last executing test programs:

19.564996243s ago: executing program 1 (id=3782):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x16}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
socket(0xf, 0x4, 0xfff)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000000)="240000001a005f0400f9f40700090401802a202000000000000000002e7ee24d0d000800", 0x24)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x48, 0x140f, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004014}, 0x20000040)
write$cgroup_int(r3, 0x0, 0x0)
mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112d9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0xf2a50000)

19.049974519s ago: executing program 1 (id=3790):
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xff000000, 0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x258, 0x298, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x18}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x0, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0xa, 0x10, 0x10001, 0x20000, 0x4, 0x9, 0x6]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0x1, 0x0)
vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000002040)="162d", 0x2}], 0x1, 0x6)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan3\x00'})
r8 = gettid()
syz_open_procfs$namespace(r8, &(0x7f0000000100)='ns/cgroup\x00')
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4)
syz_open_procfs$namespace(r8, &(0x7f0000000040))
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf2514000000080001000200000008001d00", @ANYRES32=r7, @ANYBLOB="0c000600030000000300000008000100000000000c00060003000000030000000c000600010000000100000008001c00", @ANYRES32=0x0, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r10=>0x0})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60d2fc20", @ANYRESDEC=r0, @ANYBLOB="00042cbd7000ffdbdf252000000008000300", @ANYRES32=r10, @ANYBLOB="0c000600000000000000000008000300", @ANYRES16=r10, @ANYBLOB="0c0006000300000003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8d1}, 0x8000)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000020a90000000060a0b040000000000000000020000005800048018000180080001006f7366000c000280080001400000000410000180090001006d6574613b4400002c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32000000000c0006400000000000000005140000001100010000000000000000000100000a"], 0xb8}}, 0x0)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf25100000000500102002000000050011000900000008000300", @ANYRES32=r10, @ANYRES32=r2, @ANYBLOB="1f7225c31f8054e9713d2544173aff17edceed73a65ca742c6e278708ec332013d6b08320fa7d53d38834f73424b2606ef20bc8eb4fba09d9340966a", @ANYRES8=r1, @ANYRESHEX=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendto$inet(r6, &(0x7f0000000780)="dc9998099c94c17f8161bea54dd1241812fccb7042a1e57af39c37e64e8218080b0ad4b6badc642f4e27ce9519d2e9c622857ac678d40389e5d5442ed957dcc5bbf9636cb37a2b337c4965419b11d8d846f5e580d7f0a1743bf30dab11365b95594432c5a259ef785f3c20ac17b99aed", 0x70, 0x2000, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r12=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x7c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xb0}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x7c}, 0x1, 0x0, 0x0, 0x85}, 0x40004)

16.7496082s ago: executing program 2 (id=3820):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d0000000000000056110000010000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x4c}}, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r5, &(0x7f0000000200)="257050f087899ab4df5e7c931d558ade0a9ab8dd00000001a4bbb273da019e1bb6a4f1737cde52984b34022a876ed4379c4d528f1c888423348fa9a6344a79f4d8126cf9461eccecbda6907a958d608d51238abfc83faaa9f7e2d7d58a4df6c318198b7709b1678774d7a6edf5d979dda6c778da78e5cacac7c07e084cbca0c17e6c520777561e2f886895e0d51afb8528b10cc6bc6af3bc2ff610c0807a7f36e35537180ba6145fee40a1c43a86fb5cf1d7fe9a525abb0cf10c05b79e03e331feba", 0xff00, 0xe044, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x14002000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x238, 0x168, 0x420, 0x308, 0x168, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f00000000c0), {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], [0xffffffff, 0xff, 0xff000000, 0xff], 'dummy0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x18}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@hbh={{0x48}, {0xa81, 0x5, 0x1, [0x4, 0x1, 0x7, 0x1, 0x2, 0x0, 0xc, 0x4, 0xffff, 0x1, 0x10, 0x1, 0x9, 0x8, 0x4, 0x8], 0x4}}, @common=@frag={{0x30}, {[0x3, 0x9], 0x9a74, 0x0, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@private=0xa010100, 0x37, 0x10, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3a}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private0, 0x3f, 0x36, 0xf}}}, {{@ipv6={@remote, @remote, [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [0xff, 0xff000000, 0xff, 0xffffff00], 'wg2\x00', 'pimreg\x00', {}, {0xff}, 0x11, 0x3, 0x0, 0x20}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2, 0x3, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x238, 0x168, 0x420, 0x308, 0x168, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f00000000c0), {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], [0xffffffff, 0xff, 0xff000000, 0xff], 'dummy0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x18}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@hbh={{0x48}, {0xa81, 0x5, 0x1, [0x4, 0x1, 0x7, 0x1, 0x2, 0x0, 0xc, 0x4, 0xffff, 0x1, 0x10, 0x1, 0x9, 0x8, 0x4, 0x8], 0x4}}, @common=@frag={{0x30}, {[0x3, 0x9], 0x9a74, 0x0, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@private=0xa010100, 0x37, 0x10, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3a}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private0, 0x3f, 0x36, 0xf}}}, {{@ipv6={@remote, @remote, [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [0xff, 0xff000000, 0xff, 0xffffff00], 'wg2\x00', 'pimreg\x00', {}, {0xff}, 0x11, 0x3, 0x0, 0x20}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2, 0x3, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670)

16.679551083s ago: executing program 2 (id=3824):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x803, 0x0) (async, rerun: 64)
r2 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) (async)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r4=>0x0})
bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0xfffffffc, r1}, 0x10) (async)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) (rerun: 32)
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async)
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000455a0fc0006600000b7390780a010100ffffffff3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f3a5200a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"], 0xfce)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x25, 0xc, @void}, 0x10)

16.510048097s ago: executing program 2 (id=3825):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)
r1 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000101010300000000000000000a0000000c006f6562678c44d6cc512d9c549c"], 0x50}}, 0x4048010)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000004f00)={'veth1_to_bridge\x00', &(0x7f0000004dc0)=@ethtool_eeprom={0xc, 0x5, 0x9d8d}})
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0)
bind$pptp(r5, &(0x7f0000000240)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1e)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x10000}, 0x1c)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000100)=""/157, &(0x7f0000000040)=0x9d)

16.381471359s ago: executing program 2 (id=3828):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x5}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x40080) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x5}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x40080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x3ece43, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x3ece43, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r2, r4, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40)
close(0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2503020000000000000016000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010) (async)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2503020000000000000016000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x17b8, 0xffffffff, 0x5c66705, 0xb87a, 0x1})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r8) (async)
close(r8)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r8, @ANYRES32=r0])
socket$netlink(0x10, 0x3, 0x4)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r11, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r10, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
socket$netlink(0x10, 0x3, 0x0) (async)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r13, 0x8982, &(0x7f0000000000))
socket$inet_icmp(0x2, 0x2, 0x1)

16.307978192s ago: executing program 2 (id=3829):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf256500000008000300", @ANYRES32=r2, @ANYBLOB="429cc1e7c8d1e7719d06892f6131ff8b0063cc9d69ff48e49dfa55fbfa03e6b2ed4b70c966a5e8f85e9e174be63ae9ae615d4b45b925380e75a52d8a78f5bfea9056a64210242dcf6216ce00009aef3a9a22429ba44fda4cc1f37ecc8284cc6beca809bc08515115f6471da5f1be526bc82c3152428e1e9d891fe048790adcc469af1b708002b95a7dfa308c834223666bf0b882ce928042"], 0x1c}}, 0x40000)

16.307582967s ago: executing program 2 (id=3830):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080007000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, &(0x7f0000000040))
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f4, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1140b473}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c169db5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5089231f}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x425def63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5502e8f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1be1f806}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6724c1da}]}, {0x4}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x407b5737}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55e4344f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73cf74fd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36f72ee8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58fee945}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a94d085}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cadab6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5181ece0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb225bfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fa24d0f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f1a77dc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35de2193}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd35a295}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54310f51}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x732e4e43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c27252b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7eb22563}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x598b2ec1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c723f7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc152}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x159ed04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dd5cbc1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7843}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc622}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96f1}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65f41f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8717974}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x62c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e4ed43f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5512}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d302b62}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c1e531e}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4040}, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, "102dab", 0x0, 0x2f, 0x1, @mcast2, @loopback, [], "2498a9ecba66320d"}}}}}}}, 0x0)

16.219427808s ago: executing program 0 (id=3831):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRESOCT, @ANYRES8=r1], 0x48}}, 0x0)
r2 = socket(0x1f, 0x801, 0x2)
sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, 0x15, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x8, 0x8, "dfc02b37"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x6f, 0x8, "736fc4bb64e04599891e0a672b39df3c56c29537fe5460a682b419ce7eebbcaed75b28041a5bc096cf5facdca18476a64dd952b34b1e1ada4e56647eecee26a01e5c264a4b35fbdc2fd4e5ea43ad23e309eda5f6ce4cabc7d2c90ef6ab8223465229202f0667eac7c4443d"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4840}, 0xc0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x44800)
pipe(&(0x7f00000000c0))
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

16.198559007s ago: executing program 0 (id=3832):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095", @ANYRES64=r0], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f00000000c0)=r1, 0x4) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
unshare(0x2c020400)
r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={<r6=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
clock_gettime(0x87f60f7a31614e95, 0x0) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000300)={r6, 0x7f, 0x2, '|0'}, 0xa) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0}) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}}, 0x20000000)
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000040)={&(0x7f0000000480)="3714a33916d7e394b90be92d049d5ff6cacaa6f214974478552ca06cab1ee240fc708632e9fd732ea96d605380b2da759653cc99a7a9d43ac2b2ce98b93b4497f374d7b63318f217389b651a4e456f01388a0d5b66b132f10c0efb2ac7912d7f279a9793a22c2db6f78f7921d2c7fbf841ecee802fb616430aaf227d47ea12daea15b85faa7f3702062a73390033ef3f5da45f85f3188f5908d054223f516d0729383bb429449b11d4756660118bf303d1c6f3487fd9f726028e77dcfd765b", 0xbf}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0xc8, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80000001}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xffc}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xfff}}]}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x7, 0x1b, 0xffff, 0x400, 0x2, 0x5, 0x9}}, {0x0, 0x2, [0x7ff, 0x2, 0xfff]}}, {{0x0, 0x1, {0x8, 0x5, 0xb, 0xffffffff, 0x0, 0x7, 0xa}}, {0x0, 0x2, [0x200, 0x3]}}, {{0x0, 0x1, {0x40, 0x40, 0x4, 0x101, 0x0, 0x14d60000, 0x511d}}, {0x0, 0x2, [0x40, 0x200, 0x8001, 0x3, 0x0, 0x4, 0x9, 0x1, 0x8]}}, {{0x0, 0x1, {0x3, 0x0, 0x90, 0xffff, 0x2, 0x10000, 0x2}}, {0x0, 0x2, [0x4, 0xe4ce, 0x8001, 0x8, 0x7, 0x6, 0x6, 0x35]}}, {{0x0, 0x1, {0xdb, 0x2, 0x3, 0x1, 0x1, 0x8000, 0xfffffc01}}, {0x0, 0x2, [0x6, 0x4]}}, {{0x0, 0x1, {0x5, 0x7, 0x400, 0x1, 0x0, 0x2, 0xe5}}, {0x0, 0x2, [0xccf3, 0x4, 0x3, 0x1, 0x1, 0x6, 0x6, 0x10, 0xe]}}, {{0x0, 0x1, {0xf, 0x2, 0x3, 0xb, 0x0, 0x9, 0x7}}, {0x0, 0x2, [0x1da1, 0x2, 0x82e]}}, {{0x0, 0x1, {0x3, 0x0, 0x100, 0x4, 0x2, 0x4}}, {0x0, 0x2, [0x101, 0x7, 0x1000, 0x6, 0x80, 0xad]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0xea}}]}, 0xc8}}, 0x20000000) (async)
bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r7, 0x0, {0x1}, 0x1}, 0x18) (async)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128009000100626f6e64000000001000028004001f800800070006"], 0x40}}, 0x40000c0)

16.139668602s ago: executing program 0 (id=3833):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000280)={0x1f, @fixed}, 0x8)
listen(r2, 0x7)
connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f00000005c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x80, @broadcast}}, 0x24)
connect$rxrpc(r3, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080007000000000f1400000045f0002800000000002f9078ac1e0001ac1414aaca572200d96c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0xfdef)

16.028619576s ago: executing program 1 (id=3834):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r2, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0)
r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$alg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="feafb3e17cfff6ed78ce424b93a145803fd216e8d67bafee64e607ced9c3dccf64eae76c3cedf0d0251fef911b819ae1284584584642c6f1b9aca8a2335b63acd45b5a9d6f659192c1387b5bb56a5842b75197c37e606ebb24ded92d4ad177483f1252ce11", 0x65}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0x7f}], 0x30, 0x4008000}, 0x40045)
syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ff0300ffffff000000000000000442420300404000000062cf004ab77f84"], 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r4, 0x0, 0x800020000000005)
ioctl$IMHOLD_L1(r4, 0x80044948, &(0x7f0000000140)=0x1000)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00)
r6 = socket$inet(0x2, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10)
sendmsg$inet(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x1000, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000080)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x4008040)
sendmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x400448c9, 0x0)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)

15.93976425s ago: executing program 0 (id=3835):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000076000dfb004000000000000003000000000000000800010000000000"], 0x20}}, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x2000000007)

15.938480359s ago: executing program 0 (id=3836):
r0 = socket(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, &(0x7f0000000240)={0x11, 0xfa, 0x0, 0x1, 0x10, 0x6, @local}, 0x14)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x7df6, 0x0, 0xfffffffc}, 0x10)
write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000500fe0000000000000008000f00fd000000", 0x24)
connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x310c23ff2ecc11ab, 0x3}}}, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000080))
write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef)

15.729840754s ago: executing program 0 (id=3837):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2000000015, 0x80005, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r3)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000002c0)={0x0, 0x57, &(0x7f0000000280)={&(0x7f0000000480)={0x58, r4, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x76, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x110, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcc6}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x2b2c, 0x4, 0x9, 0x8}, {0x4, 0x8, 0x9, 0x5}, {0xb5e, 0xf9, 0x8}, {0x9, 0x2, 0x9, 0x1531}, {0x8001, 0x7d, 0x8, 0x5}, {0x2e, 0x4, 0x4, 0xffffffff}, {0x4, 0x8, 0x5, 0x480000}, {0x8000, 0x1, 0x7, 0x8}, {0x8, 0x1, 0x5, 0xa0}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000100000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

15.169778079s ago: executing program 1 (id=3838):
r0 = socket(0x10, 0xa, 0x0)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000380)=0x79, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000940800034001000000080004400000000f0800014000000000180005800e000100696d6d656469617465000000040002800900010073797a300000000009"], 0xa4}}, 0x4004010)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000900)={r4, &(0x7f00000006c0), 0x0}, 0x20)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="32a691a65a3d3a939a2fef53cc61c480560ac751fad568a3ea504316da59feaa6c6c1ac4a9058c671dd342af477a70132e500a48b17386ca10ebaf951f2e52b481"], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r7, 0x0) (async)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=<r8=>0x0, &(0x7f0000000340)=0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x9, 0x9, 0xfff, 0x42000, r4, 0x401, '\x00', r8, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0xc}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000080), &(0x7f00000000c0)=r6}, 0x20) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xa}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x40000) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x411b, 0xac}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xa}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)

15.068683777s ago: executing program 1 (id=3839):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@remote, 0x4, r2})

15.068079826s ago: executing program 1 (id=3840):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0x1, 0x1906a57cff785130}, {0xffe0, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0x1, 0x1906a57cff785130}, {0xffe0, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x400000000080803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x47, 0xfffffffe, 0x5, 0x1, 0x0, 0x0, 0xf}})
r5 = socket(0x10, 0x803, 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6)
sendmsg$NFC_CMD_DEV_DOWN(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="654e2dbd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="312ee1008bd623f2b045392f000f640ffc7108c944aa124aa1271e1c254a0c2a80e0934d859fa99435ab4626cb18f663a0911795a66153094218672c1c718cce8b3f2f214abcce1622c5d12e813cbaa6ff257170e66692a1"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r9}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r11 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001400015928615fd2d13870000288"], 0x48}}, 0x0) (async)
sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001400015928615fd2d13870000288"], 0x48}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r12, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r12, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010)

1.038933709s ago: executing program 32 (id=3830):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080007000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, &(0x7f0000000040))
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f4, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1140b473}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c169db5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5089231f}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x425def63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5502e8f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1be1f806}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6724c1da}]}, {0x4}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x407b5737}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55e4344f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73cf74fd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36f72ee8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58fee945}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a94d085}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cadab6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5181ece0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb225bfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fa24d0f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f1a77dc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35de2193}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd35a295}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54310f51}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x732e4e43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c27252b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7eb22563}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x598b2ec1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c723f7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc152}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x159ed04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dd5cbc1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7843}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc622}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96f1}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65f41f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8717974}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x62c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e4ed43f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5512}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d302b62}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c1e531e}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4040}, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, "102dab", 0x0, 0x2f, 0x1, @mcast2, @loopback, [], "2498a9ecba66320d"}}}}}}}, 0x0)

18.317697ms ago: executing program 33 (id=3837):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2000000015, 0x80005, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r3)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000002c0)={0x0, 0x57, &(0x7f0000000280)={&(0x7f0000000480)={0x58, r4, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x76, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x110, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcc6}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x2b2c, 0x4, 0x9, 0x8}, {0x4, 0x8, 0x9, 0x5}, {0xb5e, 0xf9, 0x8}, {0x9, 0x2, 0x9, 0x1531}, {0x8001, 0x7d, 0x8, 0x5}, {0x2e, 0x4, 0x4, 0xffffffff}, {0x4, 0x8, 0x5, 0x480000}, {0x8000, 0x1, 0x7, 0x8}, {0x8, 0x1, 0x5, 0xa0}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000100000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

0s ago: executing program 34 (id=3840):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0x1, 0x1906a57cff785130}, {0xffe0, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0x1, 0x1906a57cff785130}, {0xffe0, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x400000000080803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x47, 0xfffffffe, 0x5, 0x1, 0x0, 0x0, 0xf}})
r5 = socket(0x10, 0x803, 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6)
sendmsg$NFC_CMD_DEV_DOWN(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="654e2dbd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="312ee1008bd623f2b045392f000f640ffc7108c944aa124aa1271e1c254a0c2a80e0934d859fa99435ab4626cb18f663a0911795a66153094218672c1c718cce8b3f2f214abcce1622c5d12e813cbaa6ff257170e66692a1"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r9}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r11 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001400015928615fd2d13870000288"], 0x48}}, 0x0) (async)
sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001400015928615fd2d13870000288"], 0x48}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r12, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r12, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010)

kernel console output (not intermixed with test programs):

d length.
[  270.726016][T15791] smc: removing ib device sy
[  270.823777][T15801] 8021q: VLANs not supported on ip6_vti0
[  271.058271][T15811] netlink: 'syz.0.2650': attribute type 1 has an invalid length.
[  271.094983][T15814] netlink: 'syz.2.2649': attribute type 9 has an invalid length.
[  271.098566][T15814] netlink: 'syz.2.2649': attribute type 6 has an invalid length.
[  271.129673][T15815] bond25: (slave bridge0): making interface the new active one
[  271.132950][T15815] bond25: (slave bridge0): Enslaving as an active interface with an up link
[  271.232357][T15811] bond25: (slave bridge14): Enslaving as an active interface with a down link
[  271.252068][T15811] macvlan2: entered promiscuous mode
[  271.257262][T15811] macvlan2: entered allmulticast mode
[  271.288327][T15811] bond25: entered promiscuous mode
[  271.289946][T15811] bridge0: entered promiscuous mode
[  271.292015][T15811] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  271.294606][T15811] bond25: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  271.300913][T15811] bond25: left promiscuous mode
[  271.304044][T15811] bridge0: left promiscuous mode
[  271.489644][T15840] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  271.623310][T15848] ip6gre2: entered promiscuous mode
[  271.624998][T15848] ip6gre2: entered allmulticast mode
[  271.684243][T15850] syzkaller0: create flow: hash 2627315291 index 1
[  271.697925][ T5841] syzkaller0: tun_net_xmit 76
[  271.708125][  T783] syzkaller0: tun_net_xmit 76
[  271.732800][T15859] A link change request failed with some changes committed already. Interface 98F may have been left with an inconsistent configuration, please check.
[  271.740317][T15849] syzkaller0: delete flow: hash 2627315291 index 1
[  272.714824][T15874] netlink: 'syz.2.2667': attribute type 58 has an invalid length.
[  272.880981][T15879] __nla_validate_parse: 15 callbacks suppressed
[  272.880993][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2669'.
[  272.891023][T15879] macvlan7: entered promiscuous mode
[  272.892716][T15879] macvlan7: entered allmulticast mode
[  272.894373][T15879] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  272.940623][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2668'.
[  272.943599][T15884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2668'.
[  272.947225][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2668'.
[  272.959782][T15884] netlink: 'syz.0.2668': attribute type 5 has an invalid length.
[  273.006066][T15876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2668'.
[  273.014545][T15893] netlink: 'syz.2.2673': attribute type 22 has an invalid length.
[  273.018787][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2673'.
[  273.023131][T15893] netlink: 'syz.2.2673': attribute type 22 has an invalid length.
[  273.037731][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2673'.
[  273.078212][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2674'.
[  273.155731][T15899] xt_l2tp: v2 tid > 0xffff: 37482740
[  273.308351][T15917] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2681'.
[  273.321314][T15917] netlink: 'syz.2.2681': attribute type 21 has an invalid length.
[  273.324231][T15917] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2681'.
[  273.420057][T15925] sctp: [Deprecated]: syz.0.2683 (pid 15925) Use of struct sctp_assoc_value in delayed_ack socket option.
[  273.420057][T15925] Use struct sctp_sack_info instead
[  273.525044][T15932] pimreg: left allmulticast mode
[  274.036254][T15955] netlink: 'syz.0.2692': attribute type 13 has an invalid length.
[  274.042336][T15955] erspan0: refused to change device tx_queue_len
[  274.044805][T15955] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  274.054120][T15957] netlink: 'syz.0.2692': attribute type 13 has an invalid length.
[  274.059325][T15957] erspan0: refused to change device tx_queue_len
[  274.069136][T15957] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  274.157037][T15963] geneve7: entered promiscuous mode
[  274.160016][   T13] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20001 - 0
[  274.162945][   T13] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20001 - 0
[  274.165917][   T13] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20001 - 0
[  274.178516][   T13] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20001 - 0
[  274.288995][T15973] xt_hashlimit: max too large, truncated to 1048576
[  274.293390][T15973] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  274.413561][   T34] audit: type=1800 audit(1769971387.061:7): pid=15976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2698" name="memory.events" dev="tmpfs" ino=4458 res=0 errno=0
[  274.421784][   T34] audit: type=1804 audit(1769971387.081:8): pid=15976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2698" name="/newroot/871/memory.events" dev="tmpfs" ino=4458 res=1 errno=0
[  274.631981][T15997] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  274.718340][T16009] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  274.724291][T16007] gretap0: left promiscuous mode
[  274.732234][T16007] : entered promiscuous mode
[  274.739526][T16007] 8021q: adding VLAN 0 to HW filter on device team0
[  274.744810][T16007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  274.838206][T16017] : renamed from bond_slave_0 (while UP)
[  275.085708][T16024] bond15: (slave vxcan1): Releasing backup interface
[  275.089419][T16024] bond15: Destroying bond
[  275.092310][T16024] bond15 (unregistering): Released all slaves
[  275.232193][T16038] sctp: [Deprecated]: syz.2.2716 (pid 16038) Use of struct sctp_assoc_value in delayed_ack socket option.
[  275.232193][T16038] Use struct sctp_sack_info instead
[  275.806212][T16057] block nbd0: Unsupported socket: should be TCP or UNIX.
[  275.906204][T16058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.251844][T16074] lo speed is unknown, defaulting to 1000
[  276.273733][T16085] validate_nla: 6 callbacks suppressed
[  276.273742][T16085] netlink: 'syz.2.2728': attribute type 1 has an invalid length.
[  276.301569][T16085] 8021q: adding VLAN 0 to HW filter on device bond27
[  276.313435][T16085] 8021q: adding VLAN 0 to HW filter on device bond27
[  276.321483][T16085] bond27: (slave geneve4): making interface the new active one
[  276.325496][T16085] bond27: (slave geneve4): Enslaving as an active interface with an up link
[  276.329647][   T12] netdevsim netdevsim2 eth0: set [1, 3] type 2 family 0 port 20004 - 0
[  276.333727][   T12] netdevsim netdevsim2 eth1: set [1, 3] type 2 family 0 port 20004 - 0
[  276.348466][   T12] netdevsim netdevsim2 eth2: set [1, 3] type 2 family 0 port 20004 - 0
[  276.358673][   T12] netdevsim netdevsim2 eth3: set [1, 3] type 2 family 0 port 20004 - 0
[  277.119373][T16094] netlink: 'syz.0.2730': attribute type 3 has an invalid length.
[  277.122456][T16094] netlink: 'syz.0.2730': attribute type 2 has an invalid length.
[  277.125415][T16094] netlink: 'syz.0.2730': attribute type 2 has an invalid length.
[  277.326142][T16106] team0: No ports can be present during mode change
[  277.401108][T16102] netlink: 'syz.2.2732': attribute type 5 has an invalid length.
[  277.461554][T16118] netlink: 'syz.1.2737': attribute type 20 has an invalid length.
[  277.472420][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  277.472434][T16118] netlink: 'syz.1.2737': attribute type 20 has an invalid length.
[  277.475268][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  277.475287][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  277.475300][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  277.508693][T16119] netlink: 'syz.2.2736': attribute type 10 has an invalid length.
[  277.815295][T16135] lo speed is unknown, defaulting to 1000
[  277.909359][T16136] lo speed is unknown, defaulting to 1000
[  278.195477][T16157] __nla_validate_parse: 24 callbacks suppressed
[  278.195491][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2743'.
[  278.266741][T16159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  279.188335][T16173] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.342368][T16173] bridge0: port 1(1x9) entered disabled state
[  279.353893][T16173] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2748'.
[  279.432106][T16180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2749'.
[  279.453821][T16180] netlink: 'syz.2.2749': attribute type 1 has an invalid length.
[  279.456651][T16180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2749'.
[  279.467777][T16180] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2749'.
[  279.470533][T16180] block nbd0: not configured, cannot reconfigure
[  279.735759][T16193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2750'.
[  279.866992][T16208] veth1_to_batadv: left promiscuous mode
[  279.878836][T16208] gretap2: left promiscuous mode
[  279.887747][T16208] geneve5: left promiscuous mode
[  279.890051][T16208] bond18: left promiscuous mode
[  279.892498][T16208] sit2: left promiscuous mode
[  279.895690][T16208] vlan5: left promiscuous mode
[  279.900196][T16208] bond24: left promiscuous mode
[  279.902556][T16208] ipvlan3: left promiscuous mode
[  279.904914][T16208] ip6gre2: left promiscuous mode
[  279.906949][T16208] geneve7: left promiscuous mode
[  280.056217][T16220] bond26: Removing last ns target with arp_interval on
[  280.074977][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2758'.
[  280.081045][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2758'.
[  280.116074][T16227] syzkaller1: entered promiscuous mode
[  280.118591][T16227] syzkaller1: entered allmulticast mode
[  280.127118][T16229] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2760'.
[  280.337716][T16243] nbd0: detected capacity change from 0 to 127
[  280.454065][T16243] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  280.460736][T16243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2765'.
[  280.466922][T16244] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  280.476284][   T57] block nbd0: Receive control failed (result -104)
[  280.501677][T16247] xt_ecn: cannot match TCP bits for non-tcp packets
[  280.510382][T16247] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.514077][T16247] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  280.517335][T16247] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  280.521047][T16247] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0
[  280.562359][T16247] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.565580][T16247] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  280.568959][T16247] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  280.572052][T16247] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0
[  280.610460][T16247] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.613577][T16247] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  280.616676][T16247] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  280.620264][T16247] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0
[  280.660790][T16247] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.663923][T16247] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  280.667026][T16247] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  280.670527][T16247] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0
[  280.733037][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  280.736600][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  280.740332][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  280.743564][   T13] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  280.753333][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  280.760229][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  280.762859][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  280.765377][   T13] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  280.776876][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  280.780675][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  280.783330][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  280.786036][   T13] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  280.799367][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  280.802055][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  280.804662][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  280.807338][   T13] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  280.873871][T16256] gtp3: entered promiscuous mode
[  280.878462][T16256] gtp3: entered allmulticast mode
[  280.935637][T16262] netlink: 'syz.0.2771': attribute type 1 has an invalid length.
[  281.032834][T16269] bond27 (unregistering): Released all slaves
[  281.383567][T16286] smc: adding net device wlan0 with user defined pnetid SYZ0
[  281.410200][T16290] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  281.542668][T16307] netlink: 'syz.1.2785': attribute type 1 has an invalid length.
[  281.590524][T16307] 8021q: adding VLAN 0 to HW filter on device bond27
[  281.668570][T16296] lo speed is unknown, defaulting to 1000
[  281.713385][T16312] bond0: (slave gre0): Error: Device type is different from other slaves
[  281.804037][T16315] netlink: 'syz.2.2788': attribute type 23 has an invalid length.
[  282.125424][T16334] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  282.268351][T16348] x_tables: duplicate underflow at hook 2
[  282.270962][T16348] x_tables: duplicate underflow at hook 2
[  282.280075][T16348] x_tables: duplicate underflow at hook 2
[  282.287807][T16348] x_tables: duplicate underflow at hook 2
[  282.289813][T16348] x_tables: duplicate underflow at hook 2
[  282.292003][T16348] x_tables: duplicate underflow at hook 2
[  282.299777][T16348] x_tables: duplicate underflow at hook 2
[  282.301799][T16348] x_tables: duplicate underflow at hook 2
[  282.304186][T16348] x_tables: duplicate underflow at hook 2
[  282.306258][T16348] x_tables: duplicate underflow at hook 2
[  282.615746][T16377] ip_vti0: entered promiscuous mode
[  282.865312][T16398] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  282.883039][T16398] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  283.203083][T16437] __nla_validate_parse: 18 callbacks suppressed
[  283.203093][T16437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2820'.
[  283.280091][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2821'.
[  283.283173][T16439] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  283.293576][T16442] gretap3: entered allmulticast mode
[  283.325246][T16454] syzkaller0: entered promiscuous mode
[  283.326992][T16454] syzkaller0: entered allmulticast mode
[  283.344550][T16453] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  283.511251][T16473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2829'.
[  283.574416][T16473] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2829'.
[  283.577207][T16473] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2829'.
[  283.580250][T16473] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2829'.
[  283.583105][T16473] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2829'.
[  283.698857][T16484] bond27: option arp_all_targets: invalid value (129)
[  283.704757][T16484] bond27 (unregistering): Released all slaves
[  283.820037][T16516] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.983799][T16543] netlink: 'syz.2.2839': attribute type 10 has an invalid length.
[  283.986730][T16543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2839'.
[  284.056719][T16547] 8021q: adding VLAN 0 to HW filter on device bond28
[  284.062047][T16547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2840'.
[  284.068259][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'.
[  284.454622][T16589] syzkaller0: entered promiscuous mode
[  284.456808][T16589] syzkaller0: entered allmulticast mode
[  284.575192][T16591] syzkaller0: entered promiscuous mode
[  284.577672][T16591] syzkaller0: entered allmulticast mode
[  288.771853][T16639] __nla_validate_parse: 7 callbacks suppressed
[  288.771868][T16639] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2859'.
[  288.781303][T16639] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2859'.
[  288.937836][T16659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2864'.
[  288.964444][T16660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2864'.
[  289.010247][T16664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.013460][T16664] syzkaller0: entered promiscuous mode
[  289.015680][T16664] syzkaller0: entered allmulticast mode
[  289.024033][T16664] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.036746][T16666] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  289.042041][T16667] syzkaller0: entered promiscuous mode
[  289.043898][T16667] syzkaller0: entered allmulticast mode
[  289.048272][T16664] tipc: Resetting bearer <eth:syzkaller0>
[  289.053667][T16663] tipc: Resetting bearer <eth:syzkaller0>
[  289.064199][T16663] tipc: Disabling bearer <eth:syzkaller0>
[  289.069898][T16666] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  289.178409][T16675] bridge0: entered allmulticast mode
[  289.251958][T16679] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2870'.
[  289.312944][T16681] can: request_module (can-proto-3) failed.
[  289.530372][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2878'.
[  289.592596][T16725] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2883'.
[  289.615475][T16724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2882'.
[  289.619868][T16724] netlink: 'syz.1.2882': attribute type 16 has an invalid length.
[  289.619924][T16729] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  289.622539][T16724] netlink: 'syz.1.2882': attribute type 17 has an invalid length.
[  289.640019][T16724] erspan0: left allmulticast mode
[  289.644528][T16724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  289.674616][T16734] netlink: 'syz.0.2886': attribute type 1 has an invalid length.
[  289.690436][T16734] 8021q: adding VLAN 0 to HW filter on device bond27
[  289.719039][T16734] bond27: (slave veth17): Enslaving as an active interface with a down link
[  289.727780][T16734] 8021q: adding VLAN 0 to HW filter on device batadv3
[  289.730187][T16734] bond27: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  290.104151][T16751] lo speed is unknown, defaulting to 1000
[  290.113960][T16758] netlink: 'syz.2.2892': attribute type 2 has an invalid length.
[  290.116307][T16758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2892'.
[  290.119496][T16758] netlink: 'syz.2.2892': attribute type 2 has an invalid length.
[  290.121913][T16758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2892'.
[  290.240699][T16770] netlink: 'syz.2.2896': attribute type 1 has an invalid length.
[  290.284694][T16773] syzkaller1: entered promiscuous mode
[  290.287716][T16773] syzkaller1: entered allmulticast mode
[  290.534529][T16781] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  290.705770][T16796] netlink: 'syz.0.2904': attribute type 1 has an invalid length.
[  290.708941][T16796] netlink: 'syz.0.2904': attribute type 2 has an invalid length.
[  290.712052][T16796] netlink: 'syz.0.2904': attribute type 1 has an invalid length.
[  290.715256][T16796] netlink: 'syz.0.2904': attribute type 3 has an invalid length.
[  290.755243][T16798] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[  290.816053][T16800] xt_check_table_hooks: 23 callbacks suppressed
[  290.816069][T16800] x_tables: duplicate underflow at hook 1
[  290.842993][T16804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.554951][T16844] gretap5: entered promiscuous mode
[  291.561673][T16844] batman_adv: batadv0: Adding interface: gretap5
[  291.564312][T16844] batman_adv: batadv0: The MTU of interface gretap5 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  291.572323][T16844] batman_adv: batadv0: Not using interface gretap5 (retrying later): interface not active
[  291.609461][T16827] lo speed is unknown, defaulting to 1000
[  291.732192][  T783] lo speed is unknown, defaulting to 1000
[  291.734203][  T783] syz2: Port: 1 Link DOWN
[  291.742444][ T5874] lo speed is unknown, defaulting to 1000
[  291.744303][ T5874] syz2: Port: 1 Link ACTIVE
[  291.862414][T16841] lo speed is unknown, defaulting to 1000
[  292.019682][T16833] lo speed is unknown, defaulting to 1000
[  292.188631][T16861] lo speed is unknown, defaulting to 1000
[  292.368557][T16866] lo speed is unknown, defaulting to 1000
[  293.006889][T16889] sctp: [Deprecated]: syz.0.2930 (pid 16889) Use of int in maxseg socket option.
[  293.006889][T16889] Use struct sctp_assoc_value instead
[  293.225081][T16899] openvswitch: netlink: Flow actions attr not present in new flow.
[  293.554403][T16919] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  293.756569][T16924] xt_policy: output policy not valid in PREROUTING and INPUT
[  293.793367][T16921] bridge5: left promiscuous mode
[  293.798633][T16921] team0 (unregistering): Port device bridge5 removed
[  294.075832][T16956] __nla_validate_parse: 20 callbacks suppressed
[  294.075842][T16956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2950'.
[  294.231814][T16966] nlmon0: Caught tx_queue_len zero misconfig
[  294.269694][T16968] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2954'.
[  294.285941][T16961] lo speed is unknown, defaulting to 1000
[  294.360074][T16970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  294.631297][T16977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2956'.
[  294.634160][T16977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2956'.
[  294.648221][T16977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2956'.
[  294.652154][T16977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2956'.
[  294.656042][T16977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2956'.
[  294.659918][T16977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2956'.
[  294.792597][T16975] lo speed is unknown, defaulting to 1000
[  294.794923][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2958'.
[  294.975253][T16989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2961'.
[  294.978921][T16989] validate_nla: 6 callbacks suppressed
[  294.978928][T16989] netlink: 'syz.1.2961': attribute type 7 has an invalid length.
[  294.984333][T16989] netlink: 'syz.1.2961': attribute type 8 has an invalid length.
[  295.301375][T17008] pim6reg99999999: entered allmulticast mode
[  295.394610][T17015] xt_l2tp: v2 doesn't support IP mode
[  295.664570][T17037] netlink: 'syz.0.2975': attribute type 1 has an invalid length.
[  295.682015][T17037] 8021q: adding VLAN 0 to HW filter on device bond29
[  295.695089][T17037] netlink: 'syz.0.2975': attribute type 13 has an invalid length.
[  295.895513][T17037] dummy0: left allmulticast mode
[  296.102575][  T783] lo speed is unknown, defaulting to 1000
[  296.106290][ T5839] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  296.106292][  T783] syz2: Port: 1 Link DOWN
[  296.109203][ T5839] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  296.116300][ T5839] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  296.120313][ T5839] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  296.127697][ T5839] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  296.130269][ T5839] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  296.132800][ T5839] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  296.146915][ T5839] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  296.616032][T17084] syzkaller0: entered promiscuous mode
[  296.618909][T17084] syzkaller0: entered allmulticast mode
[  296.891513][T17093] bond28: option miimon: invalid value (18446744073709551607)
[  296.894038][T17093] bond28: option miimon: allowed values 0 - 2147483647
[  296.897230][T17093] bond28 (unregistering): Released all slaves
[  296.934682][T17095] bond21: (slave erspan0): Releasing active interface
[  296.942006][T17095] veth0_to_bond: left allmulticast mode
[  296.943738][T17095] veth0_to_bond: left promiscuous mode
[  296.945491][T17095] bridge17: port 3(veth0_to_bond) entered disabled state
[  296.956363][T17095] bond0: (slave batadv_slave_0): Releasing backup interface
[  296.960015][T17095] batadv_slave_0: left allmulticast mode
[  296.962200][T17095] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  297.096255][T17107] netlink: 'syz.1.2995': attribute type 10 has an invalid length.
[  297.284973][T17123] .70: renamed from hsr0
[  297.291447][T17123] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  297.297561][T17123] .70: entered allmulticast mode
[  297.299496][T17123] hsr_slave_0: entered allmulticast mode
[  297.302509][T17123] 8021q: adding VLAN 0 to HW filter on device .70
[  297.305479][T17123] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  297.569339][T17163] netlink: 'syz.2.3012': attribute type 13 has an invalid length.
[  297.653917][T17163] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  297.725462][T17173] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.021578][T17193] netlink: 'syz.2.3020': attribute type 2 has an invalid length.
[  298.027821][T17193] : entered promiscuous mode
[  298.110717][T17197] ip_vti0: left promiscuous mode
[  298.212683][T17204] netlink: 'syz.2.3023': attribute type 2 has an invalid length.
[  298.213387][T17205] netlink: 'syz.2.3023': attribute type 2 has an invalid length.
[  298.218258][T17204] !9: entered promiscuous mode
[  298.220113][T17205] !9: left promiscuous mode
[  298.402592][T17219] syzkaller0: entered promiscuous mode
[  298.404909][T17219] syzkaller0: entered allmulticast mode
[  299.573280][T17235] lo: Caught tx_queue_len zero misconfig
[  299.621369][T17240] __nla_validate_parse: 88 callbacks suppressed
[  299.621379][T17240] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3033'.
[  299.713102][T17249] netlink: 'syz.1.3037': attribute type 1 has an invalid length.
[  299.716442][T17249] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3037'.
[  299.722719][T17249] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3037'.
[  299.726805][T17249] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3037'.
[  299.731051][T17249] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3037'.
[  299.739327][T17249] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3037'.
[  299.744964][T17249] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3037'.
[  299.749563][T17249] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3037'.
[  299.752914][T17249] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3037'.
[  299.761865][T17249] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3037'.
[  299.784922][T17254] openvswitch: netlink: IP tunnel dst address not specified
[  299.810706][ T6646] smc: removing ib device !yz!
[  299.895468][T17264] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  300.159337][T17268] syzkaller0: entered promiscuous mode
[  300.161446][T17268] syzkaller0: entered allmulticast mode
[  300.366251][T17283] pim6reg: left allmulticast mode
[  300.420624][T17283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.518227][T17291] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  300.581263][T17296] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20001
[  300.593297][T17296] xt_hashlimit: overflow, rate too high: 0
[  300.876662][T17298] lo speed is unknown, defaulting to 1000
[  300.971733][T17317] bond30: entered promiscuous mode
[  300.973991][T17317] 8021q: adding VLAN 0 to HW filter on device bond30
[  301.046240][T17330] validate_nla: 8 callbacks suppressed
[  301.046253][T17330] netlink: 'syz.1.3060': attribute type 1 has an invalid length.
[  301.106162][T17336] bond28: (slave vxcan4): The slave device specified does not support setting the MAC address
[  301.118059][T17336] bond28: (slave vxcan4): Error -95 calling set_mac_address
[  301.119326][T17334] netlink: 'syz.2.3061': attribute type 10 has an invalid length.
[  301.138107][T17334] netlink: 'syz.2.3061': attribute type 10 has an invalid length.
[  301.183916][T17330] macvlan5: entered promiscuous mode
[  301.185971][T17330] macvlan5: entered allmulticast mode
[  301.188462][T17330] bond28: entered promiscuous mode
[  301.190704][T17330] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  301.204091][T17330] bond28: left promiscuous mode
[  301.545869][T17370] gretap0: mtu less than device minimum
[  301.760216][T17380] lo speed is unknown, defaulting to 1000
[  310.708929][   T11] block nbd0: Possible stuck request ffff888109000000: control (read@0,1024B). Runtime 30 seconds
[  310.713300][   T11] block nbd0: Possible stuck request ffff888109000200: control (read@1024,1024B). Runtime 30 seconds
[  310.716728][   T11] block nbd0: Possible stuck request ffff888109000400: control (read@2048,1024B). Runtime 30 seconds
[  310.720590][   T11] block nbd0: Possible stuck request ffff888109000600: control (read@3072,1024B). Runtime 30 seconds
[  319.574125][T17391] netlink: 'syz.1.3075': attribute type 4 has an invalid length.
[  319.690481][T17407] __nla_validate_parse: 13 callbacks suppressed
[  319.690491][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3081'.
[  319.882753][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3085'.
[  319.912160][T17411] lo speed is unknown, defaulting to 1000
[  319.972586][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3085'.
[  320.144157][T17431] xt_connbytes: Forcing CT accounting to be enabled
[  320.211946][T17411] netlink: 'syz.1.3079': attribute type 6 has an invalid length.
[  320.594837][T17443] netlink: 'syz.0.3088': attribute type 8 has an invalid length.
[  320.738688][T17450] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3090'.
[  320.984115][T17446] lo speed is unknown, defaulting to 1000
[  321.183148][T17493] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  321.231227][T17497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3097'.
[  321.234106][T17497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3097'.
[  321.236955][T17497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3097'.
[  321.248823][T17499] netlink: 'syz.2.3097': attribute type 1 has an invalid length.
[  321.251813][T17499] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3097'.
[  321.332646][T17511] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.335704][T17511] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  321.352543][T17511] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  321.360983][T17511] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  321.365120][T17514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3101'.
[  321.410786][T17514] 8021q: adding VLAN 0 to HW filter on device bond31
[  321.427836][T17511] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.431311][T17511] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  321.434423][T17511] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  321.447821][T17511] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  321.474373][T17522] 8021q: adding VLAN 0 to HW filter on device bond31
[  321.476631][T17522] bond31: (slave sit4): The slave device specified does not support setting the MAC address
[  321.480573][T17522] bond31: (slave sit4): Error -95 calling set_mac_address
[  321.501751][T17511] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.505863][T17511] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  321.512975][T17511] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  321.516764][T17511] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  321.535532][T17524] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3100'.
[  321.614843][T17511] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.620793][T17511] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  321.624699][T17511] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  321.629946][T17511] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  321.718144][T17538] syz1: rxe_newlink: already configured on bond0
[  321.720838][T17539] syz1: rxe_newlink: already configured on bond0
[  321.724297][ T9907] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  321.727334][ T9907] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  321.731138][ T9907] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  321.734213][ T9907] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  321.753638][ T9907] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  321.757496][ T9907] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  321.760831][ T9907] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  321.765041][ T9907] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  321.779117][ T9907] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  321.782133][ T9907] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  321.785196][ T9907] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  321.792692][ T9907] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  321.814267][ T9907] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  321.818623][ T9907] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  321.821779][ T9907] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  321.824901][ T9907] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  321.832098][T17542] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.835554][T17542] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  321.846079][T17542] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  321.857757][T17542] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  321.860748][T17542] netdevsim netdevsim2 eth3 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0
[  321.906905][T17542] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.911177][T17542] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  321.914804][T17542] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  321.919128][T17542] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  321.922489][T17542] netdevsim netdevsim2 eth2 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0
[  321.984752][T17542] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.989836][T17542] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  321.994212][T17542] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  321.999095][T17542] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  322.002298][T17542] netdevsim netdevsim2 eth1 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0
[  322.092884][T17542] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.096316][T17542] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  322.100067][T17542] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  322.103569][T17542] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  322.107110][T17542] netdevsim netdevsim2 eth0 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0
[  322.201498][ T5840] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  322.206873][ T5840] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  322.214115][ T5840] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  322.217854][ T5840] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 256 - 0
[  322.221046][ T5840] netdevsim netdevsim2 eth0: set [1, 3] type 2 family 0 port 6081 - 0
[  322.240401][ T5840] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  322.243580][ T5840] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  322.246681][ T5840] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  322.251284][ T5840] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 256 - 0
[  322.254470][ T5840] netdevsim netdevsim2 eth1: set [1, 3] type 2 family 0 port 6081 - 0
[  322.272790][ T5840] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  322.276992][ T5840] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  322.280445][ T5840] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  322.283737][ T5840] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 256 - 0
[  322.286890][ T5840] netdevsim netdevsim2 eth2: set [1, 3] type 2 family 0 port 6081 - 0
[  322.303391][ T5839] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  322.306560][ T5839] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  322.311775][ T5839] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  322.315335][ T5839] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 256 - 0
[  322.319232][ T5839] netdevsim netdevsim2 eth3: set [1, 3] type 2 family 0 port 6081 - 0
[  322.924996][T17600] netlink: 'syz.1.3124': attribute type 1 has an invalid length.
[  322.959238][T17600] workqueue: Failed to create a rescuer kthread for wq "bond29": -EINTR
[  323.129159][T17616] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  323.137843][T17616] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  323.269807][T17629] syzkaller1: entered promiscuous mode
[  323.272128][T17629] syzkaller1: entered allmulticast mode
[  324.580364][T17642] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  324.584744][T17643] syzkaller0: entered promiscuous mode
[  324.586918][T17643] syzkaller0: entered allmulticast mode
[  324.715482][T17647] __nla_validate_parse: 12 callbacks suppressed
[  324.715499][T17647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3139'.
[  324.725435][T17647] sctp: [Deprecated]: syz.0.3139 (pid 17647) Use of struct sctp_assoc_value in delayed_ack socket option.
[  324.725435][T17647] Use struct sctp_sack_info instead
[  324.769420][T17649] netlink: 'syz.1.3140': attribute type 4 has an invalid length.
[  324.778938][T17649] netlink: 'syz.1.3140': attribute type 4 has an invalid length.
[  324.941235][T17657] x_tables: unsorted underflow at hook 2
[  325.095355][T17672] netlink: 'syz.0.3143': attribute type 25 has an invalid length.
[  325.098288][T17672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3143'.
[  325.105405][T17672] netlink: 'syz.0.3143': attribute type 25 has an invalid length.
[  325.105409][ T9248] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  325.108172][T17672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3143'.
[  325.115677][ T9248] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  325.119621][ T9248] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  325.123880][ T9248] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  325.194905][T17679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3146'.
[  325.933980][T17691] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3149'.
[  326.034478][T17696] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  326.118573][T17695] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  326.320338][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'.
[  326.363754][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3155'.
[  326.369117][T17705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3155'.
[  326.840468][T17740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3165'.
[  327.209160][T17764] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  327.213223][T17764] syzkaller0: entered promiscuous mode
[  327.215394][T17764] syzkaller0: entered allmulticast mode
[  327.410369][T17769] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  327.450174][T17769] syzkaller0: entered promiscuous mode
[  327.452537][T17769] syzkaller0: entered allmulticast mode
[  327.460976][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3172'.
[  327.862455][T17775] netlink: 'syz.2.3174': attribute type 10 has an invalid length.
[  327.862515][T17777] netlink: 'syz.2.3174': attribute type 10 has an invalid length.
[  328.671937][T17793] bond30: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  328.690695][T17793] bond30 (unregistering): Released all slaves
[  328.713266][T17798] vlan6: entered allmulticast mode
[  328.715509][T17798] bridge0: port 1(vlan6) entered blocking state
[  328.718470][T17798] bridge0: port 1(vlan6) entered disabled state
[  328.722450][T17798] vlan6: entered promiscuous mode
[  328.724467][T17798] bridge_slave_0: entered promiscuous mode
[  328.735029][T17796] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.749966][T17796] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  328.757681][T17796] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  328.766876][T17796] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  328.781085][T17796] netdevsim netdevsim2 eth3 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0
[  328.805390][T17800] mac80211_hwsim hwsim6 wlan0: Caught tx_queue_len zero misconfig
[  328.829547][T17796] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.833498][T17796] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  328.836993][T17796] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  328.840525][T17796] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  328.843602][T17796] netdevsim netdevsim2 eth2 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0
[  328.884844][T17796] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.889316][T17796] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  328.896820][T17796] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  328.902366][T17796] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  328.906111][T17796] netdevsim netdevsim2 eth1 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0
[  328.912799][T17804] 8021q: VLANs not supported on nlmon0
[  328.946722][T17796] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.951986][T17796] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  328.956377][T17796] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  328.960655][T17796] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  328.964598][T17796] netdevsim netdevsim2 eth0 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0
[  329.038385][ T5840] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  329.040935][ T5840] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  329.043406][ T5840] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  329.045900][ T5840] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 256 - 0
[  329.053186][ T5840] netdevsim netdevsim2 eth0: set [1, 3] type 2 family 0 port 6081 - 0
[  329.056431][ T5840] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  329.059456][ T5840] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  329.068974][ T5840] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  329.073048][ T5840] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 256 - 0
[  329.080084][ T5840] netdevsim netdevsim2 eth1: set [1, 3] type 2 family 0 port 6081 - 0
[  329.098253][ T5840] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  329.101054][ T5840] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  329.103697][ T5840] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  329.106384][ T5840] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 256 - 0
[  329.109293][ T5840] netdevsim netdevsim2 eth2: set [1, 3] type 2 family 0 port 6081 - 0
[  329.156520][ T5840] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  329.159976][ T5840] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  329.163311][ T5840] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  329.168282][ T5840] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 256 - 0
[  329.170883][ T5840] netdevsim netdevsim2 eth3: set [1, 3] type 2 family 0 port 6081 - 0
[  329.253191][T17842] A link change request failed with some changes committed already. Interface 32 may have been left with an inconsistent configuration, please check.
[  329.343590][T17857] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  329.346241][T17857] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  329.538915][T17886] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  329.541919][T17886] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  329.544232][T17886] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  329.548257][T17886] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  329.700722][T17904] syzkaller0: entered promiscuous mode
[  329.703010][T17904] syzkaller0: entered allmulticast mode
[  329.728556][T17907] netlink: 'syz.2.3207': attribute type 4 has an invalid length.
[  329.754653][T17907] syzkaller1: entered promiscuous mode
[  329.756881][T17907] syzkaller1: entered allmulticast mode
[  330.423734][T17912] __nla_validate_parse: 17 callbacks suppressed
[  330.423746][T17912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3208'.
[  331.003416][T17914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3209'.
[  331.036715][T17914] netlink: 'syz.1.3209': attribute type 16 has an invalid length.
[  331.040233][T17914] netlink: 'syz.1.3209': attribute type 17 has an invalid length.
[  331.057258][T17914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  331.077013][T17914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3209'.
[  331.118726][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3211'.
[  331.161582][T17933] IPVS: length: 4096 != 8
[  331.213926][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3215'.
[  331.305943][T17947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3218'.
[  331.379508][T17951] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.383267][T17951] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  331.386967][T17951] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  331.391353][T17951] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  331.415584][T17953] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3221'.
[  331.441917][T17951] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.446693][T17951] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  331.451101][T17951] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  331.454314][T17951] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  331.464838][T17953] tunl0: left promiscuous mode
[  331.466946][T17953] tunl0: left allmulticast mode
[  331.472652][T17953] erspan0: left allmulticast mode
[  331.486941][T17953] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  331.502805][ T5862] lo speed is unknown, defaulting to 1000
[  331.505412][ T5862] syz2: Port: 1 Link ACTIVE
[  331.515076][T17951] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.519413][T17951] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  331.523743][T17951] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  331.528170][T17951] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  331.593325][T17951] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.597003][T17951] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  331.600511][T17951] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  331.603632][T17951] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  331.657260][ T5840] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  331.660943][ T5840] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  331.664099][ T5840] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  331.666913][ T5840] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  331.682262][ T5840] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  331.685336][ T5840] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  331.689236][ T5840] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  331.692384][ T5840] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  331.703286][ T5840] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  331.705785][ T5840] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  331.708980][ T5840] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  331.711636][ T5840] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  331.725995][ T5840] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  331.728868][ T5840] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  331.731568][ T5840] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  331.734156][ T5840] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  331.773165][T17963] netlink: 'syz.0.3223': attribute type 1 has an invalid length.
[  332.551949][T17968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3225'.
[  332.592641][T17973] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.664202][T17973] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.711999][T17973] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.771042][T17973] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.819751][ T9907] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  332.839187][ T9907] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  332.841888][ T9907] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  332.844496][ T9907] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  332.950307][T17981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3228'.
[  333.031364][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3229'.
[  333.894836][T17992] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  333.902403][T17992] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  334.464181][T18038] set match dimension is over the limit!
[  334.466727][T18038] netlink: 'syz.0.3244': attribute type 11 has an invalid length.
[  334.717280][T18048] lo speed is unknown, defaulting to 1000
[  334.770890][T18055] netlink: 'syz.0.3249': attribute type 22 has an invalid length.
[  335.650325][T18103] __nla_validate_parse: 59 callbacks suppressed
[  335.650346][T18103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3261'.
[  335.699735][T18088] lo speed is unknown, defaulting to 1000
[  335.707861][T18106] tunl0: Caught tx_queue_len zero misconfig
[  335.811863][T18111] netlink: 'syz.1.3264': attribute type 29 has an invalid length.
[  335.820269][T18111] netlink: 'syz.1.3264': attribute type 29 has an invalid length.
[  335.824817][T18111] netlink: 548 bytes leftover after parsing attributes in process `syz.1.3264'.
[  335.890935][T18115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3266'.
[  335.944849][T18115] bond29: (slave bridge21): Enslaving as an active interface with an up link
[  335.968657][T18115] bond29: entered promiscuous mode
[  335.970853][T18115] bridge21: entered promiscuous mode
[  335.973139][T18115] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  335.977321][T18115] bond29: left promiscuous mode
[  335.979862][T18115] bridge21: left promiscuous mode
[  336.064014][T18119] syzkaller0: entered promiscuous mode
[  336.065850][T18119] syzkaller0: entered allmulticast mode
[  336.343629][T18124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'.
[  336.349024][T18124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3268'.
[  336.413294][T18133] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.444696][T18133] syzkaller0: entered promiscuous mode
[  336.446944][T18133] syzkaller0: entered allmulticast mode
[  336.450550][T18133] tipc: Resetting bearer <eth:syzkaller0>
[  336.457813][T18132] tipc: Resetting bearer <eth:syzkaller0>
[  337.038090][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3271'.
[  337.626453][T18132] tipc: Disabling bearer <eth:syzkaller0>
[  337.774625][T18163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3274'.
[  337.779344][T18163] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  337.782320][T18163] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  337.816478][T18165] netlink: 'syz.2.3275': attribute type 11 has an invalid length.
[  337.941919][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3277'.
[  338.191868][T18180] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3279'.
[  338.425532][T18183] lo speed is unknown, defaulting to 1000
[  338.693868][T18190] netlink: 'syz.0.3282': attribute type 1 has an invalid length.
[  338.716490][T18190] bond30: (slave vxcan1): The slave device specified does not support setting the MAC address
[  338.720768][T18190] bond30: (slave vxcan1): Error -95 calling set_mac_address
[  338.768988][T18190] dvmrp1: entered allmulticast mode
[  338.771918][T18190] dvmrp1: left allmulticast mode
[  338.839206][T18198] macvlan2: entered promiscuous mode
[  338.841097][T18198] macvlan2: entered allmulticast mode
[  338.843447][T18198] bond30: entered promiscuous mode
[  338.848149][T18198] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  338.853411][T18198] bond30: left promiscuous mode
[  338.967058][T18212] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3288'.
[  339.304212][T18229] bridge0: port 1(veth0_to_bridge) entered blocking state
[  339.310123][T18229] bridge0: port 1(veth0_to_bridge) entered disabled state
[  339.315235][T18229] veth0_to_bridge: entered allmulticast mode
[  339.332388][T18229] veth0_to_bridge: entered promiscuous mode
[  339.620148][T18244] netlink: 'syz.0.3295': attribute type 1 has an invalid length.
[  340.477646][T18254] openvswitch: netlink: IPv6 tunnel dst address is zero
[  340.790325][   T11] block nbd0: Possible stuck request ffff888109000000: control (read@0,1024B). Runtime 60 seconds
[  340.794494][   T11] block nbd0: Possible stuck request ffff888109000200: control (read@1024,1024B). Runtime 60 seconds
[  340.800239][   T11] block nbd0: Possible stuck request ffff888109000400: control (read@2048,1024B). Runtime 60 seconds
[  340.804528][   T11] block nbd0: Possible stuck request ffff888109000600: control (read@3072,1024B). Runtime 60 seconds
[  342.447270][T18234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  342.542790][T18261] __nla_validate_parse: 8 callbacks suppressed
[  342.542876][T18261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3300'.
[  342.625691][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3304'.
[  342.628838][T18273] x9: left promiscuous mode
[  342.630742][T18273] bridge0: port 1(1x9) entered disabled state
[  342.648523][T18274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3303'.
[  342.949194][T18289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3308'.
[  343.255051][T18303] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  343.499591][T18305] lo speed is unknown, defaulting to 1000
[  343.532602][T18314] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3314'.
[  343.600760][T18313] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3315'.
[  343.651047][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3316'.
[  343.942234][T18346] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3323'.
[  343.995221][T18353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3325'.
[  343.997888][T18352] openvswitch: netlink: VXLAN extension 51 out of range max 1
[  343.998386][T18353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3325'.
[  344.755999][T18370] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  344.759266][T18370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  344.786504][T18372] netlink: Conntrack attr has 3 unknown bytes
[  344.836098][T18372] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) !
[  345.027163][T18389] ip6gre3: entered promiscuous mode
[  345.029252][T18389] ip6gre3: entered allmulticast mode
[  345.638651][T18440] 8021q: adding VLAN 0 to HW filter on device bond2
[  345.682580][T18447] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  345.765609][T18453] sctp: [Deprecated]: syz.0.3352 (pid 18453) Use of struct sctp_assoc_value in delayed_ack socket option.
[  345.765609][T18453] Use struct sctp_sack_info instead
[  345.841936][T18458] netlink: 'syz.0.3353': attribute type 4 has an invalid length.
[  345.860495][   T33] lo speed is unknown, defaulting to 1000
[  345.862915][   T33] syz2: Port: 1 Link DOWN
[  345.866363][T18458] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  346.079988][T18481] netlink: 'syz.2.3358': attribute type 10 has an invalid length.
[  346.109473][T18481] debugfs: 'netdev:nicvf0' already exists in 'phy7'
[  346.246285][T18488] rdma_rxe: rxe_newlink: failed to add bond0
[  346.325848][T18491] netlink: 'syz.0.3362': attribute type 9 has an invalid length.
[  346.414052][T18502] syzkaller0: entered promiscuous mode
[  346.416402][T18502] syzkaller0: entered allmulticast mode
[  346.542882][T18507] netlink: 'syz.0.3368': attribute type 4 has an invalid length.
[  346.641453][T18517] 8021q: adding VLAN 0 to HW filter on device bond30
[  346.645311][T18515] netlink: 'syz.0.3370': attribute type 1 has an invalid length.
[  346.672458][T18523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.729264][T18519] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  346.907529][T18547] Can't find ip_set type hash
[  347.219067][T18571] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  347.321460][T18587] bond33: entered promiscuous mode
[  347.327189][T18587] 8021q: adding VLAN 0 to HW filter on device bond33
[  347.384511][T18591] lo: entered allmulticast mode
[  347.386625][T18591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  347.802521][T18630] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)%	]3DL̥
[  347.836613][T18621] netlink: 'syz.2.3402': attribute type 1 has an invalid length.
[  347.850359][T18621] bond34: entered promiscuous mode
[  347.852674][T18621] 8021q: adding VLAN 0 to HW filter on device bond34
[  347.875731][T18621] __nla_validate_parse: 29 callbacks suppressed
[  347.875740][T18621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3402'.
[  347.888423][T18621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3402'.
[  347.910062][T18621] bond34: (slave bridge0): making interface the new active one
[  347.920515][T18621] bridge0: entered promiscuous mode
[  347.927263][T18621] bond34: (slave bridge0): Enslaving as an active interface with an up link
[  348.020044][T18648] netlink: 'syz.2.3407': attribute type 1 has an invalid length.
[  348.022628][T18648] netlink: 'syz.2.3407': attribute type 1 has an invalid length.
[  348.025144][T18648] netlink: 'syz.2.3407': attribute type 1 has an invalid length.
[  348.045499][T18653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.062365][T18648] netlink: 'syz.2.3407': attribute type 1 has an invalid length.
[  348.263184][T18667] : left promiscuous mode
[  348.424097][T18667] veth1_macvtap: left allmulticast mode
[  348.588173][T18667] macsec0: left allmulticast mode
[  348.875750][T18681] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3410'.
[  348.885425][ T5840] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  348.892678][ T5840] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  348.901127][ T5840] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  348.903657][ T5840] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 256 - 0
[  348.906168][ T5840] netdevsim netdevsim2 eth0: unset [1, 3] type 2 family 0 port 6081 - 0
[  348.920604][ T5840] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  348.923122][ T5840] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  348.925627][ T5840] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  348.931898][ T5840] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 256 - 0
[  348.934460][ T5840] netdevsim netdevsim2 eth1: unset [1, 3] type 2 family 0 port 6081 - 0
[  348.939001][ T5840] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  348.941694][ T5840] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  348.944270][ T5840] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  348.946811][ T5840] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 256 - 0
[  348.949801][ T5840] netdevsim netdevsim2 eth2: unset [1, 3] type 2 family 0 port 6081 - 0
[  348.971982][ T5840] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  348.974616][ T5840] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  348.988511][ T5840] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  348.991155][ T5840] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 256 - 0
[  348.993896][ T5840] netdevsim netdevsim2 eth3: unset [1, 3] type 2 family 0 port 6081 - 0
[  349.136952][T18676] lo speed is unknown, defaulting to 1000
[  349.181634][T18715] xt_limit: Overflow, try lower: 268435456/134217728
[  349.363079][T18740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3418'.
[  349.386191][T18736] 8021q: adding VLAN 0 to HW filter on device bond35
[  349.403003][T18736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3421'.
[  349.700823][T18748] lo speed is unknown, defaulting to 1000
[  349.740747][T18766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  349.748682][T18764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  349.936328][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3427'.
[  349.985805][T18789] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3429'.
[  350.119752][T18802] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3432'.
[  350.308701][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'.
[  350.311597][T18828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3435'.
[  351.752284][T18842] validate_nla: 63 callbacks suppressed
[  351.752296][T18842] netlink: 'syz.1.3441': attribute type 2 has an invalid length.
[  352.035540][T18869] syzkaller0: entered promiscuous mode
[  352.037232][T18869] syzkaller0: entered allmulticast mode
[  352.104204][T18869] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  352.130036][T18876] bond0: Caught tx_queue_len zero misconfig
[  352.325550][T18896] m5n: entered promiscuous mode
[  352.380776][T18902] netlink: 'syz.1.3459': attribute type 20 has an invalid length.
[  352.440052][T18899] block nbd2: server does not support multiple connections per device.
[  352.443557][T18899] block nbd2: shutting down sockets
[  352.518101][T18910] netlink: 'syz.1.3459': attribute type 10 has an invalid length.
[  352.558673][T18900] block nbd3: server does not support multiple connections per device.
[  352.562281][T18900] block nbd3: shutting down sockets
[  355.591350][ T5253] udevd[5253]: worker [13039] /devices/virtual/block/nbd0 is taking a long time
[  360.141321][T18919] __nla_validate_parse: 11 callbacks suppressed
[  360.141336][T18919] netlink: 2144 bytes leftover after parsing attributes in process `syz.0.3461'.
[  360.267166][T18925] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  360.314271][T18925] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  360.327029][T18934] netlink: 'syz.2.3465': attribute type 33 has an invalid length.
[  360.330946][T18934] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3465'.
[  360.334425][T18934] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3465'.
[  360.356023][T18925] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  360.411298][T18925] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  360.432033][T18938] bond31: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  360.436309][T18938] bond31 (unregistering): Released all slaves
[  360.447128][T18940] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.503562][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  360.510170][T18940] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3467'.
[  360.529568][ T5840] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  360.542562][T18943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3469'.
[  360.549507][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  360.575804][T18943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  360.578871][T18943] IPv6: NLM_F_CREATE should be set when creating new route
[  360.582025][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  360.587218][T18943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  360.590336][T18943] IPv6: NLM_F_CREATE should be set when creating new route
[  360.608809][T18945] netlink: 'syz.2.3470': attribute type 1 has an invalid length.
[  360.644856][T18945] 8021q: adding VLAN 0 to HW filter on device bond36
[  360.689560][T18951] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3472'.
[  360.708160][T18953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3473'.
[  360.713353][T18953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3473'.
[  360.899357][T18971] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3478'.
[  360.902173][T18971] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3478'.
[  360.905122][T18971] netlink: 'syz.1.3478': attribute type 5 has an invalid length.
[  360.973354][T18972] veth26: entered allmulticast mode
[  361.039429][T18978] syzkaller0: entered promiscuous mode
[  361.041257][T18978] syzkaller0: entered allmulticast mode
[  361.101166][T18974] lo speed is unknown, defaulting to 1000
[  361.238614][T18991] ip6tnl0: Caught tx_queue_len zero misconfig
[  361.250853][T18994] netlink: 'syz.1.3484': attribute type 1 has an invalid length.
[  361.266788][T18994] 8021q: adding VLAN 0 to HW filter on device bond31
[  361.276164][T18998] netlink: 'syz.2.3485': attribute type 22 has an invalid length.
[  361.286437][T18994] can: request_module (can-proto-0) failed.
[  361.291205][T18998] netlink: 'syz.2.3485': attribute type 22 has an invalid length.
[  361.712240][T19017] lo speed is unknown, defaulting to 1000
[  361.981559][T19058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.161001][T19079] netlink: 'syz.1.3504': attribute type 1 has an invalid length.
[  362.347826][T19072] lo speed is unknown, defaulting to 1000
[  362.484550][T19088] netlink: 'syz.2.3507': attribute type 10 has an invalid length.
[  362.487277][T19088] veth0_vlan: left promiscuous mode
[  362.501445][T19088] veth0_vlan: entered promiscuous mode
[  362.503835][T19088] team0: Device veth0_vlan failed to register rx_handler
[  362.519193][T19092] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  362.705210][T19101] netlink: 'syz.0.3510': attribute type 3 has an invalid length.
[  362.889791][T19111] syzkaller0: entered promiscuous mode
[  362.892283][T19111] syzkaller0: entered allmulticast mode
[  362.901563][T19111] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  362.980830][T19116] sctp: [Deprecated]: syz.2.3515 (pid 19116) Use of int in max_burst socket option.
[  362.980830][T19116] Use struct sctp_assoc_value instead
[  363.092668][T19122] netlink: 'syz.2.3518': attribute type 4 has an invalid length.
[  363.095181][T19122] NCSI netlink: No device for ifindex 0
[  363.542239][T19175] 9: entered promiscuous mode
[  363.610066][T19173] gretap6: entered allmulticast mode
[  363.671814][T19190] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.896102][T19220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.008616][T19233] bond32: entered promiscuous mode
[  364.012204][T19233] 8021q: adding VLAN 0 to HW filter on device bond32
[  364.025062][T19233] bond32: entered allmulticast mode
[  364.034196][T19231] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  364.039047][T19231] syzkaller0: entered promiscuous mode
[  364.041005][T19231] syzkaller0: entered allmulticast mode
[  364.041165][T19236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.312963][T19253] delete_channel: no stack
[  364.553722][T19281] pim6reg1: entered promiscuous mode
[  364.556954][T19281] pim6reg1: entered allmulticast mode
[  365.302494][T19304] macvlan0: entered allmulticast mode
[  365.458180][T19302] lo speed is unknown, defaulting to 1000
[  365.620611][T19323] bond33: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  365.625085][T19323] bond33 (unregistering): Released all slaves
[  365.653066][T19297] lo speed is unknown, defaulting to 1000
[  365.673569][T19326] __nla_validate_parse: 64 callbacks suppressed
[  365.673586][T19326] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3571'.
[  365.679479][T19326] openvswitch: netlink: Flow key attr not present in new flow.
[  367.122824][T19346] IPVS: length: 132 != 8
[  367.206868][T19360] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3581'.
[  367.220618][T19360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.285615][T19362] sctp: [Deprecated]: syz.2.3582 (pid 19362) Use of int in max_burst socket option.
[  367.285615][T19362] Use struct sctp_assoc_value instead
[  367.299921][T19362] sctp: [Deprecated]: syz.2.3582 (pid 19362) Use of int in max_burst socket option.
[  367.299921][T19362] Use struct sctp_assoc_value instead
[  367.409027][T19378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3586'.
[  367.441671][T19381] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3587'.
[  367.444609][T19381] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3587'.
[  367.447330][T19381] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3587'.
[  367.457631][T19381] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3587'.
[  367.460510][T19381] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3587'.
[  367.474071][T19381] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3587'.
[  367.482803][T19381] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3587'.
[  367.782859][T19415] xt_hashlimit: size too large, truncated to 1048576
[  367.793483][T19415] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  367.825288][T19415] validate_nla: 43 callbacks suppressed
[  367.825301][T19415] netlink: 'syz.1.3597': attribute type 1 has an invalid length.
[  368.682632][T19436] xt_l2tp: wrong L2TP version: 0
[  368.819762][T19448] netlink: 'syz.1.3605': attribute type 4 has an invalid length.
[  368.827260][T19448] x_tables: duplicate underflow at hook 3
[  369.034285][T19453] lo speed is unknown, defaulting to 1000
[  369.064961][T19462] 8021q: adding VLAN 0 to HW filter on device bond37
[  369.428407][T19504] batman_adv: batadv0: Adding interface: dummy0
[  369.431113][T19504] batman_adv: batadv0: The MTU of interface dummy0 is too small (226) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  369.437206][T19504] batman_adv: batadv0: Interface activated: dummy0
[  369.443565][T19504] batadv0: mtu less than device minimum
[  369.445803][T19504] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  369.450075][T19504] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  369.453954][T19504] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  369.458390][T19504] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  369.462014][T19504] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  369.466010][T19504] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  369.470282][T19504] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  369.474970][T19504] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  369.562424][T19514] netlink: 'syz.2.3624': attribute type 2 has an invalid length.
[  369.571030][T19514] 9: entered promiscuous mode
[  369.575592][T19512] macvlan2: entered promiscuous mode
[  369.577722][T19512] macvlan2: entered allmulticast mode
[  369.579422][T19512] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  369.856824][T19533] netlink: 'syz.0.3629': attribute type 1 has an invalid length.
[  369.859682][T19533] netlink: 'syz.0.3629': attribute type 4 has an invalid length.
[  370.170098][T19556] netlink: 'syz.0.3635': attribute type 1 has an invalid length.
[  370.190286][T19556] bond32: entered promiscuous mode
[  370.192039][T19556] bond32: entered allmulticast mode
[  370.193955][T19556] 8021q: adding VLAN 0 to HW filter on device bond32
[  370.271414][T19562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.274665][T19562] syzkaller0: entered promiscuous mode
[  370.276843][T19562] syzkaller0: entered allmulticast mode
[  370.387232][T19562] tipc: Resetting bearer <eth:syzkaller0>
[  370.399957][ T9907] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.404040][ T9907] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  370.408797][ T9907] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  370.412243][ T9907] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[  370.415628][ T9907] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.423955][ T9907] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  370.428229][ T9907] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  370.431576][ T9907] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[  370.440605][ T9907] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.443924][ T9907] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  370.447955][ T9907] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  370.451401][ T9907] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[  370.454867][ T9907] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.458922][ T9907] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  370.462142][ T9907] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  370.465449][ T9907] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[  370.470804][T19562] tipc: Resetting bearer <eth:syzkaller0>
[  370.524931][T19561] tipc: Disabling bearer <eth:syzkaller0>
[  370.663738][T19577] lo speed is unknown, defaulting to 1000
[  370.798981][T19588] __nla_validate_parse: 112 callbacks suppressed
[  370.798992][T19588] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3642'.
[  370.859936][   T11] block nbd0: Possible stuck request ffff888109000000: control (read@0,1024B). Runtime 90 seconds
[  370.863453][   T11] block nbd0: Possible stuck request ffff888109000200: control (read@1024,1024B). Runtime 90 seconds
[  370.866770][   T11] block nbd0: Possible stuck request ffff888109000400: control (read@2048,1024B). Runtime 90 seconds
[  370.870718][   T11] block nbd0: Possible stuck request ffff888109000600: control (read@3072,1024B). Runtime 90 seconds
[  371.022710][T19598] lo speed is unknown, defaulting to 1000
[  371.065417][T19608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3648'.
[  371.281826][T19623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3649'.
[  371.334276][T19627] netlink: 'syz.0.3653': attribute type 12 has an invalid length.
[  371.336757][T19627] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3653'.
[  371.365262][T19630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3654'.
[  374.535654][T19638] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3657'.
[  374.539216][T19638] net_ratelimit: 12 callbacks suppressed
[  374.539226][T19638] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.626251][T19641] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3658'.
[  374.634021][T19643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3659'.
[  374.682456][T19645] netlink: 'syz.0.3660': attribute type 13 has an invalid length.
[  374.685004][T19645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3660'.
[  374.688147][T19645] bond0: option fail_over_mac: invalid value (8)
[  374.716746][T19647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3661'.
[  374.721377][T19647] netlink: 'syz.0.3661': attribute type 20 has an invalid length.
[  374.723812][T19647] netlink: 'syz.0.3661': attribute type 21 has an invalid length.
[  374.732582][T19647] netlink: 'syz.0.3661': attribute type 11 has an invalid length.
[  374.803970][T19651] block nbd2: Unsupported socket: should be TCP or UNIX.
[  374.834843][T19654] netlink: 'syz.0.3663': attribute type 1 has an invalid length.
[  374.838217][T19654] workqueue: Failed to create a rescuer kthread for wq "bond33": -EINTR
[  374.910477][T19667] geneve5: entered promiscuous mode
[  374.915617][ T9907] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.928447][ T9907] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.938742][ T9907] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.943070][ T9907] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.961668][T19664] netlink: 'syz.1.3665': attribute type 1 has an invalid length.
[  374.961818][T19670] delete_channel: no stack
[  375.048305][T19681] x_tables: duplicate underflow at hook 3
[  375.203475][T19694] netlink: 'syz.0.3672': attribute type 10 has an invalid length.
[  375.212261][T19687] lo speed is unknown, defaulting to 1000
[  375.441001][T19718] syzkaller0: entered allmulticast mode
[  375.496691][T19723] netlink: 'syz.1.3682': attribute type 1 has an invalid length.
[  375.523350][T19723] 8021q: adding VLAN 0 to HW filter on device bond33
[  375.835965][T19764] __nla_validate_parse: 47 callbacks suppressed
[  375.835975][T19764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3691'.
[  375.882586][T19757] lo speed is unknown, defaulting to 1000
[  376.738307][T19775] IPVS: length: 132 != 8
[  376.755943][T19775] IPVS: length: 132 != 8
[  376.786378][T19782] netlink: 'syz.2.3698': attribute type 1 has an invalid length.
[  376.789151][T19782] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3698'.
[  376.791927][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3698'.
[  376.809767][T19786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3697'.
[  376.861657][T19784] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  376.878666][T19784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3699'.
[  377.042832][T19799] bridge25: entered promiscuous mode
[  377.045118][T19799] bridge25: entered allmulticast mode
[  377.086135][T19801] netlink: 'syz.1.3703': attribute type 4 has an invalid length.
[  377.120676][T19803] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3704'.
[  377.223118][T19804] batman_adv: batadv0: Adding interface: geneve8
[  377.225371][T19804] batman_adv: batadv0: The MTU of interface geneve8 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  377.238228][T19804] batman_adv: batadv0: Interface activated: geneve8
[  377.244319][ T9907] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  377.247777][ T9907] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.251156][ T9907] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.254166][ T9907] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.037166][T19816] dvmrp0: left allmulticast mode
[  378.039956][T19816] dvmrp6: left allmulticast mode
[  378.228347][T19829] bond38: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  378.233260][T19829] bond38 (unregistering): Released all slaves
[  381.143139][T19823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  381.205350][T19847] netlink: 'syz.1.3714': attribute type 7 has an invalid length.
[  381.215361][T19847] netlink: 'syz.1.3714': attribute type 7 has an invalid length.
[  381.265336][T19855] netlink: 'syz.2.3718': attribute type 4 has an invalid length.
[  381.268828][T19855] netlink: 'syz.2.3718': attribute type 1 has an invalid length.
[  381.271426][T19855] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3718'.
[  381.275590][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3718'.
[  381.368526][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3720'.
[  381.403265][T19866] batadv0: entered promiscuous mode
[  381.405430][T19866] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  381.441735][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'.
[  381.445105][T19873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3723'.
[  381.451568][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'.
[  381.454963][T19873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3723'.
[  381.502564][T19877] netlink: 'syz.2.3725': attribute type 282 has an invalid length.
[  381.538836][T19879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3726'.
[  381.690226][T19892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3728'.
[  381.721133][T19893] Timeout policy `syz1' can only be used by L3 protocol number 41216
[  382.523744][T19920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3738'.
[  382.591747][T19923] netlink: 'syz.2.3739': attribute type 4 has an invalid length.
[  382.685770][T19934] xt_hashlimit: size too large, truncated to 1048576
[  382.925668][T19946] netlink: 'syz.2.3745': attribute type 4 has an invalid length.
[  382.961717][T19946] veth0: Caught tx_queue_len zero misconfig
[  382.974102][T19950] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000
[  383.001270][T19952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.306445][T19961] veth16: entered allmulticast mode
[  383.834557][T19965] sctp: [Deprecated]: syz.1.3750 (pid 19965) Use of int in max_burst socket option deprecated.
[  383.834557][T19965] Use struct sctp_assoc_value instead
[  384.179097][T19988] lo speed is unknown, defaulting to 1000
[  384.471029][T19998] sctp: [Deprecated]: syz.2.3759 (pid 19998) Use of int in max_burst socket option.
[  384.471029][T19998] Use struct sctp_assoc_value instead
[  384.668997][T20005] openvswitch: netlink: Flow key attr not present in new flow.
[  384.774347][T20011] bond7: option mode: unable to set because the bond device has slaves
[  384.806846][T20015] netlink: 'syz.2.3766': attribute type 5 has an invalid length.
[  384.918175][T20028] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20002
[  385.070913][T20037] openvswitch: netlink: Geneve option length err (len 268, max 255).
[  385.975421][T20127] netlink: 'syz.0.3791': attribute type 1 has an invalid length.
[  386.026718][T20135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.266850][T20156] erspan0: entered promiscuous mode
[  386.354644][T20169] __nla_validate_parse: 19 callbacks suppressed
[  386.354659][T20169] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3799'.
[  386.461059][T20191] lo: left allmulticast mode
[  386.513826][T20212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3800'.
[  386.623634][T20191] batman_adv: batadv0: Interface deactivated: dummy0
[  386.639059][T20191] batadv_slave_0: left allmulticast mode
[  386.646745][T20191] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  386.649814][T20191] bond1: left allmulticast mode
[  386.653909][T20191] vti0: left promiscuous mode
[  386.656153][T20191] bond3: left promiscuous mode
[  386.658049][T20191] erspan1: left promiscuous mode
[  386.659792][T20191] bond3: left allmulticast mode
[  386.661519][T20191] erspan1: left allmulticast mode
[  386.663450][T20191] bond4: left promiscuous mode
[  386.665060][T20191] bond4: left allmulticast mode
[  386.666908][T20191] ip6gre1: left promiscuous mode
[  386.668995][T20191] ip6gre1: left allmulticast mode
[  386.671415][T20191] ip6gre2: left promiscuous mode
[  386.673799][T20191] ip6gre2: left allmulticast mode
[  386.675830][T20191] bond6: left promiscuous mode
[  386.678466][T20191] bond6: left allmulticast mode
[  386.680161][T20191] macvlan0: left promiscuous mode
[  386.681828][T20191] macvlan0: left allmulticast mode
[  386.683590][T20191] vlan2: left promiscuous mode
[  386.685235][T20191] geneve1: left promiscuous mode
[  386.686938][T20191] vlan2: left allmulticast mode
[  386.689099][T20191] geneve1: left allmulticast mode
[  386.691074][T20191] bond7: left promiscuous mode
[  386.692655][T20191] bond7: left allmulticast mode
[  386.694397][T20191] ipvlan3: left promiscuous mode
[  386.696168][T20191] macsec1: left allmulticast mode
[  386.698328][T20191] ipip2: left promiscuous mode
[  386.699969][T20191] ipip2: left allmulticast mode
[  386.701722][T20191] vlan1: left promiscuous mode
[  386.703323][T20191] bond10: left promiscuous mode
[  386.704936][T20191] bond11: left promiscuous mode
[  386.706880][T20191] veth5: left promiscuous mode
[  386.709509][T20191] geneve3: left promiscuous mode
[  386.711301][T20191] geneve4: left promiscuous mode
[  386.712975][T20191] geneve4: left allmulticast mode
[  386.715053][T20191] bond14: left promiscuous mode
[  386.716902][T20191] wireguard0: left promiscuous mode
[  386.719689][T20191] bond16: left promiscuous mode
[  386.721410][T20191] bridge9: left promiscuous mode
[  386.723160][T20191] bond16: left allmulticast mode
[  386.724790][T20191] bridge9: left allmulticast mode
[  386.726821][T20191] bond17: left promiscuous mode
[  386.729078][T20191] bond17: left allmulticast mode
[  386.731033][T20191] bond22: left promiscuous mode
[  386.733632][T20191] gtp3: left promiscuous mode
[  386.735245][T20191] gtp3: left allmulticast mode
[  386.737256][T20191] gretap5: left promiscuous mode
[  386.802573][T20191] macvlan2: left promiscuous mode
[  386.804202][T20191] macvlan2: left allmulticast mode
[  386.809554][T20191] bond32: left promiscuous mode
[  386.812838][T20191] bond32: left allmulticast mode
[  386.819484][T20191] geneve5: left promiscuous mode
[  386.831909][ T9907] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.834697][ T9907] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.838249][ T9907] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.840943][ T9907] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.843649][ T9907] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.846601][ T9907] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.849621][ T9907] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.852394][ T9907] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.949872][T20216] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3803'.
[  386.953051][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  386.955175][T20216] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3803'.
[  386.960041][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  386.962263][T20216] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3803'.
[  386.965489][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  386.967764][T20216] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3803'.
[  386.970840][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  386.972961][T20216] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3803'.
[  386.975971][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  386.978858][T20216] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3803'.
[  386.982616][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  386.984832][T20216] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3803'.
[  386.988051][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  386.990167][T20216] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3803'.
[  386.993158][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  386.995222][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  386.997298][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  386.999799][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  387.002038][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  387.004125][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  387.006303][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  387.008629][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  387.011277][T20216] ksmbd: Unknown IPC event: 1, ignore.
[  387.056625][T20223] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  387.059250][T20223] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  387.304870][T20234] bridge77: entered allmulticast mode
[  387.376022][T20243] bond38: entered promiscuous mode
[  387.378830][T20243] 8021q: adding VLAN 0 to HW filter on device bond38
[  387.455456][T20243] bond38 (unregistering): Released all slaves
[  387.892091][T20259] lo speed is unknown, defaulting to 1000
[  388.183642][T20273] bond33: option lp_interval: invalid value (0)
[  388.185565][T20273] bond33: option lp_interval: allowed values 1 - 2147483647
[  388.188941][T20273] bond33 (unregistering): Released all slaves
[  388.199778][T20276] openvswitch: netlink: Flow actions attr not present in new flow.
[  388.326478][T20289] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  388.372564][T20287] syzkaller1: entered promiscuous mode
[  388.374842][T20287] syzkaller1: entered allmulticast mode
[  388.642334][T20304] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  388.644697][T20304] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  388.703851][T20302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  388.713041][T20315] netlink: 'syz.2.3830': attribute type 3 has an invalid length.
[  388.860589][T20326] syzkaller1: entered promiscuous mode
[  388.867839][T20326] syzkaller1: entered allmulticast mode
[  389.073400][T20333] batman_adv: batadv0: Interface deactivated: geneve8
[  389.084766][ T9907] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.090899][ T9907] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.094752][ T9907] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.103336][ T9907] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.787887][T20329] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  389.953956][T20353] bridge0: port 2(wlan0) entered blocking state
[  389.956310][T20353] bridge0: port 2(wlan0) entered disabled state
[  389.959814][T20353] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  389.963217][T20353] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  400.938125][   T11] block nbd0: Possible stuck request ffff888109000000: control (read@0,1024B). Runtime 120 seconds
[  400.942526][   T11] block nbd0: Possible stuck request ffff888109000200: control (read@1024,1024B). Runtime 120 seconds
[  400.946879][   T11] block nbd0: Possible stuck request ffff888109000400: control (read@2048,1024B). Runtime 120 seconds
[  400.951574][   T11] block nbd0: Possible stuck request ffff888109000600: control (read@3072,1024B). Runtime 120 seconds
[  404.045940][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  404.049836][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  404.052963][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  404.057051][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  404.061339][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  404.174658][T20366] lo speed is unknown, defaulting to 1000
[  404.239730][T20366] chnl_net:caif_netlink_parms(): no params data found
[  404.283157][T20366] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.285443][T20366] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.287962][T20366] bridge_slave_0: entered allmulticast mode
[  404.290690][T20366] bridge_slave_0: entered promiscuous mode
[  404.294056][T20366] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.296210][T20366] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.298788][T20366] bridge_slave_1: entered allmulticast mode
[  404.301500][T20366] bridge_slave_1: entered promiscuous mode
[  404.318901][T20366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  404.323489][T20366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  404.339292][T20366] team0: Port device team_slave_0 added
[  404.342469][T20366] team0: Port device team_slave_1 added
[  404.357864][T20366] batman_adv: batadv0: Adding interface: batadv_slave_0
[  404.359963][T20366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  404.367913][T20366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  404.373885][T20366] batman_adv: batadv0: Adding interface: batadv_slave_1
[  404.376307][T20366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  404.384237][T20366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  404.416320][T20366] hsr_slave_0: entered promiscuous mode
[  404.419868][T20366] hsr_slave_1: entered promiscuous mode
[  404.421952][T20366] debugfs: 'hsr0' already exists in 'hsr'
[  404.423686][T20366] Cannot create hsr debugfs directory
[  405.102172][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  405.108228][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  405.110656][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  405.114009][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  405.117308][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  405.121429][ T5195] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  405.125589][ T5195] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  405.128837][ T5195] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  405.131890][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  405.135375][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  405.267639][T20376] lo speed is unknown, defaulting to 1000
[  405.378745][T20376] chnl_net:caif_netlink_parms(): no params data found
[  405.385755][T20377] lo speed is unknown, defaulting to 1000
[  405.472033][T20376] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.474643][T20376] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.477060][T20376] bridge_slave_0: entered allmulticast mode
[  405.480139][T20376] bridge_slave_0: entered promiscuous mode
[  405.485527][T20376] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.488524][T20376] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.490793][T20376] bridge_slave_1: entered allmulticast mode
[  405.493591][T20376] bridge_slave_1: entered promiscuous mode
[  405.511948][T20376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.518392][T20376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.543964][T20376] team0: Port device team_slave_0 added
[  405.550531][T20376] team0: Port device team_slave_1 added
[  405.580231][T20376] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.582670][T20376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.590991][T20376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.596444][T20376] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.599490][T20376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.609199][T20376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.624960][T20377] chnl_net:caif_netlink_parms(): no params data found
[  405.681194][T20376] hsr_slave_0: entered promiscuous mode
[  405.683999][T20376] hsr_slave_1: entered promiscuous mode
[  405.686179][T20376] debugfs: 'hsr0' already exists in 'hsr'
[  405.688468][T20376] Cannot create hsr debugfs directory
[  405.738474][T20377] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.741190][T20377] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.743551][T20377] bridge_slave_0: entered allmulticast mode
[  405.746235][T20377] bridge_slave_0: entered promiscuous mode
[  405.754623][T20377] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.757584][T20377] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.759921][T20377] bridge_slave_1: entered allmulticast mode
[  405.762648][T20377] bridge_slave_1: entered promiscuous mode
[  405.799432][T20377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.810257][T20377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.845883][T20377] team0: Port device team_slave_0 added
[  405.853085][T20377] team0: Port device team_slave_1 added
[  405.884731][T20377] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.887318][T20377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.896804][T20377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.903762][T20377] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.905869][T20377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.914147][T20377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.965080][T20377] hsr_slave_0: entered promiscuous mode
[  405.968352][T20377] hsr_slave_1: entered promiscuous mode
[  405.970949][T20377] debugfs: 'hsr0' already exists in 'hsr'
[  405.972885][T20377] Cannot create hsr debugfs directory
[  406.137749][ T5813] Bluetooth: hci3: command tx timeout
[  407.177659][ T5813] Bluetooth: hci5: command tx timeout
[  407.180221][ T5813] Bluetooth: hci4: command tx timeout
[  408.217668][ T5818] Bluetooth: hci3: command tx timeout
[  409.257961][ T5818] Bluetooth: hci4: command tx timeout
[  409.259794][ T5818] Bluetooth: hci5: command tx timeout
[  410.297645][ T5813] Bluetooth: hci3: command tx timeout
[  411.337625][ T5813] Bluetooth: hci5: command tx timeout
[  411.341368][ T5818] Bluetooth: hci4: command tx timeout
[  412.377623][ T5813] Bluetooth: hci3: command tx timeout
[  413.417661][ T5813] Bluetooth: hci5: command tx timeout
[  413.417722][ T5818] Bluetooth: hci4: command tx timeout
[  431.017846][   T11] block nbd0: Possible stuck request ffff888109000000: control (read@0,1024B). Runtime 150 seconds
[  431.022036][   T11] block nbd0: Possible stuck request ffff888109000200: control (read@1024,1024B). Runtime 150 seconds
[  431.026113][   T11] block nbd0: Possible stuck request ffff888109000400: control (read@2048,1024B). Runtime 150 seconds
[  431.030355][   T11] block nbd0: Possible stuck request ffff888109000600: control (read@3072,1024B). Runtime 150 seconds
[  461.097720][   T11] block nbd0: Possible stuck request ffff888109000000: control (read@0,1024B). Runtime 180 seconds
[  461.101305][   T11] block nbd0: Possible stuck request ffff888109000200: control (read@1024,1024B). Runtime 180 seconds
[  461.104945][   T11] block nbd0: Possible stuck request ffff888109000400: control (read@2048,1024B). Runtime 180 seconds
[  461.108554][   T11] block nbd0: Possible stuck request ffff888109000600: control (read@3072,1024B). Runtime 180 seconds
[  463.147628][ T5253] udevd[5253]: worker [13039] /devices/virtual/block/nbd0 timeout; kill it
[  463.151559][ T5253] udevd[5253]: seq 24982 '/devices/virtual/block/nbd0' killed
[  464.739299][ T5813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  464.743068][ T5813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  464.747168][ T5813] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  464.750787][ T5813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  464.753923][ T5813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  464.881529][T20396] lo speed is unknown, defaulting to 1000
[  464.963050][T20396] chnl_net:caif_netlink_parms(): no params data found
[  465.020585][T20396] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.023317][T20396] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.026097][T20396] bridge_slave_0: entered allmulticast mode
[  465.029667][T20396] bridge_slave_0: entered promiscuous mode
[  465.033740][T20396] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.036413][T20396] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.039208][T20396] bridge_slave_1: entered allmulticast mode
[  465.042200][T20396] bridge_slave_1: entered promiscuous mode
[  465.060170][T20396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.064898][T20396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.082468][T20396] team0: Port device team_slave_0 added
[  465.085651][T20396] team0: Port device team_slave_1 added
[  465.102279][T20396] batman_adv: batadv0: Adding interface: batadv_slave_0
[  465.104931][T20396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  465.114376][T20396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  465.119247][T20396] batman_adv: batadv0: Adding interface: batadv_slave_1
[  465.121507][T20396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  465.131282][T20396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.162220][T20396] hsr_slave_0: entered promiscuous mode
[  465.164909][T20396] hsr_slave_1: entered promiscuous mode
[  465.167153][T20396] debugfs: 'hsr0' already exists in 'hsr'
[  465.169622][T20396] Cannot create hsr debugfs directory
[  465.778176][ T5813] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  465.782561][ T5813] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  465.785849][ T5813] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  465.790471][ T5813] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  465.793339][ T5813] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  465.805696][ T5818] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  465.809541][ T5817] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  465.812255][ T5817] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  465.817019][ T5817] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  465.821929][ T5817] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  465.910947][T20406] lo speed is unknown, defaulting to 1000
[  466.005755][T20408] lo speed is unknown, defaulting to 1000
[  466.005928][T20406] chnl_net:caif_netlink_parms(): no params data found
[  466.086305][T20406] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.089231][T20406] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.091703][T20406] bridge_slave_0: entered allmulticast mode
[  466.094587][T20406] bridge_slave_0: entered promiscuous mode
[  466.101559][T20406] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.104143][T20406] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.106662][T20406] bridge_slave_1: entered allmulticast mode
[  466.109756][T20406] bridge_slave_1: entered promiscuous mode
[  466.129093][T20406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  466.133787][T20406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  466.160184][T20406] team0: Port device team_slave_0 added
[  466.168907][T20406] team0: Port device team_slave_1 added
[  466.195376][T20406] batman_adv: batadv0: Adding interface: batadv_slave_0
[  466.197933][T20406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  466.207107][T20406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  466.215335][T20406] batman_adv: batadv0: Adding interface: batadv_slave_1
[  466.218298][T20406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  466.227980][T20406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  466.241969][T20408] chnl_net:caif_netlink_parms(): no params data found
[  466.282527][T20406] hsr_slave_0: entered promiscuous mode
[  466.285449][T20406] hsr_slave_1: entered promiscuous mode
[  466.288129][T20406] debugfs: 'hsr0' already exists in 'hsr'
[  466.290335][T20406] Cannot create hsr debugfs directory
[  466.344607][T20408] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.347943][T20408] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.350825][T20408] bridge_slave_0: entered allmulticast mode
[  466.354183][T20408] bridge_slave_0: entered promiscuous mode
[  466.363802][T20408] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.366526][T20408] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.369684][T20408] bridge_slave_1: entered allmulticast mode
[  466.373175][T20408] bridge_slave_1: entered promiscuous mode
[  466.412532][T20408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  466.422876][T20408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  466.462228][T20408] team0: Port device team_slave_0 added
[  466.470568][T20408] team0: Port device team_slave_1 added
[  466.508344][T20408] batman_adv: batadv0: Adding interface: batadv_slave_0
[  466.511199][T20408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  466.521393][T20408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  466.527343][T20408] batman_adv: batadv0: Adding interface: batadv_slave_1
[  466.530297][T20408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  466.538340][T20408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  466.574288][T20408] hsr_slave_0: entered promiscuous mode
[  466.577573][T20408] hsr_slave_1: entered promiscuous mode
[  466.580508][T20408] debugfs: 'hsr0' already exists in 'hsr'
[  466.582744][T20408] Cannot create hsr debugfs directory
[  466.787506][ T5817] Bluetooth: hci6: command tx timeout
[  467.817673][ T5817] Bluetooth: hci7: command tx timeout
[  467.907679][ T5817] Bluetooth: hci8: command tx timeout
[  468.857625][ T5817] Bluetooth: hci6: command tx timeout
[  469.907610][ T5817] Bluetooth: hci7: command tx timeout
[  469.977687][ T5817] Bluetooth: hci8: command tx timeout
[  470.937629][ T5817] Bluetooth: hci6: command tx timeout
[  471.977602][ T5817] Bluetooth: hci7: command tx timeout
[  472.057673][ T5817] Bluetooth: hci8: command tx timeout
[  473.017586][ T5817] Bluetooth: hci6: command tx timeout
[  474.057553][ T5817] Bluetooth: hci7: command tx timeout
[  474.137575][ T5817] Bluetooth: hci8: command tx timeout
[  491.180917][   T11] block nbd0: Possible stuck request ffff888109000000: control (read@0,1024B). Runtime 210 seconds
[  491.184891][   T11] block nbd0: Possible stuck request ffff888109000200: control (read@1024,1024B). Runtime 210 seconds
[  491.189110][   T11] block nbd0: Possible stuck request ffff888109000400: control (read@2048,1024B). Runtime 210 seconds
[  491.193107][   T11] block nbd0: Possible stuck request ffff888109000600: control (read@3072,1024B). Runtime 210 seconds
[  521.259502][   T25] block nbd0: Possible stuck request ffff888109000000: control (read@0,1024B). Runtime 240 seconds
[  521.262941][   T25] block nbd0: Possible stuck request ffff888109000200: control (read@1024,1024B). Runtime 240 seconds
[  521.266304][   T25] block nbd0: Possible stuck request ffff888109000400: control (read@2048,1024B). Runtime 240 seconds
[  521.270952][   T25] block nbd0: Possible stuck request ffff888109000600: control (read@3072,1024B). Runtime 240 seconds
[  525.760580][ T5813] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  525.763832][ T5813] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  525.766698][ T5813] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  525.769971][ T5813] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  525.772625][ T5813] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  525.870053][T20426] lo speed is unknown, defaulting to 1000
[  525.958784][T20426] chnl_net:caif_netlink_parms(): no params data found
[  526.000236][T20426] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.002440][T20426] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.004998][T20426] bridge_slave_0: entered allmulticast mode
[  526.008099][T20426] bridge_slave_0: entered promiscuous mode
[  526.011787][T20426] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.013999][T20426] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.016295][T20426] bridge_slave_1: entered allmulticast mode
[  526.019169][T20426] bridge_slave_1: entered promiscuous mode
[  526.035620][T20426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.041809][T20426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.057250][T20426] team0: Port device team_slave_0 added
[  526.062376][T20426] team0: Port device team_slave_1 added
[  526.080165][T20426] batman_adv: batadv0: Adding interface: batadv_slave_0
[  526.082985][T20426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.092216][T20426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  526.097618][T20426] batman_adv: batadv0: Adding interface: batadv_slave_1
[  526.100080][T20426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.108338][T20426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.131667][T20426] hsr_slave_0: entered promiscuous mode
[  526.134023][T20426] hsr_slave_1: entered promiscuous mode
[  526.136097][T20426] debugfs: 'hsr0' already exists in 'hsr'
[  526.139757][T20426] Cannot create hsr debugfs directory
[  526.800255][ T5817] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  526.804988][ T5817] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  526.809839][ T5817] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  526.810098][ T5195] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  526.817649][ T5817] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  526.818434][ T5195] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  526.822701][ T5817] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  526.825144][ T5817] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  526.834071][ T5817] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  526.838243][ T5817] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  526.989884][T20436] lo speed is unknown, defaulting to 1000
[  527.118100][T20438] lo speed is unknown, defaulting to 1000
[  527.149208][T20436] chnl_net:caif_netlink_parms(): no params data found
[  527.215319][T20436] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.218194][T20436] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.220562][T20436] bridge_slave_0: entered allmulticast mode
[  527.223185][T20436] bridge_slave_0: entered promiscuous mode
[  527.231920][T20436] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.234445][T20436] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.237045][T20436] bridge_slave_1: entered allmulticast mode
[  527.240091][T20436] bridge_slave_1: entered promiscuous mode
[  527.278037][T20436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.288349][T20436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  527.310860][T20436] team0: Port device team_slave_0 added
[  527.312828][T20438] chnl_net:caif_netlink_parms(): no params data found
[  527.319874][T20436] team0: Port device team_slave_1 added
[  527.362333][T20436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.365171][T20436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.376201][T20436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.385513][T20436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.388416][T20436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.399126][T20436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.433103][T20438] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.435498][T20438] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.437855][T20438] bridge_slave_0: entered allmulticast mode
[  527.440480][T20438] bridge_slave_0: entered promiscuous mode
[  527.444152][T20438] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.446450][T20438] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.449310][T20438] bridge_slave_1: entered allmulticast mode
[  527.452102][T20438] bridge_slave_1: entered promiscuous mode
[  527.488140][T20438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.496297][T20436] hsr_slave_0: entered promiscuous mode
[  527.499747][T20436] hsr_slave_1: entered promiscuous mode
[  527.502287][T20436] debugfs: 'hsr0' already exists in 'hsr'
[  527.504419][T20436] Cannot create hsr debugfs directory
[  527.508261][T20438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  527.530682][T20438] team0: Port device team_slave_0 added
[  527.538482][T20438] team0: Port device team_slave_1 added
[  527.566340][T20438] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.568828][T20438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.576530][T20438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.589157][T20438] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.591321][T20438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.599555][T20438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.668474][T20438] hsr_slave_0: entered promiscuous mode
[  527.671040][T20438] hsr_slave_1: entered promiscuous mode
[  527.673179][T20438] debugfs: 'hsr0' already exists in 'hsr'
[  527.674995][T20438] Cannot create hsr debugfs directory
[  527.817684][T20380] Bluetooth: hci9: command tx timeout
[  528.857784][T20380] Bluetooth: hci11: command tx timeout
[  528.860380][T20380] Bluetooth: hci10: command tx timeout
[  529.101895][ T5195] Bluetooth: hci3: command 0x0406 tx timeout
[  529.104674][ T5195] Bluetooth: hci5: command 0x0406 tx timeout
[  529.106946][T20380] Bluetooth: hci4: command 0x0406 tx timeout
[  529.907721][ T5817] Bluetooth: hci9: command tx timeout
[  530.937804][ T5817] Bluetooth: hci10: command tx timeout
[  530.937926][ T5818] Bluetooth: hci11: command tx timeout
[  531.977809][ T5818] Bluetooth: hci9: command tx timeout
[  533.017893][ T5818] Bluetooth: hci11: command tx timeout
[  533.027835][ T5818] Bluetooth: hci10: command tx timeout
[  534.057862][ T5818] Bluetooth: hci9: command tx timeout
[  535.097749][ T5817] Bluetooth: hci11: command tx timeout
[  535.099529][ T5818] Bluetooth: hci10: command tx timeout
[  542.378112][   T35] INFO: task syz.2.3830:20315 blocked for more than 143 seconds.
[  542.381202][   T35]       Not tainted syzkaller #0
[  542.383386][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  542.386815][   T35] task:syz.2.3830      state:D stack:25976 pid:20315 tgid:20314 ppid:5810   task_flags:0x480140 flags:0x00080002
[  542.391934][   T35] Call Trace:
[  542.393270][   T35]  <TASK>
[  542.394341][   T35]  __schedule+0x14ef/0x4fb0
[  542.396025][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  542.398408][   T35]  ? __pfx___schedule+0x10/0x10
[  542.400342][   T35]  ? schedule+0x90/0x360
[  542.402077][   T35]  schedule+0x164/0x360
[  542.403661][   T35]  blk_mq_freeze_queue_wait+0x101/0x180
[  542.405810][   T35]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  542.408926][   T35]  ? queue_limits_commit_update_frozen+0x55/0xd0
[  542.411478][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[  542.413998][   T35]  queue_limits_commit_update_frozen+0x55/0xd0
[  542.416498][   T35]  nbd_set_size+0x516/0x6d0
[  542.419061][   T35]  ? __pfx_nbd_set_size+0x10/0x10
[  542.421174][   T35]  ? nla_memcpy+0x5b/0xc0
[  542.422980][   T35]  nbd_genl_size_set+0x32c/0x400
[  542.424972][   T35]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  542.427191][   T35]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  542.430214][   T35]  ? bpf_lsm_capable+0x9/0x20
[  542.432129][   T35]  ? security_capable+0x7e/0x2c0
[  542.434118][   T35]  ? radix_tree_lookup+0x240/0x290
[  542.436204][   T35]  nbd_genl_reconfigure+0x428/0x1a70
[  542.438833][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  542.441146][   T35]  ? rcu_is_watching+0x15/0xb0
[  542.443061][   T35]  ? __nla_parse+0x40/0x60
[  542.444995][   T35]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  542.448225][   T35]  genl_family_rcv_msg_doit+0x22a/0x330
[  542.450429][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  542.452826][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  542.454820][   T35]  genl_rcv_msg+0x61c/0x7a0
[  542.456706][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  542.459527][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  542.461529][   T35]  netlink_rcv_skb+0x232/0x4b0
[  542.463034][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  542.464851][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  542.466552][   T35]  ? genl_rcv+0x19/0x40
[  542.468313][   T35]  ? down_read+0x272/0x2e0
[  542.469720][   T35]  ? genl_rcv+0xd/0x40
[  542.471087][   T35]  genl_rcv+0x28/0x40
[  542.472433][   T35]  netlink_unicast+0x80f/0x9b0
[  542.473956][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  542.475587][   T35]  ? netlink_sendmsg+0x650/0xb40
[  542.477149][   T35]  ? skb_put+0x11b/0x210
[  542.478959][   T35]  netlink_sendmsg+0x813/0xb40
[  542.480669][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.482579][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  542.484215][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  542.486133][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.488533][   T35]  __sock_sendmsg+0x21c/0x270
[  542.490163][   T35]  ____sys_sendmsg+0x4d7/0x810
[  542.491673][   T35]  ? __might_fault+0xaf/0x130
[  542.493130][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  542.494801][   T35]  ? import_iovec+0x73/0xa0
[  542.496294][   T35]  ___sys_sendmsg+0x2a5/0x360
[  542.498330][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  542.499944][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  542.501697][   T35]  ? futex_wait+0x29a/0x380
[  542.503114][   T35]  ? __fget_files+0x2a/0x420
[  542.504588][   T35]  ? __fget_files+0x3a0/0x420
[  542.506073][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[  542.508153][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  542.509961][   T35]  ? rcu_is_watching+0x15/0xb0
[  542.511741][   T35]  do_syscall_64+0xe2/0xf80
[  542.513206][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.515079][   T35]  ? trace_irq_disable+0x37/0x100
[  542.516811][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.519593][   T35] RIP: 0033:0x7f5bf479acb9
[  542.521292][   T35] RSP: 002b:00007f5bf29f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  542.523977][   T35] RAX: ffffffffffffffda RBX: 00007f5bf4a15fa0 RCX: 00007f5bf479acb9
[  542.526510][   T35] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004
[  542.529941][   T35] RBP: 00007f5bf4808bf7 R08: 0000000000000000 R09: 0000000000000000
[  542.533160][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  542.536293][   T35] R13: 00007f5bf4a16038 R14: 00007f5bf4a15fa0 R15: 00007fff183185f8
[  542.555598][   T35]  </TASK>
[  542.561616][   T35] INFO: task syz.2.3830:20316 blocked for more than 143 seconds.
[  542.564775][   T35]       Not tainted syzkaller #0
[  542.566814][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  542.575453][   T35] task:syz.2.3830      state:D stack:28272 pid:20316 tgid:20314 ppid:5810   task_flags:0x400040 flags:0x00080002
[  542.580703][   T35] Call Trace:
[  542.582050][   T35]  <TASK>
[  542.583261][   T35]  __schedule+0x14ef/0x4fb0
[  542.585094][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  542.587110][   T35]  ? __pfx___schedule+0x10/0x10
[  542.589473][   T35]  ? schedule+0x90/0x360
[  542.591204][   T35]  schedule+0x164/0x360
[  542.592902][   T35]  schedule_preempt_disabled+0x13/0x30
[  542.595056][   T35]  __mutex_lock+0x7fe/0x1300
[  542.596908][   T35]  ? __mutex_lock+0x5ac/0x1300
[  542.599108][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  542.601581][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  542.603661][   T35]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  542.606146][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  542.608592][   T35]  ? radix_tree_lookup+0x240/0x290
[  542.610549][   T35]  genl_rcv_msg+0x10b/0x7a0
[  542.612349][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  542.614378][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  542.616419][   T35]  netlink_rcv_skb+0x232/0x4b0
[  542.618755][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  542.621103][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  542.623222][   T35]  ? genl_rcv+0x19/0x40
[  542.624944][   T35]  ? down_read+0x272/0x2e0
[  542.626724][   T35]  ? genl_rcv+0xd/0x40
[  542.628451][   T35]  genl_rcv+0x28/0x40
[  542.630344][   T35]  netlink_unicast+0x80f/0x9b0
[  542.632310][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  542.634411][   T35]  ? netlink_sendmsg+0x650/0xb40
[  542.636446][   T35]  ? skb_put+0x11b/0x210
[  542.638309][   T35]  netlink_sendmsg+0x813/0xb40
[  542.640485][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.642593][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  542.644596][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  542.646699][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.649327][   T35]  __sock_sendmsg+0x21c/0x270
[  542.651277][   T35]  __sys_sendto+0x3c0/0x550
[  542.653068][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  542.655145][   T35]  ? fd_install+0x94/0x3d0
[  542.656976][   T35]  ? fd_install+0x306/0x3d0
[  542.658978][   T35]  __x64_sys_sendto+0xde/0x100
[  542.661244][   T35]  do_syscall_64+0xe2/0xf80
[  542.663089][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.665518][   T35]  ? trace_irq_disable+0x37/0x100
[  542.667752][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.670301][   T35] RIP: 0033:0x7f5bf475b58e
[  542.672110][   T35] RSP: 002b:00007f5bf29d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  542.675426][   T35] RAX: ffffffffffffffda RBX: 00007f5bf29d56c0 RCX: 00007f5bf475b58e
[  542.678718][   T35] RDX: 0000000000000028 RSI: 00007f5bf29d4000 RDI: 0000000000000006
[  542.682047][   T35] RBP: 0000000000000000 R08: 00007f5bf29d3f04 R09: 000000000000000c
[  542.685180][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  542.688879][   T35] R13: 00007f5bf29d3f58 R14: 00007f5bf29d4000 R15: 0000000000000000
[  542.692058][   T35]  </TASK>
[  542.693321][   T35] INFO: task syz.0.3837:20337 blocked for more than 143 seconds.
[  542.696380][   T35]       Not tainted syzkaller #0
[  542.700988][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  542.704743][   T35] task:syz.0.3837      state:D stack:28584 pid:20337 tgid:20336 ppid:5814   task_flags:0x400040 flags:0x00080002
[  542.709554][   T35] Call Trace:
[  542.711135][   T35]  <TASK>
[  542.712292][   T35]  __schedule+0x14ef/0x4fb0
[  542.714093][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  542.716113][   T35]  ? __pfx___schedule+0x10/0x10
[  542.718194][   T35]  ? schedule+0x90/0x360
[  542.720212][   T35]  schedule+0x164/0x360
[  542.721942][   T35]  schedule_preempt_disabled+0x13/0x30
[  542.724156][   T35]  __mutex_lock+0x7fe/0x1300
[  542.726034][   T35]  ? __mutex_lock+0x5ac/0x1300
[  542.728374][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  542.730555][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  542.732621][   T35]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  542.735059][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  542.737027][   T35]  ? radix_tree_lookup+0x240/0x290
[  542.739261][   T35]  genl_rcv_msg+0x10b/0x7a0
[  542.741372][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  542.743381][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  542.745374][   T35]  netlink_rcv_skb+0x232/0x4b0
[  542.747286][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  542.749404][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  542.751871][   T35]  ? genl_rcv+0x19/0x40
[  542.753561][   T35]  ? down_read+0x272/0x2e0
[  542.755387][   T35]  ? genl_rcv+0xd/0x40
[  542.757000][   T35]  genl_rcv+0x28/0x40
[  542.758860][   T35]  netlink_unicast+0x80f/0x9b0
[  542.761073][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  542.763117][   T35]  ? netlink_sendmsg+0x650/0xb40
[  542.765110][   T35]  ? skb_put+0x11b/0x210
[  542.766838][   T35]  netlink_sendmsg+0x813/0xb40
[  542.768961][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.771366][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  542.773356][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  542.775495][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.778125][   T35]  __sock_sendmsg+0x21c/0x270
[  542.780417][   T35]  __sys_sendto+0x3c0/0x550
[  542.782363][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  542.784433][   T35]  ? exc_page_fault+0x6a/0xc0
[  542.786408][   T35]  ? do_user_addr_fault+0xc7c/0x1360
[  542.788748][   T35]  __x64_sys_sendto+0xde/0x100
[  542.790926][   T35]  do_syscall_64+0xe2/0xf80
[  542.792826][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.795239][   T35]  ? trace_irq_disable+0x37/0x100
[  542.797334][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.800131][   T35] RIP: 0033:0x7f94cfd5b58e
[  542.801986][   T35] RSP: 002b:00007f94d0ccee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  542.805342][   T35] RAX: ffffffffffffffda RBX: 00007f94d0cd06c0 RCX: 00007f94cfd5b58e
[  542.809082][   T35] RDX: 0000000000000020 RSI: 00007f94d0ccf000 RDI: 0000000000000006
[  542.812264][   T35] RBP: 0000000000000000 R08: 00007f94d0ccef04 R09: 000000000000000c
[  542.815392][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  542.818869][   T35] R13: 00007f94d0ccef58 R14: 00007f94d0ccf000 R15: 0000000000000000
[  542.822388][   T35]  </TASK>
[  542.823726][   T35] INFO: task syz.1.3840:20353 blocked for more than 143 seconds.
[  542.826823][   T35]       Not tainted syzkaller #0
[  542.828948][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  542.832669][   T35] task:syz.1.3840      state:D stack:22360 pid:20353 tgid:20352 ppid:5815   task_flags:0x400140 flags:0x00080002
[  542.837563][   T35] Call Trace:
[  542.839126][   T35]  <TASK>
[  542.840339][   T35]  __schedule+0x14ef/0x4fb0
[  542.842163][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  542.844064][   T35]  ? __pfx___schedule+0x10/0x10
[  542.846003][   T35]  ? schedule+0x90/0x360
[  542.847900][   T35]  schedule+0x164/0x360
[  542.849901][   T35]  schedule_preempt_disabled+0x13/0x30
[  542.852140][   T35]  __mutex_lock+0x7fe/0x1300
[  542.853953][   T35]  ? __mutex_lock+0x5ac/0x1300
[  542.855857][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  542.858059][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  542.860411][   T35]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  542.862903][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  542.864911][   T35]  ? radix_tree_lookup+0x240/0x290
[  542.867046][   T35]  genl_rcv_msg+0x10b/0x7a0
[  542.869453][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  542.871545][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  542.873580][   T35]  netlink_rcv_skb+0x232/0x4b0
[  542.875577][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  542.877231][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  542.878979][   T35]  ? genl_rcv+0x19/0x40
[  542.880527][   T35]  ? down_read+0x272/0x2e0
[  542.881953][   T35]  ? genl_rcv+0xd/0x40
[  542.883208][   T35]  genl_rcv+0x28/0x40
[  542.884428][   T35]  netlink_unicast+0x80f/0x9b0
[  542.885911][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  542.887710][   T35]  ? netlink_sendmsg+0x650/0xb40
[  542.889396][   T35]  ? skb_put+0x11b/0x210
[  542.890716][   T35]  netlink_sendmsg+0x813/0xb40
[  542.892188][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.893906][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  542.895442][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  542.897153][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.899116][   T35]  __sock_sendmsg+0x21c/0x270
[  542.901317][   T35]  __sys_sendto+0x3c0/0x550
[  542.902809][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  542.904580][   T35]  ? exc_page_fault+0x6a/0xc0
[  542.906116][   T35]  ? do_user_addr_fault+0xc7c/0x1360
[  542.907921][   T35]  __x64_sys_sendto+0xde/0x100
[  542.909604][   T35]  do_syscall_64+0xe2/0xf80
[  542.911008][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.912977][   T35]  ? trace_irq_disable+0x37/0x100
[  542.914584][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.916599][   T35] RIP: 0033:0x7fc60dd5b58e
[  542.918902][   T35] RSP: 002b:00007fc60ec8ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  542.921671][   T35] RAX: ffffffffffffffda RBX: 00007fc60ec906c0 RCX: 00007fc60dd5b58e
[  542.924120][   T35] RDX: 000000000000001c RSI: 00007fc60ec8f000 RDI: 000000000000000b
[  542.926822][   T35] RBP: 0000000000000000 R08: 00007fc60ec8ef04 R09: 000000000000000c
[  542.930108][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b
[  542.933545][   T35] R13: 00007fc60ec8ef58 R14: 00007fc60ec8f000 R15: 0000000000000000
[  542.936759][   T35]  </TASK>
[  542.938335][   T35] 
[  542.938335][   T35] Showing all locks held in the system:
[  542.941664][   T35] 1 lock held by khungtaskd/35:
[  542.943616][   T35]  #0: ffffffff8e35a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  542.947710][   T35] 2 locks held by getty/5631:
[  542.949375][   T35]  #0: ffff888175fc60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  542.952524][   T35]  #1: ffffc9000356b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  542.956348][   T35] 1 lock held by udevd/13039:
[  542.958283][   T35]  #0: ffff88816acc6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  542.961984][   T35] 6 locks held by syz.2.3830/20315:
[  542.963614][   T35]  #0: ffffffff8f8180d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  542.966291][   T35]  #1: ffffffff8f817ee8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  542.969225][   T35]  #2: ffff888104b6f278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x38e/0x1a70
[  542.972629][   T35]  #3: ffff88816acc99d0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0
[  542.975923][   T35]  #4: ffff88816acc9370 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  542.980425][   T35]  #5: ffff88816acc93a8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  542.984314][   T35] 2 locks held by syz.2.3830/20316:
[  542.986025][   T35]  #0: ffffffff8f8180d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  542.988812][   T35]  #1: ffffffff8f817ee8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  542.991885][   T35] 2 locks held by syz.0.3837/20337:
[  542.993579][   T35]  #0: ffffffff8f8180d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  542.996235][   T35]  #1: ffffffff8f817ee8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  542.999366][   T35] 2 locks held by syz.1.3840/20353:
[  543.001280][   T35]  #0: ffffffff8f8180d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  543.004327][   T35]  #1: ffffffff8f817ee8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  543.007905][   T35] 2 locks held by syz-executor/20366:
[  543.010003][   T35]  #0: ffffffff8f8180d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  543.013256][   T35]  #1: ffffffff8f817ee8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  543.016779][   T35] 2 locks held by syz-executor/20376:
[  543.019592][   T35]  #0: ffffffff8f8180d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  543.022800][   T35]  #1: ffffffff8f817ee8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  543.026322][   T35] 2 locks held by syz-executor/20377:
[  543.028721][   T35]  #0: ffffffff8f8180d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  543.031968][   T35]  #1: ffffffff8f817ee8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  543.035589][   T35] 2 locks held by syz-executor/20396:
[  543.038014][   T35]  #0: ffffffff8f8180d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  543.041584][   T35]  #1: ffffffff8f817ee8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  543.044835][   T35] 2 locks held by syz-executor/20406:
[  543.046758][   T35]  #0: ffffffff8f8180d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  543.049503][   T35]  #1: ffffffff8f817ee8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  543.052557][   T35] 2 locks held by syz-executor/20408:
[  543.054418][   T35]  #0: ffffffff8f8180d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  543.057477][   T35]  #1: ffffffff8f817ee8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  543.060462][   T35] 2 locks held by syz-executor/20426:
[  543.062290][   T35]  #0: ffffffff8f8180d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  543.064799][   T35]  #1: ffffffff8f817ee8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  543.068122][   T35] 2 locks held by syz-executor/20436:
[  543.070368][   T35]  #0: ffffffff8f8180d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  543.073463][   T35]  #1: ffffffff8f817ee8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  543.077039][   T35] 2 locks held by syz-executor/20438:
[  543.079322][   T35]  #0: ffffffff8f8180d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  543.083027][   T35]  #1: ffffffff8f817ee8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  543.086502][   T35] 
[  543.088084][   T35] =============================================
[  543.088084][   T35] 
[  543.091282][   T35] NMI backtrace for cpu 1
[  543.091295][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  543.091308][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  543.091316][   T35] Call Trace:
[  543.091322][   T35]  <TASK>
[  543.091329][   T35]  dump_stack_lvl+0xe8/0x150
[  543.091349][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  543.091365][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  543.091379][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  543.091396][   T35]  sys_info+0x135/0x170
[  543.091409][   T35]  watchdog+0xf90/0xfe0
[  543.091429][   T35]  ? watchdog+0x209/0xfe0
[  543.091446][   T35]  kthread+0x726/0x8b0
[  543.091464][   T35]  ? __pfx_watchdog+0x10/0x10
[  543.091478][   T35]  ? __pfx_kthread+0x10/0x10
[  543.091494][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  543.091506][   T35]  ? __pfx_kthread+0x10/0x10
[  543.091520][   T35]  ret_from_fork+0x51b/0xa40
[  543.091533][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  543.091544][   T35]  ? __switch_to+0xc82/0x1410
[  543.091564][   T35]  ? __pfx_kthread+0x10/0x10
[  543.091578][   T35]  ret_from_fork_asm+0x1a/0x30
[  543.091603][   T35]  </TASK>
[  543.091608][   T35] Sending NMI from CPU 1 to CPUs 0:
[  543.135032][    C0] NMI backtrace for cpu 0
[  543.135045][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  543.135054][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  543.135059][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  543.135072][    C0] Code: 98 5d 02 e9 d3 e5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 d7 0e 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  543.135079][    C0] RSP: 0018:ffffffff8e007dc0 EFLAGS: 00000202
[  543.135086][    C0] RAX: 00000000003e6a6d RBX: ffffffff8198227d RCX: 0000000080000001
[  543.135091][    C0] RDX: 0000000000000001 RSI: ffffffff8dad523a RDI: ffffffff8be73880
[  543.135095][    C0] RBP: ffffffff8e007eb0 R08: ffff8881210336db R09: 1ffff110242066db
[  543.135100][    C0] R10: dffffc0000000000 R11: ffffed10242066dc R12: ffffffff8fcf1470
[  543.135104][    C0] R13: 1ffffffff1c12a78 R14: 0000000000000000 R15: 0000000000000000
[  543.135109][    C0] FS:  0000000000000000(0000) GS:ffff88818e31c000(0000) knlGS:0000000000000000
[  543.135114][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  543.135118][    C0] CR2: 00007feaf9e87e20 CR3: 00000001159f8000 CR4: 00000000000006f0
[  543.135147][    C0] Call Trace:
[  543.135154][    C0]  <TASK>
[  543.135157][    C0]  default_idle+0x9/0x20
[  543.135167][    C0]  default_idle_call+0x72/0xb0
[  543.135177][    C0]  do_idle+0x1bd/0x500
[  543.135185][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  543.135193][    C0]  ? __pfx_do_idle+0x10/0x10
[  543.135202][    C0]  cpu_startup_entry+0x43/0x60
[  543.135208][    C0]  rest_init+0x2de/0x300
[  543.135217][    C0]  start_kernel+0x380/0x3d0
[  543.135227][    C0]  x86_64_start_reservations+0x24/0x30
[  543.135239][    C0]  x86_64_start_kernel+0x143/0x1c0
[  543.135247][    C0]  common_startup_64+0x13e/0x147
[  543.135260][    C0]  </TASK>
[  543.195447][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  543.197921][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  543.201274][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  543.204935][   T35] Call Trace:
[  543.206200][   T35]  <TASK>
[  543.207347][   T35]  vpanic+0x1e0/0x670
[  543.208828][   T35]  panic+0xc5/0xd0
[  543.210216][   T35]  ? __pfx_panic+0x10/0x10
[  543.211855][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  543.213803][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  543.216048][   T35]  watchdog+0xfda/0xfe0
[  543.217423][   T35]  ? watchdog+0x209/0xfe0
[  543.218796][   T35]  kthread+0x726/0x8b0
[  543.220086][   T35]  ? __pfx_watchdog+0x10/0x10
[  543.221586][   T35]  ? __pfx_kthread+0x10/0x10
[  543.223061][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  543.224700][   T35]  ? __pfx_kthread+0x10/0x10
[  543.226163][   T35]  ret_from_fork+0x51b/0xa40
[  543.227760][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  543.229383][   T35]  ? __switch_to+0xc82/0x1410
[  543.230919][   T35]  ? __pfx_kthread+0x10/0x10
[  543.232699][   T35]  ret_from_fork_asm+0x1a/0x30
[  543.234680][   T35]  </TASK>
[  543.236761][   T35] Kernel Offset: disabled
[  543.238487][   T35] Rebooting in 86400 seconds..
