last executing test programs:

16.327668334s ago: executing program 2 (id=19520):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x83}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r0, &(0x7f0000000000)=""/23, 0x17)
read(r0, 0x0, 0x0)
write$ppp(r0, &(0x7f0000000200)="bc72", 0x2)

15.649657102s ago: executing program 0 (id=19530):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000005180)=ANY=[@ANYBLOB="842300002d00090026bd70000000000004000000702318"], 0x2384}, 0x1, 0x0, 0x0, 0x20000000}, 0x84)

15.567839292s ago: executing program 0 (id=19533):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000002}, 0x18)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x8000000000000002, {0x0, 0x0, 0x4}}, 0x18)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3)
close(r3)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000005840), r6)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x8010)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x20008040)

15.481570076s ago: executing program 0 (id=19538):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000000000080000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
close(0x3)
unshare(0x400)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000680)={@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x2}}, {0x0}, 0x0, 0x40}, 0xa0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x2}, 0x8)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r7=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000a7080000000000007b8a20ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffeed, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x84, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8a1}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x551}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa0000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xedc}}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x84}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

15.419779541s ago: executing program 1 (id=19539):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c00018006000600800a0000100007"], 0x34}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 0x0, 0x1}, 0xe)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="185365d823dcec6e2b00"/24], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'})
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x18)
r11 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r11)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001840), 0x4)

15.349113548s ago: executing program 2 (id=19540):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x20000000)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0xfffffe25)

15.347976715s ago: executing program 0 (id=19541):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f00000003c0)=[{0x15, 0x1, 0x3, 0x6000}, {0x60, 0x8, 0xff}, {}, {0x1, 0x0, 0x0, 0x3}, {0x6, 0x3, 0x0, 0x6a}]})
socket$key(0xf, 0x3, 0x2) (async)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x40600, 0x0)
readv(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/250, 0xfa}, {0x0}], 0x2) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018010000646c6c25000000000e0020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = socket$kcm(0x10, 0x2, 0x4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000440)) (async)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="89000000120081ae08060cdc03005a007f03e3f71502b1d8bd55968240000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7075e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x92}], 0x1}, 0x0) (async, rerun: 32)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) (async, rerun: 32)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x50)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000300), &(0x7f0000000340)=0x40) (async)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

15.34764061s ago: executing program 1 (id=19542):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x2, &(0x7f0000000580)=""/79, 0xffffffffffffff7b}, 0x40010040)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES16=r0, @ANYBLOB="05"], 0x10)
r5 = socket(0x1d, 0x803, 0x16)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000001480)={<r6=>0x0, <r7=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000280)=""/21, 0x15}, {&(0x7f00000009c0)=""/236, 0xec}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/16, 0x10}, {&(0x7f0000000840)=""/128, 0x80}, {&(0x7f0000000ac0)=""/216, 0xd8}, {&(0x7f0000000bc0)=""/210, 0xd2}, {&(0x7f0000000cc0)=""/207, 0xcf}], 0x8, &(0x7f0000000e40)=""/227, 0xe3}, 0xfffffff9}, {{&(0x7f0000000f40)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000600)=[{&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/82, 0x52}, {&(0x7f0000001040)=""/209, 0xd1}, {&(0x7f0000000300)=""/39, 0x27}], 0x4, &(0x7f0000000680)=""/54, 0x36}, 0x7}, {{&(0x7f0000001140)=@caif=@util, 0x80, &(0x7f0000001300)=[{&(0x7f00000011c0)=""/107, 0x6b}, {&(0x7f0000001240)=""/178, 0xb2}, {&(0x7f00000008c0)}, {&(0x7f0000000940)=""/16, 0x10}], 0x4, &(0x7f0000001340)=""/124, 0x7c}, 0xce}], 0x3, 0x12000, &(0x7f00000014c0)={r6, r7+10000000})
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, &(0x7f0000001900)={{}, "9f5e437e227c1d5c85eff5672e23dba4d906efbe40682321dad0d10b17dedc2d93b762a9820b8a9bd0071100202f3cf810b30609b815b9ae47a99ec8e2deafe09befeb50010143dade36705f15fbcd2f5fef5b97fd7634699c9c9048e6e4a7a8a7bc4db10ba8044590a3576f4432c5f59715e05e17f2e43a7f7941d24e03af086672389d0d799081a8d03f2d8cd3cb800e64355d8aa9b9a30314b125ed1c3f084d8ef51d5a69724cf323005018e541b7304493492269608ad946688344199b45fa5e014125db8fed1b48412800271bbec7fba0a9643a8af66cc161bff3be22e07105c096318fdec61677a890dabec3385452495c35ce286957abf4d181d9a9db6d1b8d09f2aa39e10648ad9d7b64db9c8af7682bc3aad55e13936e52780485c08a83e420c9b3288a82b48be223397650548ad09e5b52250a24ed488b56a03a81378a66ba86491d2ef15ba97901308055edacd19f8d26c488a8c10ee5a9bf135c75686c0369fdc8f5aaa3fb6a90a2c7e91c630641c7cb711e0dc75d60a2ce1f74032c9a76c39f5e6434e6ac1dd70ab5cf6c66b4794f898dfcf13e3290f789120ed7b0a72e40a162ea440a98717f69f6a60e4fce871bcc5a831ceded8264ef9805698a56cce595f824d235a99c2ae0dd705ffacc7c5b42a77651c0246bff5ff11fd2f92b92d758dc8236e794dca866ad957ebb145a7193656bd2c0bf1d2992e9f27e187040df9c15f5530a44d8a343181dcfae0572c31ffb4421613204da5a036bd15dd80db2d498c0c01e0c98e002fa4e188e771cd165d09bce1ade04131084e147bd0b85c754ff208c029671e0a116fdb94f314cd01f2f89b76c2d81ff6c571fb3302af31baa824a789d283c098464ed626527ad6c8c1fa2c67baf12496cd05ba07e0c884c516641251fc87e8fdfc630270a35528b7c4ea60ed2af8efc86eb50be58b7b67a93636c33629e478cc4b872fd3247a5a4750afe86d5527f5626129d635b01d9302012ea27735c31b52ae52f1a4ae86ebec9d0789e1408f89fdae943e29897daf5ebc3504790edb13fcadf00830857b63b90fcdf97e80d82f9e76efa2474d86fc4e3e0598ed211d8026b4a1a37116192aa3f27ef3bbc8d89f23e88137cd0ef2b4d520d178d628a332bf619cb6671063d473cca048121dd005602e26c54d825a8acb02be61377abb9c3d749d934911a4054f0be57cc80d3184a8a7d8419465824f7090136d26509a8e5da09e1171b5cee9df10996dde6f0a1418e45ee704685f1609417a257515dd24cc0bc24e5711d67db725c8a2f6daa1e1eca60febb8ec4bc9ba9ab3f02b84cb0be7cdbd8fc90f844dc3f1b0b2e424747069f202edb6a36b1a36c6bb4a18240e2211d102e01699cc9a5a13e1fb285d4fe00d59ee85cb4c0ac0d1c2e045f4b31df0254a955aa9611e76483e8b58f7921e43a51d8b7b12b3698579d7b40e9305a8cecef8d7d4af2fbf43c1e67fc467b5476c89b70b4a58edd4728a364f924e558b86acfafe80e494d4a6ef5c95ed7b1cd89921d15ecc49204de9623bf01ec16fd8566039861276933963c111bfda6d394d54badcac7f2a4d2fadc69e512611159765b63a74d321fb91b43f34e22970469e403e945da3ef0290fc336b1c9b4ea7fd0a33bdd5d7de86357563030e5bd355671e3d1a204e2f0f6e5bcdb92e98cc6df8bc035c71a4decdb95dccb3363ac2f394b1d169c8e09278313ef5e8994a9567f50cb6a8d82930317a23dc20e312f5195894ef278b0ad0df2e91a0ce3633e7a0364dec705c6f291074b285cc33dd70ed92d65eda567ae614d8c7ac8f01c172dc0ada8f3c4d6eaf8d1db0d619c01163cafb0b2fe8df0d84ccc2b144e088f70a3ad0aa0adca8afe8efc9b11f91b030d2cddf89253139181a6244236324510efc4630d53721e99f51c49406f920356eaf998f76dd5febcd5ffd8f77a1c6baacfb8ab974096c702d853377c3a035921ceef9a4cb5e477241d224a076e510adc85213795da1db4ac4c452d704b8e3a33ea91ead5d386a73236a2900f078117445c68ee1a482caad695fd314bd57a325f6a60de29153eb9e160a511d29fdd0105c8b6d71f2527f7b4aa66162105f8f4667b9af8c0df1159fec919f47837546466828d23e1490b175e22cb75cd5b779613d0e999222e3ec5c055b74da2f5d49cc5f623bf98aa40c5a2f7a6a629cb96d41e5e5f75c74dc822a04120a9744778163e84561ed1cdc22d8e5a751571cd526dba1445a2aedf3f95273fbe3a0ab83ffd7a4e3f0ce04d3ba9be28928d88c61fe7d48a10a89d5e2c29cfc52cb5a0ddead2ed87448585e6fb5348aed1f41416e219b126242e7432b14a6d90b69b60209ffd7e0626a8041c64cc866d6a6db9fc37afe18e52abcab2ef0a793e5024c3940a902749e81751d96be8cf9c6939cc21237fbe17f03d3ac713f49c7b67f70eb4ba8d9470c3d73a8dbd8bec001ac154c6ee009809329adb096a0136a4d375d957b7c1a951fa6a9bfbbd6fd6e62c704aa9673a219bd9fe07b2eb0ff94e19b032a8ee6023d9af755957f65812ad304c296e283748f42f6eddae47cfcfca7bba9588542b7d75ddaf4132da4bb6a358c3e73756a9468f19e06dc34673db9c4c5f307db1b6ac3518a98075e50688b8460a63667b7dd489286c71cdf2a35720751e0851b63bff024abe5190230314c89607c3027aece92937f5388474ec2b947bfd08621e718a55d42fce21fd3c48fb8c52ac593ca20babe41e3b582ff64d2c92ada4eb41479fa6f160fe3cd189ff968791935598617a20e2df8527d727bdcf7461b3e98cce4e76c3887dd08f15cdf0b3e431110edc5b830b108d1e05e1a80e4a212fa5d0ca85ba41c775f8bd164d7cd244c06792eaac3b3bd03d21a3f0a578763c78ccc0ab968a89f347335dc2a5f77f6486addb4eca83b7d98a9710d7b9b8be03eb076f2d00ffcc4f9304a6fb7a35e09dbf8e7dbba6176d9d8f528bd914cf97d1fa3c9bbc2cd3b3fb2a78dba495a6111abaa714c48796ce3ad7bf3aa65b3f06e9ff37024074f849c017b293949bfdc69eea9e25d59a5e77120b1ab2c34434720b4f3b19b8703f4708c3fab10346a1a9eccb5bcfd985cff8820f0eb6247b0736970bec56b7f04bb7c46b7701ed1ee0ba1b74c3d316d2af4e8fbf2b66a04e2c4b286e7e2885e9bfa668c6807a20d58fc3887795023ef473a437ba2f1afca6838b1305d00f8ce3822c102cf1eb8b4f137c041d6655b259d8650b7a650337559ea095d9cbf7b93494528caaa809728c0fb1435d9b4b7ec387c7c3ba5a27fa3e0dee8d19413a6fbf8e5bf2674723fdd7d37913c9d90708373299a758fe06dc9f4eaabaf57650260ca18208994cc161bf4140e27b6276bd5805d2baae1688d4f3ae5743c2a908389d370b2891ce184d538b8b3057286f4b35a366266f5e81635e17b75c263ecaa34a780eb844e66568679df85942a6e55f478a1fb5cc096e8c9f9300da6a7c117c0f9d7878f7f4143fddc11199fd876a2b4018b728925e1b580d94ffc26c2bffd3181d6ea020e22e7a68e4340f2be96a11af20b4deec3b6ca6b5508dcceb96078d94c8a27358b86b63f833d6386c41731b37c7a167685ce839b7e1c120f05faef4584b3864474bee02cedd2f34eb712d72da1674d8b382d0c7420071652cea699af5861045944a70f5eaf1f1209f271d95f3ca9fe8106c29cb0b22f5a8b99aa48dc378f90ea01614535971936b218860fc614771c02a3d3c66da367eb8ae3b0e0d47e1f819ed0cd82dcb7212ddf19df7d3bc551095c0a2a5d105128f7637c7556f4a01f3fa2b1659fc983fb477eba4fa70bbb8169d0ad0c07a38fe6ff396de631233fa85492da7ad0433b0adbb817e419812ddd85038329a707ee3ab11d100c8de2389d9cfda25f2b656d432e96191009a31902f79bad2a673afdaef834a44a1db51f62878d99d3eb2475e3d5828bb708c5c8c4bb1820fdde66a2ecae124c3f86366ee8c0cdf694a061a71fc35e3c37680a4a7daf78faeec3c2f1a059eb214f61632807e3a582ea2a6570589e8fb2f285e0d99becb74ae4617787605f7f1afb300181fdbcbdafcf879df8726120e0e4cfd6529837474a34d6af2f9076c3719419591b4d41b6933b0c8768c79dc54f9bad1950fa5b3741506163aba002b1e2b0db761174778dde39f7da57e2558503fd08ca2e4a94bf831f3f94a43f9aaed3bca06113dc1b0e9cc317fbc79e1ea560c9bbb1805b4345fb57ca0b28af46f648ab6dfcf1e06691f507feefc09140239414cfd828ab0492d5c8851ce0e3059282b354b1240487460203b0d10a734322a30a4e96571acf581472add454738a7d539377f2ad50542a6974ebaa87cc8c8688eef397c1e171f6bfac2579a19346960e3978e9d1247fadabe285521632930871c26a536e75e6b76c4d457f7e4d1747f02bcbc27b00d1683df113f4a4eaf713864caebc8b9874327c235af5ba0a81672bc03a4499d8dcbbf62a61c47212df3dd648c1bab058c889e39fbf2c9e7f1a6c6be93b058a55439fde50af1082cdba0533cc1008101ff58e507afab9f9a26dff2f4cc93049cf34a620d844c6bddaf1b324e382b4e83feebee26320cb63a328f26641ae39d101fa24038e34813c567e50d5c5d7234e0b4c70cc42285018b804cc98fb097ff7584db5f8758219083851bfd229bf00429dd5344209b740c7f9bca108d43d7e4eabbd99c2f4b5d8ef202ba2616d24a5d02263d754107cc9e538e9ac9306d13c355edf2455eb1182ccd0395fb617dc91fcd8c02cd8031d83011e7747529f7789c5f5f3709b4771bb6343cf92fef8f194972618f2660c67c6d142fd33531c831da55c666ad71c9502157d58bdae83da74b24951d79ab9ed5364dc0df07d47bbe9b2a40e4b640df52f852d0edd6ef1da1491670c9e744fc83680d23cc50073cd91f5cccd954dd808e33c6ad35ed3ff232bc881067eeb07777457349e63474e3c9df239f671f9eeea8982f168689e136aff242c493b8464f1d0214f186111b13bf8a7c5992abac41c80327e4d08c9a1b537ca9c17d0c5280a265892d7357c828ad2ec5d9c71f76a057edee6af1d7ac495bdd991f1b8f18d0fee783626745dcf5a268636c458ef53004d6b256c7db152eef9d749f1b4eceaf7f275d272bc030ac8f096741ec22098e4280644311a419125de94854e07e3392bd63efdc1233666eb9ef4eb50826741b6ef836dd9862256b444ff17431616fc9646955c0366e7177dab9931e6fdca200c0385f7e48fc2e79b1a6fa95b6a98b97d637cac64fef92ac4451572df4a9f98346d2177f5c311af20592a7a0f49c8a8cdb2fdbdc1ff2f0e33bd04a53d0c995ccbf997366274bc18f8fce6cab3da11a91b7908ad6dd451c918e55477bc179c3375849deb545c2d21b95c089d53e995a58e1632906d6c4582d20ef6ff4238a919eec8014a45fc28ff377312db0c7ed528356921f7d9056f28fe66cfd3c5f537260e4c44f6970c4a24f2a831c2a790ab07a318f57ff1f568cad2d64224ffea2a6ef4003ac79254d5c21b1b8e6bb860dbd7d9bc21b2f539fe8f1f648a422f110ca9120af66aa022806b1cbbc158b2a492e41b9c286d1a6c8cf382e9a3de3b98f1288f6316ceabc97eb3a96a84595ecf00e7a30d11fd3f371f4a6161105319e6a20a74e0b73c3f53f7facf5b6b3e753546f76f15b02eab58ef94ccc5a580d4d6665daae330467b7082f982f5f6567cc7b686b020d59526efbc6802bba0f51627e806d890a6077accc62bddba5"})
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="021831020b00000000000000fddbdf25030005000000000002000300e00000010000000000000000030012003c80000002004e20ac1414bb0000000000000000030006000000000002000001ff29b8bb3900000000000000a6"], 0x58}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r11 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007b9f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2301ff00000000000000000014d6d930dfe1d9c322fe040000007025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0xc0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r10, @ANYBLOB="8b000400000000004800128008000100736974003c0002800500090029000000060010000b00000008000c000000008006000d000900000006000f0003040000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
socket$inet_sctp(0x2, 0x1, 0x84)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r13)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="3c0000000b2c2b35cc3762ff5f680c599008f228eedaca0fef1e81c0dcafdf32db979b4bf5c24eec3a76e1e15de32e45c13c594b35f2a303c9ad9cc9091e6bc3c6b390c4947b7796879bc342a3a810e28fc4c53f3ae8e00b0581d9e0f538961f1ead7b242e9984971272fdc4b69653f9a65987feec6a0315dcfa2e662371c9237ce9ddfeab9bb400f40e01583e77c39909ea576f49fb0a769ce4b2412792991bcc8ccbe7e040f8d01155c3bd3ef2eec56aad072ad1f411949c302f4cc221ac50ae1cbaf25bae15f3396c1405dd7ea479d28e3f3cee91dd23ddbd156a6b6e", @ANYRES16=r14, @ANYBLOB="21082cbd7000ffdbdf2d2e0000000a0001007770616e3000000005002b00000000000c0005000201aaaaaaaaaaaa0600060000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48055}, 0x80)
unshare(0x20000400)
r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r16, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x2400d096)

15.347487608s ago: executing program 2 (id=19543):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
r4 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r4, &(0x7f0000000140)="80003ee9620ca1ce", 0x8, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
write$tun(r2, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xc30}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x1, 0x70bd3d, 0x0, {0x7}, [@IFLA_EXT_MASK={0x8, 0x35, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c011}, 0x0)

15.277460127s ago: executing program 0 (id=19544):
r0 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', <r1=>0x0})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0xa, [@union={0xb, 0xa, 0x0, 0x5, 0x0, 0x80, [{0x0, 0x2, 0x100}, {0x5, 0x2, 0x1000}, {0xc, 0x5, 0xfffffffc}, {0x1, 0x0, 0x80000000}, {0x0, 0x2, 0x96}, {0xb, 0x5, 0xb}, {0xf, 0x0, 0xf21}, {0x2, 0x1, 0x353}, {0x7, 0x5, 0x100400}, {0x8, 0x0, 0x2}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x1, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x1}, @var={0x5, 0x0, 0x0, 0xe, 0x1, 0x1}, @volatile={0x1}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x4, 0x2}, {0xf, 0x1}, {0xb, 0x5}, {0x8, 0x2}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x0, 0x5f, 0x61, 0x61, 0x5f]}}, &(0x7f0000000340)=""/143, 0x116, 0x8f, 0x1, 0x101}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x4, 0x6, 0xa}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000200), &(0x7f0000000340)=r4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000005c0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x9, &(0x7f0000000040)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x2b, &(0x7f0000000180)=""/43, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f00000002c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)=[r3, r5], &(0x7f0000000680)=[{0x1, 0x2, 0xe, 0xb}, {0x4, 0x4, 0x3, 0x3}, {0x4, 0x4, 0x5, 0x3}, {0x2, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xa, 0x2}, {0x1, 0x3, 0xe, 0xc}, {0x0, 0x2, 0x1, 0x7}], 0x10, 0x7}, 0x94)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f0000000140))
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000840)={r7})
setsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0)

15.277193088s ago: executing program 2 (id=19545):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$cgroup_pressure(r2, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0)
setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000040000000000006400000800000000000000000000001864000010000000000000009500000001105a4901000000186300000f00000000000095000000000000000000000000ad0a56f04df5227cd0f418fd84a452b3712251006a8e248ca0353b735cd7dc6560c54beb0c259d05c4a1bfae8d9a"], &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94)
sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="91a8186d0bd2f25959cf3b7a", 0xc}, {&(0x7f0000000340)="cac89efcc29cf4a96317131af35209feb54aa041a9c15ed47a76d5a960169c2304b4e336efdbc0606f1d11a3a9f05ee24d1e0dfa1533963683a3c6f8d1fb6454b8cd188c6a1449d6d75203dfcb84a01d8433e6470156c42f7d067849c8fd6e4aa84f06cdbb5f88d72f39d7e807e511be94bbd3cc28e601f3560637d8371148e3a76f6ded05d42fdca7db58c34edeb806e0bc3e", 0x93}, {&(0x7f0000000180)="4b30897998ae239084ea99c20f19da8cbf41cbc913f6c6fe8e65390ae9aba65145f714c1174ae1763f66b8632eb4416a49189cda6b51af3a9d7278048d2406beb5fa84c50a1933985511040aee9e6cf2f2dd72f733e13001c77158c665a8e7c86e41c33d77c61906383c5d5a414ce3ef9009ad4873134e6e4842b0", 0x7b}], 0x3}, 0x8800)

15.274297372s ago: executing program 1 (id=19546):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) (async)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="000300000000000053b9c4290000000000000007ae000000b70000000000da68052603d2ad4330de5b53dfe5d1f3aab60e4f40935644acaee6b1c87c2f7e713e803560909911bf610198b019892df41ebd7bc54d00a74b76844eb955e0175fe4ff93c7d7ffc7a6eb569486ce11ddf6a5abf8c68b3f1f1e849400"/132], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000d0c0d05500010000000000000000000000bd87faff2400000018140000", @ANYRES32, @ANYBLOB="000000000000000018210000", @ANYRES32=r0, @ANYBLOB="00000000ffffff7f18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async)
setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x54) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) (async)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, 0x0, 0x44050)

15.274169524s ago: executing program 1 (id=19547):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3e8100220086dd6d0000000008110000000000000000000000000000000002ff0200000000000000000000000000014f1c1b5900089078"], 0x42)

15.273252428s ago: executing program 2 (id=19548):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000000000080000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
close(0x3)
unshare(0x400)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000680)={@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x2}}, {0x0}, 0x0, 0x40}, 0xa0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x2}, 0x8)

15.265470681s ago: executing program 0 (id=19549):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000000000000000010008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f0000000040)=@can={0x1d, <r3=>0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000900)=""/69, 0x45}, {&(0x7f0000000200)=""/39, 0x27}], 0x2, &(0x7f00000004c0)=""/109, 0x6d}, 0x40000000)
r4 = socket$inet6(0xa, 0x80002, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb7f0a0043c5e9b405a902211c0000000000019078acbbac1414aa080090780fff02000000"], 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000887e14b89d84"], 0x8)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES8=r2, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYRES8=r2], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18120000a415e8988e66a28a3526f639ed8012edb6fd28e9535e1763dcc67f3cc89955dcba416eb56b58f584bc0dd250c0f0f3b303e7f3d5f600ada22431757449a4201ad3907fcc92ecccca24a1bc65694445086079dd978cfb519c53313c6fba9674fb48aa9e4744fadd743951fa7110df44db5bb69f5e7ec91c983d24f35295d71e716005aec2761c0fc6698c8e4a9c86f0c2b5cbb3f6b307b32305d6d3dace35fa8651e0219300c744a10502afdf273aa3522660d91759353870946525c69a5a5338cd0b42e3b114", @ANYRES32=r6, @ANYBLOB="000000000000000018490000020000080000000000000000"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0xfffffee3)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000480)='svc_stats_latency\x00', r1, 0x0, 0x3}, 0x18)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002b40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYRES64=r7, @ANYBLOB="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", @ANYBLOB="08000100000000000c000200ff7f000000000000", @ANYRESHEX=r9], 0x38}}, 0x20000800)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010027bd7000fcdbdf2502000000080001000000000042e19c397b2ef1240023287d27d60433245f17df86e2118393c18c08678cdf936e36c2a728ee8837908680d47f7e2dad099b6e55fe594f437de7fea8d50438cf66111ac26f9eb9c67a2fb299aa6e42192643490835a44d1869696859c47d3ef8165c43cf88257782982c5501e9ca8a0e09106355ba16ced0e0659116abcf0d455bf53f73c4ac3747616a506e03d929543963c2cae4642a3b260ad2ff22d3b38625f2aa2ac1d299e43d8da7be71c9d6841a5f3dd17e0624ff4afcf8bbdaa11d7dffd8e39d6334bd236fd8fb0e2a8063e1d8ebdba1ffc72274a8128d3bf4f102eba28dafa32141c9d3dd084661654ebc33b5575ea544067bf03235e03a265fbe1a51065a8f62b609386308e0ee60784ba9ae2963aeb241cd5c2f4815376ebf0aa68625dd96cf13ead253db0100000000000000e49375d05a48fd37654d1e70a811d958f5a0f5dc3e8dc1157f20a0ec93c549c8a1fca4ddf5b40d7ae0311a3d6f49158ce2a5a85753703c0cb3e1e41479b96709ff6009fc12b83bf56011656277b00b05227d862ce23d9a9395f6f586e947bb"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x2710}, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x4048044)
socket$vsock_stream(0x28, 0x1, 0x0)

15.189979714s ago: executing program 2 (id=19550):
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x40002}, [@printk={@d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000cc000000cc000000070000000200000000000007000000000400000006000004ff0100000300000002000000050000000500000005000000fcffffff0900000005000000060000000200000000000000050000000700000004000000000800000600000000000000000800000d00000000000008000000000b000000060000130a0000000b000000020000001c010000040000003f010000020000000900000003000000ff03000001000000598cab4f000000000b0000007f0000005c9700000600000000040000df0c00000b0000000000000c02007f0000002e5f"], 0x0, 0xeb, 0x0, 0x1, 0x7}, 0x28)

15.120764386s ago: executing program 1 (id=19551):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) (async)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) (async)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1)
write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33) (async, rerun: 32)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 32)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e27, 0x3, @remote, 0x7}, 0x1c)
listen(r0, 0x39c)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="05b001"], 0x9) (async)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) (async)
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000001b00), &(0x7f0000000000)=0x4)
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYRES8, @ANYRES16, @ANYRES32=0x0, @ANYRESOCT=r6, @ANYBLOB="08000500060000000a00800400010004000500"/31], 0xac}, 0x1, 0x0, 0x0, 0x4800}, 0x20008810) (async)
sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000bcdbdf253000000008000300", @ANYRES32=r7, @ANYBLOB="0600360034000000060036003e000000060036000c000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
write$tcp_congestion(r3, &(0x7f0000000100)='reno\x00', 0x5) (async, rerun: 64)
r8 = socket(0x10, 0x806, 0x97) (rerun: 64)
sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30010000100037040000000cffffff475dfcff00", @ANYRES32=r9, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x48800}, 0x4008011) (async, rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[], 0x0, 0x32, 0x0, 0x1, 0x7, 0x10000, @value=r2}, 0x28) (async, rerun: 64)
recvfrom$inet(r8, &(0x7f0000000000)=""/30, 0x1e, 0x2, &(0x7f00000003c0)={0x2, 0x4e24, @remote}, 0x10) (async)
write$tcp_congestion(r3, &(0x7f0000000300)='reno\x00', 0x5)
socket$kcm(0x2b, 0x0, 0x0)

15.061731195s ago: executing program 1 (id=19552):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600156f"], 0x18}, 0x1, 0x0, 0x0, 0x810}, 0x8080)
recvmmsg(r0, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/201, 0xc9}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/4115, 0x1013}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x12002, 0x0)

39.840854ms ago: executing program 32 (id=19549):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000000000000000010008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f0000000040)=@can={0x1d, <r3=>0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000900)=""/69, 0x45}, {&(0x7f0000000200)=""/39, 0x27}], 0x2, &(0x7f00000004c0)=""/109, 0x6d}, 0x40000000)
r4 = socket$inet6(0xa, 0x80002, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb7f0a0043c5e9b405a902211c0000000000019078acbbac1414aa080090780fff02000000"], 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000887e14b89d84"], 0x8)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES8=r2, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYRES8=r2], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18120000a415e8988e66a28a3526f639ed8012edb6fd28e9535e1763dcc67f3cc89955dcba416eb56b58f584bc0dd250c0f0f3b303e7f3d5f600ada22431757449a4201ad3907fcc92ecccca24a1bc65694445086079dd978cfb519c53313c6fba9674fb48aa9e4744fadd743951fa7110df44db5bb69f5e7ec91c983d24f35295d71e716005aec2761c0fc6698c8e4a9c86f0c2b5cbb3f6b307b32305d6d3dace35fa8651e0219300c744a10502afdf273aa3522660d91759353870946525c69a5a5338cd0b42e3b114", @ANYRES32=r6, @ANYBLOB="000000000000000018490000020000080000000000000000"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0xfffffee3)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000480)='svc_stats_latency\x00', r1, 0x0, 0x3}, 0x18)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002b40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYRES64=r7, @ANYBLOB="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", @ANYBLOB="08000100000000000c000200ff7f000000000000", @ANYRESHEX=r9], 0x38}}, 0x20000800)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x2710}, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x4048044)
socket$vsock_stream(0x28, 0x1, 0x0)

106.956µs ago: executing program 33 (id=19552):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600156f"], 0x18}, 0x1, 0x0, 0x0, 0x810}, 0x8080)
recvmmsg(r0, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/201, 0xc9}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/4115, 0x1013}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x12002, 0x0)

0s ago: executing program 34 (id=19550):
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x40002}, [@printk={@d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000cc000000cc000000070000000200000000000007000000000400000006000004ff0100000300000002000000050000000500000005000000fcffffff0900000005000000060000000200000000000000050000000700000004000000000800000600000000000000000800000d00000000000008000000000b000000060000130a0000000b000000020000001c010000040000003f010000020000000900000003000000ff03000001000000598cab4f000000000b0000007f0000005c9700000600000000040000df0c00000b0000000000000c02007f0000002e5f"], 0x0, 0xeb, 0x0, 0x1, 0x7}, 0x28)

kernel console output (not intermixed with test programs):

invalid length.
[  894.053903][T23193] netlink: 'syz.2.16949': attribute type 17 has an invalid length.
[  894.056935][T23194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  894.065930][T23194] syzkaller0: entered promiscuous mode
[  894.067773][T23194] syzkaller0: entered allmulticast mode
[  894.073588][T23194] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  894.153011][T23207] tipc: Resetting bearer <eth:syzkaller0>
[  894.721075][T23248] mac80211_hwsim hwsim2 : renamed from virt_wifi0
[  894.824520][T23185] tipc: Resetting bearer <eth:syzkaller0>
[  894.843248][T23185] tipc: Disabling bearer <eth:syzkaller0>
[  894.886942][T23264] syzkaller1: left promiscuous mode
[  894.889587][T23264] bond39: left promiscuous mode
[  894.892090][T23264] syzkaller1: left allmulticast mode
[  894.894411][T23264] bond39: left allmulticast mode
[  894.993795][T23271] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  895.085224][   T33] audit: type=1800 audit(1755521361.620:26): pid=23266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.16974" name="cgroup.controllers" dev="tmpfs" ino=27446 res=0 errno=0
[  895.474516][T23313] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  895.546255][T23313] syzkaller0: entered promiscuous mode
[  895.548600][T23313] syzkaller0: entered allmulticast mode
[  896.743872][T23336] __nla_validate_parse: 36 callbacks suppressed
[  896.743883][T23336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16997'.
[  896.994252][T23361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17003'.
[  897.016107][T23363] syzkaller1: entered promiscuous mode
[  897.018001][T23363] syzkaller1: entered allmulticast mode
[  897.256016][T23384] macvtap0: entered promiscuous mode
[  897.258505][T23384] mac80211_hwsim hwsim65 wlan1: entered promiscuous mode
[  897.265790][T23384] mac80211_hwsim hwsim65 wlan1: left promiscuous mode
[  897.291490][T23388] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.17016'.
[  897.357528][T23392] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  897.361904][T23392] syzkaller0: entered promiscuous mode
[  897.363978][T23392] syzkaller0: entered allmulticast mode
[  897.405049][T23388] veth0_to_bond: entered allmulticast mode
[  897.408882][T23388] 8021q: VLANs not supported on ip_vti0
[  897.426764][T23392] tipc: Resetting bearer <eth:syzkaller0>
[  897.438594][T23390] tipc: Resetting bearer <eth:syzkaller0>
[  897.457294][T23390] tipc: Disabling bearer <eth:syzkaller0>
[  897.782948][T23413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17023'.
[  897.809949][T23415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17024'.
[  897.851423][T23415] "syz.0.17024" (23415) uses obsolete ecb(arc4) skcipher
[  897.854152][T23415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17024'.
[  897.945669][T23418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17025'.
[  897.957064][T23418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17025'.
[  898.231722][T23442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17032'.
[  898.254887][T23442] "syz.1.17032" (23442) uses obsolete ecb(arc4) skcipher
[  898.258083][T23442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17032'.
[  898.335824][T23445] "syz.1.17033" (23445) uses obsolete ecb(arc4) skcipher
[  898.975674][T23521] "syz.0.17060" (23521) uses obsolete ecb(arc4) skcipher
[  899.011869][T23514] vxcan1 speed is unknown, defaulting to 1000
[  899.054273][T23526] IPv6: Can't replace route, no match found
[  899.138434][T23514] wg1 speed is unknown, defaulting to 1000
[  899.284275][T23514] lo speed is unknown, defaulting to 1000
[  899.366811][T23543] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003
[  900.159407][T23559] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:3
[  900.257102][T23565] syzkaller0: entered promiscuous mode
[  900.263902][T23565] syzkaller0: entered allmulticast mode
[  900.327211][T23570] validate_nla: 10 callbacks suppressed
[  900.327220][T23570] netlink: 'syz.2.17080': attribute type 1 has an invalid length.
[  900.346298][T23570] 8021q: adding VLAN 0 to HW filter on device bond52
[  900.386406][T23570] 8021q: adding VLAN 0 to HW filter on device bond52
[  900.390772][T23570] bond52: (slave vxcan9): The slave device specified does not support setting the MAC address
[  900.396034][T23570] bond52: (slave vxcan9): Error -95 calling set_mac_address
[  900.421573][T23575] veth57: entered promiscuous mode
[  900.426239][T23575] bond52: (slave veth57): Enslaving as an active interface with a down link
[  900.445295][T23575] erspan0: entered allmulticast mode
[  900.447724][T23575] bond46: (slave erspan0): Releasing active interface
[  900.454220][T23575] bond52: (slave erspan0): making interface the new active one
[  900.457675][T23575] bond52: (slave erspan0): Enslaving as an active interface with an up link
[  900.602740][T23591] netlink: 'syz.2.17086': attribute type 16 has an invalid length.
[  900.605636][T23591] netlink: 'syz.2.17086': attribute type 17 has an invalid length.
[  900.732146][T23600] netlink: 'syz.2.17089': attribute type 10 has an invalid length.
[  901.162530][T23628] netlink: 'syz.2.17099': attribute type 16 has an invalid length.
[  901.165420][T23628] netlink: 'syz.2.17099': attribute type 17 has an invalid length.
[  902.787023][T23652] netlink: 'syz.0.17108': attribute type 16 has an invalid length.
[  902.791293][T23652] netlink: 'syz.0.17108': attribute type 17 has an invalid length.
[  902.818095][T23658] __nla_validate_parse: 14 callbacks suppressed
[  902.818104][T23658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17110'.
[  902.825596][T23658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17110'.
[  902.905069][T23668] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  902.910561][T23668] syzkaller0: entered promiscuous mode
[  902.912568][T23668] syzkaller0: entered allmulticast mode
[  903.019327][T23678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17119'.
[  903.020439][T23679] netlink: 'syz.0.17120': attribute type 16 has an invalid length.
[  903.025848][T23679] netlink: 'syz.0.17120': attribute type 17 has an invalid length.
[  903.062309][T23684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17122'.
[  903.065992][T23683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17122'.
[  903.170424][T23692] netlink: 260 bytes leftover after parsing attributes in process `syz.0.17125'.
[  903.323043][T23701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17129'.
[  903.362243][T23701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17129'.
[  903.421136][T23706] openvswitch: netlink: Missing valid actions attribute.
[  903.423526][T23706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  903.556435][T23714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17133'.
[  903.570812][T23715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17133'.
[  903.647888][T23717] vxcan1 speed is unknown, defaulting to 1000
[  903.681502][T23722] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  903.775657][T23717] wg1 speed is unknown, defaulting to 1000
[  903.866550][T23717] lo speed is unknown, defaulting to 1000
[  905.331689][T23843] validate_nla: 2 callbacks suppressed
[  905.331698][T23843] netlink: 'syz.2.17178': attribute type 1 has an invalid length.
[  905.473246][T23854] IPv6: NLM_F_CREATE should be specified when creating new route
[  905.832826][T23886] netlink: 'syz.1.17193': attribute type 16 has an invalid length.
[  905.835544][T23886] netlink: 'syz.1.17193': attribute type 17 has an invalid length.
[  905.882167][T23888] "syz.0.17194" (23888) uses obsolete ecb(arc4) skcipher
[  905.949284][ T5882] bond52: (slave ip6gretap4): link status up again after 0 ms
[  905.953351][ T5882] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  905.977407][T23902] pim6reg1: entered promiscuous mode
[  905.980313][T23902] pim6reg1: entered allmulticast mode
[  906.059382][ T5881] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  906.154205][T23909] netlink: 'syz.0.17201': attribute type 12 has an invalid length.
[  906.173792][ T5882] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  906.279095][ T5882] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  906.322911][T23931] bond0: left promiscuous mode
[  906.324530][T23931] bond0: left allmulticast mode
[  906.389357][   T13] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  906.444883][T23945] openvswitch: netlink: Missing valid actions attribute.
[  906.447254][T23945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  906.763420][T23980] netlink: 'syz.0.17223': attribute type 10 has an invalid length.
[  906.832515][T23990] netlink: 'syz.2.17225': attribute type 1 has an invalid length.
[  906.835334][T23990] NCSI netlink: No device for ifindex 0
[  906.971267][T23998] netlink: 'syz.0.17230': attribute type 1 has an invalid length.
[  906.990171][T23998] 8021q: adding VLAN 0 to HW filter on device bond39
[  907.002816][T23998] 8021q: adding VLAN 0 to HW filter on device bond39
[  907.005224][T23998] bond39: (slave vxcan1): The slave device specified does not support setting the MAC address
[  907.009756][T23998] bond39: (slave vxcan1): Error -95 calling set_mac_address
[  907.059482][T24000] bond39: (slave bridge101): Enslaving as an active interface with a down link
[  907.184732][T24004] can: request_module (can-proto-0) failed.
[  907.675817][T24058] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  907.682769][T24058] sctp: [Deprecated]: syz.1.17254 (pid 24058) Use of struct sctp_assoc_value in delayed_ack socket option.
[  907.682769][T24058] Use struct sctp_sack_info instead
[  907.732966][T24071] netlink: 'syz.0.17257': attribute type 16 has an invalid length.
[  907.736212][T24071] netlink: 'syz.0.17257': attribute type 17 has an invalid length.
[  907.831052][T24080] rdma_rxe: rxe_newlink: failed to add macvlan1
[  907.835808][T24086] __nla_validate_parse: 12 callbacks suppressed
[  907.835816][T24086] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17263'.
[  907.892931][T24095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17266'.
[  907.902666][T24097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17267'.
[  907.920255][T24095] "syz.1.17266" (24095) uses obsolete ecb(arc4) skcipher
[  907.923561][T24095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17266'.
[  907.952535][T24102] netlink: 'syz.1.17269': attribute type 16 has an invalid length.
[  908.053389][T24113] xt_policy: too many policy elements
[  908.167139][T24120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17276'.
[  908.249115][T24128] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.17279'.
[  908.253326][T24127] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.17279'.
[  908.255054][T24129] netlink: 332 bytes leftover after parsing attributes in process `syz.0.17279'.
[  908.261243][T24129] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17279'.
[  908.265084][T24129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17279'.
[  908.469244][ T5881] net_ratelimit: 21 callbacks suppressed
[  908.469258][ T5881] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  908.559988][T24151] openvswitch: netlink: Missing valid actions attribute.
[  908.563078][T24151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  908.579180][   T13] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  908.594629][T24153] "syz.0.17288" (24153) uses obsolete ecb(arc4) skcipher
[  908.689105][   T13] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  908.801239][ T5881] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  908.825283][T24163] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  908.831201][T24163] syzkaller0: entered promiscuous mode
[  908.834081][T24163] syzkaller0: entered allmulticast mode
[  908.840621][T24163] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  908.845539][T24163] tipc: Resetting bearer <eth:syzkaller0>
[  908.850335][T24162] tipc: Resetting bearer <eth:syzkaller0>
[  908.862273][T24162] tipc: Disabling bearer <eth:syzkaller0>
[  908.909544][   T13] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  909.019781][   T13] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  909.129463][ T5882] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  909.144162][T24189] "syz.0.17302" (24189) uses obsolete ecb(arc4) skcipher
[  909.242151][T24196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  909.518734][T24218] sctp: [Deprecated]: syz.1.17314 (pid 24218) Use of int in maxseg socket option.
[  909.518734][T24218] Use struct sctp_assoc_value instead
[  910.523254][T24276] validate_nla: 4 callbacks suppressed
[  910.523264][T24276] netlink: 'syz.0.17336': attribute type 16 has an invalid length.
[  910.528184][T24276] netlink: 'syz.0.17336': attribute type 17 has an invalid length.
[  910.656734][T24281] xt_policy: too many policy elements
[  910.734032][T24283] "syz.2.17339" (24283) uses obsolete ecb(arc4) skcipher
[  911.021686][T24307] netlink: 'syz.2.17346': attribute type 5 has an invalid length.
[  911.906801][T24401] netlink: 'syz.0.17381': attribute type 16 has an invalid length.
[  911.911956][T24401] netlink: 'syz.0.17381': attribute type 17 has an invalid length.
[  911.976877][T24410] netlink: 'syz.0.17384': attribute type 2 has an invalid length.
[  912.424832][T24458] batadv0: entered allmulticast mode
[  912.523632][T24467] "syz.1.17401" (24467) uses obsolete ecb(arc4) skcipher
[  912.695300][   T56] block nbd7: Receive control failed (result -104)
[  913.559305][ T5882] net_ratelimit: 49 callbacks suppressed
[  913.559319][ T5882] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  913.656529][T24524] openvswitch: netlink: Key type 10512 is out of range max 32
[  913.679382][ T5881] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  913.705850][T24528] netlink: 'syz.1.17419': attribute type 16 has an invalid length.
[  913.711427][T24528] netlink: 'syz.1.17419': attribute type 17 has an invalid length.
[  913.758363][T24534] __nla_validate_parse: 36 callbacks suppressed
[  913.758377][T24534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17421'.
[  913.777411][T24534] workqueue: Failed to create a rescuer kthread for wq "bond53": -EINTR
[  913.789982][   T13] bond52: (slave ip6gretap4): link status up again after 0 ms
[  913.803345][   T13] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  913.832311][T24548] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  913.835455][T24548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  913.861876][T24549] vxcan1 speed is unknown, defaulting to 1000
[  913.909035][ T5881] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  913.924175][T24559] netlink: 'syz.2.17428': attribute type 21 has an invalid length.
[  913.927295][T24559] netlink: 128 bytes leftover after parsing attributes in process `syz.2.17428'.
[  913.930455][T24559] netlink: 'syz.2.17428': attribute type 4 has an invalid length.
[  913.933099][T24559] netlink: 3 bytes leftover after parsing attributes in process `syz.2.17428'.
[  913.986971][T24549] wg1 speed is unknown, defaulting to 1000
[  914.040173][ T5881] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  914.092826][T24549] lo speed is unknown, defaulting to 1000
[  914.173164][ T7435] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  914.269926][T24588] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17439'.
[  914.288415][   T13] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  914.735523][T24618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17447'.
[  914.839339][T24632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17453'.
[  914.885971][T24632] "syz.1.17453" (24632) uses obsolete ecb(arc4) skcipher
[  914.890412][T24632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17453'.
[  914.897676][T24637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17455'.
[  915.241473][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17464'.
[  915.288142][T24670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17465'.
[  915.385101][T24675] vxcan1 speed is unknown, defaulting to 1000
[  915.480310][T24675] wg1 speed is unknown, defaulting to 1000
[  915.555467][T24675] lo speed is unknown, defaulting to 1000
[  915.947433][T24688] validate_nla: 6 callbacks suppressed
[  915.947442][T24688] netlink: 'syz.1.17471': attribute type 16 has an invalid length.
[  915.955290][T24688] netlink: 'syz.1.17471': attribute type 17 has an invalid length.
[  916.094701][T24706] "syz.2.17478" (24706) uses obsolete ecb(arc4) skcipher
[  917.242823][T24788] "syz.2.17505" (24788) uses obsolete ecb(arc4) skcipher
[  917.417938][T24809] "syz.1.17511" (24809) uses obsolete ecb(arc4) skcipher
[  917.450589][T24815] netlink: 'syz.1.17514': attribute type 16 has an invalid length.
[  917.453259][T24815] netlink: 'syz.1.17514': attribute type 17 has an invalid length.
[  917.816474][T24840] "syz.1.17524" (24840) uses obsolete ecb(arc4) skcipher
[  917.948350][T24853] "syz.1.17529" (24853) uses obsolete ecb(arc4) skcipher
[  918.579883][T24897] netlink: 'syz.0.17544': attribute type 9 has an invalid length.
[  918.589058][T24902] netlink: 'syz.0.17544': attribute type 9 has an invalid length.
[  918.729360][ T7435] net_ratelimit: 48 callbacks suppressed
[  918.729372][ T7435] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  918.839944][ T5882] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  918.930782][T24923] openvswitch: netlink: Missing valid actions attribute.
[  918.933295][T24923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  918.949046][ T5882] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  919.064729][ T5881] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  919.145796][T24945] __nla_validate_parse: 18 callbacks suppressed
[  919.145805][T24945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17560'.
[  919.169404][ T5881] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  919.279181][ T7435] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  919.389518][ T5881] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  919.499176][ T5882] bond52: (slave ip6gretap4): failed to get link speed/duplex
[  920.035346][T24974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17569'.
[  920.089540][T24982] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  920.147265][T24989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17574'.
[  920.164652][T24992] IPv6: NLM_F_CREATE should be specified when creating new route
[  920.172893][T24989] netlink: 'syz.1.17574': attribute type 142 has an invalid length.
[  920.228264][T24996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17576'.
[  920.254031][T25001] netlink: 'syz.2.17579': attribute type 46 has an invalid length.
[  920.262530][T24996] "syz.1.17576" (24996) uses obsolete ecb(arc4) skcipher
[  920.265248][T24996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17576'.
[  920.298627][T25002] vxcan1 speed is unknown, defaulting to 1000
[  920.298764][T25001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17579'.
[  920.305423][T25005] Unsupported ieee802154 address type: 0
[  920.306830][T25001] netlink: 'syz.2.17579': attribute type 2 has an invalid length.
[  920.311168][T25001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17579'.
[  920.403279][T25002] wg1 speed is unknown, defaulting to 1000
[  920.486395][T25002] lo speed is unknown, defaulting to 1000
[  920.714801][T25019] veth0_to_bond: left allmulticast mode
[  920.722427][T25019] batadv0: left allmulticast mode
[  920.724657][T25019] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  920.727568][T25019] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  920.731566][T25019] veth14: left promiscuous mode
[  920.769515][T25019] vlan0: left promiscuous mode
[  920.771153][T25019] gretap0: left promiscuous mode
[  920.777247][T25019] bond50: left promiscuous mode
[  920.778901][T25019] bond50: left allmulticast mode
[  920.807473][T25019] bond51: left promiscuous mode
[  920.811661][T25019] bond51: left allmulticast mode
[  920.828658][T25019] veth25: left promiscuous mode
[  920.835492][ T5882] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  920.838856][ T5882] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  920.844798][ T5882] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  920.847606][ T5882] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  921.153945][T25033] Unsupported ieee802154 address type: 0
[  921.255895][T25042] IPv6: Can't replace route, no match found
[  921.581900][T25051] netlink: 'syz.0.17595': attribute type 1 has an invalid length.
[  921.596224][T25051] 8021q: adding VLAN 0 to HW filter on device bond40
[  921.611133][T25051] bond40: (slave gretap3): making interface the new active one
[  921.614144][T25051] bond40: (slave gretap3): Enslaving as an active interface with an up link
[  921.670710][T25058] macsec2: entered allmulticast mode
[  921.695638][T25060] ip6erspan0: entered allmulticast mode
[  921.702550][T25060] pim6reg: entered allmulticast mode
[  921.780956][T25067] netlink: 204 bytes leftover after parsing attributes in process `syz.2.17603'.
[  921.812620][T25071] "syz.2.17604" (25071) uses obsolete ecb(arc4) skcipher
[  921.815308][T25071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17604'.
[  921.818514][T25073] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17605'.
[  922.555353][T25165] vxcan1 speed is unknown, defaulting to 1000
[  922.700588][T25165] wg1 speed is unknown, defaulting to 1000
[  922.798279][T25165] lo speed is unknown, defaulting to 1000
[  923.583968][T25200] bond0: entered promiscuous mode
[  923.585767][T25200] bond0: entered allmulticast mode
[  923.595352][T25200] 8021q: adding VLAN 0 to HW filter on device bond0
[  923.790436][T25231] pim6reg1: entered promiscuous mode
[  923.792544][T25231] pim6reg1: entered allmulticast mode
[  923.892239][T25243] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  923.899594][T25243] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  923.983199][T25258] sit0: entered promiscuous mode
[  923.984957][T25258] netlink: 'syz.1.17657': attribute type 1 has an invalid length.
[  924.226391][T25286] __nla_validate_parse: 41 callbacks suppressed
[  924.226401][T25286] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.17667'.
[  924.360044][T25304] bond53 (unregistering): Released all slaves
[  924.373753][T25312] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  924.377444][T25312] syzkaller0: entered promiscuous mode
[  924.381108][T25312] syzkaller0: entered allmulticast mode
[  924.578078][T25340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17685'.
[  924.585213][T25332] sit0: left promiscuous mode
[  924.597332][T25332] ip6tnl9: left promiscuous mode
[  924.599376][T25332] bond38: left promiscuous mode
[  924.605260][T25340] "syz.2.17685" (25340) uses obsolete ecb(arc4) skcipher
[  924.607899][T25340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17685'.
[  924.835504][T25369] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17696'.
[  924.839796][T25370] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17696'.
[  924.854968][T25369] netlink: 'syz.1.17696': attribute type 21 has an invalid length.
[  924.858292][T25369] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17696'.
[  924.867017][T25369] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17696'.
[  924.888224][T25379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17699'.
[  924.962222][T25394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17705'.
[  924.976526][T25383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17700'.
[  924.985729][T25394] "syz.2.17705" (25394) uses obsolete ecb(arc4) skcipher
[  925.026108][T25403] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  925.031398][T25403] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  925.043961][T25400] "syz.1.17708" (25400) uses obsolete ecb(arc4) skcipher
[  925.336713][T25418] can: request_module (can-proto-3) failed.
[  925.427262][T25422] netlink: 'syz.1.17715': attribute type 1 has an invalid length.
[  926.047125][T25445] "syz.0.17723" (25445) uses obsolete ecb(arc4) skcipher
[  926.115562][T25459] "syz.0.17727" (25459) uses obsolete ecb(arc4) skcipher
[  926.333670][T25488] "syz.1.17739" (25488) uses obsolete ecb(arc4) skcipher
[  927.214882][T25508] net_ratelimit: 11 callbacks suppressed
[  927.214892][T25508] openvswitch: netlink: Flow key attr not present in new flow.
[  927.265723][T25510] vxcan1 speed is unknown, defaulting to 1000
[  927.335833][T25512] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  927.339398][T25512] syzkaller0: entered promiscuous mode
[  927.341348][T25512] syzkaller0: entered allmulticast mode
[  927.344707][T25512] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  927.354124][T25510] wg1 speed is unknown, defaulting to 1000
[  927.440256][T25510] lo speed is unknown, defaulting to 1000
[  927.696256][T25530] netlink: 'syz.2.17756': attribute type 1 has an invalid length.
[  927.922504][T25546] netlink: 'syz.1.17762': attribute type 1 has an invalid length.
[  927.960437][T25546] bond53: (slave vxcan1): The slave device specified does not support setting the MAC address
[  927.964668][T25546] bond53: (slave vxcan1): Error -95 calling set_mac_address
[  928.049637][T25559] vxcan1 speed is unknown, defaulting to 1000
[  928.054588][T25557] openvswitch: netlink: Flow actions attr not present in new flow.
[  928.155998][T25559] wg1 speed is unknown, defaulting to 1000
[  928.268572][T25559] lo speed is unknown, defaulting to 1000
[  928.545508][T25588] vxcan1 speed is unknown, defaulting to 1000
[  928.618745][T25592] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  928.626362][T25590] netlink: 'syz.0.17776': attribute type 1 has an invalid length.
[  928.714562][T25588] wg1 speed is unknown, defaulting to 1000
[  928.751567][T25601] "syz.2.17780" (25601) uses obsolete ecb(arc4) skcipher
[  928.840532][T25588] lo speed is unknown, defaulting to 1000
[  928.963630][T25619] netlink: 'syz.2.17787': attribute type 1 has an invalid length.
[  928.966346][T25619] netlink: 'syz.2.17787': attribute type 2 has an invalid length.
[  929.437263][T25630] __nla_validate_parse: 22 callbacks suppressed
[  929.437273][T25630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17793'.
[  929.501525][T25638] bridge: RTM_NEWNEIGH with invalid ether address
[  929.812224][T25660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17804'.
[  929.859388][T25664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17806'.
[  929.890386][T25664] "syz.1.17806" (25664) uses obsolete ecb(arc4) skcipher
[  929.893299][T25664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17806'.
[  929.931145][T25667] bridge0: entered promiscuous mode
[  929.932985][T25667] bridge0: entered allmulticast mode
[  930.562241][T25689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17815'.
[  931.308683][T25719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17828'.
[  931.344830][T25719] "syz.2.17828" (25719) uses obsolete ecb(arc4) skcipher
[  931.347977][T25719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17828'.
[  931.362533][T25722] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  931.415332][T25729] netlink: 'syz.2.17832': attribute type 1 has an invalid length.
[  931.417913][T25729] netlink: 'syz.2.17832': attribute type 11 has an invalid length.
[  931.420841][T25729] netlink: 220 bytes leftover after parsing attributes in process `syz.2.17832'.
[  931.424649][T25729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17832'.
[  931.603455][T25754] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17841'.
[  931.699416][T25770] "syz.0.17845" (25770) uses obsolete ecb(arc4) skcipher
[  931.823322][T25789] netlink: 'syz.0.17850': attribute type 4 has an invalid length.
[  931.826395][T25789] netlink: 'syz.0.17850': attribute type 4 has an invalid length.
[  931.838900][T10045] lo speed is unknown, defaulting to 1000
[  931.841188][T10045] syz1: Port: 1 Link ACTIVE
[  931.846789][T25793] netlink: 'syz.1.17852': attribute type 5 has an invalid length.
[  931.885446][T25796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  931.889349][T25796] syzkaller0: entered promiscuous mode
[  931.891729][T25796] syzkaller0: entered allmulticast mode
[  931.905793][T25796] tipc: Resetting bearer <eth:syzkaller0>
[  931.911740][T25794] tipc: Resetting bearer <eth:syzkaller0>
[  931.927126][T25794] tipc: Disabling bearer <eth:syzkaller0>
[  931.997732][T25807] vxcan1 speed is unknown, defaulting to 1000
[  932.093839][T25807] wg1 speed is unknown, defaulting to 1000
[  932.196858][T25807] lo speed is unknown, defaulting to 1000
[  932.244315][T25821] siw: device registration error -23
[  932.640823][T25853] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  933.219556][T25891] validate_nla: 1 callbacks suppressed
[  933.219569][T25891] netlink: 'syz.1.17885': attribute type 1 has an invalid length.
[  933.241508][T25891] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  933.245791][T25891] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  933.380450][T25900] netlink: 'syz.1.17887': attribute type 2 has an invalid length.
[  933.383991][T25900] netlink: 'syz.1.17887': attribute type 8 has an invalid length.
[  933.613705][T25914] netlink: 'syz.0.17893': attribute type 39 has an invalid length.
[  933.836529][T25934] netlink: 'syz.0.17899': attribute type 6 has an invalid length.
[  933.841849][T25934] netlink: 'syz.0.17899': attribute type 5 has an invalid length.
[  934.195343][T25953] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  934.827305][T25991] __nla_validate_parse: 16 callbacks suppressed
[  934.827319][T25991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17915'.
[  934.964333][T26009] "syz.1.17918" (26009) uses obsolete ecb(arc4) skcipher
[  934.971802][T26010] sit0: left promiscuous mode
[  935.008553][T26010] bridge0: left promiscuous mode
[  935.013246][T26010] bridge0: left allmulticast mode
[  935.021725][T26010] bond0: left promiscuous mode
[  935.023517][T26015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17920'.
[  935.025633][T26010] bond0: left allmulticast mode
[  935.134451][T26022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17922'.
[  935.147413][T26029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17924'.
[  935.196594][T26029] bond41: entered promiscuous mode
[  935.198412][T26029] bond41: entered allmulticast mode
[  935.203615][T26029] 8021q: adding VLAN 0 to HW filter on device bond41
[  935.207982][T26029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17924'.
[  935.245433][T26029] bond42: entered promiscuous mode
[  935.247495][T26029] bond42: entered allmulticast mode
[  935.250472][T26029] 8021q: adding VLAN 0 to HW filter on device bond42
[  935.257678][T26029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17924'.
[  935.285598][T26029] bond43: entered promiscuous mode
[  935.287284][T26029] bond43: entered allmulticast mode
[  935.289378][T26029] 8021q: adding VLAN 0 to HW filter on device bond43
[  935.292239][T26029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17924'.
[  935.307343][T26029] bond44: entered promiscuous mode
[  935.309520][T26029] bond44: entered allmulticast mode
[  935.311444][T26029] 8021q: adding VLAN 0 to HW filter on device bond44
[  935.313990][T26029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17924'.
[  935.328371][T26029] bond45: entered promiscuous mode
[  935.330711][T26029] bond45: entered allmulticast mode
[  935.332619][T26029] 8021q: adding VLAN 0 to HW filter on device bond45
[  935.335107][T26029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17924'.
[  935.348545][T26029] bond46: entered promiscuous mode
[  935.351161][T26029] bond46: entered allmulticast mode
[  935.353666][T26029] 8021q: adding VLAN 0 to HW filter on device bond46
[  935.356779][T26029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17924'.
[  935.373856][T26029] bond47: entered promiscuous mode
[  935.375614][T26029] bond47: entered allmulticast mode
[  935.377641][T26029] 8021q: adding VLAN 0 to HW filter on device bond47
[  935.390338][T26029] bond48: entered promiscuous mode
[  935.392477][T26029] bond48: entered allmulticast mode
[  935.394579][T26029] 8021q: adding VLAN 0 to HW filter on device bond48
[  935.406337][T26029] bond49: entered promiscuous mode
[  935.408573][T26029] bond49: entered allmulticast mode
[  935.411083][T26029] 8021q: adding VLAN 0 to HW filter on device bond49
[  935.424149][T26029] bond50: entered promiscuous mode
[  935.425867][T26029] bond50: entered allmulticast mode
[  935.428121][T26029] 8021q: adding VLAN 0 to HW filter on device bond50
[  935.440322][T26029] bond51: entered promiscuous mode
[  935.442142][T26029] bond51: entered allmulticast mode
[  935.444026][T26029] 8021q: adding VLAN 0 to HW filter on device bond51
[  935.455230][T26029] bond52: entered promiscuous mode
[  935.457423][T26029] bond52: entered allmulticast mode
[  935.459358][T26029] 8021q: adding VLAN 0 to HW filter on device bond52
[  935.484639][T26029] bond53: entered promiscuous mode
[  935.486749][T26029] bond53: entered allmulticast mode
[  935.492116][T26029] 8021q: adding VLAN 0 to HW filter on device bond53
[  935.517984][T26029] bond54: entered promiscuous mode
[  935.522843][T26029] bond54: entered allmulticast mode
[  935.525446][T26029] 8021q: adding VLAN 0 to HW filter on device bond54
[  935.540985][T26029] bond55: entered promiscuous mode
[  935.543156][T26029] bond55: entered allmulticast mode
[  935.545408][T26029] 8021q: adding VLAN 0 to HW filter on device bond55
[  935.566105][T26029] bond56: entered promiscuous mode
[  935.567855][T26029] bond56: entered allmulticast mode
[  935.569969][T26029] 8021q: adding VLAN 0 to HW filter on device bond56
[  935.588471][T26029] bond57: entered promiscuous mode
[  935.591511][T26029] bond57: entered allmulticast mode
[  935.593453][T26029] 8021q: adding VLAN 0 to HW filter on device bond57
[  935.606614][T26029] bond58: entered promiscuous mode
[  935.608417][T26029] bond58: entered allmulticast mode
[  935.616106][T26029] 8021q: adding VLAN 0 to HW filter on device bond58
[  935.636525][T26029] bond59: entered promiscuous mode
[  935.638789][T26029] bond59: entered allmulticast mode
[  935.641651][T26029] 8021q: adding VLAN 0 to HW filter on device bond59
[  935.656372][T26029] bond60: entered promiscuous mode
[  935.658475][T26029] bond60: entered allmulticast mode
[  935.661509][T26029] 8021q: adding VLAN 0 to HW filter on device bond60
[  935.665716][T26079] bridge0: port 1(erspan0) entered blocking state
[  935.668473][T26079] bridge0: port 1(erspan0) entered disabled state
[  935.672439][T26079] erspan0: entered allmulticast mode
[  935.675524][T26079] erspan0: left allmulticast mode
[  935.708380][T26029] bond61: entered promiscuous mode
[  935.710880][T26029] bond61: entered allmulticast mode
[  935.713491][T26029] 8021q: adding VLAN 0 to HW filter on device bond61
[  935.745695][T26029] bond62: entered promiscuous mode
[  935.747350][T26029] bond62: entered allmulticast mode
[  935.749351][T26029] 8021q: adding VLAN 0 to HW filter on device bond62
[  935.764330][T26029] bond63: entered promiscuous mode
[  935.767020][T26029] bond63: entered allmulticast mode
[  935.771276][T26029] 8021q: adding VLAN 0 to HW filter on device bond63
[  935.793445][T26029] bond64: entered promiscuous mode
[  935.795592][T26029] bond64: entered allmulticast mode
[  935.806305][T26029] 8021q: adding VLAN 0 to HW filter on device bond64
[  935.837132][T26029] bond65: entered promiscuous mode
[  935.838864][T26029] bond65: entered allmulticast mode
[  935.841068][T26029] 8021q: adding VLAN 0 to HW filter on device bond65
[  935.853270][T26029] bond66: entered promiscuous mode
[  935.855497][T26029] bond66: entered allmulticast mode
[  935.857322][T26029] 8021q: adding VLAN 0 to HW filter on device bond66
[  935.886562][T26029] bond67: entered promiscuous mode
[  935.888290][T26029] bond67: entered allmulticast mode
[  935.890642][T26029] 8021q: adding VLAN 0 to HW filter on device bond67
[  935.925506][T26029] bond68: entered promiscuous mode
[  935.927247][T26029] bond68: entered allmulticast mode
[  935.929445][T26029] 8021q: adding VLAN 0 to HW filter on device bond68
[  935.952780][T26029] bond69: entered promiscuous mode
[  935.955005][T26029] bond69: entered allmulticast mode
[  935.957046][T26029] 8021q: adding VLAN 0 to HW filter on device bond69
[  935.979852][T26029] bond70: entered promiscuous mode
[  935.981992][T26029] bond70: entered allmulticast mode
[  935.984517][T26029] 8021q: adding VLAN 0 to HW filter on device bond70
[  936.152192][T26117] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  936.793200][T26193] netlink: 'syz.0.17965': attribute type 11 has an invalid length.
[  937.394178][T26214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  937.537890][T26224] bpq0: entered promiscuous mode
[  937.540192][T26224] bpq0: entered allmulticast mode
[  937.822978][T26245] netlink: 'syz.0.17983': attribute type 30 has an invalid length.
[  937.834507][ T5881] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  937.837310][ T5881] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  937.841667][T26245] netlink: 'syz.0.17983': attribute type 30 has an invalid length.
[  937.844849][ T5881] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  937.847559][ T5881] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  937.916820][T26259] veth0_to_team: entered promiscuous mode
[  938.607212][T26330] netlink: 'syz.2.18014': attribute type 2 has an invalid length.
[  938.618501][T26330] : entered promiscuous mode
[  938.677505][T26341] IPVS: Unknown mcast interface: veth1_to_bridge
[  938.756148][T26352] vxcan1 speed is unknown, defaulting to 1000
[  938.851015][T26352] wg1 speed is unknown, defaulting to 1000
[  938.941020][T26365] netlink: 'syz.0.18026': attribute type 3 has an invalid length.
[  938.941691][T26352] lo speed is unknown, defaulting to 1000
[  938.944270][T26365] netlink: 'syz.0.18026': attribute type 1 has an invalid length.
[  938.995538][T26370] netlink: 'syz.0.18028': attribute type 1 has an invalid length.
[  939.014961][T26370] 8021q: adding VLAN 0 to HW filter on device bond71
[  939.466767][T26388] netlink: 'syz.0.18036': attribute type 3 has an invalid length.
[  939.633224][T26394] netlink: 'syz.0.18038': attribute type 1 has an invalid length.
[  939.636834][T26394] bond0: up delay (65536) is not a multiple of miimon (33271), value rounded to 33271 ms
[  939.918047][T26429] netlink: 'syz.0.18048': attribute type 16 has an invalid length.
[  939.921113][T26429] netlink: 'syz.0.18048': attribute type 17 has an invalid length.
[  940.161983][T26451] syzkaller0: entered promiscuous mode
[  940.163827][T26451] syzkaller0: entered allmulticast mode
[  940.176459][T26451] __nla_validate_parse: 38 callbacks suppressed
[  940.176472][T26451] netlink: 80 bytes leftover after parsing attributes in process `syz.0.18054'.
[  941.674526][T26485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18066'.
[  941.796951][T26497] netlink: 10 bytes leftover after parsing attributes in process `syz.2.18070'.
[  942.092509][T26526] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18079'.
[  943.264026][T26605] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18104'.
[  943.473521][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18107'.
[  943.476507][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18107'.
[  943.479437][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18107'.
[  943.492235][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18107'.
[  943.495292][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18107'.
[  943.505834][T26612] macvtap1: entered allmulticast mode
[  943.507750][T26612] bridge0: entered allmulticast mode
[  944.338136][T26664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  944.341394][T26664] syzkaller0: entered promiscuous mode
[  944.343873][T26664] syzkaller0: entered allmulticast mode
[  944.360853][T26664] tipc: Resetting bearer <eth:syzkaller0>
[  944.424552][T26666] netlink: 'syz.1.18123': attribute type 62 has an invalid length.
[  944.532457][T26675] bond52: (slave ip6gretap4): Removing an active aggregator
[  944.536854][T26675] bond52: (slave ip6gretap4): Releasing backup interface
[  944.542071][T26675] bond52: (slave ip6gretap4): the permanent HWaddr of slave - ca:6d:fd:ab:66:46 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  944.549798][T26675] bond52: (slave veth25): Releasing backup interface
[  944.624834][T26679] netlink: 'syz.1.18127': attribute type 4 has an invalid length.
[  944.973917][   T33] audit: type=1800 audit(1755521411.510:27): pid=26689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18129" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=32020 res=0 errno=0
[  945.024116][T26691] netlink: 'syz.2.18130': attribute type 16 has an invalid length.
[  945.027431][T26691] netlink: 'syz.2.18130': attribute type 17 has an invalid length.
[  945.112062][T26662] tipc: Resetting bearer <eth:syzkaller0>
[  945.124959][T26662] tipc: Disabling bearer <eth:syzkaller0>
[  945.212749][   T56] block nbd8: Receive control failed (result -104)
[  945.236997][T26706] __nla_validate_parse: 2 callbacks suppressed
[  945.237006][T26706] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18136'.
[  945.294638][T26712] netlink: 'syz.2.18139': attribute type 16 has an invalid length.
[  945.297605][T26712] netlink: 'syz.2.18139': attribute type 17 has an invalid length.
[  945.551472][T26733] netlink: 176 bytes leftover after parsing attributes in process `syz.0.18149'.
[  945.643813][T26744] netlink: 'syz.0.18154': attribute type 13 has an invalid length.
[  945.887754][ T2205] lo speed is unknown, defaulting to 1000
[  945.890371][ T2205] syz1: Port: 1 Link DOWN
[  945.899777][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  945.903565][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  945.906533][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  945.909505][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  945.929793][T26753] netlink: 'syz.0.18155': attribute type 16 has an invalid length.
[  945.933370][T26753] netlink: 'syz.0.18155': attribute type 17 has an invalid length.
[  945.966219][T26756] netlink: 'syz.0.18156': attribute type 6 has an invalid length.
[  946.054049][T26762] netlink: 84 bytes leftover after parsing attributes in process `syz.0.18159'.
[  947.368183][T26773] bridge0: failed insert local address into bridge forwarding table
[  947.589920][T26800] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18170'.
[  947.661132][T26816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18176'.
[  947.684000][T26822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18177'.
[  948.045027][T26849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18187'.
[  948.287904][T26877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18195'.
[  948.295077][T26877] macvtap2: entered allmulticast mode
[  948.297213][T26877] erspan0: entered allmulticast mode
[  948.453235][T26890] syzkaller0: entered promiscuous mode
[  948.455224][T26890] syzkaller0: entered allmulticast mode
[  949.703718][T26902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18205'.
[  949.703749][T26903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18205'.
[  949.740645][T26906] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  950.134205][T26925] validate_nla: 5 callbacks suppressed
[  950.134214][T26925] netlink: 'syz.2.18212': attribute type 16 has an invalid length.
[  950.138852][T26925] netlink: 'syz.2.18212': attribute type 17 has an invalid length.
[  950.276840][T26941] vxcan1 speed is unknown, defaulting to 1000
[  950.361701][T26941] wg1 speed is unknown, defaulting to 1000
[  950.387632][T26947] openvswitch: netlink: IP tunnel dst address not specified
[  950.470357][T26941] lo speed is unknown, defaulting to 1000
[  950.500493][T26961] netlink: 'syz.0.18223': attribute type 16 has an invalid length.
[  950.503422][T26961] netlink: 'syz.0.18223': attribute type 17 has an invalid length.
[  950.602898][T26967] __nla_validate_parse: 1 callbacks suppressed
[  950.602907][T26967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18225'.
[  950.672842][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18227'.
[  950.796725][T26976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18229'.
[  950.803122][T26979] netlink: 'syz.1.18230': attribute type 16 has an invalid length.
[  950.805733][T26979] netlink: 'syz.1.18230': attribute type 17 has an invalid length.
[  950.968724][T26995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18233'.
[  950.983083][T26995] veth23: entered promiscuous mode
[  951.035563][T26999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18233'.
[  951.234309][T27024] netlink: 'syz.2.18240': attribute type 16 has an invalid length.
[  951.238310][T27024] netlink: 'syz.2.18240': attribute type 17 has an invalid length.
[  951.319845][T27035] vxcan1 speed is unknown, defaulting to 1000
[  951.389709][T27047] netlink: 88 bytes leftover after parsing attributes in process `syz.1.18248'.
[  951.398484][T27047] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  951.437140][T27033] vxcan1 speed is unknown, defaulting to 1000
[  951.447903][T27035] wg1 speed is unknown, defaulting to 1000
[  951.556410][T27063] netlink: 208128 bytes leftover after parsing attributes in process `syz.1.18253'.
[  951.559862][T27063] openvswitch: netlink: Message has 4 unknown bytes.
[  951.602989][T27065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18255'.
[  951.606090][T27033] wg1 speed is unknown, defaulting to 1000
[  951.643929][T27035] lo speed is unknown, defaulting to 1000
[  951.659948][T27070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18257'.
[  951.663119][T27070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18257'.
[  951.823142][T27033] lo speed is unknown, defaulting to 1000
[  951.910032][T27097] netlink: 'syz.1.18268': attribute type 1 has an invalid length.
[  952.779305][T27130] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  952.789144][T27130] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  952.794208][T27130] tipc: Resetting bearer <eth:syzkaller0>
[  952.895668][T27136] netlink: 'syz.2.18280': attribute type 21 has an invalid length.
[  952.926506][T27140] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  952.983248][T27149] vxcan1 speed is unknown, defaulting to 1000
[  953.144591][T27149] wg1 speed is unknown, defaulting to 1000
[  953.252432][T27149] lo speed is unknown, defaulting to 1000
[  953.558382][T27205] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  953.567999][T27205] rdma_rxe: rxe_newlink: failed to add ip6gre0
[  953.877177][T27214] syzkaller1: entered promiscuous mode
[  953.880255][T27214] syzkaller1: entered allmulticast mode
[  954.450193][T27254] vxcan1 speed is unknown, defaulting to 1000
[  954.582809][T27254] wg1 speed is unknown, defaulting to 1000
[  954.674788][T27254] lo speed is unknown, defaulting to 1000
[  954.688010][T27269] macvlan0: entered allmulticast mode
[  954.690381][T27269] bond0: entered allmulticast mode
[  954.693186][T27269] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  955.788587][T27304] __nla_validate_parse: 13 callbacks suppressed
[  955.788597][T27304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18332'.
[  955.935479][T27309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18334'.
[  955.950614][T27309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18334'.
[  956.047187][T27328] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  956.086943][T27337] syzkaller1: entered promiscuous mode
[  956.088780][T27337] syzkaller1: entered allmulticast mode
[  956.356576][T27361] vxcan1 speed is unknown, defaulting to 1000
[  956.362218][T27363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18352'.
[  956.566661][T27361] wg1 speed is unknown, defaulting to 1000
[  956.578427][T27382] openvswitch: netlink: Tunnel attr 1 has unexpected len 3 expected 4
[  956.587661][T27366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18351'.
[  956.591890][T27366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18351'.
[  956.595792][T27382] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.18360'.
[  956.599318][T27382] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  956.617757][T27366] validate_nla: 2 callbacks suppressed
[  956.617766][T27366] netlink: 'syz.2.18351': attribute type 13 has an invalid length.
[  956.627516][T27366] netlink: 'syz.2.18351': attribute type 17 has an invalid length.
[  956.693382][T27366] erspan0: left allmulticast mode
[  956.738212][T27366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  956.778652][T27401] netlink: 'syz.0.18365': attribute type 1 has an invalid length.
[  956.786283][T27361] lo speed is unknown, defaulting to 1000
[  956.788131][T27401] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18365'.
[  956.872605][T27406] syzkaller1: entered promiscuous mode
[  956.874452][T27406] syzkaller1: entered allmulticast mode
[  956.985958][T27414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18370'.
[  957.679994][T27420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  957.693626][T27420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18372'.
[  957.828077][T27432] 0: renamed from 71
[  957.833843][T27432] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  957.844929][T27434] netlink: 'syz.1.18375': attribute type 2 has an invalid length.
[  957.848249][T27432] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  957.853601][T27432] 0: entered allmulticast mode
[  957.855802][T27432] hsr_slave_0: entered allmulticast mode
[  957.861306][T27432] hsr_slave_1: entered allmulticast mode
[  957.867907][T27432] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  958.252252][T27473] vxcan1 speed is unknown, defaulting to 1000
[  958.408450][T27473] wg1 speed is unknown, defaulting to 1000
[  958.441127][T27486] netlink: 'syz.1.18389': attribute type 7 has an invalid length.
[  958.546216][T27473] lo speed is unknown, defaulting to 1000
[  959.492692][T27523] netlink: 'syz.1.18398': attribute type 2 has an invalid length.
[  959.753105][T27542] netlink: 'syz.1.18404': attribute type 1 has an invalid length.
[  959.761856][T27542] netlink: 'syz.1.18404': attribute type 3 has an invalid length.
[  960.592541][T27640] veth1: mtu greater than device maximum
[  960.708013][T27653] netlink: 'syz.0.18441': attribute type 17 has an invalid length.
[  960.974497][T27687] vxcan1 speed is unknown, defaulting to 1000
[  961.055525][T27687] wg1 speed is unknown, defaulting to 1000
[  961.134976][T27687] lo speed is unknown, defaulting to 1000
[  961.228133][T27694] netlink: 'syz.0.18453': attribute type 1 has an invalid length.
[  961.556957][T27718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  961.704921][T27725] __nla_validate_parse: 19 callbacks suppressed
[  961.704936][T27725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18464'.
[  961.913165][T27749] netlink: 'syz.0.18474': attribute type 1 has an invalid length.
[  961.928727][T27762] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  961.934154][T27763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  961.976995][T27767] netlink: 'syz.1.18479': attribute type 2 has an invalid length.
[  962.067177][T27757] bridge0: port 1(batadv0) entered blocking state
[  962.071189][T27757] bridge0: port 1(batadv0) entered disabled state
[  962.074072][T27757] batadv0: entered allmulticast mode
[  962.076856][T27757] batadv0: entered promiscuous mode
[  962.118681][T27785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18485'.
[  962.165604][T27788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  962.168904][T27788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18484'.
[  962.173122][T27788] netlink: 'syz.1.18484': attribute type 7 has an invalid length.
[  962.175757][T27788] netlink: 'syz.1.18484': attribute type 8 has an invalid length.
[  962.178355][T27788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18484'.
[  962.301561][T27806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18493'.
[  962.328439][T27804] bond0: (slave rose0): Error: Device can not be enslaved while up
[  962.494963][T27835] netlink: 'syz.2.18503': attribute type 21 has an invalid length.
[  962.515946][T27837] veth23: entered promiscuous mode
[  962.531178][T27835] netlink: 'syz.2.18503': attribute type 1 has an invalid length.
[  962.570747][   T13] batman_adv: batadv0: IGMP Querier appeared
[  962.573091][   T13] batman_adv: batadv0: MLD Querier appeared
[  962.578381][T27846] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  962.597532][T27846] bond52: (slave erspan0): Releasing active interface
[  962.614024][T27846] veth0_to_bridge: left allmulticast mode
[  962.616658][T27846] veth0_to_bridge: left promiscuous mode
[  962.620088][T27846] bridge0: port 1(veth0_to_bridge) entered disabled state
[  962.659683][T27846] bond46: (slave veth51): Releasing active interface
[  962.665104][T27846] bond50: (slave veth55): Releasing backup interface
[  962.674340][T27846] bond52: (slave veth57): Releasing active interface
[  962.714426][T27846] netlink: 'syz.2.18508': attribute type 10 has an invalid length.
[  962.720594][T27846] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  962.737348][T27863] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18513'.
[  962.866192][T27875] vxcan1 speed is unknown, defaulting to 1000
[  963.034483][T27871] vxcan1 speed is unknown, defaulting to 1000
[  963.036666][T27875] wg1 speed is unknown, defaulting to 1000
[  963.195232][T27871] wg1 speed is unknown, defaulting to 1000
[  963.206153][T27875] lo speed is unknown, defaulting to 1000
[  963.316993][T27871] lo speed is unknown, defaulting to 1000
[  963.447866][T27890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18521'.
[  963.686772][T27901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18524'.
[  963.740330][T27908] sit0: entered promiscuous mode
[  963.748262][T27908] netlink: 'syz.2.18526': attribute type 1 has an invalid length.
[  963.753118][T27908] netlink: 1 bytes leftover after parsing attributes in process `syz.2.18526'.
[  963.962212][T27921] netlink: 'syz.1.18531': attribute type 1 has an invalid length.
[  963.965719][T27921] netlink: 72 bytes leftover after parsing attributes in process `syz.1.18531'.
[  980.549478][T27931] veth1: mtu greater than device maximum
[  980.561530][T27934] __nla_validate_parse: 2 callbacks suppressed
[  980.561540][T27934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18536'.
[  980.606110][T27940] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18537'.
[  980.616616][T27940] netlink: 'syz.0.18537': attribute type 1 has an invalid length.
[  980.628594][T27940] 8021q: adding VLAN 0 to HW filter on device bond72
[  980.697278][T27943] sctp: [Deprecated]: syz.1.18543 (pid 27943) Use of struct sctp_assoc_value in delayed_ack socket option.
[  980.697278][T27943] Use struct sctp_sack_info instead
[  980.707940][T27943] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  980.712694][T27943] CPU: 1 UID: 0 PID: 27943 Comm: syz.1.18543 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  980.712706][T27943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  980.712711][T27943] Call Trace:
[  980.712714][T27943]  <TASK>
[  980.712718][T27943]  dump_stack_lvl+0x189/0x250
[  980.712733][T27943]  ? __pfx_dump_stack_lvl+0x10/0x10
[  980.712742][T27943]  ? __pfx__printk+0x10/0x10
[  980.712755][T27943]  ? kernfs_path_from_node+0x2f/0x290
[  980.712764][T27943]  ? kernfs_path_from_node+0x250/0x290
[  980.712771][T27943]  ? kernfs_path_from_node+0x2f/0x290
[  980.712780][T27943]  sysfs_warn_dup+0x8e/0xa0
[  980.712788][T27943]  sysfs_do_create_link_sd+0xc0/0x110
[  980.712798][T27943]  device_add_class_symlinks+0x1cf/0x240
[  980.712807][T27943]  device_add+0x475/0xb50
[  980.712829][T27943]  wiphy_register+0x1ba6/0x28d0
[  980.712847][T27943]  ? __pfx_wiphy_register+0x10/0x10
[  980.712856][T27943]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  980.712869][T27943]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  980.712883][T27943]  ieee80211_register_hw+0x3425/0x4080
[  980.712899][T27943]  ? ieee80211_register_hw+0x14b1/0x4080
[  980.712910][T27943]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  980.712919][T27943]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  980.712932][T27943]  ? __hrtimer_setup+0x187/0x210
[  980.712939][T27943]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  980.712950][T27943]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  980.712971][T27943]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  980.712978][T27943]  ? trace_kmalloc+0x1f/0xd0
[  980.712986][T27943]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  980.712996][T27943]  ? kstrndup+0xbf/0x160
[  980.713008][T27943]  hwsim_new_radio_nl+0xea4/0x1b10
[  980.713019][T27943]  ? __pfx___nla_validate_parse+0x10/0x10
[  980.713034][T27943]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  980.713048][T27943]  ? __nla_parse+0x40/0x60
[  980.713060][T27943]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  980.713072][T27943]  genl_family_rcv_msg_doit+0x215/0x300
[  980.713083][T27943]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  980.713096][T27943]  ? bpf_lsm_capable+0x9/0x20
[  980.713104][T27943]  ? security_capable+0x7e/0x2e0
[  980.713116][T27943]  genl_rcv_msg+0x60e/0x790
[  980.713127][T27943]  ? __pfx_genl_rcv_msg+0x10/0x10
[  980.713134][T27943]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  980.713148][T27943]  netlink_rcv_skb+0x208/0x470
[  980.713157][T27943]  ? __lock_acquire+0xab9/0xd20
[  980.713166][T27943]  ? __pfx_genl_rcv_msg+0x10/0x10
[  980.713174][T27943]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  980.713195][T27943]  ? down_read+0x1ad/0x2e0
[  980.713203][T27943]  genl_rcv+0x28/0x40
[  980.713210][T27943]  netlink_unicast+0x82f/0x9e0
[  980.713222][T27943]  ? __pfx_netlink_unicast+0x10/0x10
[  980.713231][T27943]  ? netlink_sendmsg+0x642/0xb30
[  980.713239][T27943]  ? skb_put+0x11b/0x210
[  980.713248][T27943]  netlink_sendmsg+0x805/0xb30
[  980.713261][T27943]  ? __pfx_netlink_sendmsg+0x10/0x10
[  980.713271][T27943]  ? aa_sock_msg_perm+0xf1/0x1d0
[  980.713283][T27943]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  980.713292][T27943]  ? __pfx_netlink_sendmsg+0x10/0x10
[  980.713303][T27943]  __sock_sendmsg+0x21c/0x270
[  980.713313][T27943]  ____sys_sendmsg+0x505/0x830
[  980.713323][T27943]  ? __pfx_____sys_sendmsg+0x10/0x10
[  980.713334][T27943]  ? import_iovec+0x74/0xa0
[  980.713344][T27943]  ___sys_sendmsg+0x21f/0x2a0
[  980.713352][T27943]  ? __pfx____sys_sendmsg+0x10/0x10
[  980.713375][T27943]  ? __fget_files+0x2a/0x420
[  980.713381][T27943]  ? __fget_files+0x3a0/0x420
[  980.713393][T27943]  __x64_sys_sendmsg+0x19b/0x260
[  980.713401][T27943]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  980.713413][T27943]  ? rcu_is_watching+0x15/0xb0
[  980.713422][T27943]  ? do_syscall_64+0xbe/0x3b0
[  980.713433][T27943]  do_syscall_64+0xfa/0x3b0
[  980.713441][T27943]  ? lockdep_hardirqs_on+0x9c/0x150
[  980.713449][T27943]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  980.713456][T27943]  ? exc_page_fault+0x9f/0xf0
[  980.713465][T27943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  980.713472][T27943] RIP: 0033:0x7f756c78ebe9
[  980.713480][T27943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  980.713486][T27943] RSP: 002b:00007f756d686038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  980.713495][T27943] RAX: ffffffffffffffda RBX: 00007f756c9b5fa0 RCX: 00007f756c78ebe9
[  980.713500][T27943] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  980.713505][T27943] RBP: 00007f756c811e19 R08: 0000000000000000 R09: 0000000000000000
[  980.713509][T27943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  980.713513][T27943] R13: 00007f756c9b6038 R14: 00007f756c9b5fa0 R15: 00007fff3899c9e8
[  980.713525][T27943]  </TASK>
[  980.896087][T27947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18538'.
[  980.968609][T27957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18541'.
[  980.973926][T27955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18541'.
[  981.157295][T27978] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18548'.
[  981.258882][T27990] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18552'.
[  981.273688][T27990] netlink: 'syz.1.18552': attribute type 1 has an invalid length.
[  981.289872][T27990] 8021q: adding VLAN 0 to HW filter on device bond55
[  981.306132][T27993] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (809004142)
[  981.315214][T27993] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  981.507498][T28020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18558'.
[  981.507506][T28017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18558'.
[  981.580729][T28030] netlink: 'syz.1.18563': attribute type 12 has an invalid length.
[  981.583762][T28030] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.18563'.
[  981.613501][T28032] netlink: 'syz.0.18564': attribute type 7 has an invalid length.
[  981.616093][T28032] netlink: 'syz.0.18564': attribute type 8 has an invalid length.
[  981.752462][T28047] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  981.783689][T28051] netlink: 'syz.0.18572': attribute type 1 has an invalid length.
[  981.805989][T28051] veth23: entered promiscuous mode
[  981.810463][T28051] bond73: (slave veth23): Enslaving as a backup interface with a down link
[  981.815400][T28051] 8021q: adding VLAN 0 to HW filter on device bond73
[  981.865453][T28060] netlink: 'syz.1.18575': attribute type 3 has an invalid length.
[  981.868090][T28060] netlink: 'syz.1.18575': attribute type 3 has an invalid length.
[  981.897579][T28062] syzkaller1: entered promiscuous mode
[  981.901498][T28062] syzkaller1: entered allmulticast mode
[  981.985240][T28064] syzkaller1: entered promiscuous mode
[  981.987143][T28064] syzkaller1: entered allmulticast mode
[  983.002044][T28092] bond56: entered promiscuous mode
[  983.003992][T28092] 8021q: adding VLAN 0 to HW filter on device bond56
[  983.097683][T28097] netlink: 'syz.1.18587': attribute type 1 has an invalid length.
[  983.444392][T28108] netlink: 'syz.0.18589': attribute type 32 has an invalid length.
[  983.447342][T28108] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  984.377056][T28198] syzkaller1: entered promiscuous mode
[  984.386646][T28198] bond39: entered promiscuous mode
[  984.388368][T28198] syzkaller1: entered allmulticast mode
[  984.398773][T28198] bond39: entered allmulticast mode
[  984.461401][   T33] audit: type=1800 audit(1755521451.000:28): pid=28192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.18619" name="cgroup.controllers" dev="tmpfs" ino=30498 res=0 errno=0
[  984.618123][T28209] syzkaller0: entered promiscuous mode
[  984.621219][T28209] syzkaller0: entered allmulticast mode
[  984.788901][ T7435] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  985.256357][T28251] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  985.474274][T28271] veth1: mtu greater than device maximum
[  985.483362][T28271] syzkaller1: entered promiscuous mode
[  985.488273][T28271] syzkaller1: entered allmulticast mode
[  985.602211][T28286] sctp: [Deprecated]: syz.0.18648 (pid 28286) Use of int in max_burst socket option.
[  985.602211][T28286] Use struct sctp_assoc_value instead
[  985.636919][T28288] __nla_validate_parse: 15 callbacks suppressed
[  985.636928][T28288] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18649'.
[  985.913202][T28318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18660'.
[  985.923155][T28318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18660'.
[  985.926124][T28318] validate_nla: 5 callbacks suppressed
[  985.926131][T28318] netlink: 'syz.0.18660': attribute type 32 has an invalid length.
[  985.933266][T28318] bond0: option coupled_control: mode dependency failed, not supported in mode balance-alb(6)
[  985.996707][T28330] 8021q: adding VLAN 0 to HW filter on device bond55
[  986.066277][T28340] vxcan1 speed is unknown, defaulting to 1000
[  986.123854][T28347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18668'.
[  986.126824][T28347] vlan0: entered promiscuous mode
[  986.159831][T28340] wg1 speed is unknown, defaulting to 1000
[  986.246477][T28340] lo speed is unknown, defaulting to 1000
[  986.400366][T28366] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  986.403823][T28366] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  986.595965][T28375] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18678'.
[  986.673383][T28382] netlink: 'syz.0.18681': attribute type 2 has an invalid length.
[  986.675983][T28382] netlink: 51 bytes leftover after parsing attributes in process `syz.0.18681'.
[  986.681485][T28382] netlink: 'syz.0.18681': attribute type 1 has an invalid length.
[  986.684176][T28382] netlink: 'syz.0.18681': attribute type 2 has an invalid length.
[  986.767168][T28386] ksmbd: Unknown IPC event: 1, ignore.
[  986.872074][T28393] sock: sock_timestamping_bind_phc: sock not bind to device
[  986.927154][T28398] syzkaller1: left allmulticast mode
[  986.930343][T28398] bond39: left allmulticast mode
[  986.958316][T28404] netlink: 'syz.2.18689': attribute type 9 has an invalid length.
[  986.962805][T28404] netlink: 212260 bytes leftover after parsing attributes in process `syz.2.18689'.
[  986.985952][T28410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18691'.
[  987.307309][T28444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18703'.
[  987.318899][T28444] netlink: 34 bytes leftover after parsing attributes in process `syz.1.18703'.
[  987.345424][T28450] netlink: 'syz.2.18704': attribute type 11 has an invalid length.
[  987.515473][T28466] bond75: entered promiscuous mode
[  987.517230][T28466] bond75: entered allmulticast mode
[  987.523275][T28466] 8021q: adding VLAN 0 to HW filter on device bond75
[  987.815261][T28512] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  987.825385][   T33] audit: type=1107 audit(1755521454.360:29): pid=28511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  987.906636][T28535] netlink: 'syz.2.18728': attribute type 1 has an invalid length.
[  987.925551][T28535] 8021q: adding VLAN 0 to HW filter on device bond56
[  988.016127][T28549] netlink: 'syz.2.18733': attribute type 1 has an invalid length.
[  988.036648][T28549] 8021q: adding VLAN 0 to HW filter on device bond57
[  988.061786][T28549] 8021q: adding VLAN 0 to HW filter on device bond57
[  988.064326][T28549] bond57: (slave vxcan11): The slave device specified does not support setting the MAC address
[  988.069552][T28549] bond57: (slave vxcan11): Error -95 calling set_mac_address
[  988.373477][T28584] netlink: 'syz.0.18744': attribute type 1 has an invalid length.
[  988.434868][T28586] vxcan1 speed is unknown, defaulting to 1000
[  988.526928][T28586] wg1 speed is unknown, defaulting to 1000
[  988.529904][T28600] netlink: 'syz.0.18748': attribute type 18 has an invalid length.
[  988.605739][T28586] lo speed is unknown, defaulting to 1000
[  988.960746][T28635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  988.963502][T28635] syzkaller0: entered promiscuous mode
[  988.965429][T28635] syzkaller0: entered allmulticast mode
[  989.000385][T28635] tipc: Resetting bearer <eth:syzkaller0>
[  989.003510][T28634] tipc: Resetting bearer <eth:syzkaller0>
[  989.011155][T28634] tipc: Disabling bearer <eth:syzkaller0>
[  989.123188][T28644] openvswitch: netlink: Unknown nsh attribute 0
[  989.125294][T28644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  989.424391][T28668] netlink: 'syz.2.18769': attribute type 1 has an invalid length.
[  989.450131][T28668] 8021q: adding VLAN 0 to HW filter on device bond58
[  989.466281][T28668] bond58: (slave bridge48): making interface the new active one
[  989.473904][T28668] bond58: (slave bridge48): Enslaving as an active interface with an up link
[  990.231709][T28676] nbd: couldn't find device at index 1
[  990.472073][ T6263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  990.476267][ T6263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  990.875312][T28738] vxcan1 speed is unknown, defaulting to 1000
[  991.013278][T28738] wg1 speed is unknown, defaulting to 1000
[  991.045048][T28759] syzkaller0: entered promiscuous mode
[  991.046937][T28759] syzkaller0: entered allmulticast mode
[  991.171243][T28738] lo speed is unknown, defaulting to 1000
[  991.228865][T28767] validate_nla: 1 callbacks suppressed
[  991.228876][T28767] netlink: 'syz.0.18801': attribute type 11 has an invalid length.
[  991.235469][T28767] __nla_validate_parse: 20 callbacks suppressed
[  991.235483][T28767] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18801'.
[  991.278815][T28767] netlink: 76 bytes leftover after parsing attributes in process `syz.0.18801'.
[  992.695381][T28801] netlink: 'syz.0.18809': attribute type 1 has an invalid length.
[  992.697918][T28801] netlink: 208 bytes leftover after parsing attributes in process `syz.0.18809'.
[  992.745795][T28806] dvmrp0: entered allmulticast mode
[  992.923954][T28830] syzkaller1: entered promiscuous mode
[  992.926029][T28830] syzkaller1: entered allmulticast mode
[  993.065910][T28846] netlink: 'syz.1.18826': attribute type 1 has an invalid length.
[  993.103117][T28851] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  993.185770][T28861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18831'.
[  993.218727][T28863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18832'.
[  993.570275][T28880] 8021q: VLANs not supported on ip_vti0
[  993.651761][T28888] netlink: 'syz.1.18842': attribute type 1 has an invalid length.
[  993.685984][T28891] netlink: 'syz.1.18842': attribute type 1 has an invalid length.
[  993.763923][T28897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18844'.
[  993.768042][T28897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18844'.
[  993.798584][T28901] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18845'.
[  993.822871][T28903] : renamed from bond_slave_0
[  993.854834][T28903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18846'.
[  993.904354][T28913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18849'.
[  994.857915][T28986] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  995.358432][T28996] ip6gre1: entered allmulticast mode
[  995.703102][T29044] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  995.706886][T29044] syzkaller0: entered promiscuous mode
[  995.710247][T29044] syzkaller0: entered allmulticast mode
[  996.116908][T29074] netlink: 'syz.2.18905': attribute type 1 has an invalid length.
[  996.119796][T29074] netlink: 'syz.2.18905': attribute type 2 has an invalid length.
[  996.122562][T29075] netlink: 'syz.2.18905': attribute type 1 has an invalid length.
[  996.125133][T29075] netlink: 'syz.2.18905': attribute type 2 has an invalid length.
[  996.196384][T29078] netlink: 'syz.2.18906': attribute type 11 has an invalid length.
[  996.370739][T29084] __nla_validate_parse: 10 callbacks suppressed
[  996.370749][T29084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18908'.
[  996.485747][T29095] netem: incorrect ge model size
[  996.487595][T29095] netem: change failed
[  996.702839][T29122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18922'.
[  996.705819][T29123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18922'.
[  996.710931][T29122] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  996.748122][T29126] netlink: 244 bytes leftover after parsing attributes in process `syz.1.18923'.
[  996.888046][ T5882] nci: nci_rx_work: unknown MT 0x1
[  997.663277][T29147] netlink: 'syz.0.18930': attribute type 1 has an invalid length.
[  997.683357][T29152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18931'.
[  997.857065][T29173] netlink: 596 bytes leftover after parsing attributes in process `syz.1.18941'.
[  998.077300][T29192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18946'.
[  998.852531][T29201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18949'.
[  998.855886][T29201] netlink: 52 bytes leftover after parsing attributes in process `syz.1.18949'.
[  999.225462][ T8924] block nbd9: Receive control failed (result -32)
[  999.226581][T15348] block nbd10: Receive control failed (result -32)
[  999.513414][T29231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18959'.
[  999.516639][T29231] netlink: 'syz.1.18959': attribute type 3 has an invalid length.
[  999.520027][T29231] netlink: 'syz.1.18959': attribute type 2 has an invalid length.
[  999.522815][T29231] netlink: 'syz.1.18959': attribute type 2 has an invalid length.
[ 1000.445940][T29250] netlink: 'syz.1.18965': attribute type 6 has an invalid length.
[ 1000.756371][T29268] netlink: 'syz.2.18974': attribute type 1 has an invalid length.
[ 1000.896406][T29283] netlink: 'syz.2.18978': attribute type 10 has an invalid length.
[ 1000.961679][T29292] netlink: 'syz.1.18981': attribute type 1 has an invalid length.
[ 1000.964829][T29292] netlink: 'syz.1.18981': attribute type 1 has an invalid length.
[ 1001.224243][T29321] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1001.299742][T29330] syzkaller0: entered promiscuous mode
[ 1001.308386][T29330] syzkaller0: entered allmulticast mode
[ 1001.394016][T29335] __nla_validate_parse: 9 callbacks suppressed
[ 1001.394025][T29335] netlink: 172 bytes leftover after parsing attributes in process `syz.0.18996'.
[ 1002.673006][T29401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19012'.
[ 1002.731652][T29410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19015'.
[ 1002.751435][T29410] syzkaller0: entered promiscuous mode
[ 1002.753295][T29410] syzkaller0: entered allmulticast mode
[ 1002.819134][T29405] nbd11: detected capacity change from 0 to 127
[ 1002.833325][   T56] block nbd11: Receive control failed (result -104)
[ 1002.873691][T29416] netlink: 128 bytes leftover after parsing attributes in process `syz.2.19017'.
[ 1002.883585][ T6269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1002.886283][ T6269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1002.887457][T29416] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1002.895760][T29416] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1003.254279][T29419] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1003.266587][T29419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19018'.
[ 1003.346187][T29422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19019'.
[ 1004.069960][T29446] netlink: 'syz.2.19028': attribute type 83 has an invalid length.
[ 1004.105265][T29448] delete_channel: no stack
[ 1004.308031][T29470] netlink: 52 bytes leftover after parsing attributes in process `syz.1.19038'.
[ 1004.352559][T29476] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19040'.
[ 1004.424681][T29488] netlink: 48 bytes leftover after parsing attributes in process `syz.1.19044'.
[ 1004.666408][T29493] pim6reg9: entered allmulticast mode
[ 1004.724747][T29506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1004.738493][T29506] veth0_to_team: entered allmulticast mode
[ 1005.353986][T29518] netlink: 636 bytes leftover after parsing attributes in process `syz.2.19053'.
[ 1005.667489][T29536] tipc: Resetting bearer <eth:syzkaller0>
[ 1005.828158][T29544] unknown channel width for channel at 909000KHz?
[ 1005.831090][T29544] unknown channel width for channel at 909000KHz?
[ 1005.833664][T29544] unknown channel width for channel at 909000KHz?
[ 1007.217291][T29569] netlink: 'syz.1.19066': attribute type 23 has an invalid length.
[ 1007.241662][T29569] __nla_validate_parse: 1 callbacks suppressed
[ 1007.241671][T29569] netlink: 404 bytes leftover after parsing attributes in process `syz.1.19066'.
[ 1007.246811][T29569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19066'.
[ 1007.251567][T29569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19066'.
[ 1007.254532][T29569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19066'.
[ 1007.263176][T29563] vxcan1 speed is unknown, defaulting to 1000
[ 1007.376668][T29563] wg1 speed is unknown, defaulting to 1000
[ 1007.413275][T29584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1007.425215][T29582] unknown channel width for channel at 909000KHz?
[ 1007.427287][T29582] unknown channel width for channel at 909000KHz?
[ 1007.445412][T29582] unknown channel width for channel at 909000KHz?
[ 1007.446997][T29586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19071'.
[ 1007.497682][T29563] lo speed is unknown, defaulting to 1000
[ 1007.674512][T29603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19077'.
[ 1008.083237][T29615] unknown channel width for channel at 909000KHz?
[ 1008.085466][T29615] unknown channel width for channel at 909000KHz?
[ 1008.087660][T29615] unknown channel width for channel at 909000KHz?
[ 1008.113664][T29621] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1008.184080][T29629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19086'.
[ 1008.213817][T29632] netlink: 'syz.0.19087': attribute type 4 has an invalid length.
[ 1008.218375][T29632] netlink: 'syz.0.19087': attribute type 4 has an invalid length.
[ 1008.224616][  T794] lo speed is unknown, defaulting to 1000
[ 1008.226923][  T794] syz1: Port: 1 Link ACTIVE
[ 1008.342360][T29645] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[ 1008.386626][T29649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19092'.
[ 1008.389592][T29649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19092'.
[ 1008.392441][T29649] netlink: 'syz.2.19092': attribute type 19 has an invalid length.
[ 1008.575835][T29679] netlink: 'syz.2.19101': attribute type 1 has an invalid length.
[ 1008.578533][T29679] netlink: 'syz.2.19101': attribute type 10 has an invalid length.
[ 1008.584258][T29679] netlink: 236 bytes leftover after parsing attributes in process `syz.2.19101'.
[ 1008.686961][T29692] netlink: 'syz.2.19103': attribute type 1 has an invalid length.
[ 1008.729827][T29695] sctp: [Deprecated]: syz.2.19104 (pid 29695) Use of int in max_burst socket option.
[ 1008.729827][T29695] Use struct sctp_assoc_value instead
[ 1008.768742][T29697] netlink: 'syz.2.19105': attribute type 11 has an invalid length.
[ 1008.917588][T29703] vxcan1 speed is unknown, defaulting to 1000
[ 1009.003321][T29703] wg1 speed is unknown, defaulting to 1000
[ 1009.086714][T29703] lo speed is unknown, defaulting to 1000
[ 1009.200376][T29716] netlink: 'syz.1.19110': attribute type 21 has an invalid length.
[ 1009.283838][T29726] netlink: 'syz.1.19113': attribute type 4 has an invalid length.
[ 1009.289371][T29726] netlink: 'syz.1.19113': attribute type 4 has an invalid length.
[ 1009.758792][T29770] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[ 1009.827814][T29776] netlink: 'syz.2.19128': attribute type 1 has an invalid length.
[ 1010.082271][T29791] IPVS: length: 118 != 8
[ 1010.736909][T29849] pim6reg: left allmulticast mode
[ 1010.738800][T29849] ip6erspan0: left allmulticast mode
[ 1011.101145][T29863] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1011.104577][T29864] syzkaller0: entered promiscuous mode
[ 1011.106666][T29864] syzkaller0: entered allmulticast mode
[ 1011.118797][T29863] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1011.218893][T29871] netlink: 'syz.1.19164': attribute type 1 has an invalid length.
[ 1011.421710][T29909] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[ 1011.486118][T29910] netlink: 'syz.1.19172': attribute type 29 has an invalid length.
[ 1011.575029][T29929] bond0: option arp_validate: invalid value (18446744073491447809)
[ 1011.581080][   T33] audit: type=1107 audit(1755521478.120:30): pid=29928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1011.736850][T29951] netlink: 'syz.2.19190': attribute type 1 has an invalid length.
[ 1011.761891][T29951] 8021q: adding VLAN 0 to HW filter on device bond61
[ 1011.780942][T29951] veth65: entered promiscuous mode
[ 1011.784423][T29951] erspan0: entered allmulticast mode
[ 1012.246408][T29960] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[ 1012.254458][   T33] audit: type=1107 audit(1755521478.790:31): pid=29959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1012.293203][T29966] __nla_validate_parse: 21 callbacks suppressed
[ 1012.293213][T29966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19193'.
[ 1012.302842][T29966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19193'.
[ 1012.309773][T29966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19193'.
[ 1012.643376][T30000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19206'.
[ 1012.698762][T30008] netlink: 'syz.0.19206': attribute type 1 has an invalid length.
[ 1012.704134][T30008] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.19206'.
[ 1012.713997][T30010] netlink: 'syz.1.19209': attribute type 10 has an invalid length.
[ 1012.737529][T30012] netlink: 'syz.1.19210': attribute type 3 has an invalid length.
[ 1012.993860][T30034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19217'.
[ 1013.514698][T30063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19226'.
[ 1013.876833][T30097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19240'.
[ 1014.003821][T30095] batman_adv: batadv0: Adding interface: ip6gretap5
[ 1014.005977][T30095] batman_adv: batadv0: The MTU of interface ip6gretap5 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1014.015574][T30095] batman_adv: batadv0: Interface activated: ip6gretap5
[ 1014.274290][T30141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19253'.
[ 1014.428014][T30152] validate_nla: 5 callbacks suppressed
[ 1014.428023][T30152] netlink: 'syz.1.19252': attribute type 16 has an invalid length.
[ 1014.432650][T30152] netlink: 'syz.1.19252': attribute type 17 has an invalid length.
[ 1014.442911][T30152] erspan0: entered promiscuous mode
[ 1014.454567][T30152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1014.590969][T30156] vxcan1 speed is unknown, defaulting to 1000
[ 1014.893688][T30156] wg1 speed is unknown, defaulting to 1000
[ 1015.009474][T30156] lo speed is unknown, defaulting to 1000
[ 1015.074574][T30164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19257'.
[ 1015.134657][T30164] netlink: 'syz.1.19257': attribute type 1 has an invalid length.
[ 1015.142488][T30166] bond58: (slave bridge48): Releasing active interface
[ 1015.201556][T30166] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1015.494261][T30194] tipc: Resetting bearer <eth:syzkaller0>
[ 1015.524387][T30194] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1015.710002][T30214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1015.836727][T30223] bond39: (slave bridge101): Releasing active interface
[ 1015.858115][T30223] bond40: (slave gretap3): Releasing active interface
[ 1015.869811][T30223] batadv0: left allmulticast mode
[ 1015.871623][T30223] batadv0: left promiscuous mode
[ 1015.873706][T30223] bridge0: port 1(batadv0) entered disabled state
[ 1015.883639][T30223] bond73: (slave veth23): Releasing backup interface
[ 1015.892103][T30223] batman_adv: batadv0: Interface deactivated: ip6gretap5
[ 1015.894934][T30223] batman_adv: batadv0: Removing interface: ip6gretap5
[ 1015.904345][T30228] A link change request failed with some changes committed already. Interface bond5 may have been left with an inconsistent configuration, please check.
[ 1016.044348][T30240] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20002
[ 1016.047837][T30239] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20002
[ 1016.159017][T30255] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1016.360220][ T5881] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[ 1016.536134][T30271] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882)
[ 1016.541937][T30271] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[ 1016.932804][T30308] netlink: 'syz.1.19304': attribute type 11 has an invalid length.
[ 1017.108626][T30333] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1017.204257][   T33] audit: type=1800 audit(1755521483.740:32): pid=30344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19318" name="blkio.bfq.time_recursive" dev="tmpfs" ino=31456 res=0 errno=0
[ 1017.242659][T30341] 8021q: adding VLAN 0 to HW filter on device bond59
[ 1017.255713][T30341] bond59: (slave veth31): Enslaving as an active interface with an up link
[ 1017.384768][T30363] __nla_validate_parse: 10 callbacks suppressed
[ 1017.384777][T30363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19325'.
[ 1017.456056][T30365] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[ 1017.495046][T30373] bond0: Error: Cannot enslave bond to itself.
[ 1017.653968][T30394] netlink: 536 bytes leftover after parsing attributes in process `syz.1.19336'.
[ 1017.657801][T30404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19340'.
[ 1017.670979][T30401] netlink: 504 bytes leftover after parsing attributes in process `syz.2.19339'.
[ 1017.733705][T30415] netlink: 'syz.0.19342': attribute type 58 has an invalid length.
[ 1017.736374][T30415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19342'.
[ 1017.864004][T30433] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19346'.
[ 1017.924451][T30440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19349'.
[ 1017.927507][T30440] openvswitch: netlink: nsh attr 4 is out of range max 3
[ 1017.932435][T30440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1018.009873][T30452] IPVS: set_ctl: invalid protocol: 25459 100.95.115.119:26996
[ 1018.154025][T30464] netlink: 'syz.1.19357': attribute type 11 has an invalid length.
[ 1018.156697][T30464] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19357'.
[ 1018.254085][T30493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19366'.
[ 1018.330884][T30502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19369'.
[ 1018.333804][T30502] openvswitch: netlink: Invalid MD length 0 for MD type 0
[ 1018.336212][T30502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1018.470449][T30514] macvtap0: entered allmulticast mode
[ 1018.472244][T30514] bridge0: entered allmulticast mode
[ 1018.474550][T30514] bridge0: port 1(macvtap0) entered blocking state
[ 1018.477443][T30514] bridge0: port 1(macvtap0) entered disabled state
[ 1018.485717][T30514] bridge0: left allmulticast mode
[ 1018.595789][T30525] tipc: Resetting bearer <eth:syzkaller0>
[ 1018.597949][T30525] tipc: Resetting bearer <eth:syzkaller0>
[ 1019.288817][T30575] vxcan1 speed is unknown, defaulting to 1000
[ 1019.334615][T30576] netlink: 'syz.2.19393': attribute type 21 has an invalid length.
[ 1019.337925][T30576] netlink: 'syz.2.19393': attribute type 6 has an invalid length.
[ 1019.458693][T30575] wg1 speed is unknown, defaulting to 1000
[ 1019.546029][T30575] lo speed is unknown, defaulting to 1000
[ 1019.589692][T30597] syzkaller0: entered promiscuous mode
[ 1019.591658][T30597] syzkaller0: entered allmulticast mode
[ 1019.603430][T30597] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1019.756768][T30602] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1021.772159][T30682] IPv6: sit12: Disabled Multicast RS
[ 1022.475239][T30716] __nla_validate_parse: 9 callbacks suppressed
[ 1022.475248][T30716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19436'.
[ 1022.497940][T30716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19436'.
[ 1022.696063][T30729] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.19440'.
[ 1023.777534][T30747] netlink: 56 bytes leftover after parsing attributes in process `syz.0.19445'.
[ 1023.787360][T30747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19445'.
[ 1042.568561][T30768] netlink: 'syz.0.19454': attribute type 1 has an invalid length.
[ 1042.636551][T30770] vxcan1 speed is unknown, defaulting to 1000
[ 1042.743512][T30770] wg1 speed is unknown, defaulting to 1000
[ 1042.809356][T30793] netlink: 'syz.0.19461': attribute type 4 has an invalid length.
[ 1042.825516][T30770] lo speed is unknown, defaulting to 1000
[ 1042.927905][T30812] netlink: 176 bytes leftover after parsing attributes in process `syz.0.19465'.
[ 1042.999380][T30822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19469'.
[ 1043.023500][T30822] netlink: 'syz.2.19469': attribute type 4 has an invalid length.
[ 1043.185846][T30838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19472'.
[ 1043.251611][T30847] nbd: must specify a device to reconfigure
[ 1043.288591][T30859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19479'.
[ 1043.348811][T30870] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19481'.
[ 1043.358487][T30871] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19481'.
[ 1043.382381][T30860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19480'.
[ 1043.411671][T30860] bond60: entered promiscuous mode
[ 1043.415735][T30860] 8021q: adding VLAN 0 to HW filter on device bond60
[ 1043.508667][T30860] bond60 (unregistering): Released all slaves
[ 1043.545598][T30878] delete_channel: no stack
[ 1043.548600][T30878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19483'.
[ 1043.556050][T30878] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1044.088339][T30923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19496'.
[ 1044.099020][T30923] netlink: 'syz.2.19496': attribute type 7 has an invalid length.
[ 1044.106483][T30923] netlink: 'syz.2.19496': attribute type 8 has an invalid length.
[ 1044.117730][T30923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19496'.
[ 1044.431543][T30950] netlink: 'syz.0.19503': attribute type 29 has an invalid length.
[ 1044.434999][T30950] netlink: 'syz.0.19503': attribute type 29 has an invalid length.
[ 1045.612562][T31013] vxcan1 speed is unknown, defaulting to 1000
[ 1045.751655][ T6468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1045.754278][ T6468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1045.799733][T31013] wg1 speed is unknown, defaulting to 1000
[ 1045.893795][T31013] lo speed is unknown, defaulting to 1000
[ 1046.126330][T31023] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1046.158816][T31023] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1046.340222][T31029] netlink: 'syz.0.19521': attribute type 9 has an invalid length.
[ 1046.347654][T31029] macvlan0: entered promiscuous mode
[ 1046.351162][T31029] macvlan0: entered allmulticast mode
[ 1046.353189][T31029] hsr0: entered allmulticast mode
[ 1046.355015][T31029] veth1: entered allmulticast mode
[ 1046.356795][T31029] bridge5: entered allmulticast mode
[ 1046.524712][T31047] netlink: 'syz.0.19525': attribute type 2 has an invalid length.
[ 1046.650996][T31054] sit0: left allmulticast mode
[ 1046.654854][T31054] 0: left allmulticast mode
[ 1046.656605][T31054] hsr_slave_0: left allmulticast mode
[ 1046.658599][T31054] hsr_slave_1: left allmulticast mode
[ 1046.665393][T31054] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[ 1046.691424][T31054] bond38: left allmulticast mode
[ 1046.695018][T31054] bond41: left promiscuous mode
[ 1046.696835][T31054] bond41: left allmulticast mode
[ 1046.698742][T31054] bond42: left promiscuous mode
[ 1046.704964][T31054] bond42: left allmulticast mode
[ 1046.707071][T31054] bond43: left promiscuous mode
[ 1046.709690][T31054] bond43: left allmulticast mode
[ 1046.712068][T31054] bond44: left promiscuous mode
[ 1046.714337][T31054] bond44: left allmulticast mode
[ 1046.716697][T31054] bond45: left promiscuous mode
[ 1046.718892][T31054] bond45: left allmulticast mode
[ 1046.726427][T31054] bond46: left promiscuous mode
[ 1046.728503][T31054] bond46: left allmulticast mode
[ 1046.731080][T31054] bond47: left promiscuous mode
[ 1046.733184][T31054] bond47: left allmulticast mode
[ 1046.735498][T31054] bond48: left promiscuous mode
[ 1046.737583][T31054] bond48: left allmulticast mode
[ 1046.740686][T31054] bond49: left promiscuous mode
[ 1046.742637][T31054] bond49: left allmulticast mode
[ 1046.744336][T31054] bond50: left promiscuous mode
[ 1046.746010][T31054] bond50: left allmulticast mode
[ 1046.747687][T31054] bond51: left promiscuous mode
[ 1046.750853][T31054] bond51: left allmulticast mode
[ 1046.752952][T31054] bond52: left promiscuous mode
[ 1046.755238][T31054] bond52: left allmulticast mode
[ 1046.757633][T31054] bond53: left promiscuous mode
[ 1046.761968][T31054] bond53: left allmulticast mode
[ 1046.764558][T31054] bond54: left promiscuous mode
[ 1046.766641][T31054] bond54: left allmulticast mode
[ 1046.768611][T31054] bond55: left promiscuous mode
[ 1046.770759][T31054] bond55: left allmulticast mode
[ 1046.772680][T31054] bond56: left promiscuous mode
[ 1046.774939][T31054] bond56: left allmulticast mode
[ 1046.777152][T31054] bond57: left promiscuous mode
[ 1046.778909][T31054] bond57: left allmulticast mode
[ 1046.783282][T31054] bond58: left promiscuous mode
[ 1046.786321][T31054] bond58: left allmulticast mode
[ 1046.788146][T31054] bond59: left promiscuous mode
[ 1046.789950][T31054] bond59: left allmulticast mode
[ 1046.791766][T31054] bond60: left promiscuous mode
[ 1046.793903][T31054] bond60: left allmulticast mode
[ 1046.796293][T31054] bond61: left promiscuous mode
[ 1046.798129][T31054] bond61: left allmulticast mode
[ 1046.802880][T31054] bond62: left promiscuous mode
[ 1046.804615][T31054] bond62: left allmulticast mode
[ 1046.806426][T31054] bond63: left promiscuous mode
[ 1046.808178][T31054] bond63: left allmulticast mode
[ 1046.810256][T31054] bond64: left promiscuous mode
[ 1046.811955][T31054] bond64: left allmulticast mode
[ 1046.814247][T31054] bond65: left promiscuous mode
[ 1046.816484][T31054] bond65: left allmulticast mode
[ 1046.818261][T31054] bond66: left promiscuous mode
[ 1046.820263][T31054] bond66: left allmulticast mode
[ 1046.822535][T31054] bond67: left promiscuous mode
[ 1046.824761][T31054] bond67: left allmulticast mode
[ 1046.827095][T31054] bond68: left promiscuous mode
[ 1046.829525][T31054] bond68: left allmulticast mode
[ 1046.831851][T31054] bond69: left promiscuous mode
[ 1046.833901][T31054] bond69: left allmulticast mode
[ 1046.836011][T31054] bond70: left promiscuous mode
[ 1046.838180][T31054] bond70: left allmulticast mode
[ 1046.852299][T31054] veth23: left promiscuous mode
[ 1046.860953][T31054] bond75: left promiscuous mode
[ 1046.863094][T31054] bond75: left allmulticast mode
[ 1046.874466][T31054] ip6gre1: left allmulticast mode
[ 1046.885253][T31054] hsr0: left allmulticast mode
[ 1046.887333][T31054] veth1: left allmulticast mode
[ 1046.890132][T31054] bridge5: left allmulticast mode
[ 1046.892594][T31054] macvlan0: left promiscuous mode
[ 1046.894791][T31054] macvlan0: left allmulticast mode
[ 1046.898262][  T794] lo speed is unknown, defaulting to 1000
[ 1046.901475][  T794] syz1: Port: 1 Link DOWN
[ 1046.980558][T31063] sctp: [Deprecated]: syz.1.19531 (pid 31063) Use of int in max_burst socket option deprecated.
[ 1046.980558][T31063] Use struct sctp_assoc_value instead
[ 1047.195689][T31088] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[ 1047.217462][T31088] netlink: 'syz.1.19539': attribute type 4 has an invalid length.
[ 1047.396528][T31115] block nbd0: NBD_DISCONNECT
[ 1047.398194][T31115] block nbd0: Send disconnect failed -107
[ 1047.401806][T31115] block nbd0: Disconnected due to user request.
[ 1047.403813][T31115] block nbd0: shutting down sockets
[ 1062.750026][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1062.754479][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1062.757713][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1062.769421][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1062.772366][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1062.802015][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1062.806029][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1062.809094][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1062.812155][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1062.814986][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1062.826526][T31135] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1062.831273][T31135] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1062.833517][T31133] vxcan1 speed is unknown, defaulting to 1000
[ 1062.836834][T31135] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1062.852174][T31135] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1062.855106][T31135] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1062.921136][T31133] wg1 speed is unknown, defaulting to 1000
[ 1062.923007][T31136] vxcan1 speed is unknown, defaulting to 1000
[ 1063.067117][T31138] vxcan1 speed is unknown, defaulting to 1000
[ 1063.071111][T31136] wg1 speed is unknown, defaulting to 1000
[ 1063.075924][T31133] lo speed is unknown, defaulting to 1000
[ 1063.255080][T31138] wg1 speed is unknown, defaulting to 1000
[ 1063.261964][T31133] chnl_net:caif_netlink_parms(): no params data found
[ 1063.267269][T31136] lo speed is unknown, defaulting to 1000
[ 1063.381660][T31133] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1063.384222][T31133] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1063.386711][T31133] bridge_slave_0: entered allmulticast mode
[ 1063.389561][T31133] bridge_slave_0: entered promiscuous mode
[ 1063.394751][T31133] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1063.397143][T31133] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1063.402337][T31133] bridge_slave_1: entered allmulticast mode
[ 1063.405564][T31133] bridge_slave_1: entered promiscuous mode
[ 1063.410192][T31138] lo speed is unknown, defaulting to 1000
[ 1063.434107][T31133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1063.438874][T31133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1063.472919][T31133] team0: Port device team_slave_0 added
[ 1063.478641][T31133] team0: Port device team_slave_1 added
[ 1063.513557][T31133] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1063.515907][T31133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1063.525712][T31133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1063.534239][T31133] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1063.536936][T31133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1063.546944][T31133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1063.622177][T31133] hsr_slave_0: entered promiscuous mode
[ 1063.624635][T31133] hsr_slave_1: entered promiscuous mode
[ 1063.626867][T31133] debugfs: 'hsr0' already exists in 'hsr'
[ 1063.628764][T31133] Cannot create hsr debugfs directory
[ 1063.700023][T31136] chnl_net:caif_netlink_parms(): no params data found
[ 1063.781732][T31138] chnl_net:caif_netlink_parms(): no params data found
[ 1063.823935][T31136] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1063.826315][T31136] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1063.828701][T31136] bridge_slave_0: entered allmulticast mode
[ 1063.831734][T31136] bridge_slave_0: entered promiscuous mode
[ 1063.854903][T31136] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1063.857166][T31136] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1063.860770][T31136] bridge_slave_1: entered allmulticast mode
[ 1063.863546][T31136] bridge_slave_1: entered promiscuous mode
[ 1063.896117][T31136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1063.923910][T31136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1063.963755][T31136] team0: Port device team_slave_0 added
[ 1063.965899][T31138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1063.969274][T31138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1063.971861][T31138] bridge_slave_0: entered allmulticast mode
[ 1063.974661][T31138] bridge_slave_0: entered promiscuous mode
[ 1063.977780][T31138] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1063.980820][T31138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1063.983156][T31138] bridge_slave_1: entered allmulticast mode
[ 1063.985774][T31138] bridge_slave_1: entered promiscuous mode
[ 1063.989433][T31136] team0: Port device team_slave_1 added
[ 1064.019868][T31136] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1064.022134][T31136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1064.030206][T31136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1064.036649][T31138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1064.043930][T31136] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1064.046182][T31136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1064.054570][T31136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1064.063619][T31138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1064.086520][T31138] team0: Port device team_slave_0 added
[ 1064.097078][T31138] team0: Port device team_slave_1 added
[ 1064.129462][T31136] hsr_slave_0: entered promiscuous mode
[ 1064.132729][T31136] hsr_slave_1: entered promiscuous mode
[ 1064.135689][T31136] debugfs: 'hsr0' already exists in 'hsr'
[ 1064.138160][T31136] Cannot create hsr debugfs directory
[ 1064.141693][T31138] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1064.144127][T31138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1064.156258][T31138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1064.161140][T31138] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1064.163359][T31138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1064.175329][T31138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1064.242685][T31138] hsr_slave_0: entered promiscuous mode
[ 1064.245111][T31138] hsr_slave_1: entered promiscuous mode
[ 1064.247257][T31138] debugfs: 'hsr0' already exists in 'hsr'
[ 1064.249495][T31138] Cannot create hsr debugfs directory
[ 1064.829152][T31135] Bluetooth: hci3: command tx timeout
[ 1064.832151][ T5236] Bluetooth: hci4: command tx timeout
[ 1064.919396][T31135] Bluetooth: hci5: command tx timeout
[ 1066.909398][T31135] Bluetooth: hci3: command tx timeout
[ 1066.911594][T31135] Bluetooth: hci4: command tx timeout
[ 1066.999214][ T5236] Bluetooth: hci5: command tx timeout
[ 1068.999344][ T5236] Bluetooth: hci4: command tx timeout
[ 1068.999376][T31135] Bluetooth: hci3: command tx timeout
[ 1069.069181][T31135] Bluetooth: hci5: command tx timeout
[ 1071.069234][ T5236] Bluetooth: hci3: command tx timeout
[ 1071.069240][T31135] Bluetooth: hci4: command tx timeout
[ 1071.159191][T31135] Bluetooth: hci5: command tx timeout
[ 1122.736380][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1122.740621][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1122.744052][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1122.746838][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1122.750663][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1122.770580][T31162] vxcan1 speed is unknown, defaulting to 1000
[ 1122.806964][ T5236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1122.810763][ T5236] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1122.813692][ T5236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1122.817017][ T5236] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1122.819892][ T5236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1122.865425][T31162] wg1 speed is unknown, defaulting to 1000
[ 1122.866222][T31164] vxcan1 speed is unknown, defaulting to 1000
[ 1122.964287][T31162] lo speed is unknown, defaulting to 1000
[ 1122.976500][T31164] wg1 speed is unknown, defaulting to 1000
[ 1123.048785][T31162] chnl_net:caif_netlink_parms(): no params data found
[ 1123.095948][T31164] lo speed is unknown, defaulting to 1000
[ 1123.128053][T31162] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1123.134085][T31162] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1123.136334][T31162] bridge_slave_0: entered allmulticast mode
[ 1123.144900][T31162] bridge_slave_0: entered promiscuous mode
[ 1123.153393][T31162] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1123.155979][T31162] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1123.158242][T31162] bridge_slave_1: entered allmulticast mode
[ 1123.162063][T31162] bridge_slave_1: entered promiscuous mode
[ 1123.186050][T31162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1123.193381][T31162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1123.214475][T31162] team0: Port device team_slave_0 added
[ 1123.217739][T31162] team0: Port device team_slave_1 added
[ 1123.235618][T31162] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1123.237884][T31162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1123.246302][T31162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1123.253263][T31162] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1123.255499][T31162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1123.264121][T31162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1123.331043][T31162] hsr_slave_0: entered promiscuous mode
[ 1123.334072][T31162] hsr_slave_1: entered promiscuous mode
[ 1123.336730][T31162] debugfs: 'hsr0' already exists in 'hsr'
[ 1123.338906][T31162] Cannot create hsr debugfs directory
[ 1123.341544][T31164] chnl_net:caif_netlink_parms(): no params data found
[ 1123.445794][T31164] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1123.448171][T31164] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1123.454650][T31164] bridge_slave_0: entered allmulticast mode
[ 1123.457522][T31164] bridge_slave_0: entered promiscuous mode
[ 1123.464354][T31164] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1123.466635][T31164] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1123.468962][T31164] bridge_slave_1: entered allmulticast mode
[ 1123.471679][T31164] bridge_slave_1: entered promiscuous mode
[ 1123.514726][T31164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1123.531719][T31164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1123.596039][T31164] team0: Port device team_slave_0 added
[ 1123.603078][T31164] team0: Port device team_slave_1 added
[ 1123.619891][T31164] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1123.622289][T31164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1123.633135][T31164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1123.649778][T31164] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1123.652597][T31164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1123.666431][T31164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1123.748818][T31164] hsr_slave_0: entered promiscuous mode
[ 1123.752509][T31164] hsr_slave_1: entered promiscuous mode
[ 1123.755528][T31164] debugfs: 'hsr0' already exists in 'hsr'
[ 1123.757914][T31164] Cannot create hsr debugfs directory
[ 1123.998551][T31135] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1124.002770][T31135] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1124.006428][T31135] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1124.017420][T31135] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1124.023058][T31135] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1124.065606][T31179] vxcan1 speed is unknown, defaulting to 1000
[ 1124.161984][T31179] wg1 speed is unknown, defaulting to 1000
[ 1124.325369][T31179] lo speed is unknown, defaulting to 1000
[ 1124.452864][T31179] chnl_net:caif_netlink_parms(): no params data found
[ 1124.535954][T31179] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1124.539248][T31179] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1124.542176][T31179] bridge_slave_0: entered allmulticast mode
[ 1124.546631][T31179] bridge_slave_0: entered promiscuous mode
[ 1124.551414][T31179] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1124.554440][T31179] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1124.557407][T31179] bridge_slave_1: entered allmulticast mode
[ 1124.561837][T31179] bridge_slave_1: entered promiscuous mode
[ 1124.593472][T31179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1124.599899][T31179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1124.627750][T31179] team0: Port device team_slave_0 added
[ 1124.633719][T31179] team0: Port device team_slave_1 added
[ 1124.660846][T31179] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1124.663576][T31179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1124.674538][T31179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1124.681351][T31179] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1124.684183][T31179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1124.694718][T31179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1124.732606][T31179] hsr_slave_0: entered promiscuous mode
[ 1124.735897][T31179] hsr_slave_1: entered promiscuous mode
[ 1124.738718][T31179] debugfs: 'hsr0' already exists in 'hsr'
[ 1124.741376][T31179] Cannot create hsr debugfs directory
[ 1124.829279][ T5236] Bluetooth: hci7: command tx timeout
[ 1124.829348][T31135] Bluetooth: hci6: command tx timeout
[ 1126.109455][T31135] Bluetooth: hci8: command tx timeout
[ 1126.909277][T31135] Bluetooth: hci7: command tx timeout
[ 1126.909425][ T5236] Bluetooth: hci6: command tx timeout
[ 1128.189090][ T5236] Bluetooth: hci8: command tx timeout
[ 1128.989026][ T5236] Bluetooth: hci7: command tx timeout
[ 1128.991649][T31135] Bluetooth: hci6: command tx timeout
[ 1130.269370][ T5236] Bluetooth: hci8: command tx timeout
[ 1131.079133][ T5236] Bluetooth: hci7: command tx timeout
[ 1131.081093][ T5236] Bluetooth: hci6: command tx timeout
[ 1132.349052][T31135] Bluetooth: hci8: command tx timeout
[ 1183.770519][ T5236] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1183.774838][ T5236] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1183.777956][ T5236] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1183.781058][ T5236] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1183.784181][ T5236] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1183.807258][T31189] vxcan1 speed is unknown, defaulting to 1000
[ 1183.815641][T31135] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1183.818766][T31135] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1183.823100][T31135] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1183.826430][T31135] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1183.830170][T31135] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1183.934588][T31189] wg1 speed is unknown, defaulting to 1000
[ 1183.937510][T31191] vxcan1 speed is unknown, defaulting to 1000
[ 1184.075307][T31191] wg1 speed is unknown, defaulting to 1000
[ 1184.077330][T31189] lo speed is unknown, defaulting to 1000
[ 1184.176706][T31191] lo speed is unknown, defaulting to 1000
[ 1184.222607][T31189] chnl_net:caif_netlink_parms(): no params data found
[ 1184.412655][T31189] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1184.417066][T31189] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1184.424978][T31189] bridge_slave_0: entered allmulticast mode
[ 1184.430147][T31189] bridge_slave_0: entered promiscuous mode
[ 1184.433699][T31189] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1184.436298][T31189] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1184.438696][T31189] bridge_slave_1: entered allmulticast mode
[ 1184.453204][T31189] bridge_slave_1: entered promiscuous mode
[ 1184.456020][T31191] chnl_net:caif_netlink_parms(): no params data found
[ 1184.497188][T31189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1184.502619][T31189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1184.548381][T31189] team0: Port device team_slave_0 added
[ 1184.550893][T31191] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1184.553563][T31191] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1184.556353][T31191] bridge_slave_0: entered allmulticast mode
[ 1184.559694][T31191] bridge_slave_0: entered promiscuous mode
[ 1184.564002][T31189] team0: Port device team_slave_1 added
[ 1184.573727][T31191] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1184.576079][T31191] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1184.578436][T31191] bridge_slave_1: entered allmulticast mode
[ 1184.581667][T31191] bridge_slave_1: entered promiscuous mode
[ 1184.621279][T31191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1184.626354][T31191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1184.646376][T31189] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1184.650020][T31189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1184.669552][T31189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1184.701840][T31191] team0: Port device team_slave_0 added
[ 1184.704731][T31189] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1184.707592][T31189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1184.739026][T31189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1184.748562][T31191] team0: Port device team_slave_1 added
[ 1184.841289][T31191] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1184.844154][T31191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1184.869016][T31191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1184.917932][T31191] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1184.922398][T31191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1184.937018][T31135] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1184.939132][T31191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1184.949462][T31135] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1184.949717][T31189] hsr_slave_0: entered promiscuous mode
[ 1184.959679][T31135] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1184.962863][T31135] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1184.965639][T31135] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1184.968268][T31189] hsr_slave_1: entered promiscuous mode
[ 1184.975401][T31189] debugfs: 'hsr0' already exists in 'hsr'
[ 1184.982897][T31189] Cannot create hsr debugfs directory
[ 1185.034897][T31191] hsr_slave_0: entered promiscuous mode
[ 1185.037309][T31191] hsr_slave_1: entered promiscuous mode
[ 1185.039730][T31191] debugfs: 'hsr0' already exists in 'hsr'
[ 1185.041571][T31191] Cannot create hsr debugfs directory
[ 1185.056235][T31206] vxcan1 speed is unknown, defaulting to 1000
[ 1185.138583][T31206] wg1 speed is unknown, defaulting to 1000
[ 1185.245473][T31206] lo speed is unknown, defaulting to 1000
[ 1185.331316][T31206] chnl_net:caif_netlink_parms(): no params data found
[ 1185.415754][T31206] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1185.418189][T31206] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1185.420978][T31206] bridge_slave_0: entered allmulticast mode
[ 1185.423710][T31206] bridge_slave_0: entered promiscuous mode
[ 1185.436203][T31206] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1185.438608][T31206] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1185.441167][T31206] bridge_slave_1: entered allmulticast mode
[ 1185.443917][T31206] bridge_slave_1: entered promiscuous mode
[ 1185.487828][T31206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1185.493638][T31206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1185.513045][T31206] team0: Port device team_slave_0 added
[ 1185.521717][T31206] team0: Port device team_slave_1 added
[ 1185.541031][T31206] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1185.543427][T31206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1185.554105][T31206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1185.563314][T31206] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1185.565514][T31206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1185.573928][T31206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1185.618178][T31206] hsr_slave_0: entered promiscuous mode
[ 1185.620997][T31206] hsr_slave_1: entered promiscuous mode
[ 1185.623435][T31206] debugfs: 'hsr0' already exists in 'hsr'
[ 1185.625344][T31206] Cannot create hsr debugfs directory
[ 1185.799344][T31135] Bluetooth: hci9: command tx timeout
[ 1185.869225][T31135] Bluetooth: hci10: command tx timeout
[ 1186.989465][T31135] Bluetooth: hci11: command tx timeout
[ 1187.869679][T31214] Bluetooth: hci9: command tx timeout
[ 1187.949590][T31214] Bluetooth: hci10: command tx timeout
[ 1189.069347][T31214] Bluetooth: hci11: command tx timeout
[ 1189.390012][T31214] Bluetooth: hci5: command 0x0406 tx timeout
[ 1189.393562][T31214] Bluetooth: hci4: command 0x0406 tx timeout
[ 1189.399318][T31214] Bluetooth: hci3: command 0x0406 tx timeout
[ 1189.949181][T31135] Bluetooth: hci9: command tx timeout
[ 1190.029340][T31135] Bluetooth: hci10: command tx timeout
[ 1191.149478][T31135] Bluetooth: hci11: command tx timeout
[ 1192.029502][T31135] Bluetooth: hci9: command tx timeout
[ 1192.109107][T31135] Bluetooth: hci10: command tx timeout
[ 1193.239234][T31135] Bluetooth: hci11: command tx timeout
[ 1195.629785][   T34] INFO: task syz.0.19549:31115 blocked for more than 143 seconds.
[ 1195.633060][   T34]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[ 1195.636823][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1195.641000][   T34] task:syz.0.19549     state:D stack:25352 pid:31115 tgid:31114 ppid:5858   task_flags:0x400140 flags:0x00004004
[ 1195.645984][   T34] Call Trace:
[ 1195.647443][   T34]  <TASK>
[ 1195.648754][   T34]  __schedule+0x1798/0x4cc0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1195.650966][   T34]  ? validate_chain+0x897/0x2140
[ 1195.653163][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1195.655231][   T34]  ? __pfx___schedule+0x10/0x10
[ 1195.656861][   T34]  ? schedule+0x91/0x360
[ 1195.658455][   T34]  schedule+0x165/0x360
[ 1195.660144][   T34]  schedule_timeout+0x9a/0x270
[ 1195.662166][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[ 1195.664497][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1195.666953][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1195.669579][   T34]  ? wait_for_completion+0x267/0x5d0
[ 1195.689912][   T34]  wait_for_completion+0x2bf/0x5d0
[ 1195.692169][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[ 1195.694585][   T34]  ? flush_workqueue_prep_pwqs+0x47c/0x4f0
[ 1195.696902][   T34]  ? check_flush_dependency+0x88/0x400
[ 1195.703709][   T34]  __flush_workqueue+0x6f7/0x14b0
[ 1195.705842][   T34]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1195.708348][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1195.712025][   T34]  ? __pfx___flush_workqueue+0x10/0x10
[ 1195.714205][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1195.716159][   T34]  ? __wake_up_common_lock+0x190/0x1f0
[ 1195.718022][   T34]  nbd_disconnect_and_put+0x9e/0x2a0
[ 1195.720220][   T34]  nbd_genl_disconnect+0x485/0x570
[ 1195.721993][   T34]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[ 1195.723862][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1195.725963][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[ 1195.727798][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1195.729905][   T34]  ? stack_trace_save+0x9c/0xe0
[ 1195.731555][   T34]  genl_rcv_msg+0x60e/0x790
[ 1195.733041][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1195.734694][   T34]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[ 1195.736566][   T34]  netlink_rcv_skb+0x208/0x470
[ 1195.738103][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1195.739875][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1195.741470][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1195.743220][   T34]  ? down_read+0x1ad/0x2e0
[ 1195.744697][   T34]  genl_rcv+0x28/0x40
[ 1195.746052][   T34]  netlink_unicast+0x82f/0x9e0
[ 1195.747646][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[ 1195.749597][   T34]  ? netlink_sendmsg+0x642/0xb30
[ 1195.751283][   T34]  ? skb_put+0x11b/0x210
[ 1195.752720][   T34]  netlink_sendmsg+0x805/0xb30
[ 1195.754322][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1195.756071][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1195.757749][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1195.759831][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1195.761587][   T34]  __sock_sendmsg+0x21c/0x270
[ 1195.763174][   T34]  ____sys_sendmsg+0x505/0x830
[ 1195.764767][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1195.766671][   T34]  ? import_iovec+0x74/0xa0
[ 1195.768307][   T34]  ___sys_sendmsg+0x21f/0x2a0
[ 1195.770501][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1195.772356][   T34]  ? __fget_files+0x2a/0x420
[ 1195.773894][   T34]  ? __fget_files+0x3a0/0x420
[ 1195.775461][   T34]  __x64_sys_sendmsg+0x19b/0x260
[ 1195.777151][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1195.779100][   T34]  ? rcu_is_watching+0x15/0xb0
[ 1195.780694][   T34]  ? do_syscall_64+0xbe/0x3b0
[ 1195.782262][   T34]  do_syscall_64+0xfa/0x3b0
[ 1195.783789][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1195.785516][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1195.787577][   T34]  ? exc_page_fault+0x9f/0xf0
[ 1195.789296][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1195.791276][   T34] RIP: 0033:0x7f57e238ebe9
[ 1195.792769][   T34] RSP: 002b:00007f57e317d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1195.795489][   T34] RAX: ffffffffffffffda RBX: 00007f57e25b5fa0 RCX: 00007f57e238ebe9
[ 1195.798151][   T34] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000007
[ 1195.804711][   T34] RBP: 00007f57e2411e19 R08: 0000000000000000 R09: 0000000000000000
[ 1195.807322][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1195.810815][   T34] R13: 00007f57e25b6038 R14: 00007f57e25b5fa0 R15: 00007ffe8ad8cc68
[ 1195.813414][   T34]  </TASK>
[ 1195.814480][   T34] INFO: task syz.2.19550:31117 blocked for more than 143 seconds.
[ 1195.817080][   T34]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[ 1195.824182][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1195.827075][   T34] task:syz.2.19550     state:D stack:25896 pid:31117 tgid:31116 ppid:5852   task_flags:0x400140 flags:0x00004004
[ 1195.831208][   T34] Call Trace:
[ 1195.832347][   T34]  <TASK>
[ 1195.833350][   T34]  __schedule+0x1798/0x4cc0
[ 1195.834888][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1195.836527][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1195.838155][   T34]  ? __pfx___schedule+0x10/0x10
[ 1195.840061][   T34]  ? schedule+0x91/0x360
[ 1195.841479][   T34]  schedule+0x165/0x360
[ 1195.842876][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1195.844713][   T34]  __mutex_lock+0x7e6/0x1360
[ 1195.846265][   T34]  ? __mutex_lock+0x5b6/0x1360
[ 1195.847877][   T34]  ? genl_rcv_msg+0x10d/0x790
[ 1195.849593][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1195.851280][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1195.853018][   T34]  ? radix_tree_lookup+0x240/0x290
[ 1195.854735][   T34]  genl_rcv_msg+0x10d/0x790
[ 1195.856256][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1195.857975][   T34]  ? ref_tracker_free+0x63a/0x7d0
[ 1195.859898][   T34]  ? __asan_memcpy+0x40/0x70
[ 1195.861450][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1195.863239][   T34]  netlink_rcv_skb+0x208/0x470
[ 1195.864838][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1195.866530][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1195.868353][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1195.870247][   T34]  ? down_read+0x1ad/0x2e0
[ 1195.871763][   T34]  genl_rcv+0x28/0x40
[ 1195.873333][   T34]  netlink_unicast+0x82f/0x9e0
[ 1195.875327][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[ 1195.877524][   T34]  ? netlink_sendmsg+0x642/0xb30
[ 1195.879814][   T34]  ? skb_put+0x11b/0x210
[ 1195.881585][   T34]  netlink_sendmsg+0x805/0xb30
[ 1195.883582][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1195.885778][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1195.887838][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1195.890096][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1195.891810][   T34]  __sock_sendmsg+0x21c/0x270
[ 1195.893381][   T34]  __sys_sendto+0x3bd/0x520
[ 1195.894908][   T34]  ? __pfx___sys_sendto+0x10/0x10
[ 1195.896565][   T34]  ? count_memcg_event_mm+0x21/0x260
[ 1195.898341][   T34]  ? exc_page_fault+0x76/0xf0
[ 1195.900103][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[ 1195.901803][   T34]  __x64_sys_sendto+0xde/0x100
[ 1195.903339][   T34]  do_syscall_64+0xfa/0x3b0
[ 1195.904854][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1195.906577][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1195.908604][   T34]  ? exc_page_fault+0x9f/0xf0
[ 1195.910590][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1195.912587][   T34] RIP: 0033:0x7fd3dff90a7c
[ 1195.914091][   T34] RSP: 002b:00007fd3e0dfcec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1195.916863][   T34] RAX: ffffffffffffffda RBX: 00007fd3e0dfcfc0 RCX: 00007fd3dff90a7c
[ 1195.919626][   T34] RDX: 0000000000000024 RSI: 00007fd3e0dfd010 RDI: 0000000000000006
[ 1195.922204][   T34] RBP: 0000000000000000 R08: 00007fd3e0dfcf14 R09: 000000000000000c
[ 1195.924688][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[ 1195.927258][   T34] R13: 00007fd3e0dfcf68 R14: 00007fd3e0dfd010 R15: 0000000000000000
[ 1195.930143][   T34]  </TASK>
[ 1195.931483][   T34] INFO: task syz.2.19550:31119 blocked for more than 143 seconds.
[ 1195.934190][   T34]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[ 1195.936844][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1195.940025][   T34] task:syz.2.19550     state:D stack:27296 pid:31119 tgid:31116 ppid:5852   task_flags:0x400040 flags:0x00004004
[ 1195.944611][   T34] Call Trace:
[ 1195.946033][   T34]  <TASK>
[ 1195.947261][   T34]  __schedule+0x1798/0x4cc0
[ 1195.949217][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1195.951127][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1195.952963][   T34]  ? __pfx___schedule+0x10/0x10
[ 1195.954601][   T34]  ? schedule+0x91/0x360
[ 1195.956051][   T34]  schedule+0x165/0x360
[ 1195.957742][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1195.959806][   T34]  __mutex_lock+0x7e6/0x1360
[ 1195.961491][   T34]  ? __mutex_lock+0x5b6/0x1360
[ 1195.963169][   T34]  ? genl_rcv_msg+0x10d/0x790
[ 1195.964849][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1195.966538][   T34]  ? stack_trace_save+0x9c/0xe0
[ 1195.968173][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[ 1195.970160][   T34]  ? radix_tree_lookup+0x240/0x290
[ 1195.971891][   T34]  genl_rcv_msg+0x10d/0x790
[ 1195.973407][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1195.974995][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1195.976628][   T34]  netlink_rcv_skb+0x208/0x470
[ 1195.978251][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1195.979957][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1195.981636][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1195.983356][   T34]  ? down_read+0x1ad/0x2e0
[ 1195.984801][   T34]  genl_rcv+0x28/0x40
[ 1195.986103][   T34]  netlink_unicast+0x82f/0x9e0
[ 1195.987691][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[ 1195.989625][   T34]  ? netlink_sendmsg+0x642/0xb30
[ 1195.991314][   T34]  ? skb_put+0x11b/0x210
[ 1195.992743][   T34]  netlink_sendmsg+0x805/0xb30
[ 1195.994351][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1195.996120][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1195.997821][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1195.999667][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1196.001460][   T34]  __sock_sendmsg+0x21c/0x270
[ 1196.003047][   T34]  __sys_sendto+0x3bd/0x520
[ 1196.004558][   T34]  ? __pfx___sys_sendto+0x10/0x10
[ 1196.006236][   T34]  ? count_memcg_event_mm+0x21/0x260
[ 1196.008245][   T34]  ? exc_page_fault+0x76/0xf0
[ 1196.009967][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[ 1196.011762][   T34]  __x64_sys_sendto+0xde/0x100
[ 1196.013385][   T34]  do_syscall_64+0xfa/0x3b0
[ 1196.014925][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1196.017229][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1196.019347][   T34]  ? exc_page_fault+0x9f/0xf0
[ 1196.020903][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1196.022769][   T34] RIP: 0033:0x7fd3dff90a7c
[ 1196.024183][   T34] RSP: 002b:00007fd3e0ddbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1196.026906][   T34] RAX: ffffffffffffffda RBX: 00007fd3e0ddbfc0 RCX: 00007fd3dff90a7c
[ 1196.029507][   T34] RDX: 000000000000001c RSI: 00007fd3e0ddc010 RDI: 0000000000000007
[ 1196.032107][   T34] RBP: 0000000000000000 R08: 00007fd3e0ddbf14 R09: 000000000000000c
[ 1196.034586][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007
[ 1196.037147][   T34] R13: 00007fd3e0ddbf68 R14: 00007fd3e0ddc010 R15: 0000000000000000
[ 1196.039804][   T34]  </TASK>
[ 1196.040860][   T34] INFO: task syz.1.19552:31127 blocked for more than 143 seconds.
[ 1196.043325][   T34]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[ 1196.045889][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1196.048716][   T34] task:syz.1.19552     state:D stack:26088 pid:31127 tgid:31126 ppid:5850   task_flags:0x400040 flags:0x00004004
[ 1196.055092][   T34] Call Trace:
[ 1196.056232][   T34]  <TASK>
[ 1196.057270][   T34]  __schedule+0x1798/0x4cc0
[ 1196.058797][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1196.060534][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1196.062163][   T34]  ? __pfx___schedule+0x10/0x10
[ 1196.063791][   T34]  ? schedule+0x91/0x360
[ 1196.065198][   T34]  schedule+0x165/0x360
[ 1196.066582][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1196.068395][   T34]  __mutex_lock+0x7e6/0x1360
[ 1196.070055][   T34]  ? __mutex_lock+0x5b6/0x1360
[ 1196.071694][   T34]  ? genl_rcv_msg+0x10d/0x790
[ 1196.073297][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1196.075043][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1196.076747][   T34]  ? radix_tree_lookup+0x240/0x290
[ 1196.078478][   T34]  genl_rcv_msg+0x10d/0x790
[ 1196.080144][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1196.081823][   T34]  ? ref_tracker_free+0x63a/0x7d0
[ 1196.083498][   T34]  ? __asan_memcpy+0x40/0x70
[ 1196.085076][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1196.086860][   T34]  netlink_rcv_skb+0x208/0x470
[ 1196.088456][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1196.090284][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1196.091964][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1196.093727][   T34]  ? down_read+0x1ad/0x2e0
[ 1196.095216][   T34]  genl_rcv+0x28/0x40
[ 1196.096529][   T34]  netlink_unicast+0x82f/0x9e0
[ 1196.098174][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[ 1196.100157][   T34]  ? netlink_sendmsg+0x642/0xb30
[ 1196.101811][   T34]  ? skb_put+0x11b/0x210
[ 1196.103223][   T34]  netlink_sendmsg+0x805/0xb30
[ 1196.104818][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1196.106559][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1196.108206][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1196.110033][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1196.111940][   T34]  __sock_sendmsg+0x21c/0x270
[ 1196.113509][   T34]  __sys_sendto+0x3bd/0x520
[ 1196.115041][   T34]  ? __pfx___sys_sendto+0x10/0x10
[ 1196.116717][   T34]  ? count_memcg_event_mm+0x21/0x260
[ 1196.118509][   T34]  ? exc_page_fault+0x76/0xf0
[ 1196.120159][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[ 1196.121906][   T34]  __x64_sys_sendto+0xde/0x100
[ 1196.123442][   T34]  do_syscall_64+0xfa/0x3b0
[ 1196.125112][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1196.126844][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1196.129018][   T34]  ? exc_page_fault+0x9f/0xf0
[ 1196.130587][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1196.132560][   T34] RIP: 0033:0x7f756c790a7c
[ 1196.134063][   T34] RSP: 002b:00007f756d684ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1196.136845][   T34] RAX: ffffffffffffffda RBX: 00007f756d684fc0 RCX: 00007f756c790a7c
[ 1196.139629][   T34] RDX: 0000000000000024 RSI: 00007f756d685010 RDI: 0000000000000003
[ 1196.142285][   T34] RBP: 0000000000000000 R08: 00007f756d684f14 R09: 000000000000000c
[ 1196.144947][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1196.147525][   T34] R13: 00007f756d684f68 R14: 00007f756d685010 R15: 0000000000000000
[ 1196.150207][   T34]  </TASK>
[ 1196.151282][   T34] INFO: task syz.1.19552:31128 blocked for more than 143 seconds.
[ 1196.153817][   T34]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[ 1196.156457][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1196.159482][   T34] task:syz.1.19552     state:D stack:28360 pid:31128 tgid:31126 ppid:5850   task_flags:0x400040 flags:0x00004004
[ 1196.163436][   T34] Call Trace:
[ 1196.164564][   T34]  <TASK>
[ 1196.165579][   T34]  __schedule+0x1798/0x4cc0
[ 1196.167103][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1196.169036][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1196.170650][   T34]  ? __pfx___schedule+0x10/0x10
[ 1196.172328][   T34]  ? schedule+0x91/0x360
[ 1196.173971][   T34]  schedule+0x165/0x360
[ 1196.175581][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1196.177656][   T34]  __mutex_lock+0x7e6/0x1360
[ 1196.179598][   T34]  ? __mutex_lock+0x5b6/0x1360
[ 1196.181233][   T34]  ? genl_rcv_msg+0x10d/0x790
[ 1196.182790][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1196.184422][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1196.186028][   T34]  ? radix_tree_lookup+0x240/0x290
[ 1196.187691][   T34]  genl_rcv_msg+0x10d/0x790
[ 1196.189470][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1196.191179][   T34]  ? ref_tracker_free+0x63a/0x7d0
[ 1196.193020][   T34]  ? __asan_memcpy+0x40/0x70
[ 1196.194611][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1196.196541][   T34]  netlink_rcv_skb+0x208/0x470
[ 1196.198301][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1196.200257][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1196.201906][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1196.203617][   T34]  ? down_read+0x1ad/0x2e0
[ 1196.205055][   T34]  genl_rcv+0x28/0x40
[ 1196.206357][   T34]  netlink_unicast+0x82f/0x9e0
[ 1196.207964][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[ 1196.209940][   T34]  ? netlink_sendmsg+0x642/0xb30
[ 1196.211607][   T34]  ? skb_put+0x11b/0x210
[ 1196.213001][   T34]  netlink_sendmsg+0x805/0xb30
[ 1196.214580][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1196.216321][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1196.217990][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1196.219949][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1196.221720][   T34]  __sock_sendmsg+0x21c/0x270
[ 1196.223285][   T34]  __sys_sendto+0x3bd/0x520
[ 1196.224929][   T34]  ? __pfx___sys_sendto+0x10/0x10
[ 1196.226596][   T34]  ? count_memcg_event_mm+0x21/0x260
[ 1196.228353][   T34]  ? exc_page_fault+0x76/0xf0
[ 1196.229998][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[ 1196.231763][   T34]  __x64_sys_sendto+0xde/0x100
[ 1196.233347][   T34]  do_syscall_64+0xfa/0x3b0
[ 1196.234850][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1196.236568][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1196.238622][   T34]  ? exc_page_fault+0x9f/0xf0
[ 1196.240268][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1196.242212][   T34] RIP: 0033:0x7f756c790a7c
[ 1196.243712][   T34] RSP: 002b:00007f756d663ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1196.246438][   T34] RAX: ffffffffffffffda RBX: 00007f756d663fc0 RCX: 00007f756c790a7c
[ 1196.249190][   T34] RDX: 0000000000000020 RSI: 00007f756d664010 RDI: 0000000000000003
[ 1196.251809][   T34] RBP: 0000000000000000 R08: 00007f756d663f14 R09: 000000000000000c
[ 1196.254402][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1196.257048][   T34] R13: 00007f756d663f68 R14: 00007f756d664010 R15: 0000000000000000
[ 1196.259848][   T34]  </TASK>
[ 1196.260942][   T34] 
[ 1196.260942][   T34] Showing all locks held in the system:
[ 1196.263457][   T34] 1 lock held by khungtaskd/34:
[ 1196.265071][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1196.268350][   T34] 2 locks held by kworker/u12:0/55:
[ 1196.270720][   T34]  #0: ffff88802132a148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1196.274643][   T34]  #1: ffffc900007dfbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1196.278492][   T34] 2 locks held by getty/5673:
[ 1196.280259][   T34]  #0: ffff8880228020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1196.283435][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1196.286855][   T34] 3 locks held by syz.0.19549/31115:
[ 1196.288610][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1196.291407][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1196.294356][   T34]  #2: ffff888021316230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0
[ 1196.297709][   T34] 2 locks held by syz.2.19550/31117:
[ 1196.299526][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1196.302219][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1196.305106][   T34] 2 locks held by syz.2.19550/31119:
[ 1196.306856][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1196.309693][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1196.312514][   T34] 2 locks held by syz.1.19552/31127:
[ 1196.314209][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1196.316858][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1196.319918][   T34] 2 locks held by syz.1.19552/31128:
[ 1196.321615][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1196.324306][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1196.327150][   T34] 2 locks held by syz-executor/31133:
[ 1196.328892][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1196.332286][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1196.335840][   T34] 2 locks held by syz-executor/31136:
[ 1196.337655][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1196.340577][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1196.343741][   T34] 2 locks held by syz-executor/31138:
[ 1196.345914][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1196.349547][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1196.352606][   T34] 2 locks held by syz-executor/31162:
[ 1196.354708][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1196.357638][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1196.360698][   T34] 2 locks held by syz-executor/31164:
[ 1196.362477][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1196.365170][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1196.368133][   T34] 2 locks held by syz-executor/31179:
[ 1196.370106][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1196.372801][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1196.375718][   T34] 2 locks held by syz-executor/31189:
[ 1196.377515][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1196.380344][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1196.383433][   T34] 2 locks held by syz-executor/31191:
[ 1196.385663][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1196.389087][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1196.392778][   T34] 2 locks held by syz-executor/31206:
[ 1196.394998][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1196.398328][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1196.402307][   T34] 
[ 1196.403313][   T34] =============================================
[ 1196.403313][   T34] 
[ 1196.406488][   T34] NMI backtrace for cpu 1
[ 1196.406496][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[ 1196.406504][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1196.406508][   T34] Call Trace:
[ 1196.406513][   T34]  <TASK>
[ 1196.406518][   T34]  dump_stack_lvl+0x189/0x250
[ 1196.406530][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1196.406539][   T34]  ? __pfx__printk+0x10/0x10
[ 1196.406552][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1196.406562][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1196.406571][   T34]  ? __pfx__printk+0x10/0x10
[ 1196.406581][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1196.406592][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1196.406601][   T34]  watchdog+0xf93/0xfe0
[ 1196.406613][   T34]  ? watchdog+0x1de/0xfe0
[ 1196.406623][   T34]  kthread+0x711/0x8a0
[ 1196.406633][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1196.406641][   T34]  ? __pfx_kthread+0x10/0x10
[ 1196.406650][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1196.406659][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1196.406687][   T34]  ? __pfx_kthread+0x10/0x10
[ 1196.406697][   T34]  ret_from_fork+0x3fc/0x770
[ 1196.406706][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1196.406715][   T34]  ? __switch_to_asm+0x39/0x70
[ 1196.406723][   T34]  ? __switch_to_asm+0x33/0x70
[ 1196.406730][   T34]  ? __pfx_kthread+0x10/0x10
[ 1196.406738][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1196.406752][   T34]  </TASK>
[ 1196.406755][   T34] Sending NMI from CPU 1 to CPUs 0:
[ 1196.458019][    C0] NMI backtrace for cpu 0
[ 1196.458037][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[ 1196.458050][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1196.458057][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1196.458077][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 d7 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1196.458087][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[ 1196.458099][    C0] RAX: 1ababc2b6de3cb00 RBX: ffffffff81968308 RCX: 1ababc2b6de3cb00
[ 1196.458108][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b6e8f RDI: ffffffff8be33400
[ 1196.458115][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[ 1196.458123][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa37e30
[ 1196.458131][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[ 1196.458138][    C0] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[ 1196.458148][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1196.458155][    C0] CR2: 00007f1dcfae7d60 CR3: 000000000df36000 CR4: 00000000000006f0
[ 1196.458189][    C0] Call Trace:
[ 1196.458197][    C0]  <TASK>
[ 1196.458202][    C0]  default_idle+0x13/0x20
[ 1196.458213][    C0]  default_idle_call+0x74/0xb0
[ 1196.458225][    C0]  do_idle+0x1e8/0x510
[ 1196.458245][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1196.458263][    C0]  cpu_startup_entry+0x44/0x60
[ 1196.458273][    C0]  rest_init+0x2de/0x300
[ 1196.458283][    C0]  start_kernel+0x3a9/0x410
[ 1196.458297][    C0]  x86_64_start_reservations+0x24/0x30
[ 1196.458311][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1196.458325][    C0]  common_startup_64+0x13e/0x147
[ 1196.458344][    C0]  </TASK>
[ 1196.459063][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[ 1196.459072][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[ 1196.459081][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1196.459085][   T34] Call Trace:
[ 1196.459089][   T34]  <TASK>
[ 1196.459093][   T34]  dump_stack_lvl+0x99/0x250
[ 1196.459103][   T34]  ? __asan_memcpy+0x40/0x70
[ 1196.459112][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1196.459120][   T34]  ? __pfx__printk+0x10/0x10
[ 1196.459134][   T34]  vpanic+0x281/0x750
[ 1196.459143][   T34]  ? __pfx_vpanic+0x10/0x10
[ 1196.459150][   T34]  ? preempt_schedule+0xae/0xc0
[ 1196.459160][   T34]  ? preempt_schedule_common+0x83/0xd0
[ 1196.459171][   T34]  panic+0xb9/0xc0
[ 1196.459178][   T34]  ? __pfx_panic+0x10/0x10
[ 1196.459186][   T34]  ? preempt_schedule_thunk+0x16/0x30
[ 1196.459198][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1196.459208][   T34]  watchdog+0xfd2/0xfe0
[ 1196.459220][   T34]  ? watchdog+0x1de/0xfe0
[ 1196.459231][   T34]  kthread+0x711/0x8a0
[ 1196.459241][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1196.459249][   T34]  ? __pfx_kthread+0x10/0x10
[ 1196.459258][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1196.459267][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1196.459275][   T34]  ? __pfx_kthread+0x10/0x10
[ 1196.459283][   T34]  ret_from_fork+0x3fc/0x770
[ 1196.459297][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1196.459306][   T34]  ? __switch_to_asm+0x39/0x70
[ 1196.459314][   T34]  ? __switch_to_asm+0x33/0x70
[ 1196.459322][   T34]  ? __pfx_kthread+0x10/0x10
[ 1196.459330][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1196.459346][   T34]  </TASK>
[ 1196.580959][   T34] Kernel Offset: disabled
[ 1196.582340][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:54:22  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888107458237 R9 =1ffff11020e8b046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af991a R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1dcfae7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffffffffffffff00 XMM05=0000000000000000 00007f1dcee12e53
XMM06=0000000000000000 00007f1dcee12e4d XMM07=0000000000000000 00007f1dcee12e61
XMM08=0000000000000000 00007f1dcee12ee7 XMM09=0000000000000000 00007f1dcee12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888011db5940 RCX=0000000000000001 RDX=0000000000000000
RSI=0000000000000004 RDI=ffff888011db5940 RBP=1ffff110023b6b29 RSP=ffffc90002fcf938
R8 =ffff888011db5943 R9 =1ffff110023b6b28 R10=dffffc0000000000 R11=ffffed10023b6b29
R12=dffffc0000000000 R13=1ffff110023b6b2a R14=ffff888011db5950 R15=ffff888011db5948
RIP=ffffffff819e043e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ff7c53e7e8 CR3=0000000110474000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
