last executing test programs:

16.761434409s ago: executing program 2 (id=4395):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14)
writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="01", 0x1}, {&(0x7f0000000240)="0a23f2c6f3aee91bbec0ec1245fabc9ae2ccff3a10cbf8b08007282f0d8f9d3c635df97984c393edd99adcd91138d8214e565e51a72c206987081be30b8dce53e216ea119485b90c899892f775f5a50bfb7079b345bd1a8cb65aee5f32a089c5efbe0771591acb8c79c4d6995687aae605231a186739741928cd6cb9bbaf4577f8ad90a199a9a95fdf6eff5ed53a2dbe25e1954124dc03dfb8792a03413dceceae598c219dcd4e96ca430300000000000000778bc91c79fe7e26cd7fd55736801ddafa42bf87f63e802bb3ecd556d1465ebd78c7790b8ef72bd60dd284418f75f09d47ec1e22bada6b4355ff", 0xec}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x20, 0x3, 0x7, 0x187a67a68afe9213, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000cc4}, 0x40048c0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
getsockname$packet(r3, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

16.689248327s ago: executing program 2 (id=4398):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10)
connect$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) (async)
connect$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
socket$packet(0x11, 0x3, 0x300) (async)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) (async)
sendto$packet(r3, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2}, 0x10) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)

16.688108516s ago: executing program 2 (id=4400):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
socket$unix(0x1, 0x5, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x8, 0x12, r2, 0x6b2f1000) (async)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x8, 0x12, r2, 0x6b2f1000)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
listen(r1, 0x1) (async)
listen(r1, 0x1)
listen(r5, 0x0) (async)
listen(r5, 0x0)
shutdown(r5, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000c40)=""/229, 0x26, 0xe5, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r7, 0x38, 0xfffffffffffffffe}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r7, 0x38, 0xfffffffffffffffe}, 0x10)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001b80)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000010d000)={{r8, 0x51, 0x4, 0x81, 0x8, 0x2, 0x5, 0x9, 0x5, 0x7c7, 0x3, 0x4, 0x4, 0x9, 0x9}}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000010d000)={{r8, 0x51, 0x4, 0x81, 0x8, 0x2, 0x5, 0x9, 0x5, 0x7c7, 0x3, 0x4, 0x4, 0x9, 0x9}})
shutdown(r1, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000001700)={{0x86, @private=0xa010101, 0x4e21, 0x2, 'none\x00', 0x4, 0x2, 0x8}, {@broadcast, 0x4e22, 0x2000, 0x4, 0x0, 0x9}}, 0x44)
recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) (async)
recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (async)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0))

16.557975033s ago: executing program 2 (id=4401):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000008fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0)

10.021596219s ago: executing program 2 (id=4401):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000008fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0)

4.215610426s ago: executing program 2 (id=4401):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000008fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0)

3.441414178s ago: executing program 0 (id=4500):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000021c0)={0x20, r1, 0x1, 0x70bd2b, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x4000000)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r2, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0xfffffffffffffffd}, {0x0}], 0x2}}], 0x2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0908010000000055090100026200209500000000000000bc91100000000000b70200000000000085000000ba000000b700000000000000950000000000000007d169611df0da186fd9f57125f923519ec1ec37bd16c246626e6c0becf6e0027ff99627eb3af464812e644255c49c497a6c3c2e45374968c0f8235ee1ab56bf332d2c846be4e36396c9e34b0f0bbb3f95fe4e1bc684a5ec8570d8c51190764968799fa604e768cfd57435361af6db404af71e2e37c289a4cdcf3986beba6949c1c0b552926e58ffa68a3f"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r5, 0x0, 0x0, 0x20048880, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r6)
r7 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, 0x80, 0x0}, 0x200ce0c0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r6, 0x0, 0xfe33)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000300)=0xffffff7f, 0x4)
getsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, 0x0, &(0x7f00000000c0)=0x42)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r9 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r9, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r9, 0x0, 0x4000081)
recvmmsg(r5, 0x0, 0x0, 0x101, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

2.581545802s ago: executing program 0 (id=4505):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@dev, @local, <r1=>0x0}, &(0x7f0000000040)=0xc)
sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="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", 0x1000, 0x4000000, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x1, 0x6, @multicast}, 0x14)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000061109b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b426375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f645600cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e65440f12338ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af9d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074da00000000339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000000000000000004e46e25779540c8246e45a8a9e55b9214990fcf513e5893a0664baf35431a9ae5db2301f6aae78a841b704679015577abed7008c6208cce4ec400816eca719bb9e22c159dc414012c97cb515e447eba901c87f5c0d467d9d756000fff14823"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001400030504008000ffdbdf25021856ff", @ANYRES32=r3, @ANYBLOB="08000200ac14140d08000900fd03000008000100ac1414aa080004000a010101"], 0x38}, 0x1, 0x0, 0x0, 0xc090}, 0x48006)

2.57979303s ago: executing program 0 (id=4506):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000400)={{0x3, @default, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4)
setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4)
getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x8, &(0x7f0000000140)=0x4)

2.511118515s ago: executing program 0 (id=4507):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
unshare(0x62040200)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async)
listen(r1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socket$netlink(0x10, 0x3, 0x10) (async)
socket$inet(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r2, 0x0, 0x2}, 0x18)
pipe(&(0x7f0000000c00)) (async)
epoll_create(0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) (async, rerun: 64)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r4}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)

1.878837076s ago: executing program 1 (id=4508):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0xff}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x700, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0x4e)

1.76077319s ago: executing program 1 (id=4509):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001400030504008000ffdbdf25021856ff", @ANYRES32=r2, @ANYBLOB="08000200ac14140d08000900fd03000008000100ac1414aa080004000a010101"], 0x38}, 0x1, 0x0, 0x0, 0xc090}, 0x48006)

1.631794268s ago: executing program 1 (id=4510):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000021c0)={0x20, r1, 0x1, 0x70bd2b, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x4000000)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r2, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0xfffffffffffffffd}, {0x0}], 0x2}}], 0x2, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
close(0xffffffffffffffff) (async, rerun: 64)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r4, 0x0, 0x0) (async, rerun: 32)
sendto$rose(r4, 0x0, 0x0, 0xc0, 0x0, 0x0) (async, rerun: 32)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x6202}}, [], {{0x4, 0x1, 0xb, 0x1, 0x9, 0x10}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r6, 0x0, 0x0, 0x20048880, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (rerun: 32)
close(r7) (async)
r8 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000001c0)=@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, 0x80, 0x0}, 0x200ce0c0) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) (async, rerun: 64)
write$cgroup_subtree(r7, 0x0, 0xfe33) (rerun: 64)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000300)=0xffffff7f, 0x4) (async)
getsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, 0x0, &(0x7f00000000c0)=0x42) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async)
r10 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r10, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r10, 0x0, 0x4000081)

1.562051254s ago: executing program 1 (id=4511):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0xe, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078252000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000af8a0085000000cb000000950000000000000044fc2463c83f"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x21)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1ab6fb24", @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="67322bbd7000ffdbdf255900000008000300", @ANYRES32=r8, @ANYBLOB="2b237a156a2b6fcf74b56efa7243fe20bf956dc9831e69426464aeb42f9c6819d9c0278364b6a752cf7fd4ead2bba8afd88fee3b5f1571c927f21bc7c5b806899692e6eb6c9d2b7a29c07909b4a9630c6cf2e9a93bc218d5d9b693e30d903ae0ee10f5b986"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4000080)
r9 = socket$kcm(0x10, 0x2, 0x10)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xdc}, 0x1c)
setsockopt$inet6_int(r10, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x84}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0xd, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x0, 0x2, 0x0, 0x6}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x4080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="010003e67b6dd649f014b600000000000000000086dd000022c289b64027babc71041e98a5462aa7cbd39294f669888ec5f5f7ceac44fe985c5f79a8bfbbbceb78061b50de517ff20c200d0da6bf3f0fe292903d8e9bb5626fa8785329d836f85853fbc64a0ee05ae8e970f42d2e4a6d3d64fff1719d4c1d"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="30985d0000fdfa", @ANYRES16=r7, @ANYBLOB="30002bbd7000fbdbdf255e0000000c009900030000002300000008009f000200000005001901050000000800a0000900000005001801040000000800220117000000080026006c090000080026006c0900000800270003000000"], 0x60}, 0x1, 0x0, 0x0, 0x20040990}, 0x20040001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x3a7b, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

879.849493ms ago: executing program 1 (id=4512):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x62040200)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e1e, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x200}, 0x1e)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000100))
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x14}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

292.519298ms ago: executing program 0 (id=4513):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414fff500110001"], 0x64}}, 0x0)

291.949764ms ago: executing program 0 (id=4514):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
socket$kcm(0x2, 0x1, 0x84)
syz_emit_ethernet(0x52, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60002000001c2b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000002800000000000000000e9900ac21518645387b26430679a915b86c040f315046aaa04786a0d628bcdf2c028d306412f25f21561d3164a6520b26682421f2bbacf5346ae8303a47eecc70b9779c0a65a531d113da17c5a5ac4e56c36b3da67026e7018518545f4d5a2d6dbd3c8f38064a9847def364b087d0edbf9d48592ebc9d0b5436feab99d34a438c8e3f2ec357301d21418e1169ae4f788e92ec0869e21e588a26d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000500)={0x6, 0x2, 0x7, 0x4, 0x9, 0x0, [{0xa08, 0x7, 0x0, '\x00', 0x44}, {0x1, 0x5f8, 0x7, '\x00', 0x200}, {0x2, 0x3, 0x7}, {0x1, 0x2, 0xfffffffffffffff9, '\x00', 0x400}, {0x6, 0x400, 0x7525, '\x00', 0x80}, {0x33, 0x3, 0x4, '\x00', 0xc00}, {0x9, 0x43, 0x3, '\x00', 0x4}, {0x6, 0x80000001, 0x800, '\x00', 0x1002}, {0x1, 0x3, 0xfffffffffffffffc, '\x00', 0x202}]})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
socket$inet6(0xa, 0x5, 0x0)
r3 = accept(r1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="d4d9dfdb6510fba808001b"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073"], 0x6c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
r5 = socket(0x2, 0x5, 0x0)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='veth1_to_batadv\x00', 0x10)
sendmmsg$inet_sctp(r5, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[], 0x30}], 0x1, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 1 (id=4515):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x62040200)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000b40), &(0x7f0000000b80)=0x30)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140), 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r2, 0x0, 0x0)
ioctl$SIOCRSSCAUSE(r4, 0x89e1, &(0x7f0000000080)=0x1)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000100))
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x14}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

281][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'.
[  174.253052][ T9957] infiniband syz0: set down
[  174.256125][ T9957] infiniband syz0: added ipvlan1
[  174.274260][ T9957] RDS/IB: syz0: added
[  174.277498][ T9957] smc: adding ib device syz0 with port count 1
[  174.279774][ T9957] smc:    ib device syz0 port 1 has pnetid 
[  174.311273][ T9961] wg2: entered promiscuous mode
[  174.584607][ T9976] No such timeout policy "syz1"
[  174.687892][ T9985] netlink: 'syz.0.1198': attribute type 33 has an invalid length.
[  174.691030][ T9985] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1198'.
[  174.696960][ T9984] netlink: 175728 bytes leftover after parsing attributes in process `syz.0.1198'.
[  174.707385][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'.
[  174.710239][ T9984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1198'.
[  174.716368][ T9984] gtp0: entered promiscuous mode
[  174.718368][ T9984] gtp0: entered allmulticast mode
[  176.823066][T10045] netlink: 'syz.0.1216': attribute type 1 has an invalid length.
[  176.969877][T10052] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  176.973766][T10052] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  177.831628][T10072] batadv_slave_1: entered promiscuous mode
[  178.338463][T10078] __nla_validate_parse: 14 callbacks suppressed
[  178.338473][T10078] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1227'.
[  178.659832][T10096] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  178.742811][T10071] batadv_slave_1: left promiscuous mode
[  178.829365][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'.
[  179.091475][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1241'.
[  179.461714][T10147] wireguard0: left promiscuous mode
[  179.464008][T10147] sit1: left promiscuous mode
[  179.568844][T10150] netlink: 'syz.2.1247': attribute type 2 has an invalid length.
[  179.587928][T10153] delete_channel: no stack
[  179.596787][T10153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1248'.
[  179.749201][T10157] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  179.935739][T10162] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  180.686074][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  180.690224][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  182.085532][T10208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.569050][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1278'.
[  183.573329][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1278'.
[  183.578991][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1278'.
[  183.582078][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1278'.
[  183.585163][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1278'.
[  183.590321][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1278'.
[  183.593656][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1278'.
[  183.597949][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1278'.
[  183.607334][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1278'.
[  183.610221][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1278'.
[  183.874413][T10278] wireguard1: entered promiscuous mode
[  183.876652][T10278] wireguard1: entered allmulticast mode
[  184.880196][T10296] sctp: [Deprecated]: syz.2.1289 (pid 10296) Use of int in max_burst socket option deprecated.
[  184.880196][T10296] Use struct sctp_assoc_value instead
[  184.941313][T10297] xt_TCPMSS: Only works on TCP SYN packets
[  185.394471][T10319] netlink: 'syz.1.1296': attribute type 1 has an invalid length.
[  186.011640][T10360] bridge2: entered allmulticast mode
[  186.938965][T10405] netlink: 'syz.2.1318': attribute type 6 has an invalid length.
[  186.941950][T10405] netlink: 'syz.2.1318': attribute type 5 has an invalid length.
[  187.281982][T10425] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.284854][T10425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.288418][T10425] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.291918][T10425] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.295610][T10425] geneve2: entered promiscuous mode
[  188.176271][T10481] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  188.883911][T10498] __nla_validate_parse: 78 callbacks suppressed
[  188.883923][T10498] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1344'.
[  189.001240][T10505] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1346'.
[  189.231202][T10525] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  190.360152][T10561] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1358'.
[  190.528623][T10565] xt_hashlimit: size too large, truncated to 1048576
[  190.531912][T10565] xt_hashlimit: overflow, try lower: 3/0
[  193.545905][ T5280] udevd[5280]: worker [5831] /devices/virtual/block/nbd0 is taking a long time
[  193.967896][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.202962][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'.
[  194.543689][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1389'.
[  194.645285][T10662] netlink: 'syz.0.1389': attribute type 1 has an invalid length.
[  194.651873][T10662] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1389'.
[  194.660217][T10662] NCSI netlink: No device for ifindex 0
[  195.572981][T10680] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  195.682908][T10680] bridge_slave_0: left allmulticast mode
[  195.684924][T10680] bridge_slave_0: left promiscuous mode
[  195.697883][T10680] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.701619][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'.
[  195.705573][T10680] bridge_slave_1: left allmulticast mode
[  195.707979][T10680] bridge_slave_1: left promiscuous mode
[  195.710154][T10680] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.715884][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'.
[  195.726581][T10690] netlink: 'syz.0.1394': attribute type 1 has an invalid length.
[  195.729459][T10690] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1394'.
[  195.753487][T10680] bond0: (slave bond_slave_0): Releasing backup interface
[  195.771087][T10680] team0: Port device team_slave_0 removed
[  195.778943][T10680] team0: Port device team_slave_1 removed
[  195.781382][T10680] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.785434][T10680] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.791577][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'.
[  196.456657][T10707] netlink: 'syz.0.1401': attribute type 4 has an invalid length.
[  196.459487][T10708] netlink: 'syz.0.1401': attribute type 4 has an invalid length.
[  197.620462][T10755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1413'.
[  197.660641][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'.
[  198.688296][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'.
[  199.089861][   T60] block nbd0: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 90 seconds
[  199.093631][   T60] block nbd0: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 90 seconds
[  199.097380][   T60] block nbd0: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 90 seconds
[  199.101177][   T60] block nbd0: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 90 seconds
[  199.476784][T10801] __nla_validate_parse: 1 callbacks suppressed
[  199.476820][T10801] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1426'.
[  199.944533][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1434'.
[  199.950361][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1434'.
[  200.133881][T10840] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1439'.
[  200.138871][T10840] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1439'.
[  200.141959][T10840] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  200.696749][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'.
[  200.700873][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'.
[  200.716694][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'.
[  200.999960][T10860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1446'.
[  201.003752][T10860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1446'.
[  201.008557][T10860] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  201.035488][T10862] xt_ecn: cannot match TCP bits for non-tcp packets
[  201.215921][T10878] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  201.407692][T10890] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.447501][T10896] netlink: 'syz.2.1458': attribute type 1 has an invalid length.
[  201.711757][T10917] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.714891][T10917] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.724292][T10917] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.729117][T10917] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  202.603396][T10934] netlink: 'syz.2.1470': attribute type 1 has an invalid length.
[  202.626143][T10935] netlink: 'syz.2.1470': attribute type 1 has an invalid length.
[  203.603165][T10960] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  203.707683][T10966] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.711380][T10966] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.790345][T10968] netlink: 'syz.2.1481': attribute type 1 has an invalid length.
[  203.856252][T10975] ip6gre1: entered promiscuous mode
[  203.900718][T10980] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  203.904779][T10981] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  204.146173][T11003] syzkaller1: entered promiscuous mode
[  204.147927][T11003] syzkaller1: entered allmulticast mode
[  204.495023][T11017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.941718][T11034] syzkaller1: entered promiscuous mode
[  204.946488][T11034] syzkaller1: entered allmulticast mode
[  204.997862][T11037] __nla_validate_parse: 15 callbacks suppressed
[  204.997880][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'.
[  205.035555][T11040] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1503'.
[  205.472797][T11074] netlink: 410 bytes leftover after parsing attributes in process `syz.2.1513'.
[  205.918864][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1525'.
[  205.921927][T11114] chnl_net:caif_netlink_parms(): no params data found
[  206.583802][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1529'.
[  206.659438][T11132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1531'.
[  206.663479][T11132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1531'.
[  206.668129][T11132] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  206.889343][T11148] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1535'.
[  207.078528][T11154] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1538'.
[  207.081397][T11154] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1538'.
[  207.084276][T11154] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  207.236330][T11170] siw: device registration error -23
[  207.425546][T11191] netlink: 'syz.2.1552': attribute type 3 has an invalid length.
[  207.429456][T11191] netlink: 'syz.2.1552': attribute type 3 has an invalid length.
[  207.790789][T11202] xt_hashlimit: max too large, truncated to 1048576
[  207.820673][T11204] tipc: Enabled bearer <ib:caif0>, priority 10
[  208.139208][T11208] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  208.402379][T11221] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  211.398219][T11227] tc_dump_action: action bad kind
[  211.437941][T11232] __nla_validate_parse: 8 callbacks suppressed
[  211.437952][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'.
[  211.496357][T11236] netlink: 'syz.0.1567': attribute type 4 has an invalid length.
[  211.531474][T11242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1571'.
[  211.537411][T11240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1571'.
[  211.539839][T11242] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1571'.
[  211.543922][T11243] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1571'.
[  211.578347][T11247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1573'.
[  211.602359][T11247] bond0: entered promiscuous mode
[  211.604945][T11247] bond0: left promiscuous mode
[  211.611259][T11246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.613937][T11246] syzkaller0: entered promiscuous mode
[  211.616456][T11246] syzkaller0: entered allmulticast mode
[  211.627064][T11246] tipc: Resetting bearer <eth:syzkaller0>
[  211.632175][T11244] tipc: Resetting bearer <eth:syzkaller0>
[  211.650865][T11244] tipc: Disabling bearer <eth:syzkaller0>
[  211.760365][T11255] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1576'.
[  212.125239][T11280] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  212.223995][T11283] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1585'.
[  212.674912][T11301] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1591'.
[  212.678186][T11301] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1591'.
[  212.682159][T11301] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  213.570163][T11339] netlink: 'syz.2.1604': attribute type 2 has an invalid length.
[  214.791512][T11400] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  215.363241][T11431] netlink: 'syz.1.1633': attribute type 21 has an invalid length.
[  216.021460][T11439] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  216.025118][T11439] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  216.549904][T11456] __nla_validate_parse: 26 callbacks suppressed
[  216.549915][T11456] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1641'.
[  216.783155][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'.
[  216.925617][T11467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1645'.
[  216.940006][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'.
[  216.973476][T11471] @: renamed from veth0_vlan
[  217.036530][T11474] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1647'.
[  217.073475][T11477] xt_TCPMSS: Only works on TCP SYN packets
[  217.689236][T11515] sctp: [Deprecated]: syz.0.1661 (pid 11515) Use of struct sctp_assoc_value in delayed_ack socket option.
[  217.689236][T11515] Use struct sctp_sack_info instead
[  218.259286][T11555] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20003
[  218.323186][T11561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.396206][T11569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1676'.
[  218.400176][T11569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1676'.
[  218.403898][T11569] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  218.537807][T11578] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1679'.
[  218.692716][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'.
[  219.553978][T11612] xt_ecn: cannot match TCP bits for non-tcp packets
[  219.568281][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'.
[  219.619582][T11619] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  219.623873][T11619] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  221.655348][T11694] __nla_validate_parse: 8 callbacks suppressed
[  221.655366][T11694] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1718'.
[  222.085244][T11697] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1719'.
[  222.521594][T11723] netlink: 'syz.0.1731': attribute type 17 has an invalid length.
[  223.002324][T11769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.011156][T11769] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  223.857011][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1752'.
[  224.043912][T11831] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1755'.
[  224.047439][T11831] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1755'.
[  224.433215][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1762'.
[  224.444235][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'.
[  224.483749][T11849] openvswitch: netlink: IP tunnel TTL not specified.
[  224.553166][T11854] netlink: 424 bytes leftover after parsing attributes in process `syz.2.1765'.
[  224.697420][T11867] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1770'.
[  224.904323][T11878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1774'.
[  225.774835][T11918] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  226.221927][T11938] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  226.225078][T11938] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  226.500424][T11946] xt_l2tp: missing protocol rule (udp|l2tpip)
[  227.147311][T11971] bond0 (unregistering): Released all slaves
[  227.717339][T12021] __nla_validate_parse: 13 callbacks suppressed
[  227.717352][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'.
[  227.723649][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'.
[  227.732520][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'.
[  228.209021][T12030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1822'.
[  228.231670][T12030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1822'.
[  228.236497][T12030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1822'.
[  228.240163][T12030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1822'.
[  228.523818][T12037] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1825'.
[  228.694046][T12052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1828'.
[  228.698424][T12052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1828'.
[  228.848543][T12056] IPVS: set_ctl: invalid protocol: 8345 172.30.1.3:20003
[  228.858527][T12056] Cannot find add_set index 3 as target
[  228.871181][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.874305][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.886607][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.169245][   T60] block nbd0: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 120 seconds
[  229.173629][   T60] block nbd0: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 120 seconds
[  229.178936][   T60] block nbd0: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 120 seconds
[  229.183771][   T60] block nbd0: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 120 seconds
[  229.485827][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[  229.795144][T12090] tipc: Trying to set illegal importance in message
[  229.962766][T12101] openvswitch: netlink: Message has 4 unknown bytes.
[  229.965014][T12101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.128032][T12109] delete_channel: no stack
[  230.202502][T12113] veth0_to_bridge: entered promiscuous mode
[  230.220199][T12112] veth0_to_bridge: left promiscuous mode
[  230.535056][T12155] xt_hashlimit: size too large, truncated to 1048576
[  230.609632][T12155] xt_hashlimit: size too large, truncated to 1048576
[  230.827246][T12169] netlink: 'syz.2.1873': attribute type 5 has an invalid length.
[  231.108928][T12207] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  232.236167][T12238] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  232.924584][T12278] __nla_validate_parse: 27 callbacks suppressed
[  232.924596][T12278] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1904'.
[  232.932735][T12278] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1904'.
[  232.939077][T12278] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  233.169278][T12294] Unknown options in mask 700
[  233.171325][T12294] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1910'.
[  233.205200][T12299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1912'.
[  233.214971][T12299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1912'.
[  233.222667][T12299] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  234.072845][T12331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1922'.
[  234.075749][T12331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1922'.
[  234.078632][T12331] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  234.108328][T12333] delete_channel: no stack
[  234.166761][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'.
[  234.348578][T12333] delete_channel: no stack
[  234.350248][T12333] delete_channel: no stack
[  234.351774][T12333] delete_channel: no stack
[  234.353308][T12333] delete_channel: no stack
[  234.354792][T12333] delete_channel: no stack
[  234.356762][T12333] delete_channel: no stack
[  234.358908][T12333] delete_channel: no stack
[  234.360532][T12333] delete_channel: no stack
[  234.362068][T12333] delete_channel: no stack
[  234.363581][T12333] delete_channel: no stack
[  234.365112][T12333] delete_channel: no stack
[  234.371042][T12333] delete_channel: no stack
[  234.372839][T12333] delete_channel: no stack
[  234.374502][T12333] delete_channel: no stack
[  234.376235][T12333] delete_channel: no stack
[  234.377752][T12333] delete_channel: no stack
[  234.379292][T12333] delete_channel: no stack
[  234.380836][T12333] delete_channel: no stack
[  234.384534][T12333] delete_channel: no stack
[  234.386959][T12333] delete_channel: no stack
[  234.388452][T12333] delete_channel: no stack
[  234.389969][T12333] delete_channel: no stack
[  234.391448][T12333] delete_channel: no stack
[  234.393062][T12333] delete_channel: no stack
[  234.394668][T12333] delete_channel: no stack
[  234.396422][T12333] delete_channel: no stack
[  234.397956][T12333] delete_channel: no stack
[  234.399526][T12333] delete_channel: no stack
[  234.401213][T12333] delete_channel: no stack
[  234.402795][T12333] delete_channel: no stack
[  234.404444][T12333] delete_channel: no stack
[  234.406327][T12333] delete_channel: no stack
[  234.520981][T12359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1931'.
[  234.523967][T12359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1931'.
[  234.527210][T12359] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  235.324958][T12392] bond0: entered allmulticast mode
[  235.327991][T12392] bond_slave_0: entered allmulticast mode
[  235.330162][T12392] bond_slave_1: entered allmulticast mode
[  235.333279][T12392] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.340016][T12397] ipvlan2: entered promiscuous mode
[  235.342025][T12397] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  235.344547][T12397] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  236.309980][T12432] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  237.378834][T12470] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  237.595412][T12488] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  239.681530][T12523] netlink: 'syz.0.1985': attribute type 1 has an invalid length.
[  239.684764][T12523] __nla_validate_parse: 17 callbacks suppressed
[  239.684774][T12523] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1985'.
[  239.872763][T12549] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1994'.
[  239.887377][T12550] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1994'.
[  240.210537][T12579] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2005'.
[  240.261231][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'.
[  240.313847][T12587] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2008'.
[  240.674598][T12611] sctp: [Deprecated]: syz.2.2015 (pid 12611) Use of int in max_burst socket option.
[  240.674598][T12611] Use struct sctp_assoc_value instead
[  240.681250][T12610] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  240.710422][T12609] tipc: Resetting bearer <eth:syzkaller0>
[  240.714747][T12608] tipc: Resetting bearer <eth:syzkaller0>
[  241.120072][T12618] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2018'.
[  241.578738][T12608] tipc: Disabling bearer <eth:syzkaller0>
[  241.677682][T12624] netlink: 'syz.2.2020': attribute type 1 has an invalid length.
[  241.744719][T12624] bond0: (slave gretap1): making interface the new active one
[  241.752050][T12624] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  241.977533][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2024'.
[  241.981239][T12634] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  242.002237][T12634] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  242.193390][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'.
[  242.818892][T12661] x_tables: duplicate underflow at hook 2
[  243.055873][T12687] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2040'.
[  245.367173][T12759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.469341][T12776] (unnamed net_device) (uninitialized): option ad_select: invalid value (4)
[  245.642086][T12783] __nla_validate_parse: 8 callbacks suppressed
[  245.642098][T12783] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2070'.
[  246.051179][T12800] netlink: 'syz.0.2076': attribute type 4 has an invalid length.
[  246.498045][T12815] syz_tun: entered allmulticast mode
[  246.510232][T12815] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20001
[  246.724810][T12824] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2080'.
[  246.969143][T12838] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2085'.
[  247.017722][T12843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2086'.
[  247.028756][T12843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2086'.
[  247.195202][T12857] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2090'.
[  247.196221][T12856] batadv_slave_1: entered promiscuous mode
[  247.199139][T12857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2090'.
[  247.205518][T12857] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2090'.
[  247.208583][T12856] netlink: 'syz.0.2092': attribute type 6 has an invalid length.
[  247.210293][T12857] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2090'.
[  247.212973][T12856] netlink: 'syz.0.2092': attribute type 6 has an invalid length.
[  247.220233][T12810] syz_tun: left allmulticast mode
[  247.257559][T12855] batadv_slave_1: left promiscuous mode
[  247.567337][ T1090] wlan0: Trigger new scan to find an IBSS to join
[  247.784979][T12889] syzkaller0: entered allmulticast mode
[  247.795219][T12889] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2104'.
[  248.280357][T12918] netlink: 'syz.2.2114': attribute type 4 has an invalid length.
[  248.999836][T12959] Cannot find add_set index 0 as target
[  249.030203][T12957] sctp: [Deprecated]: syz.1.2127 (pid 12957) Use of int in max_burst socket option.
[  249.030203][T12957] Use struct sctp_assoc_value instead
[  250.615838][  T196] wlan0: Trigger new scan to find an IBSS to join
[  251.742575][T13075] __nla_validate_parse: 9 callbacks suppressed
[  251.742592][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'.
[  252.022810][T13097] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[  253.926386][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2191'.
[  254.584798][T13180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2202'.
[  254.712080][T13196] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2207'.
[  254.873959][T13219] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2211'.
[  254.888306][T13209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2211'.
[  255.004761][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2209'.
[  255.122408][T13240] ipt_REJECT: TCP_RESET invalid for non-tcp
[  255.165392][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'.
[  255.171912][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'.
[  255.214563][T13247] netlink: 'syz.2.2219': attribute type 15 has an invalid length.
[  255.218532][T13247] netlink: 'syz.2.2219': attribute type 7 has an invalid length.
[  255.221047][T13247] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2219'.
[  255.824453][T13277] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[  256.461877][T13311] atomic_op ffff888032e42998 conn xmit_atomic 0000000000000000
[  256.465446][T13311] x_tables: duplicate underflow at hook 4
[  256.792920][T13322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.800318][T13322] tipc: Resetting bearer <eth:syzkaller0>
[  257.099314][T13331] __nla_validate_parse: 7 callbacks suppressed
[  257.099363][T13331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2248'.
[  257.135637][T13333] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2249'.
[  257.139136][T13333] nbd: illegal input index 65508
[  257.569959][T13353] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  257.731036][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2257'.
[  257.917793][ T5891] tipc: Node number set to 2886997007
[  258.243718][T13393] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2267'.
[  258.560400][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2272'.
[  259.041582][T13460] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  259.045349][T13460] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  259.049181][T13460] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  259.052773][T13460] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  259.057404][T13460] vxlan2: entered promiscuous mode
[  259.060210][T13460] vxlan2: entered allmulticast mode
[  259.070854][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'.
[  259.075953][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'.
[  259.135354][T13468] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[  259.169610][T13473] sock: sock_set_timeout: `syz.2.2294' (pid 13473) tries to set negative timeout
[  259.255614][   T60] block nbd0: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 150 seconds
[  259.259555][   T60] block nbd0: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 150 seconds
[  259.263030][   T60] block nbd0: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 150 seconds
[  259.267640][   T60] block nbd0: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 150 seconds
[  259.435078][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'.
[  259.442098][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'.
[  259.458614][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'.
[  260.006262][T13508] syz_tun: entered allmulticast mode
[  260.009283][T13508] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20001
[  260.758922][T13543] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  260.766964][T13506] syz_tun: left allmulticast mode
[  260.941360][T13559] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  260.951093][T13559] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  262.222619][T13611] xt_bpf: check failed: parse error
[  262.709050][T13656] __nla_validate_parse: 6 callbacks suppressed
[  262.709061][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2356'.
[  262.721624][T13658] netlink: 'syz.1.2357': attribute type 11 has an invalid length.
[  263.211805][T13662] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[  263.249195][T13664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2359'.
[  263.252090][T13664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2359'.
[  263.685305][T13682] netlink: 524 bytes leftover after parsing attributes in process `syz.2.2366'.
[  263.969125][T13702] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  264.419225][T13710] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2376'.
[  264.422363][T13710] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2376'.
[  264.425595][T13710] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  264.763527][T13734] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2385'.
[  264.800240][T13738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2386'.
[  264.859414][T13746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2388'.
[  264.962669][T13758] netlink: 'syz.2.2393': attribute type 1 has an invalid length.
[  264.977015][T13758] 8021q: adding VLAN 0 to HW filter on device bond2
[  264.980841][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'.
[  265.209163][T13773] xt_TCPMSS: Only works on TCP SYN packets
[  265.212570][T13773] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  265.680826][T13801] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  265.712548][T13803] x_tables: duplicate underflow at hook 2
[  265.965959][T13821] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  266.162192][T13830] syzkaller0: entered promiscuous mode
[  266.164110][T13830] syzkaller0: entered allmulticast mode
[  268.028295][T13871] netlink: 'syz.0.2439': attribute type 1 has an invalid length.
[  268.091076][T13879] __nla_validate_parse: 19 callbacks suppressed
[  268.091092][T13879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2442'.
[  268.097912][T13879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2442'.
[  268.101833][T13879] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  268.124718][T13881] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2443'.
[  268.138284][T13881] openvswitch: netlink: Duplicate or invalid key (type 0).
[  268.141516][T13881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.178878][T13876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2441'.
[  268.187337][T13876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2441'.
[  268.201501][T13884] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2444'.
[  268.409379][T13900] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2450'.
[  268.413130][T13900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2450'.
[  268.417139][T13900] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2450'.
[  268.421129][T13900] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2450'.
[  269.180010][T13904] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  269.303599][T13912] openvswitch: netlink: Missing key (keys=40, expected=80)
[  269.324373][T13914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.127437][T13946] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  271.158523][T13948] x_tables: duplicate underflow at hook 4
[  271.174656][T13948] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  271.177569][T13948] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  271.180244][T13948] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  271.182999][T13948] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  272.088689][T13975] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  273.313771][T14027] __nla_validate_parse: 9 callbacks suppressed
[  273.313781][T14027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2496'.
[  273.321696][T14027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2496'.
[  273.325071][T14027] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  273.490881][T14037] bridge4: the hash_elasticity option has been deprecated and is always 16
[  274.340589][T14060] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2508'.
[  274.344126][T14060] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2508'.
[  274.350224][T14060] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  275.267818][T14083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2517'.
[  275.271371][T14083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2517'.
[  275.279410][T14083] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  275.317104][T14085] netlink: 'syz.0.2518': attribute type 9 has an invalid length.
[  275.342593][T14088] netlink: 'syz.1.2519': attribute type 2 has an invalid length.
[  275.362098][T14088] : entered promiscuous mode
[  275.403805][T14088] bond2: entered promiscuous mode
[  275.406852][T14088] 8021q: adding VLAN 0 to HW filter on device bond2
[  275.455453][T14100] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  275.478805][T14105] : entered promiscuous mode
[  275.502994][T14107] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2526'.
[  275.508881][T14109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.509729][T14107] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2526'.
[  275.515463][T14107] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  275.673138][T14122] xt_CT: No such helper "snmp"
[  276.567620][T14132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2536'.
[  276.570447][T14132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2536'.
[  276.573403][T14132] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  276.743219][T14157] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  276.820685][T14159] IPVS: set_ctl: invalid protocol: 8345 172.30.1.2:20003
[  276.823433][T14160] Cannot find add_set index 3 as target
[  276.917244][T14178] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  277.110251][T14209] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  277.707194][T14246] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  277.710482][T14246] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  277.714134][T14246] tipc: Resetting bearer <eth:syzkaller0>
[  278.033007][T14272] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  278.189861][T14284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.227900][T14284] syzkaller0: entered promiscuous mode
[  278.230340][T14284] syzkaller0: entered allmulticast mode
[  278.233080][T14284] tipc: Resetting bearer <eth:syzkaller0>
[  278.241564][T14283] tipc: Resetting bearer <eth:syzkaller0>
[  279.178847][T14283] tipc: Disabling bearer <eth:syzkaller0>
[  279.183308][ T1089] tipc: Resetting bearer <eth:syzkaller0>
[  279.218472][T14302] __nla_validate_parse: 15 callbacks suppressed
[  279.218487][T14302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2591'.
[  279.232048][T14304] netlink: 'syz.0.2592': attribute type 1 has an invalid length.
[  279.237062][T14305] netlink: 'syz.0.2592': attribute type 1 has an invalid length.
[  279.280614][T14308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2593'.
[  279.284614][T14308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2593'.
[  279.289321][T14308] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  279.307215][T14304] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  279.314381][T14304] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  279.341649][T14305] macvlan3: entered promiscuous mode
[  279.343828][T14305] macvlan3: entered allmulticast mode
[  279.348711][T14305] bond1: entered promiscuous mode
[  279.351121][T14305] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  279.357433][T14305] bond1: left promiscuous mode
[  279.631789][T14330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2601'.
[  279.637268][T14330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2601'.
[  279.640793][T14330] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  279.677996][T14333] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.681049][T14333] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.684034][T14333] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.687185][T14333] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.782224][T14337] sctp: [Deprecated]: syz.2.2603 (pid 14337) Use of struct sctp_assoc_value in delayed_ack socket option.
[  279.782224][T14337] Use struct sctp_sack_info instead
[  279.866943][T14339] netlink: 'syz.2.2604': attribute type 1 has an invalid length.
[  280.009302][T14346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2607'.
[  280.013336][T14346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2607'.
[  280.018573][T14346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2607'.
[  280.024238][T14346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2607'.
[  280.255394][T14351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2609'.
[  280.260498][T14351] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  280.539916][T14370] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  283.497811][T14506] xt_l2tp: v2 doesn't support IP mode
[  283.789419][T14522] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  284.029189][T14535] netlink: 'syz.2.2669': attribute type 1 has an invalid length.
[  284.694912][T14565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.149623][T14574] veth1_to_team: entered allmulticast mode
[  285.152475][T14574] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  285.473532][T14583] netlink: 'syz.2.2684': attribute type 3 has an invalid length.
[  285.584776][T14596] __nla_validate_parse: 22 callbacks suppressed
[  285.584785][T14596] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2687'.
[  285.772201][T14611] tipc: Resetting bearer <eth:syzkaller0>
[  285.782534][T14611] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  285.787803][T14611] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  285.792142][T14611] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  285.796367][T14611] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  286.021436][T14629] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2700'.
[  286.024536][T14629] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2700'.
[  286.028511][T14629] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  286.462798][T14649] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2708'.
[  286.467249][T14649] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2708'.
[  286.470145][T14649] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  286.706229][T14664] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  286.782011][T14673] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2715'.
[  287.297923][T14679] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2717'.
[  287.301607][T14679] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2717'.
[  287.305529][T14679] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  287.343051][T14681] siw: device registration error -23
[  287.609962][T14693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2721'.
[  287.617234][T14693] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2721'.
[  287.620152][T14693] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  288.477328][T14718] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  288.918304][T14744] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  289.332269][   T60] block nbd0: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 180 seconds
[  289.338167][   T60] block nbd0: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 180 seconds
[  289.342815][   T60] block nbd0: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 180 seconds
[  289.347708][   T60] block nbd0: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 180 seconds
[  289.968938][T14774] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  291.096229][T14811] __nla_validate_parse: 9 callbacks suppressed
[  291.096244][T14811] netlink: 336 bytes leftover after parsing attributes in process `syz.2.2759'.
[  291.114539][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2758'.
[  291.149408][T14814] xt_CT: You must specify a L4 protocol and not use inversions on it
[  291.170501][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'.
[  291.173422][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'.
[  291.209170][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2760'.
[  291.212994][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2760'.
[  291.219888][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2760'.
[  291.964737][T14830] netlink: 396 bytes leftover after parsing attributes in process `syz.0.2766'.
[  292.069503][T14836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2769'.
[  292.073444][T14836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2769'.
[  292.077745][T14836] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  292.083958][ T5280] udevd[5280]: worker [5831] /devices/virtual/block/nbd0 timeout; kill it
[  292.090412][ T5280] udevd[5280]: seq 11969 '/devices/virtual/block/nbd0' killed
[  292.278358][T14850] netlink: 'syz.0.2774': attribute type 3 has an invalid length.
[  292.328538][T14860] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  293.203436][T14898] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  293.767265][T14919] sctp: [Deprecated]: syz.1.2793 (pid 14919) Use of int in max_burst socket option.
[  293.767265][T14919] Use struct sctp_assoc_value instead
[  294.185604][T14927] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  295.349843][T14947] pim6reg: entered allmulticast mode
[  295.468041][T14961] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  295.554412][T14969] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  296.375636][T14976] __nla_validate_parse: 16 callbacks suppressed
[  296.380265][T14976] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2812'.
[  296.484222][T14980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.494069][T14982] net veth1_virt_wifi : renamed from virt_wifi0
[  296.500317][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.503689][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.526092][T14984] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2816'.
[  296.528966][T14984] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2816'.
[  296.532226][T14984] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  296.562417][T14985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.577360][T14987] syz_tun: entered allmulticast mode
[  296.611791][T14992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2818'.
[  296.782174][T15006] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2823'.
[  296.786169][T15006] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2823'.
[  296.789793][T15006] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  296.825208][T15008] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  296.904546][T15011] netlink: 208280 bytes leftover after parsing attributes in process `syz.0.2824'.
[  297.880556][T15026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2830'.
[  297.884307][T15026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2830'.
[  297.888773][T15026] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  297.946900][T15030] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  297.953288][T15030] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  298.222216][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2838'.
[  298.235454][T15046] netlink: 'syz.0.2838': attribute type 7 has an invalid length.
[  298.248590][T15046] netlink: 'syz.0.2838': attribute type 8 has an invalid length.
[  299.487827][T15101] netlink: 'syz.2.2857': attribute type 11 has an invalid length.
[  299.821464][T15128] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  300.484471][T15172] IPv6: NLM_F_REPLACE set, but no existing node found!
[  300.799550][T15196] syz_tun: entered allmulticast mode
[  300.811033][T15196] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20001
[  301.246577][T15224] bridge0: left allmulticast mode
[  301.260513][T15222] netlink: 'syz.1.2892': attribute type 29 has an invalid length.
[  301.439249][T15232] __nla_validate_parse: 20 callbacks suppressed
[  301.439261][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'.
[  301.444210][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'.
[  301.447809][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'.
[  301.564828][T15191] syz_tun: left allmulticast mode
[  301.594521][T15234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2895'.
[  302.230346][T15247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2900'.
[  302.413845][T15255] sctp: [Deprecated]: syz.1.2902 (pid 15255) Use of int in max_burst socket option deprecated.
[  302.413845][T15255] Use struct sctp_assoc_value instead
[  302.428532][T15255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2902'.
[  302.870832][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2908'.
[  303.227253][T15271] netlink: 'syz.1.2909': attribute type 21 has an invalid length.
[  303.230776][T15271] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2909'.
[  303.448218][T15282] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2912'.
[  303.459081][T15282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2912'.
[  304.193728][T15310] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.502094][T15319] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  306.408313][T15395] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  306.446863][T15397] __nla_validate_parse: 6 callbacks suppressed
[  306.446880][T15397] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2951'.
[  306.637759][T15403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2953'.
[  307.248201][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2955'.
[  307.272524][T15408] batadv_slave_1: entered promiscuous mode
[  307.275324][T15408] batadv_slave_1: left promiscuous mode
[  307.491681][T15415] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2959'.
[  307.495429][T15415] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2959'.
[  307.500821][T15415] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  307.617510][T15426] netlink: 187448 bytes leftover after parsing attributes in process `syz.0.2963'.
[  307.738075][T15436] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2968'.
[  307.741115][T15436] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2968'.
[  307.744787][T15436] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  307.810740][T15440] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  307.972733][T15455] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2973'.
[  307.981882][T15455] netlink: 'syz.0.2973': attribute type 2 has an invalid length.
[  307.985333][T15455] netlink: 'syz.0.2973': attribute type 5 has an invalid length.
[  308.089070][T15463] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2976'.
[  308.092239][T15463] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  308.792418][T15483] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  308.808538][T15483] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  310.668743][T15522] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  311.535416][T15546] openvswitch: netlink: IP tunnel dst address not specified
[  311.642464][T15552] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  311.654017][T15552] __nla_validate_parse: 10 callbacks suppressed
[  311.654032][T15552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3006'.
[  311.723405][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3009'.
[  311.928644][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3014'.
[  312.197692][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'.
[  312.201479][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'.
[  312.206667][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'.
[  312.852484][T15612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3026'.
[  313.981921][T15662] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3041'.
[  313.987883][T15662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3041'.
[  315.053815][T15718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3057'.
[  315.059224][T15718] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  315.521308][T15730] netlink: 'syz.0.3060': attribute type 3 has an invalid length.
[  316.192409][T15766] netlink: 'syz.1.3072': attribute type 1 has an invalid length.
[  316.199179][T15766] netlink: 'syz.1.3072': attribute type 1 has an invalid length.
[  317.198543][T15795] __nla_validate_parse: 1 callbacks suppressed
[  317.198552][T15795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3079'.
[  317.203592][T15795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3079'.
[  317.207761][T15795] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  317.647697][T15808] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3082'.
[  318.588564][T15824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3086'.
[  318.621917][T15834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3088'.
[  318.743228][T15843] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3090'.
[  318.788508][T15843] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3090'.
[  318.791575][T15843] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  318.971850][T15849] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3092'.
[  319.037629][T15853] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3094'.
[  319.152143][T15857] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3095'.
[  319.407879][   T60] block nbd0: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 210 seconds
[  319.411454][   T60] block nbd0: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 210 seconds
[  319.415057][   T60] block nbd0: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 210 seconds
[  319.421128][   T60] block nbd0: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 210 seconds
[  319.557949][T15870] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  321.372775][T15903] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  321.683982][T15926] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  321.721066][T15930] sctp: [Deprecated]: syz.1.3120 (pid 15930) Use of int in maxseg socket option.
[  321.721066][T15930] Use struct sctp_assoc_value instead
[  322.752429][T15959] __nla_validate_parse: 15 callbacks suppressed
[  322.752439][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3126'.
[  322.759417][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3126'.
[  323.437259][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'.
[  323.562511][T15998] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3139'.
[  323.797381][T16018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3144'.
[  324.047130][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'.
[  324.050817][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'.
[  324.058846][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'.
[  324.769346][T16043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3152'.
[  324.772906][T16043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3152'.
[  324.872040][T16046] dummy0: entered promiscuous mode
[  324.874318][T16046] dummy0: entered allmulticast mode
[  327.067436][T16144] netlink: 'syz.0.3185': attribute type 3 has an invalid length.
[  327.140310][T16144] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  327.143491][T16144] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  327.480838][T16158] dvmrp8: entered allmulticast mode
[  327.485289][T16157] dvmrp8: left allmulticast mode
[  327.768566][T16168] netlink: 'syz.2.3193': attribute type 11 has an invalid length.
[  327.925392][T16177] __nla_validate_parse: 8 callbacks suppressed
[  327.925407][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'.
[  327.940993][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3197'.
[  328.036370][T16182] openvswitch: netlink: Flow key attribute not present in set flow.
[  328.164836][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'.
[  328.168646][T16184] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  328.171238][T16184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.178510][T16184] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3198'.
[  328.507444][T16201] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3204'.
[  328.598583][T16203] dvmrp8: entered allmulticast mode
[  328.619231][T16200] dvmrp8: left allmulticast mode
[  329.046106][T16242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.149390][T16251] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3219'.
[  329.882716][T16265] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3223'.
[  329.886556][T16265] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3223'.
[  329.889438][T16265] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  329.997802][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3225'.
[  330.001671][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3225'.
[  330.245360][T16289] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  330.353044][T16291] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  330.357970][T16291] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  331.280041][T16310] netlink: 'syz.2.3238': attribute type 1 has an invalid length.
[  331.880843][T16348] Bluetooth: MGMT ver 1.23
[  333.259612][T16427] xt_l2tp: v2 sid > 0xffff: 4294901760
[  333.539872][T16441] __nla_validate_parse: 79 callbacks suppressed
[  333.539882][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3281'.
[  333.545526][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3281'.
[  334.045587][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3284'.
[  334.049165][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3284'.
[  334.161127][T16464] syzkaller0: entered promiscuous mode
[  334.162925][T16464] syzkaller0: entered allmulticast mode
[  334.167398][T16464] syzkaller0: mtu less than device minimum
[  334.211891][T16468] netlink: 'syz.0.3289': attribute type 1 has an invalid length.
[  334.236901][T16468] bond2: entered promiscuous mode
[  334.239109][T16468] 8021q: adding VLAN 0 to HW filter on device bond2
[  334.622363][T16507] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3302'.
[  334.688337][T16513] IPVS: length: 77 != 8
[  334.713742][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3304'.
[  335.257876][T16547] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3314'.
[  335.323028][T16550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3315'.
[  336.044756][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3320'.
[  336.138255][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3321'.
[  337.334171][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.337452][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.635277][T16638] __nla_validate_parse: 10 callbacks suppressed
[  338.635287][T16638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3344'.
[  338.658081][T16638] x_tables: duplicate underflow at hook 2
[  338.833075][T16648] netlink: 'syz.2.3347': attribute type 21 has an invalid length.
[  338.836368][T16648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3347'.
[  338.839688][T16648] x_tables: duplicate underflow at hook 4
[  338.878185][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3348'.
[  338.928750][T16651] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3348'.
[  339.188975][T16658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3351'.
[  339.391372][T16665] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3354'.
[  339.541764][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'.
[  339.545555][T16672] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3357'.
[  339.561613][T16672] vlan3: entered allmulticast mode
[  339.567154][T16672] veth1: entered allmulticast mode
[  340.648848][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'.
[  340.652499][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'.
[  340.760756][T16712] netlink: 'syz.1.3368': attribute type 1 has an invalid length.
[  341.847409][T16729] pim6reg1: entered promiscuous mode
[  341.849305][T16729] pim6reg1: entered allmulticast mode
[  344.614342][T16732] __nla_validate_parse: 4 callbacks suppressed
[  344.614351][T16732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3375'.
[  344.620080][T16732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3375'.
[  344.850802][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3376'.
[  344.854080][T16736] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  344.857756][T16736] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  345.572940][T16761] xt_TPROXY: Can be used only with -p tcp or -p udp
[  345.632950][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'.
[  345.636914][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'.
[  345.659183][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'.
[  345.671658][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'.
[  345.675393][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'.
[  345.703561][T16768] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.3387'.
[  345.733005][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'.
[  347.118056][T16815] netlink: 'syz.2.3402': attribute type 10 has an invalid length.
[  347.474680][T16834] netlink: 'syz.1.3407': attribute type 21 has an invalid length.
[  349.429010][T16951] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  349.494042][   T60] block nbd0: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 240 seconds
[  349.502069][   T60] block nbd0: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 240 seconds
[  349.506704][   T60] block nbd0: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 240 seconds
[  349.511419][   T60] block nbd0: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 240 seconds
[  350.054964][T16968] __nla_validate_parse: 5 callbacks suppressed
[  350.054980][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3460'.
[  350.069399][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3460'.
[  350.080898][T16968] sch_tbf: burst 0 is lower than device lo mtu (39799) !
[  350.125125][T16972] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3462'.
[  350.398429][T16990] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3467'.
[  351.294673][T17015] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3477'.
[  352.179685][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3487'.
[  352.183910][T17051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3487'.
[  352.252642][T17055] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3488'.
[  352.543214][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3494'.
[  352.549718][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3494'.
[  353.168138][T17097] netlink: 'syz.0.3499': attribute type 8 has an invalid length.
[  353.420193][T17118] netlink: 'syz.2.3506': attribute type 303 has an invalid length.
[  353.432153][T17118] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  353.438656][T17118] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  353.581012][T17126] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  355.099177][T17149] __nla_validate_parse: 12 callbacks suppressed
[  355.099188][T17149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3519'.
[  355.104319][T17149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3519'.
[  355.109719][T17149] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  355.143080][T17151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3520'.
[  355.238891][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3521'.
[  355.242124][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3521'.
[  355.246654][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3521'.
[  355.408315][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'.
[  355.412118][T17156] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  355.415432][T17156] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  356.261987][T17171] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3527'.
[  356.265261][T17171] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3527'.
[  356.268552][T17171] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  357.130980][T17172] delete_channel: no stack
[  357.218193][T17190] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3534'.
[  357.222059][T17190] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  357.910287][T17212] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  358.117608][T17216] xt_CT: You must specify a L4 protocol and not use inversions on it
[  358.845180][T17235] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  359.015488][T17241] netlink: 'syz.2.3552': attribute type 2 has an invalid length.
[  359.022051][T17241] netlink: 'syz.2.3552': attribute type 1 has an invalid length.
[  361.206365][T17293] __nla_validate_parse: 8 callbacks suppressed
[  361.206380][T17293] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3567'.
[  361.267277][T17294] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3567'.
[  361.929635][T17299] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3569'.
[  362.125303][T17311] macsec1: entered promiscuous mode
[  362.128848][T17311] macsec1: entered allmulticast mode
[  362.318012][T17311] team0 (unregistering): Port device team_slave_0 removed
[  362.321973][T17311] team0 (unregistering): Port device team_slave_1 removed
[  363.159610][T17366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3585'.
[  363.454056][T17368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3586'.
[  363.464830][T17368] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3586'.
[  363.502526][T17368] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3586'.
[  363.961129][T17418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3596'.
[  364.045018][T17422] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3600'.
[  364.238940][T17439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3604'.
[  364.241967][T17439] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  364.844528][T17464] syzkaller1: entered promiscuous mode
[  364.851936][T17464] syzkaller1: entered allmulticast mode
[  364.857534][T17464] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  365.465251][T17488] netlink: 'syz.0.3618': attribute type 2 has an invalid length.
[  366.264768][T17519] __nla_validate_parse: 4 callbacks suppressed
[  366.264779][T17519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3627'.
[  366.269930][T17519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3627'.
[  366.273054][T17519] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  366.314470][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'.
[  366.932469][T17563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3644'.
[  366.935515][T17563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3644'.
[  366.938713][T17563] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  366.955554][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3643'.
[  367.121481][T17576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3647'.
[  367.171699][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3650'.
[  367.175254][T17585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3650'.
[  367.195341][T17585] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  367.199115][T17585] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  367.202643][T17585] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  367.206332][T17585] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  367.214990][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3650'.
[  367.247571][T17590] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  367.391842][T17600] syzkaller1: entered promiscuous mode
[  367.394197][T17600] syzkaller1: entered allmulticast mode
[  367.451326][T17603] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  367.454602][T17603] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  367.458628][T17603] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  367.462398][T17603] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.420109][T17651] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  368.853574][T17677] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  369.111343][T17696] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  370.232922][T17739] netlink: 'syz.2.3699': attribute type 12 has an invalid length.
[  371.718657][T17768] __nla_validate_parse: 15 callbacks suppressed
[  371.718675][T17768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3707'.
[  371.789195][T17768] 8021q: adding VLAN 0 to HW filter on device bond3
[  371.818633][T17772] 8021q: adding VLAN 0 to HW filter on device bond3
[  371.821110][T17772] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  371.833155][T17772] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  371.880585][T17768] macvlan0: entered promiscuous mode
[  371.882547][T17768] macvlan0: entered allmulticast mode
[  371.885325][T17768] bond3: (slave macvlan0): Error -98 calling set_mac_address
[  372.058838][T17788] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3713'.
[  372.073681][T17790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3712'.
[  372.862825][T17802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3716'.
[  372.873255][T17802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3716'.
[  373.098170][T17813] ipt_REJECT: TCP_RESET invalid for non-tcp
[  373.153332][T17813] syzkaller1: entered promiscuous mode
[  373.155284][T17813] syzkaller1: entered allmulticast mode
[  373.673883][T17843] netlink: 'syz.2.3728': attribute type 13 has an invalid length.
[  373.685241][T17843] gretap0: refused to change device tx_queue_len
[  373.694444][T17843] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  373.743600][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3730'.
[  373.747509][T17847] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  373.750159][T17847] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.799678][T17850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3731'.
[  373.861961][T17854] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3733'.
[  373.865112][T17854] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3733'.
[  373.869693][T17854] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  374.690654][T17869] pim6reg1: entered promiscuous mode
[  374.692563][T17869] pim6reg1: entered allmulticast mode
[  376.033039][T17907] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3749'.
[  376.191130][T17917] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  376.888260][T17942] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.243412][T17951] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3764'.
[  377.248893][T17951] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3764'.
[  377.251839][T17951] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  377.344590][T17965] x_tables: duplicate underflow at hook 2
[  377.893007][T17983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3774'.
[  378.030582][T17987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3775'.
[  378.267907][T18014] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3783'.
[  378.485175][T18023] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3786'.
[  378.492549][T18023] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3786'.
[  378.831493][T18040] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3792'.
[  378.834660][T18040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3792'.
[  378.838006][T18040] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3792'.
[  379.000271][T18044] IPVS: set_ctl: invalid protocol: 115 172.30.1.2:20003
[  379.571115][   T60] block nbd0: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 270 seconds
[  379.574744][   T60] block nbd0: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 270 seconds
[  379.578658][   T60] block nbd0: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 270 seconds
[  379.583177][   T60] block nbd0: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 270 seconds
[  380.362891][T18086] bridge_slave_0: left promiscuous mode
[  380.376700][T18086] vlan0: left promiscuous mode
[  380.379468][T18086] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  380.386575][T18086] wireguard0: left promiscuous mode
[  380.388370][T18086] wireguard0: left allmulticast mode
[  380.390474][T18086] bridge3: left allmulticast mode
[  380.396705][T18086] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  380.399077][T18086] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  380.401492][T18086] gtp0: left promiscuous mode
[  380.416765][T18086] gtp0: left allmulticast mode
[  380.419071][T18086] bond2: left promiscuous mode
[  381.297053][T18117] syz_tun: entered allmulticast mode
[  381.301155][T18117] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20001
[  381.390566][T18121] netlink: 'syz.2.3816': attribute type 2 has an invalid length.
[  381.713867][T18132] netlink: 'syz.0.3819': attribute type 21 has an invalid length.
[  382.070074][T18115] syz_tun: left allmulticast mode
[  382.635171][T18148] SET target dimension over the limit!
[  382.751856][T18154] __nla_validate_parse: 6 callbacks suppressed
[  382.751867][T18154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3825'.
[  382.762374][T18156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3825'.
[  382.898601][T18176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3829'.
[  382.901590][T18176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3829'.
[  382.904487][T18176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3829'.
[  382.907862][T18176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3829'.
[  383.334147][ T5848] IPVS: starting estimator thread 0...
[  383.430547][T18181] IPVS: using max 79 ests per chain, 189600 per kthread
[  383.554848][T18191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3833'.
[  383.563171][T18191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3833'.
[  383.691321][T18193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3834'.
[  383.839857][T18196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3835'.
[  383.879843][T18203] netem: change failed
[  385.145616][T18236] x_tables: duplicate underflow at hook 3
[  385.723255][T18251] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  387.374005][T18317] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  387.550016][T18337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 48024 - 0
[  387.552943][T18337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 48024 - 0
[  387.559208][T18337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 48024 - 0
[  387.562753][T18337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 48024 - 0
[  387.575121][T18337] geneve4: entered promiscuous mode
[  387.577162][T18337] geneve4: entered allmulticast mode
[  387.582225][T18337] netlink: ct family unspecified
[  387.583849][T18337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.217946][T18367] __nla_validate_parse: 15 callbacks suppressed
[  388.217964][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3888'.
[  388.320922][T18372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3888'.
[  388.443091][T18378] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3891'.
[  388.448229][T18378] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3891'.
[  388.452040][T18378] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  388.466022][T18380] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 48024 - 0
[  388.469862][T18380] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 48024 - 0
[  388.474515][T18380] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 48024 - 0
[  388.478333][T18380] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 48024 - 0
[  388.549199][T18382] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3892'.
[  388.564441][T18382] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3892'.
[  388.749558][T18390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3894'.
[  388.752453][T18390] nbd: couldn't find a device at index 65546
[  388.914995][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3904'.
[  389.086912][T18426] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3905'.
[  389.211978][T18434] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3907'.
[  389.744002][T18444] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  390.446683][T18464] netlink: 'syz.1.3917': attribute type 1 has an invalid length.
[  390.452116][T18464] x_tables: duplicate underflow at hook 4
[  390.460940][T18464] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  390.463784][T18464] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  390.466786][T18464] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  390.470587][T18464] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  390.509625][T18466] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  390.594026][T18470] netlink: 'syz.1.3921': attribute type 9 has an invalid length.
[  390.603756][T18470] netlink: 'syz.1.3921': attribute type 1 has an invalid length.
[  390.607117][T18470] netlink: 'syz.1.3921': attribute type 2 has an invalid length.
[  390.611951][T18470] netlink: 'syz.1.3921': attribute type 1 has an invalid length.
[  390.616217][T18470] netlink: 'syz.1.3921': attribute type 2 has an invalid length.
[  390.675026][T18476] IPVS: set_ctl: invalid protocol: 96 172.30.1.3:20000
[  390.790417][T18488] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  391.188154][T18518] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  392.733315][T18608] netlink: 'syz.1.3961': attribute type 2 has an invalid length.
[  392.744386][T18608] netlink: 'syz.1.3961': attribute type 1 has an invalid length.
[  392.748474][T18608] netlink: 'syz.1.3961': attribute type 1 has an invalid length.
[  393.733234][T18677] __nla_validate_parse: 23 callbacks suppressed
[  393.733244][T18677] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3982'.
[  393.815257][T18684] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[  393.894318][T18686] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:0
[  394.093929][T18692] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3986'.
[  394.502967][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3993'.
[  394.883906][T18750] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20001
[  395.453645][T18759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4004'.
[  395.531552][T18763] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.575342][T18763] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.650478][T18763] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.706317][T18769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4007'.
[  395.717421][T18763] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.826405][T18763] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  395.834724][T18763] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  395.853706][T18763] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  395.870071][T18763] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  396.423416][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4011'.
[  396.428547][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4011'.
[  396.958357][T18819] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4024'.
[  396.961422][T18819] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4024'.
[  396.965221][T18819] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  396.999829][T18820] netlink: 'syz.0.4023': attribute type 20 has an invalid length.
[  397.098631][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4027'.
[  397.202687][T18834] wireguard1: entered promiscuous mode
[  397.205271][T18834] wireguard1: entered allmulticast mode
[  398.107863][T18882] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  398.970073][T18913] __nla_validate_parse: 10 callbacks suppressed
[  398.970083][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4052'.
[  398.975594][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4052'.
[  398.987907][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4052'.
[  399.927807][T18954] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[  399.936022][T18955] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[  400.362197][T18965] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4070'.
[  401.431778][T18989] netlink: 63 bytes leftover after parsing attributes in process `syz.1.4077'.
[  401.435492][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4077'.
[  401.441906][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4077'.
[  401.738996][T19000] netlink: 'syz.1.4080': attribute type 21 has an invalid length.
[  401.744302][T19000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4080'.
[  401.750900][T19000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4080'.
[  401.757983][T19000] netlink: 'syz.1.4080': attribute type 7 has an invalid length.
[  401.762780][T19000] netlink: 'syz.1.4080': attribute type 8 has an invalid length.
[  401.769739][T19000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4080'.
[  402.139910][T19010] netlink: 'syz.0.4082': attribute type 16 has an invalid length.
[  402.142618][T19010] netlink: 'syz.0.4082': attribute type 17 has an invalid length.
[  402.145468][T19022] veth0_to_bridge: entered promiscuous mode
[  402.162469][T19010] IPv6: NLM_F_REPLACE set, but no existing node found!
[  402.167042][T19022] veth0_to_bridge: left promiscuous mode
[  402.459125][T19047] netlink: 'syz.1.4092': attribute type 5 has an invalid length.
[  402.481612][T19047] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  402.485318][T19047] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  402.493855][T19047] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  402.499741][T19047] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  402.503299][T19047] geneve3: entered promiscuous mode
[  402.505424][T19047] geneve3: entered allmulticast mode
[  402.801944][T19058] tun0: tun_chr_ioctl cmd 1074025677
[  402.804184][T19058] tun0: linktype set to 778
[  402.808588][T19059] tun0: tun_chr_ioctl cmd 35108
[  404.034357][T19115] __nla_validate_parse: 5 callbacks suppressed
[  404.034373][T19115] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4110'.
[  404.303574][T19120] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.307454][T19120] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.311113][T19120] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.314548][T19120] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.344309][T19120] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  404.358383][T19120] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  404.369191][T19120] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  404.372914][T19120] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  405.374366][T19147] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4122'.
[  406.453734][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4153'.
[  406.457727][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4153'.
[  406.813141][T19255] openvswitch: netlink: Message has 4 unknown bytes.
[  407.035389][T19270] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4167'.
[  407.641423][T19304] netlink: 'syz.1.4178': attribute type 303 has an invalid length.
[  407.644958][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4178'.
[  407.707581][T19304] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  407.711493][T19304] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  407.979766][T19311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4180'.
[  408.294258][T19316] netlink: 'syz.0.4182': attribute type 83 has an invalid length.
[  408.577713][T19324] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4185'.
[  408.933748][T19332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.943491][T19332] syzkaller0: entered promiscuous mode
[  408.946332][T19332] syzkaller0: entered allmulticast mode
[  408.981545][T19332] tipc: Resetting bearer <eth:syzkaller0>
[  408.994606][T19332] tipc: Disabling bearer <eth:syzkaller0>
[  409.071769][T19341] netlink: 'syz.1.4189': attribute type 1 has an invalid length.
[  409.108046][T19347] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4191'.
[  409.233719][T19363] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4197'.
[  409.366507][T19380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  409.442851][T19387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4203'.
[  409.459886][T19392] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4206'.
[  409.655413][   T60] block nbd0: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 300 seconds
[  409.660154][   T60] block nbd0: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 300 seconds
[  409.664601][   T60] block nbd0: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 300 seconds
[  409.669424][   T60] block nbd0: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 300 seconds
[  409.741192][T19408] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4212'.
[  409.958115][T19431] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.197389][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4232'.
[  412.249861][T19506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4243'.
[  412.253540][T19506] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  412.265853][T19506] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  412.813224][T19524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4248'.
[  412.817330][T19524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4248'.
[  413.121649][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4255'.
[  413.164587][T19550] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  413.180498][T19550] netlink: 'syz.1.4258': attribute type 1 has an invalid length.
[  414.704834][T19651] __nla_validate_parse: 71 callbacks suppressed
[  414.704844][T19651] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4294'.
[  414.884958][T19657] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4297'.
[  414.931900][T19673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4302'.
[  415.597489][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4304'.
[  415.604346][T19683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4304'.
[  415.608018][T19683] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4304'.
[  415.847650][T19690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4306'.
[  416.317449][T19721] netlink: 'syz.0.4314': attribute type 5 has an invalid length.
[  416.798063][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'.
[  416.883137][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4332'.
[  416.913532][T19775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  416.915950][T19775] IPv6: NLM_F_CREATE should be set when creating new route
[  416.918299][T19775] IPv6: NLM_F_CREATE should be set when creating new route
[  416.995142][T19780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4335'.
[  417.050734][T19780] 8021q: adding VLAN 0 to HW filter on device bond4
[  418.097096][T19847] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  418.931139][T19869] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  419.252591][T19891] netlink: 'syz.2.4371': attribute type 4 has an invalid length.
[  420.463177][T19950] __nla_validate_parse: 7 callbacks suppressed
[  420.463188][T19950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4387'.
[  420.661346][T19957] @: renamed from bond_slave_0
[  421.600024][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  421.607534][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  421.611067][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  421.614896][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  421.623373][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  421.712251][ T5914] bond0 (unregistering): (slave gretap1): Releasing active interface
[  422.082675][ T5914] bond0 (unregistering): Released all slaves
[  422.090945][ T5914] bond1 (unregistering): Released all slaves
[  422.157934][ T5914] bond2 (unregistering): Released all slaves
[  422.164928][ T5914] bond3 (unregistering): Released all slaves
[  422.260156][ T5914] tipc: Left network mode
[  422.289694][T20011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4406'.
[  422.521295][T20016] ipt_rpfilter: unknown options
[  423.194340][ T5914] hsr_slave_0: left promiscuous mode
[  423.198413][ T5914] hsr_slave_1: left promiscuous mode
[  423.274190][ T5914] pim6reg (unregistering): left allmulticast mode
[  423.647878][T10196] Bluetooth: hci0: command tx timeout
[  424.007330][T20005] chnl_net:caif_netlink_parms(): no params data found
[  424.106480][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4417'.
[  424.113079][T20005] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.115616][T20005] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.120017][T20005] bridge_slave_0: entered allmulticast mode
[  424.123432][T20005] bridge_slave_0: entered promiscuous mode
[  424.132347][T20005] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.134696][T20005] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.137801][T20005] bridge_slave_1: entered allmulticast mode
[  424.140599][T20005] bridge_slave_1: entered promiscuous mode
[  424.165611][T20005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.170524][T20005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.216261][T20005] team0: Port device team_slave_0 added
[  424.219684][T20005] team0: Port device team_slave_1 added
[  424.239726][T20005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.242103][T20005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.250988][T20005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.263832][T20005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.266357][T20005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.284653][T20005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.354166][T20005] hsr_slave_0: entered promiscuous mode
[  424.357636][T20005] hsr_slave_1: entered promiscuous mode
[  424.569409][ T5914] IPVS: stop unused estimator thread 0...
[  424.840287][T20005] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  424.846325][T20005] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  424.859926][T20005] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  424.864558][T20005] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  424.890153][T20105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4420'.
[  424.895396][T20005] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.897795][T20005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.901716][T20005] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.904663][T20005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.930078][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.934088][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.966512][T20005] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.977657][T20005] 8021q: adding VLAN 0 to HW filter on device team0
[  424.985113][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.987477][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.000799][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.003233][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.018866][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4420'.
[  425.128277][T20005] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.182185][T20005] veth0_vlan: entered promiscuous mode
[  425.188586][T20005] veth1_vlan: entered promiscuous mode
[  425.201533][T20005] veth0_macvtap: entered promiscuous mode
[  425.205209][T20005] veth1_macvtap: entered promiscuous mode
[  425.240226][T20005] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.247910][T20005] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.255431][T20132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4424'.
[  425.261947][T20005] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.264751][T20005] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.268652][T20005] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.271678][T20005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.367456][  T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.370501][  T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.409261][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.411912][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.207561][T20183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4434'.
[  426.210452][T20183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4434'.
[  426.213226][T20183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4434'.
[  426.218103][T20183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4434'.
[  427.561323][ T5857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.836806][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  427.841073][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  427.845147][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  427.851205][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  427.854992][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  427.999685][T20234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4448'.
[  428.003572][T20234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4448'.
[  428.009087][T20234] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  428.132025][T20240] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  428.235306][T20220] chnl_net:caif_netlink_parms(): no params data found
[  428.303721][T20220] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.307025][T20220] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.310080][T20220] bridge_slave_0: entered allmulticast mode
[  428.314105][T20220] bridge_slave_0: entered promiscuous mode
[  428.319302][T20220] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.322361][T20220] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.325635][T20220] bridge_slave_1: entered allmulticast mode
[  428.330037][T20220] bridge_slave_1: entered promiscuous mode
[  428.354153][T20220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  428.359603][T20220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  428.382525][T20220] team0: Port device team_slave_0 added
[  428.387662][T20220] team0: Port device team_slave_1 added
[  428.408542][T20220] batman_adv: batadv0: Adding interface: batadv_slave_0
[  428.410966][T20220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.420265][T20220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  428.428788][T20220] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.431660][T20220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.442708][T20220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.483685][T20220] hsr_slave_0: entered promiscuous mode
[  428.486247][T20220] hsr_slave_1: entered promiscuous mode
[  428.488871][T20220] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  428.491516][T20220] Cannot create hsr debugfs directory
[  428.982649][T20264] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4457'.
[  428.986883][T20264] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4457'.
[  428.990505][T20264] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  429.045284][T20266] netlink: 'syz.1.4458': attribute type 11 has an invalid length.
[  429.048257][T20266] netlink: 'syz.1.4458': attribute type 11 has an invalid length.
[  429.051293][T20266] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4458'.
[  429.144170][ T5857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.190703][ T5857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.213575][T20273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4460'.
[  429.291907][ T5857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.532848][ T5857] bridge_slave_1: left allmulticast mode
[  429.535247][ T5857] bridge_slave_1: left promiscuous mode
[  429.538235][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.544128][ T5857] bridge_slave_0: left allmulticast mode
[  429.554279][ T5857] bridge_slave_0: left promiscuous mode
[  429.556564][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.777667][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  429.781953][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  429.787077][ T5857] bond0 (unregistering): Released all slaves
[  429.886008][ T5829] Bluetooth: hci0: command tx timeout
[  430.327665][T20220] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  430.339066][T20220] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  430.351481][T20220] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  430.362187][T20220] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  430.399952][ T5857] hsr_slave_0: left promiscuous mode
[  430.402192][ T5857] hsr_slave_1: left promiscuous mode
[  430.404364][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.406928][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  430.421685][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.424280][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  430.461374][ T5857] veth1_macvtap: left promiscuous mode
[  430.463331][ T5857] veth0_macvtap: left promiscuous mode
[  430.465253][ T5857] veth1_vlan: left promiscuous mode
[  430.470830][ T5857] veth0_vlan: left promiscuous mode
[  430.846316][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  430.868943][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  431.167199][T20220] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.178744][T20220] 8021q: adding VLAN 0 to HW filter on device team0
[  431.218832][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.221597][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.241458][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.244192][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.417816][T20220] 8021q: adding VLAN 0 to HW filter on device batadv0
[  431.445058][T20220] veth0_vlan: entered promiscuous mode
[  431.453368][T20220] veth1_vlan: entered promiscuous mode
[  431.480697][T20220] veth0_macvtap: entered promiscuous mode
[  431.488518][T20220] veth1_macvtap: entered promiscuous mode
[  431.505963][T20220] batman_adv: batadv0: Interface activated: batadv_slave_0
[  431.512451][T20220] batman_adv: batadv0: Interface activated: batadv_slave_1
[  431.519876][T20220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.522870][T20220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.527720][T20220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.530707][T20220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.580699][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.583147][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.602384][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.605841][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.252193][T20359] __nla_validate_parse: 3 callbacks suppressed
[  432.252204][T20359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4472'.
[  432.257844][T20359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4472'.
[  432.261210][T20359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4472'.
[  432.320949][T20366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4475'.
[  433.198919][T20372] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4477'.
[  433.378862][ T5838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.612127][T20414] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4491'.
[  433.655277][T10196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  433.658717][T10196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  433.661642][T10196] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  433.664525][T10196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  433.675020][T10196] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  433.977348][T20419] chnl_net:caif_netlink_parms(): no params data found
[  434.055910][T20419] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.059071][T20419] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.062291][T20419] bridge_slave_0: entered allmulticast mode
[  434.066220][T20419] bridge_slave_0: entered promiscuous mode
[  434.072274][T20419] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.075312][T20419] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.079426][T20419] bridge_slave_1: entered allmulticast mode
[  434.083164][T20419] bridge_slave_1: entered promiscuous mode
[  434.118264][T20419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.124943][T20419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  434.156185][T20419] team0: Port device team_slave_0 added
[  434.162647][T20419] team0: Port device team_slave_1 added
[  434.188351][T20419] batman_adv: batadv0: Adding interface: batadv_slave_0
[  434.190825][T20419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.201516][T20419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  434.213631][T20419] batman_adv: batadv0: Adding interface: batadv_slave_1
[  434.216698][T20419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.226678][T20419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  434.268995][T20419] hsr_slave_0: entered promiscuous mode
[  434.272122][T20419] hsr_slave_1: entered promiscuous mode
[  434.633424][T20448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4501'.
[  434.636914][T20447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4501'.
[  434.760013][ T5838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.808160][T20455] Bluetooth: MGMT ver 1.23
[  434.839380][ T5838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.893258][ T5838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.018864][ T5838] bridge_slave_1: left allmulticast mode
[  435.021027][ T5838] bridge_slave_1: left promiscuous mode
[  435.023226][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.033755][ T5838] bridge_slave_0: left allmulticast mode
[  435.036574][ T5838] bridge_slave_0: left promiscuous mode
[  435.038484][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.258716][ T5838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  435.263182][ T5838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  435.268268][ T5838] bond0 (unregistering): Released all slaves
[  435.735825][ T5829] Bluetooth: hci0: command tx timeout
[  435.906294][ T5838] hsr_slave_0: left promiscuous mode
[  435.911825][ T5838] hsr_slave_1: left promiscuous mode
[  435.914480][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.918125][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.922661][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.936070][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.954183][ T5838] veth1_macvtap: left promiscuous mode
[  435.961354][ T5838] veth0_macvtap: left promiscuous mode
[  435.963704][ T5838] veth1_vlan: left promiscuous mode
[  435.966794][ T5838] veth0_vlan: left promiscuous mode
[  435.992467][T20487] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4511'.
[  436.246857][ T5838] team0 (unregistering): Port device team_slave_1 removed
[  436.274984][ T5838] team0 (unregistering): Port device team_slave_0 removed
[  436.540268][T20419] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  436.558121][T20419] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  436.569535][T20419] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  436.581143][T20419] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  436.734471][T20419] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.746424][T20419] 8021q: adding VLAN 0 to HW filter on device team0
[  436.751629][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.754013][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.767497][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.770137][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.799911][T20419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  436.803521][T20419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  436.945305][T20419] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.004377][T20419] veth0_vlan: entered promiscuous mode
[  437.019072][T20419] veth1_vlan: entered promiscuous mode
[  437.055586][T20419] veth0_macvtap: entered promiscuous mode
[  437.062637][T20419] veth1_macvtap: entered promiscuous mode
[  437.084035][T20419] batman_adv: batadv0: Interface activated: batadv_slave_0
[  437.105121][T20419] batman_adv: batadv0: Interface activated: batadv_slave_1
[  437.112532][T20419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.117034][T20419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.120663][T20419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.124523][T20419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.232024][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.247348][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.275293][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.279112][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.822200][   T34] INFO: task udevd:5831 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  437.833135][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  437.845763][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  437.853057][   T34] task:udevd           state:D stack:19864 pid:5831  tgid:5831  ppid:5280   task_flags:0x400140 flags:0x00004006
[  437.866563][   T34] Call Trace:
[  437.867805][   T34]  <TASK>
[  437.868812][   T34]  __schedule+0x16f5/0x4d00
[  437.870609][   T34]  ? schedule+0x165/0x360
[  437.872150][   T34]  ? __pfx___schedule+0x10/0x10
[  437.877269][   T34]  ? schedule+0x91/0x360
[  437.893335][   T34]  schedule+0x165/0x360
[  437.895758][   T34]  io_schedule+0x80/0xd0
[  437.899527][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  437.903622][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  437.907400][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  437.911611][   T34]  ? __filemap_get_folio+0x790/0xaf0
[  437.915928][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  437.918917][   T34]  do_read_cache_folio+0x1aa/0x590
[  437.922959][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  437.927415][   T34]  read_part_sector+0xb6/0x2b0
[  437.930346][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  437.934652][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  437.939084][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  437.944894][   T34]  bdev_disk_changed+0x75f/0x14b0
[  437.950399][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  437.955173][   T34]  ? wait_on_inode+0xc0/0x230
[  437.958348][   T34]  blkdev_get_whole+0x380/0x510
[  437.962600][   T34]  bdev_open+0x31e/0xd30
[  437.970111][   T34]  blkdev_open+0x3a8/0x510
[  437.973991][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  437.978132][   T34]  do_dentry_open+0xdf3/0x1970
[  437.981048][   T34]  vfs_open+0x3b/0x340
[  437.983675][   T34]  ? path_openat+0x2ecd/0x3830
[  437.989881][   T34]  path_openat+0x2ee5/0x3830
[  437.992584][   T34]  ? arch_stack_walk+0xfc/0x150
[  437.996051][   T34]  ? __pfx_path_openat+0x10/0x10
[  437.999983][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.004221][   T34]  do_filp_open+0x1fa/0x410
[  438.007087][   T34]  ? __lock_acquire+0xab9/0xd20
[  438.011075][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  438.013961][   T34]  ? _raw_spin_unlock+0x28/0x50
[  438.016275][   T34]  ? alloc_fd+0x64c/0x6c0
[  438.017821][   T34]  do_sys_openat2+0x121/0x1c0
[  438.019447][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  438.022267][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  438.024118][   T34]  ? rcu_is_watching+0x15/0xb0
[  438.029988][   T34]  __x64_sys_openat+0x138/0x170
[  438.031843][   T34]  do_syscall_64+0xfa/0x3b0
[  438.033516][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.046071][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  438.048618][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.050570][   T34] RIP: 0033:0x7f6169f169a4
[  438.051999][   T34] RSP: 002b:00007fff87bc3490 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  438.054726][   T34] RAX: ffffffffffffffda RBX: 0000564597b8afd0 RCX: 00007f6169f169a4
[  438.087739][   T34] RDX: 00000000000a0800 RSI: 0000564597b8b4d0 RDI: 00000000ffffff9c
[  438.090452][   T34] RBP: 0000564597b8b4d0 R08: 0000000000000001 R09: 7fffffffffffffff
[  438.093439][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  438.107801][   T34] R13: 0000564597ba1910 R14: 0000000000000001 R15: 0000564597b8a910
[  438.110393][   T34]  </TASK>
[  438.111583][   T34] 
[  438.111583][   T34] Showing all locks held in the system:
[  438.114694][   T34] 3 locks held by kworker/0:1/10:
[  438.118422][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  438.122068][   T34]  #1: ffffc900000d7bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  438.128911][   T34]  #2: ffffffff8e144b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  438.132411][   T34] 1 lock held by khungtaskd/34:
[  438.134042][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  438.137644][   T34] 2 locks held by syslogd/5262:
[  438.139240][   T34]  #0: ffff888136639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  438.142465][   T34]  #1: ffff888136623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0
[  438.148371][   T34] 2 locks held by getty/5657:
[  438.150418][   T34]  #0: ffff88810da010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  438.153742][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  438.158794][   T34] 1 lock held by udevd/5831:
[  438.160745][   T34]  #0: ffff88802237b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  438.164636][   T34] 3 locks held by kworker/u8:2/5838:
[  438.170242][   T34]  #0: ffff888107bc8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  438.174460][   T34]  #1: ffffc90003ebfbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  438.178962][   T34]  #2: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0
[  438.182023][   T34] 5 locks held by kworker/u8:3/5857:
[  438.183750][   T34]  #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  438.189616][   T34]  #1: ffffc90003f9fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  438.193051][   T34]  #2: ffffffff8f510c10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  438.196273][   T34]  #3: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890
[  438.200014][   T34]  #4: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  438.203531][   T34] 3 locks held by kworker/1:5/6466:
[  438.205248][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  438.211251][   T34]  #1: ffffc90007cafbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  438.215326][   T34]  #2: ffff88812c825240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180
[  438.220792][   T34] 1 lock held by syz-executor/20419:
[  438.222573][   T34]  #0: ffffffff8e144b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  438.227639][   T34] 1 lock held by syz.1.4515/20516:
[  438.229351][   T34]  #0: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  438.247256][   T34] 
[  438.248125][   T34] =============================================
[  438.248125][   T34] 
[  438.250882][   T34] NMI backtrace for cpu 0
[  438.250891][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  438.250900][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  438.250904][   T34] Call Trace:
[  438.250909][   T34]  <TASK>
[  438.250913][   T34]  dump_stack_lvl+0x189/0x250
[  438.250926][   T34]  ? __wake_up_klogd+0xd9/0x110
[  438.250938][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  438.250947][   T34]  ? __pfx__printk+0x10/0x10
[  438.250962][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  438.250975][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  438.250983][   T34]  ? _printk+0xcf/0x120
[  438.250994][   T34]  ? __pfx__printk+0x10/0x10
[  438.251004][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  438.251012][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  438.251023][   T34]  watchdog+0xfee/0x1030
[  438.251032][   T34]  ? watchdog+0x1de/0x1030
[  438.251046][   T34]  kthread+0x711/0x8a0
[  438.251058][   T34]  ? __pfx_watchdog+0x10/0x10
[  438.251064][   T34]  ? __pfx_kthread+0x10/0x10
[  438.251075][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  438.251086][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.251097][   T34]  ? __pfx_kthread+0x10/0x10
[  438.251107][   T34]  ret_from_fork+0x3fc/0x770
[  438.251117][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  438.251126][   T34]  ? __switch_to_asm+0x39/0x70
[  438.251135][   T34]  ? __switch_to_asm+0x33/0x70
[  438.251144][   T34]  ? __pfx_kthread+0x10/0x10
[  438.251153][   T34]  ret_from_fork_asm+0x1a/0x30
[  438.251167][   T34]  </TASK>
[  438.251170][   T34] Sending NMI from CPU 0 to CPUs 1:
[  438.304786][    C1] NMI backtrace for cpu 1
[  438.304798][    C1] CPU: 1 UID: 0 PID: 12400 Comm: kworker/u8:5 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  438.304807][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  438.304812][    C1] Workqueue: bat_events batadv_nc_worker
[  438.304828][    C1] RIP: 0010:lock_acquire+0x15c/0x360
[  438.304839][    C1] Code: ff ff ff 65 0f c1 05 f3 50 02 11 83 f8 01 0f 85 c9 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 <0f> 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 9b
[  438.304866][    C1] RSP: 0018:ffffc90007a37980 EFLAGS: 00000046
[  438.304874][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: bcb5496a7909f100
[  438.304878][    C1] RDX: 0000000000000000 RSI: ffffffff8db8660e RDI: ffffffff8be29dc0
[  438.304883][    C1] RBP: ffffffff8b3cf902 R08: 0000000000000000 R09: ffffffff8b3cf902
[  438.304888][    C1] R10: dffffc0000000000 R11: ffffffff8b3cf830 R12: 0000000000000002
[  438.304892][    C1] R13: ffffffff8e13f160 R14: 0000000000000000 R15: 0000000000000246
[  438.304897][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  438.304902][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  438.304906][    C1] CR2: 00007f909fc08fc8 CR3: 000000010fc38000 CR4: 00000000000006f0
[  438.304933][    C1] Call Trace:
[  438.304938][    C1]  <TASK>
[  438.304944][    C1]  ? batadv_nc_worker+0xd2/0x610
[  438.304954][    C1]  ? batadv_nc_worker+0xd2/0x610
[  438.304962][    C1]  batadv_nc_worker+0xef/0x610
[  438.304970][    C1]  ? batadv_nc_worker+0xd2/0x610
[  438.304978][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  438.304987][    C1]  process_scheduled_works+0xae1/0x17b0
[  438.304999][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  438.305009][    C1]  worker_thread+0x8a0/0xda0
[  438.305017][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  438.305028][    C1]  ? __kthread_parkme+0x7b/0x200
[  438.305038][    C1]  kthread+0x711/0x8a0
[  438.305047][    C1]  ? __pfx_worker_thread+0x10/0x10
[  438.305054][    C1]  ? __pfx_kthread+0x10/0x10
[  438.305062][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  438.305071][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.305081][    C1]  ? __pfx_kthread+0x10/0x10
[  438.305095][    C1]  ret_from_fork+0x3fc/0x770
[  438.305103][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  438.305111][    C1]  ? __switch_to_asm+0x39/0x70
[  438.305120][    C1]  ? __switch_to_asm+0x33/0x70
[  438.305128][    C1]  ? __pfx_kthread+0x10/0x10
[  438.305136][    C1]  ret_from_fork_asm+0x1a/0x30
[  438.305147][    C1]  </TASK>
[  438.469644][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  438.471984][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  438.476192][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  438.479642][   T34] Call Trace:
[  438.480731][   T34]  <TASK>
[  438.481748][   T34]  dump_stack_lvl+0x99/0x250
[  438.483296][   T34]  ? __asan_memcpy+0x40/0x70
[  438.484820][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  438.486621][   T34]  ? __pfx__printk+0x10/0x10
[  438.488378][   T34]  panic+0x2db/0x790
[  438.489922][   T34]  ? __pfx_panic+0x10/0x10
[  438.491590][   T34]  ? __pfx_delay_tsc+0x10/0x10
[  438.493409][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  438.495340][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  438.497110][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  438.499295][   T34]  watchdog+0x102d/0x1030
[  438.500920][   T34]  ? watchdog+0x1de/0x1030
[  438.502830][   T34]  kthread+0x711/0x8a0
[  438.504606][   T34]  ? __pfx_watchdog+0x10/0x10
[  438.506573][   T34]  ? __pfx_kthread+0x10/0x10
[  438.508558][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  438.510664][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.512375][   T34]  ? __pfx_kthread+0x10/0x10
[  438.513917][   T34]  ret_from_fork+0x3fc/0x770
[  438.515682][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  438.517870][   T34]  ? __switch_to_asm+0x39/0x70
[  438.519798][   T34]  ? __switch_to_asm+0x33/0x70
[  438.521744][   T34]  ? __pfx_kthread+0x10/0x10
[  438.523595][   T34]  ret_from_fork_asm+0x1a/0x30
[  438.525426][   T34]  </TASK>
[  438.527130][   T34] Kernel Offset: disabled
[  438.528812][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:49:27  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000010 RBX=fffffffffffffff4 RCX=000000000000000c RDX=ffffffffffffffff
RSI=ffffffff8b951660 RDI=ffffffff8be29dc0 RBP=dffffc0000000000 RSP=ffffc9000315f4d0
R8 =0000000000000000 R9 =ffffffff822b34d9 R10=dffffc0000000000 R11=fffff940009b364f
R12=ffff88813fff7400 R13=ffffffff92a25140 R14=0000000000000011 R15=0000000000000011
RIP=ffffffff82030778 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556bda9500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5a7bae7d60 CR3=000000002b108000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000003172 656c6c616b7a7973
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ef7d84a96480f3c8 d3dbd6a2d5f44585 XMM09=0000000000000000 00007fd8b4a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000004 RCX=ffffffff934902f0 RDX=0000000000000008
RSI=ffff888020f4e1d0 RDI=ffff888020f4d640 RBP=0000000000000000 RSP=ffffc90003f9f310
R8 =0000000000000000 R9 =ffffffff84c7fde4 R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=0000000000000004 R13=0000000000000002 R14=ffff888020f4e1d0 R15=0000000000000000
RIP=ffffffff819e48ca RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f909fc08fc8 CR3=000000001cf8a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f909ef85478 00007f909ef85450 XMM03=00007f909ef85488 00007f909ef85480
XMM04=00007f909faed100 00007f909ef85440 XMM05=00007f909ef85458 00007f909ef854a0
XMM06=00007f909ef85498 00007f909ef85490 XMM07=00007f909ef85488 00007f909ef85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f909ee11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
