6611]  ? __pfx_wiphy_register+0x10/0x10
[  129.100075][ T6611]  ? minstrel_ht_alloc+0x72b/0x860
[  129.105442][ T6611]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  129.111598][ T6611]  ieee80211_register_hw+0x3098/0x3d80
[  129.117136][ T6611]  ? ieee80211_register_hw+0x10c1/0x3d80
[  129.122934][ T6611]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  129.128921][ T6611]  ? __asan_memset+0x23/0x50
[  129.133582][ T6611]  ? __hrtimer_init+0x170/0x250
[  129.138598][ T6611]  mac80211_hwsim_new_radio+0x2597/0x44c0
[  129.144509][ T6611]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  129.150762][ T6611]  ? kmalloc_node_track_caller_noprof+0x242/0x440
[  129.157242][ T6611]  ? kstrndup+0x5c/0xb0
[  129.161571][ T6611]  ? __asan_memcpy+0x40/0x70
[  129.166333][ T6611]  hwsim_new_radio_nl+0xe4c/0x21d0
[  129.171632][ T6611]  ? __pfx___nla_validate_parse+0x10/0x10
[  129.177496][ T6611]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  129.183165][ T6611]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  129.189578][ T6611]  genl_rcv_msg+0xb14/0xec0
[  129.194154][ T6611]  ? mark_lock+0x9a/0x350
[  129.198648][ T6611]  ? __pfx_genl_rcv_msg+0x10/0x10
[  129.203777][ T6611]  ? __pfx_lock_acquire+0x10/0x10
[  129.208949][ T6611]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  129.214557][ T6611]  ? __pfx___might_resched+0x10/0x10
[  129.219923][ T6611]  netlink_rcv_skb+0x1e3/0x430
[  129.224842][ T6611]  ? __pfx_genl_rcv_msg+0x10/0x10
[  129.229934][ T6611]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  129.235298][ T6611]  ? __netlink_deliver_tap+0x77e/0x7c0
[  129.240837][ T6611]  genl_rcv+0x28/0x40
[  129.244878][ T6611]  netlink_unicast+0x7ea/0x980
[  129.249720][ T6611]  ? __pfx_netlink_unicast+0x10/0x10
[  129.255056][ T6611]  ? __virt_addr_valid+0x183/0x520
[  129.260240][ T6611]  ? __check_object_size+0x49c/0x900
[  129.265602][ T6611]  ? bpf_lsm_netlink_send+0x9/0x10
[  129.270878][ T6611]  netlink_sendmsg+0x8db/0xcb0
[  129.275723][ T6611]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.281072][ T6611]  ? __import_iovec+0x536/0x820
[  129.285985][ T6611]  ? aa_sock_msg_perm+0x91/0x160
[  129.291079][ T6611]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  129.296423][ T6611]  ? security_socket_sendmsg+0x87/0xb0
[  129.302068][ T6611]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.307433][ T6611]  __sock_sendmsg+0x221/0x270
[  129.312189][ T6611]  ____sys_sendmsg+0x525/0x7d0
[  129.317032][ T6611]  ? __pfx_____sys_sendmsg+0x10/0x10
[  129.322397][ T6611]  __sys_sendmsg+0x2b0/0x3a0
[  129.327049][ T6611]  ? __pfx___sys_sendmsg+0x10/0x10
[  129.332269][ T6611]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  129.338751][ T6611]  ? do_syscall_64+0x100/0x230
[  129.343585][ T6611]  ? do_syscall_64+0xb6/0x230
[  129.348324][ T6611]  do_syscall_64+0xf3/0x230
[  129.352881][ T6611]  ? clear_bhb_loop+0x35/0x90
[  129.357622][ T6611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.363593][ T6611] RIP: 0033:0x7f67d4a7cea9
[  129.368070][ T6611] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  129.387796][ T6611] RSP: 002b:00007f67d58820c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.396365][ T6611] RAX: ffffffffffffffda RBX: 00007f67d4bb3f80 RCX: 00007f67d4a7cea9
[  129.404389][ T6611] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  129.412583][ T6611] RBP: 00007f67d4aebff4 R08: 0000000000000000 R09: 0000000000000000
[  129.420603][ T6611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.428620][ T6611] R13: 000000000000000b R14: 00007f67d4bb3f80 R15: 00007ffd41598c68
[  129.436663][ T6611]  </TASK>
[  129.457822][ T6613] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  129.735431][ T6643] bridge0: entered promiscuous mode
[  129.742666][ T6643] bridge0: entered allmulticast mode
[  130.010066][ T6664] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  130.283398][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  130.570719][ T6688] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  131.156579][ T6715] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'.
[  131.324792][ T6719] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  133.361606][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  133.377247][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  133.443546][ T6776] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  134.249474][ T6808] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  134.273125][ T6808] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  134.680551][ T6820] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  134.715302][ T6822] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  134.963111][ T6831] IPv6: NLM_F_REPLACE set, but no existing node found!
[  135.448687][ T6851] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  136.440582][ T6876] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  136.513715][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  136.533910][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  136.536160][   T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.557944][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  136.578556][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  136.591247][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  136.600583][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  138.717238][ T5129] Bluetooth: hci2: command tx timeout
[  140.797188][ T5129] Bluetooth: hci2: command tx timeout
[  142.882948][ T5129] Bluetooth: hci2: command tx timeout
[  144.957288][ T5129] Bluetooth: hci2: command tx timeout
[  166.557407][ T5121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  166.566348][ T5121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  166.575213][ T5121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  166.585635][ T5121] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  166.593920][ T5121] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  166.601634][ T5121] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  167.363336][ T5129] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  167.373686][ T5129] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  167.382382][ T5129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  167.391125][ T5129] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  167.399325][ T5129] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  167.407243][ T5129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  167.908995][ T5121] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  167.919146][ T5121] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  167.927440][ T5121] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  167.936621][ T5121] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  167.945365][ T5121] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  167.957211][ T5121] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  168.363769][ T5121] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  168.374772][ T5121] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  168.387406][ T5121] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  168.397462][ T5121] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  168.406217][ T5121] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  168.413767][ T5121] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  168.717164][ T5129] Bluetooth: hci5: command tx timeout
[  169.437232][ T5129] Bluetooth: hci6: command tx timeout
[  169.997356][ T5129] Bluetooth: hci7: command tx timeout
[  170.477866][ T5129] Bluetooth: hci8: command tx timeout
[  170.797149][ T5129] Bluetooth: hci5: command tx timeout
[  171.517140][ T5129] Bluetooth: hci6: command tx timeout
[  172.080717][ T5129] Bluetooth: hci7: command tx timeout
[  172.558207][ T5129] Bluetooth: hci8: command tx timeout
[  172.877159][ T5129] Bluetooth: hci5: command tx timeout
[  173.604385][ T5129] Bluetooth: hci6: command tx timeout
[  174.157437][ T5129] Bluetooth: hci7: command tx timeout
[  174.643738][ T5129] Bluetooth: hci8: command tx timeout
[  174.957173][ T5129] Bluetooth: hci5: command tx timeout
[  175.679522][ T5129] Bluetooth: hci6: command tx timeout
[  176.237191][ T5121] Bluetooth: hci7: command tx timeout
[  176.723089][ T5129] Bluetooth: hci8: command tx timeout
[  194.803639][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  194.816552][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  201.227526][ T5121] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  201.241467][ T5121] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  201.250629][ T5121] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  201.259974][ T5121] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  201.269106][ T5121] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  201.276527][ T5121] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  203.357463][ T5121] Bluetooth: hci9: command tx timeout
[  205.437517][ T5121] Bluetooth: hci9: command tx timeout
[  207.120184][ T5121] Bluetooth: hci3: command 0x0406 tx timeout
[  207.128115][ T5126] Bluetooth: hci1: command 0x0406 tx timeout
[  207.128140][ T5132] Bluetooth: hci0: command 0x0406 tx timeout
[  207.134192][ T5126] Bluetooth: hci4: command 0x0405 tx timeout
[  207.517220][   T53] Bluetooth: hci9: command tx timeout
[  209.597232][   T53] Bluetooth: hci9: command tx timeout
[  231.778163][ T5129] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  231.797344][ T5129] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  231.807301][ T5129] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  231.816277][ T5129] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  231.825655][ T5129] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  231.834896][ T5129] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  232.606284][ T5129] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  232.625974][ T5129] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  232.636899][ T5129] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  232.649402][ T5129] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  232.667392][ T5129] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  232.687283][ T5129] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  232.959507][ T5129] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  232.969809][ T5129] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  232.984017][ T5129] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  232.994060][ T5129] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  233.004014][ T5129] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  233.018922][ T5129] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  233.418433][ T5129] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  233.428235][ T5129] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  233.437619][ T5129] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  233.446433][ T5129] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  233.456337][ T5129] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  233.472271][ T5129] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  233.917215][ T5129] Bluetooth: hci10: command tx timeout
[  234.797430][ T5129] Bluetooth: hci11: command tx timeout
[  235.117445][ T5129] Bluetooth: hci12: command tx timeout
[  235.518110][ T5129] Bluetooth: hci13: command tx timeout
[  236.007161][ T5129] Bluetooth: hci10: command tx timeout
[  236.880890][ T5129] Bluetooth: hci11: command tx timeout
[  237.197076][ T5129] Bluetooth: hci12: command tx timeout
[  237.597525][ T5129] Bluetooth: hci13: command tx timeout
[  238.090591][ T5129] Bluetooth: hci10: command tx timeout
[  238.957384][ T5129] Bluetooth: hci11: command tx timeout
[  239.277149][ T5129] Bluetooth: hci12: command tx timeout
[  239.677480][ T5129] Bluetooth: hci13: command tx timeout
[  240.157145][ T5129] Bluetooth: hci10: command tx timeout
[  241.045906][ T5129] Bluetooth: hci11: command tx timeout
[  241.357083][ T5129] Bluetooth: hci12: command tx timeout
[  241.757140][ T5129] Bluetooth: hci13: command tx timeout
[  256.242369][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  256.255192][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  263.437665][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  266.344330][   T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  266.357429][   T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  266.368340][   T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  266.377633][   T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  266.385637][   T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  266.393877][   T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  268.477284][ T5129] Bluetooth: hci14: command tx timeout
[  270.557439][ T5129] Bluetooth: hci14: command tx timeout
[  272.637277][ T5129] Bluetooth: hci14: command tx timeout
[  274.717166][ T5129] Bluetooth: hci14: command tx timeout
[  281.837534][   T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds.
[  281.855841][   T30]       Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0
[  281.866682][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
2024/06/14 18:50:17 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  281.883837][   T30] task:kworker/u8:2    state:D stack:23368 pid:35    tgid:35    ppid:2      flags:0x00004000
[  281.947076][   T30] Workqueue: netns cleanup_net
[  281.954898][   T30] Call Trace:
[  281.988249][   T30]  <TASK>
[  281.991771][   T30]  __schedule+0x17e8/0x4a20
[  282.017275][   T30]  ? __pfx___schedule+0x10/0x10
[  282.023191][   T30]  ? __pfx_lock_release+0x10/0x10
[  282.037029][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  282.043778][   T30]  ? kthread_data+0x52/0xd0
[  282.049321][   T30]  ? schedule+0x90/0x320
[  282.054887][   T30]  ? wq_worker_sleeping+0x66/0x240
[  282.060843][   T30]  ? schedule+0x90/0x320
[  282.065772][   T30]  schedule+0x14b/0x320
[  282.070149][   T30]  schedule_preempt_disabled+0x13/0x30
[  282.077598][   T30]  __mutex_lock+0x6a4/0xd70
[  282.082605][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  282.099186][   T30]  ? __mutex_lock+0x527/0xd70
[  282.105922][   T30]  ? nsim_destroy+0x71/0x5c0
[  282.117029][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  282.124931][   T30]  ? __pfx_mntput_no_expire+0x10/0x10
[  282.138072][   T30]  ? _raw_spin_unlock+0x28/0x50
[  282.144745][   T30]  ? simple_release_fs+0x9c/0xd0
[  282.154938][   T30]  nsim_destroy+0x71/0x5c0
[  282.162604][   T30]  __nsim_dev_port_del+0x14b/0x1b0
[  282.173149][   T30]  nsim_dev_reload_destroy+0x28a/0x490
[  282.181778][   T30]  nsim_dev_reload_down+0x98/0xd0
[  282.193167][   T30]  devlink_reload+0x18b/0x870
[  282.198899][   T30]  ? __pfx_devlink_reload+0x10/0x10
[  282.205799][   T30]  devlink_pernet_pre_exit+0x1f3/0x440
[  282.222981][   T30]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  282.231838][   T30]  ? class_remove_file_ns+0x121/0x160
[  282.242973][   T30]  cleanup_net+0x615/0xcc0
[  282.250455][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  282.256291][   T30]  ? process_scheduled_works+0x945/0x1830
[  282.269769][   T30]  process_scheduled_works+0xa2c/0x1830
[  282.275614][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  282.282504][   T30]  ? assign_work+0x364/0x3d0
[  282.294810][   T30]  worker_thread+0x86d/0xd70
[  282.313307][   T30]  ? __kthread_parkme+0x169/0x1d0
[  282.328274][   T30]  ? __pfx_worker_thread+0x10/0x10
[  282.334083][   T30]  kthread+0x2f0/0x390
[  282.347003][   T30]  ? __pfx_worker_thread+0x10/0x10
[  282.352393][   T30]  ? __pfx_kthread+0x10/0x10
[  282.367019][   T30]  ret_from_fork+0x4b/0x80
[  282.371995][   T30]  ? __pfx_kthread+0x10/0x10
[  282.376630][   T30]  ret_from_fork_asm+0x1a/0x30
[