last executing test programs:

1m37.807836832s ago: executing program 2 (id=2056):
r0 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0)

1m37.807663767s ago: executing program 2 (id=2057):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x0, 0x5, {0x6d}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5b, 0x3, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x0)

1m37.3270293s ago: executing program 0 (id=2068):
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, 0x0)

1m37.326685776s ago: executing program 0 (id=2070):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

1m35.767064507s ago: executing program 0 (id=2072):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0xa, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)

1m34.967378019s ago: executing program 2 (id=2073):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0)

1m33.259138382s ago: executing program 0 (id=2075):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000088000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000500004801400030076657468315f6d61637674617000000008000140000000051400030062617461647656c2b252efa0cbb5e0f9"], 0x124}}, 0x0)

1m31.206137224s ago: executing program 2 (id=2076):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m29.991439222s ago: executing program 2 (id=2077):
unshare(0x20000400)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe)

1m28.091145321s ago: executing program 0 (id=2078):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/45, 0x2d}], 0x1)

1m24.750913761s ago: executing program 2 (id=2080):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x0, @val=@netkit}, 0x1c)
syz_emit_ethernet(0x6a, &(0x7f0000000740)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x33, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}}}}}}}}, 0x0)

1m18.32418758s ago: executing program 0 (id=2082):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1f0bd26, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x0)
sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x8000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190d6ec0e96bb89261cb20081"], 0x1c}, 0x1, 0xfff0}, 0x0)

1m10.126535031s ago: executing program 32 (id=2080):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x0, @val=@netkit}, 0x1c)
syz_emit_ethernet(0x6a, &(0x7f0000000740)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x33, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}}}}}}}}, 0x0)

59.754118219s ago: executing program 33 (id=2082):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1f0bd26, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x0)
sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x8000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190d6ec0e96bb89261cb20081"], 0x1c}, 0x1, 0xfff0}, 0x0)

48.76977727s ago: executing program 1 (id=2091):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)

45.145072182s ago: executing program 1 (id=2092):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000001202"], 0x0, 0x52}, 0x28)

40.563026318s ago: executing program 1 (id=2093):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt(r0, 0x84, 0xd, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x8)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0xbd2e}, 0x8)
r1 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x8101, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001, 0x0, 0x5}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0xfffffffd, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000206010800000000000000000700000405000100070000000900020073797a30000000000c000780080012000000004111000300686173683a69702c6d61726b00000000050005000a0000000500040001000000"], 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c000280050001000000000024000180140001"], 0x80}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x1000004, 0x0, {0x80}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1)
bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10)

24.271673061s ago: executing program 1 (id=2094):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000200000002"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r0}, 0x38)

22.12915047s ago: executing program 1 (id=2095):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0)
listen(r0, 0x1ff)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r1, &(0x7f0000000500)="ab", 0x1, 0x11, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
recvfrom$inet(r0, &(0x7f0000000140)=""/35, 0x23, 0x40000000, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10)

16.709480121s ago: executing program 1 (id=2096):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
socket(0x80000000000000a, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xfffffffffffffdd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0)

0s ago: executing program 34 (id=2096):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
socket(0x80000000000000a, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xfffffffffffffdd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10211' (ED25519) to the list of known hosts.
syzkaller login: [   56.693703][ T5795] cgroup: Unknown subsys name 'net'
[   56.795204][ T5795] cgroup: Unknown subsys name 'cpuset'
[   56.798663][ T5795] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.082450][ T5795] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.757972][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.760878][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.764084][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.766566][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.768812][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.793534][ T5199] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.796207][ T5199] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.798883][ T5199] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.801259][ T5199] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.804368][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.807208][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.819045][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.821574][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.824505][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.826785][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.064717][ T5807] chnl_net:caif_netlink_parms(): no params data found
[   62.086812][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   62.110095][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   62.219071][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.221878][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.226555][ T5814] bridge_slave_0: entered allmulticast mode
[   62.230101][ T5814] bridge_slave_0: entered promiscuous mode
[   62.245586][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.247798][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.250053][ T5807] bridge_slave_0: entered allmulticast mode
[   62.254861][ T5807] bridge_slave_0: entered promiscuous mode
[   62.258138][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.260426][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.263518][ T5807] bridge_slave_1: entered allmulticast mode
[   62.266410][ T5807] bridge_slave_1: entered promiscuous mode
[   62.269160][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.271922][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.275095][ T5814] bridge_slave_1: entered allmulticast mode
[   62.278763][ T5814] bridge_slave_1: entered promiscuous mode
[   62.282039][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.285115][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.287664][ T5812] bridge_slave_0: entered allmulticast mode
[   62.291547][ T5812] bridge_slave_0: entered promiscuous mode
[   62.312035][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.314648][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.316986][ T5812] bridge_slave_1: entered allmulticast mode
[   62.320272][ T5812] bridge_slave_1: entered promiscuous mode
[   62.353757][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.359388][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.366779][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.371403][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.375964][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.381027][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.418730][ T5807] team0: Port device team_slave_0 added
[   62.440539][ T5812] team0: Port device team_slave_0 added
[   62.444155][ T5807] team0: Port device team_slave_1 added
[   62.447592][ T5814] team0: Port device team_slave_0 added
[   62.459621][ T5812] team0: Port device team_slave_1 added
[   62.471244][ T5814] team0: Port device team_slave_1 added
[   62.492866][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.495124][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.504459][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.528593][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.530784][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.540023][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.545488][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.548200][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.558650][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.563327][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.565721][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.575032][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.580074][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.583084][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.593208][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.611557][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.614005][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.623296][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.663596][ T5814] hsr_slave_0: entered promiscuous mode
[   62.665875][ T5814] hsr_slave_1: entered promiscuous mode
[   62.691447][ T5812] hsr_slave_0: entered promiscuous mode
[   62.694576][ T5812] hsr_slave_1: entered promiscuous mode
[   62.697291][ T5812] debugfs: 'hsr0' already exists in 'hsr'
[   62.699586][ T5812] Cannot create hsr debugfs directory
[   62.706799][ T5807] hsr_slave_0: entered promiscuous mode
[   62.709026][ T5807] hsr_slave_1: entered promiscuous mode
[   62.711202][ T5807] debugfs: 'hsr0' already exists in 'hsr'
[   62.715037][ T5807] Cannot create hsr debugfs directory
[   62.953506][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.959723][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.977415][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.982009][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.011654][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.027791][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.051433][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.066329][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.119442][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.130727][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.137069][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.148391][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.171100][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.207136][ T5807] 8021q: adding VLAN 0 to HW filter on device team0
[   63.218314][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.221117][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.233614][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.236386][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.335649][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.360677][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   63.370363][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.384828][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.387693][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.417198][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.420044][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.440991][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   63.456122][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.458868][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.476768][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.479533][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.504108][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.565356][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.599742][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.670616][ T5807] veth0_vlan: entered promiscuous mode
[   63.680497][ T5807] veth1_vlan: entered promiscuous mode
[   63.714054][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.731026][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.755579][ T5807] veth0_macvtap: entered promiscuous mode
[   63.767113][ T5807] veth1_macvtap: entered promiscuous mode
[   63.805338][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.819589][ T5812] veth0_vlan: entered promiscuous mode
[   63.826746][ T5814] veth0_vlan: entered promiscuous mode
[   63.831455][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.836455][   T54] Bluetooth: hci0: command tx timeout
[   63.856614][ T5812] veth1_vlan: entered promiscuous mode
[   63.865536][ T5814] veth1_vlan: entered promiscuous mode
[   63.868740][ T5863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.876689][ T5863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.889069][ T5863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.900040][ T5863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.913145][   T54] Bluetooth: hci2: command tx timeout
[   63.922908][   T54] Bluetooth: hci1: command tx timeout
[   63.928285][ T5814] veth0_macvtap: entered promiscuous mode
[   63.933958][ T5814] veth1_macvtap: entered promiscuous mode
[   63.979733][ T5812] veth0_macvtap: entered promiscuous mode
[   63.993959][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.007262][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.010438][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.014524][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.031740][ T5812] veth1_macvtap: entered promiscuous mode
[   64.040095][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.058688][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.062333][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.077498][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.092484][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.098221][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.102790][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.123915][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.159836][ T5863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.162939][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.173422][ T5863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.175536][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.182289][ T5807] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.196089][ T5863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.199944][ T5863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.268254][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.273704][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.286236][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.289548][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.321948][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.329135][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.784618][ T5893] Illegal XDP return value 4294964480 on prog  (id 2) dev syz_tun, expect packet loss!
[   64.951930][ T5905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'.
[   65.071117][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'.
[   65.077411][ T5911] syzkaller0: entered promiscuous mode
[   65.086521][ T5911] syzkaller0: entered allmulticast mode
[   65.184628][ T5919] warning: `syz.2.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.190160][ T5917] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET)
[   65.257319][ T5921] bond1: option primary_reselect: invalid value (4)
[   65.262769][ T5921] bond1 (unregistering): Released all slaves
[   65.442984][ T5928] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   65.446154][ T5928] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   65.501911][ T5932] tipc: Failed to obtain node identity
[   65.508040][ T5932] tipc: Enabling of bearer <ib:gre0> rejected, failed to enable media
[   65.624243][ T5942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33'.
[   65.660983][ T5944] Bluetooth: MGMT ver 1.23
[   65.868943][ T5958] netlink: 'syz.2.40': attribute type 2 has an invalid length.
[   65.882941][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'.
[   65.888055][ T5958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   65.912880][   T54] Bluetooth: hci0: command tx timeout
[   65.993011][   T54] Bluetooth: hci1: command tx timeout
[   65.994699][   T54] Bluetooth: hci2: command tx timeout
[   66.019428][ T5965] vlan2: entered allmulticast mode
[   66.021169][ T5965] macvtap0: entered allmulticast mode
[   66.025101][ T5965] veth0_macvtap: entered allmulticast mode
[   66.062258][ T5969] bond1: entered promiscuous mode
[   66.088838][ T5969] bond1: entered allmulticast mode
[   66.094056][ T5969] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.429281][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.432097][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.475966][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.487268][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.535351][ T5997] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[   66.565572][ T6002] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   66.570087][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.582716][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.604400][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.607216][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.724354][ T6010] netlink: 'syz.1.64': attribute type 1 has an invalid length.
[   66.786575][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.64'.
[   66.905626][ T6010] Zero length message leads to an empty skb
[   67.992909][ T5816] Bluetooth: hci0: command tx timeout
[   68.077787][ T5816] Bluetooth: hci2: command tx timeout
[   68.079732][ T5816] Bluetooth: hci1: command tx timeout
[   68.293811][ T6069] netlink: 'syz.1.85': attribute type 1 has an invalid length.
[   68.856096][ T6107] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.101'.
[   68.951171][ T6115] netlink: 'syz.0.106': attribute type 1 has an invalid length.
[   68.965619][ T6115] netlink: 'syz.0.106': attribute type 2 has an invalid length.
[   69.093083][ T6125] netlink: 44 bytes leftover after parsing attributes in process `syz.1.109'.
[   69.268070][ T5875] IPVS: starting estimator thread 0...
[   69.355347][ T6142] IPVS: using max 83 ests per chain, 199200 per kthread
[   70.073851][   T54] Bluetooth: hci0: command tx timeout
[   70.162999][   T54] Bluetooth: hci1: command tx timeout
[   70.163026][ T5816] Bluetooth: hci2: command tx timeout
[   70.256085][ T6190] netlink: 'syz.1.132': attribute type 21 has an invalid length.
[   70.259428][ T6190] netlink: 'syz.1.132': attribute type 20 has an invalid length.
[   70.398763][ T6196] netlink: 'syz.2.135': attribute type 1 has an invalid length.
[   70.402035][ T6196] netlink: 96 bytes leftover after parsing attributes in process `syz.2.135'.
[   70.474317][ T6202] syzkaller0: entered promiscuous mode
[   70.478706][ T6202] 0: reclassify loop, rule prio 0, protocol 800
[   70.821812][ T6224] netlink: 'syz.1.144': attribute type 1 has an invalid length.
[   70.996564][ T6231] netlink: 264 bytes leftover after parsing attributes in process `syz.0.147'.
[   71.179940][ T6241] syzkaller1: entered promiscuous mode
[   71.182124][ T6241] syzkaller1: entered allmulticast mode
[   71.290655][ T6249] veth1_to_bridge: entered allmulticast mode
[   71.296475][ T6249] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check.
[   71.557116][ T6268] team0 (unregistering): Port device team_slave_0 removed
[   71.563592][ T6268] team0 (unregistering): Port device team_slave_1 removed
[   71.661773][ T6278] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.678834][ T6276] netlink: 'syz.1.169': attribute type 1 has an invalid length.
[   71.682262][ T6276] netlink: 224 bytes leftover after parsing attributes in process `syz.1.169'.
[   72.096702][ T6308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.195333][ T6312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.184'.
[   72.362974][ T6326] netlink: 'syz.0.192': attribute type 12 has an invalid length.
[   72.366293][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'.
[   72.424364][ T6328] netlink: 52 bytes leftover after parsing attributes in process `syz.2.193'.
[   72.424449][ T6330] netlink: 'syz.1.194': attribute type 6 has an invalid length.
[   72.431850][ T6330] IPv6: NLM_F_CREATE should be specified when creating new route
[   72.479933][ T6335] netlink: 'syz.1.195': attribute type 89 has an invalid length.
[   72.558913][ T6338] tipc: Started in network mode
[   72.565270][ T6338] tipc: Node identity ac14142f, cluster identity 4711
[   72.569614][ T6338] tipc: New replicast peer: 0.0.0.0
[   72.575526][ T6338] tipc: Enabled bearer <udp:syz2>, priority 10
[   72.582469][ T6338] tipc: New replicast peer: 172.30.1.3
[   72.663081][ T6341] vlan2: entered promiscuous mode
[   72.672909][ T6341] bridge0: entered promiscuous mode
[   73.639297][ T6406] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.225'.
[   73.695389][   T24] tipc: Node number set to 2886997039
[   73.732756][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'.
[   73.783050][   T56] block nbd0: Receive control failed (result -1)
[   73.856558][   T33] audit: type=1800 audit(1775255160.726:2): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.228" name="cgroup.controllers" dev="tmpfs" ino=531 res=0 errno=0
[   74.868605][ T6457] netlink: 'syz.2.245': attribute type 5 has an invalid length.
[   75.542999][ T6509] bond1: entered allmulticast mode
[   75.568577][ T6509] macvlan2: entered promiscuous mode
[   75.570415][ T6509] macvlan2: entered allmulticast mode
[   75.572757][ T6509] bond1: (slave macvlan2): Opening slave failed
[   75.831563][ T6525] netlink: 'syz.1.271': attribute type 4 has an invalid length.
[   75.991444][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'.
[   76.068581][ T6537] netlink: 'syz.1.277': attribute type 1 has an invalid length.
[   76.296540][ T6547] netlink: 276 bytes leftover after parsing attributes in process `syz.1.282'.
[   76.439761][ T6555] netlink: 'syz.1.286': attribute type 12 has an invalid length.
[   76.449743][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'.
[   76.477833][ T6557] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.524479][ T6557] bond1: (slave syz_tun): Enslaving as an active interface with an up link
[   76.700246][ T6571] delete_channel: no stack
[   76.876972][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   76.880335][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   76.931286][ T6595] veth0: entered promiscuous mode
[   76.935978][ T6594] veth0: left promiscuous mode
[   76.985709][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'.
[   77.002454][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.006263][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'.
[   77.009727][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.015969][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.024650][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.028773][ T6598] syz.1.307 (6598) used greatest stack depth: 20216 bytes left
[   77.079897][ T6603] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.309'.
[   77.205779][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'.
[   77.363773][ T6621] netlink: 'syz.2.318': attribute type 1 has an invalid length.
[   77.366939][ T6621] netlink: 'syz.2.318': attribute type 3 has an invalid length.
[   77.370118][ T6621] netlink: 224 bytes leftover after parsing attributes in process `syz.2.318'.
[   77.728067][ T6649] netlink: 364 bytes leftover after parsing attributes in process `syz.0.331'.
[   77.999704][ T6664] pimreg: entered allmulticast mode
[   78.043615][ T6672] IPv6: addrconf: prefix option has invalid lifetime
[   78.103189][ T6676] veth0: entered promiscuous mode
[   78.107424][ T6676] veth0: left promiscuous mode
[   78.115823][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'.
[   78.230279][ T6693] netlink: 'syz.0.353': attribute type 1 has an invalid length.
[   78.275999][ T6693] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   78.282994][ T6693] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   78.342257][ T6693] bond2: (slave bridge1): Enslaving as an active interface with a down link
[   78.364217][ T6693] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.386872][ T6693] macvlan2: entered promiscuous mode
[   78.389371][ T6693] macvlan2: entered allmulticast mode
[   78.392224][ T6693] bond2: entered promiscuous mode
[   78.395326][ T6693] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   78.415961][ T6693] bond2: left promiscuous mode
[   78.609172][ T6730] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[   78.678200][ T6737] netlink: 'syz.2.373': attribute type 2 has an invalid length.
[   78.737563][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.741049][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.763790][ T6741] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.766713][ T6741] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.769884][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.772838][ T6741] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.784475][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.787484][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.057768][ T6765] netlink: 'syz.2.386': attribute type 21 has an invalid length.
[   79.061566][ T6765] IPv6: NLM_F_CREATE should be specified when creating new route
[   79.081284][ T6765] syzkaller0: entered promiscuous mode
[   79.084078][ T6765] syzkaller0: entered allmulticast mode
[   79.293505][ T6777] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.322489][ T6777] syzkaller0: entered promiscuous mode
[   79.325729][ T6777] syzkaller0: entered allmulticast mode
[   79.328342][ T6777] tipc: Resetting bearer <eth:syzkaller0>
[   79.349631][ T6776] tipc: Resetting bearer <eth:syzkaller0>
[   80.635243][ T6776] tipc: Disabling bearer <eth:syzkaller0>
[   80.707577][ T6840] syzkaller0: entered promiscuous mode
[   80.713906][ T6840] syzkaller0: entered allmulticast mode
[   81.066702][ T6867] netlink: 'syz.2.427': attribute type 1 has an invalid length.
[   81.070302][ T6867] netlink: 'syz.2.427': attribute type 1 has an invalid length.
[   81.075562][ T6867] Bluetooth: MGMT ver 1.23
[   82.171463][ T6898] netlink: 'syz.2.438': attribute type 1 has an invalid length.
[   82.186991][ T6898] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.204845][ T6898] bond2: (slave geneve2): making interface the new active one
[   82.209067][ T6898] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   82.211987][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.219074][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.222089][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.226470][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.246260][ T6898] syz.2.438 (6898) used greatest stack depth: 19336 bytes left
[   82.829907][ T6890] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   82.830657][  T906] cfg80211: failed to load regulatory.db
[   82.833094][ T6890] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   82.850776][ T6890] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   82.853444][ T6890] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   82.868239][ T6890] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   82.870689][ T6890] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   83.067094][ T6941] netlink: 'syz.0.446': attribute type 1 has an invalid length.
[   83.224695][ T6952] __nla_validate_parse: 14 callbacks suppressed
[   83.224710][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'.
[   83.270195][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'.
[   83.499509][ T6962] netlink: 'syz.0.455': attribute type 10 has an invalid length.
[   83.583403][ T6965] veth0: entered promiscuous mode
[   83.594977][ T6965] bond0: entered promiscuous mode
[   83.597081][ T6965] bond_slave_0: entered promiscuous mode
[   83.599456][ T6965] bond_slave_1: entered promiscuous mode
[   83.804297][ T6961] bond0: left promiscuous mode
[   83.806397][ T6961] bond_slave_0: left promiscuous mode
[   83.808733][ T6961] bond_slave_1: left promiscuous mode
[   83.811408][ T6961] veth0: left promiscuous mode
[   84.095348][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.462'.
[   84.129261][ T6977] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.147311][ T6977] syz_tun: entered promiscuous mode
[   84.152271][ T6977] bond3: (slave macvlan2): Enslaving as an active interface with an up link
[   84.299502][ T6984] netlink: 'syz.0.466': attribute type 29 has an invalid length.
[   84.311360][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'.
[   84.317538][ T6984] netlink: 'syz.0.466': attribute type 29 has an invalid length.
[   84.320642][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'.
[   85.487681][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'.
[   85.509496][ T7081] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.505'.
[   85.514743][ T7081] openvswitch: netlink: Missing key (keys=40, expected=100)
[   85.515188][ T7079] nbd: nbd0 already in use
[   85.520861][ T7079] block nbd0: NBD_DISCONNECT
[   85.523747][ T7079] block nbd0: shutting down sockets
[   85.580347][ T7086] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   85.588967][ T7086] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   85.608394][ T7088] macsec0: entered promiscuous mode
[   85.611035][ T7087] macsec0: left promiscuous mode
[   86.041239][ T7119] tc_dump_action: action bad kind
[   86.090363][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.523'.
[   86.258735][ T7135] batman_adv: batadv0: Adding interface: dummy0
[   86.261312][ T7135] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.272059][ T7135] batman_adv: batadv0: Interface activated: dummy0
[   86.280253][ T7135] batadv0: mtu less than device minimum
[   86.282688][ T7135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.286298][ T7135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.290670][ T7135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.295856][ T7135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.300949][ T7135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.306363][ T7135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.311547][ T7135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.316864][ T7135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.508340][ T7144] netlink: 'syz.1.532': attribute type 1 has an invalid length.
[   86.583599][ T7144] bond3: (slave veth3): Enslaving as an active interface with a down link
[   86.625676][ T7144] bond3: (slave veth5): Enslaving as an active interface with a down link
[   86.738412][ T7159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.539'.
[   86.777372][ T7161] netlink: 'syz.1.541': attribute type 1 has an invalid length.
[   86.820494][ T7161] 8021q: adding VLAN 0 to HW filter on device bond4
[   86.847249][ T7161] bond4: (slave geneve2): making interface the new active one
[   86.856885][ T7161] bond4: (slave geneve2): Enslaving as an active interface with an up link
[   86.860541][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   86.865455][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   86.889749][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   86.895247][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   86.980636][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'.
[   87.126532][ T7186] C: renamed from team_slave_0 (while UP)
[   87.164162][ T7186] netlink: 'syz.1.553': attribute type 8 has an invalid length.
[   87.311772][ T7201] syzkaller0: entered promiscuous mode
[   87.322972][ T7201] syzkaller0: entered allmulticast mode
[   87.789511][ T7239] netlink: 'syz.1.578': attribute type 3 has an invalid length.
[   87.792741][ T7239] netlink: 'syz.1.578': attribute type 2 has an invalid length.
[   87.796157][ T7239] netlink: 'syz.1.578': attribute type 2 has an invalid length.
[   88.270578][ T7267] __nla_validate_parse: 2 callbacks suppressed
[   88.270594][ T7267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.591'.
[   88.279945][ T7267] sctp: [Deprecated]: syz.2.591 (pid 7267) Use of int in maxseg socket option.
[   88.279945][ T7267] Use struct sctp_assoc_value instead
[   88.700415][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'.
[   88.734864][ T7301] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.608'.
[   88.820004][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'.
[   88.825931][ T7309] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) !
[   89.080908][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'.
[   89.084358][ T7331] bridge_slave_1: left allmulticast mode
[   89.086531][ T7331] bridge_slave_1: left promiscuous mode
[   89.088461][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.105290][ T7331] bridge_slave_0: left allmulticast mode
[   89.107318][ T7331] bridge_slave_0: left promiscuous mode
[   89.109142][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.236822][ T7346] netlink: 104 bytes leftover after parsing attributes in process `syz.1.624'.
[   89.546611][ T7364] sch_tbf: burst 0 is lower than device sit0 mtu (1480) !
[   89.774704][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'.
[   89.778008][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'.
[   89.983808][ T7391] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.032929][ T7396] netlink: 108 bytes leftover after parsing attributes in process `syz.2.641'.
[   90.054259][ T7391] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.120948][ T7391] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.165567][ T7398] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.644'.
[   90.185703][ T7391] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.285901][ T5840] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.331414][ T5840] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.335039][ T5840] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.338346][ T5840] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.659126][ T7427] bond4: entered promiscuous mode
[   90.661010][ T7427] 8021q: adding VLAN 0 to HW filter on device bond4
[   90.699263][ T7427] 8021q: adding VLAN 0 to HW filter on device bond4
[   90.702402][ T7427] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   90.708389][ T7427] bond4: (slave ip6gre1): Error -95 calling set_mac_address
[   91.290928][ T7471] netlink: 'syz.1.674': attribute type 11 has an invalid length.
[   92.753375][ T7547] net_ratelimit: 14 callbacks suppressed
[   92.753386][ T7547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.373073][ T7597] netlink: 'syz.2.734': attribute type 9 has an invalid length.
[   93.376464][ T7597] netlink: 'syz.2.734': attribute type 6 has an invalid length.
[   93.379742][ T7597] netlink: 'syz.2.734': attribute type 7 has an invalid length.
[   93.383181][ T7597] netlink: 'syz.2.734': attribute type 8 has an invalid length.
[   93.428576][ T7599] __nla_validate_parse: 7 callbacks suppressed
[   93.428591][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.735'.
[   93.584439][ T7608] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.588428][ T7608] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.796177][ T7614] netlink: 64 bytes leftover after parsing attributes in process `syz.2.742'.
[   93.890997][ T7618] netlink: 68 bytes leftover after parsing attributes in process `syz.2.744'.
[   93.895384][ T7618] netlink: 64 bytes leftover after parsing attributes in process `syz.2.744'.
[   94.034912][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'.
[   94.038517][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'.
[   94.076315][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'.
[   94.079825][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'.
[   94.109699][ T7632] batadv_slave_1: entered promiscuous mode
[   94.113644][ T7631] batadv_slave_1: left promiscuous mode
[   94.179283][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'.
[   94.498026][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'.
[   95.545293][ T7705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.849552][ T7735] bond5 (unregistering): Released all slaves
[   95.995792][ T7750] netlink: 'syz.0.805': attribute type 64 has an invalid length.
[   96.309356][ T7773] netlink: 'syz.0.812': attribute type 2 has an invalid length.
[   98.771600][ T7876] __nla_validate_parse: 9 callbacks suppressed
[   98.771617][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'.
[   98.782837][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'.
[   98.842501][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'.
[   98.852253][ T7881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.864'.
[   98.905954][ T7888] netlink: 'syz.0.867': attribute type 7 has an invalid length.
[   99.179960][ T7910] bond0: Error: Cannot enslave bond to itself.
[   99.424897][ T7914] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.436047][ T7914] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   99.472316][ T7938] bond5: Removing last arp target with arp_interval on
[   99.542064][  T906] IPVS: starting estimator thread 0...
[   99.632702][ T7948] IPVS: using max 83 ests per chain, 199200 per kthread
[  100.539453][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'.
[  100.757546][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'.
[  100.885785][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'.
[  100.889641][ T8072] netlink: 'syz.2.922': attribute type 26 has an invalid length.
[  100.893663][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'.
[  100.898360][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'.
[  100.901973][ T8072] netlink: 'syz.2.922': attribute type 26 has an invalid length.
[  100.906843][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'.
[  101.028822][ T8081] TC_ACT_REPEAT abuse ?
[  101.280885][ T8095] netlink: 'syz.2.933': attribute type 10 has an invalid length.
[  101.566260][ T8135] netlink: 'syz.0.953': attribute type 12 has an invalid length.
[  101.585870][ T8135] netlink: 'syz.0.953': attribute type 12 has an invalid length.
[  101.589255][ T5863] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.593223][ T5863] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.596766][ T5863] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.600330][ T5863] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.651878][ T8144] netlink: 'syz.2.956': attribute type 34 has an invalid length.
[  102.980300][ T8231] netlink: 'syz.2.990': attribute type 1 has an invalid length.
[  103.116773][ T8232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.380536][ T8251] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.385484][ T8251] syzkaller0: entered promiscuous mode
[  103.389667][ T8251] syzkaller0: entered allmulticast mode
[  103.407627][ T8251] tipc: Resetting bearer <eth:syzkaller0>
[  103.415863][ T8250] tipc: Resetting bearer <eth:syzkaller0>
[  103.430146][ T8250] tipc: Disabling bearer <eth:syzkaller0>
[  103.843686][ T8279] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  104.007547][ T8297] syzkaller0: entered promiscuous mode
[  104.009352][ T8297] syzkaller0: entered allmulticast mode
[  104.140173][ T8309] __nla_validate_parse: 17 callbacks suppressed
[  104.140184][ T8309] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1026'.
[  104.277697][ T8332] IPv6: sit1: Disabled Multicast RS
[  104.421303][ T8350] syzkaller1: entered promiscuous mode
[  104.425635][ T8350] syzkaller1: entered allmulticast mode
[  104.947841][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'.
[  104.959853][ T8400] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1070'.
[  104.999427][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'.
[  105.253731][ T8427] m1Ie5: entered promiscuous mode
[  105.383312][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'.
[  105.640275][ T8460] netlink: 'syz.1.1097': attribute type 1 has an invalid length.
[  105.649180][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'.
[  105.659644][ T8460] netlink: 'syz.1.1097': attribute type 1 has an invalid length.
[  105.684779][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'.
[  105.692401][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'.
[  105.716897][ T8468] netlink: 'syz.2.1101': attribute type 39 has an invalid length.
[  106.170829][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'.
[  106.231767][ T8510] : entered promiscuous mode
[  106.368027][ T8516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1123'.
[  106.426418][ T8520] netlink: 'syz.1.1126': attribute type 9 has an invalid length.
[  106.994289][ T8582] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  107.050640][ T8587] syzkaller1: entered promiscuous mode
[  107.053235][ T8587] syzkaller1: entered allmulticast mode
[  107.374439][ T8618] netlink: 'syz.1.1171': attribute type 1 has an invalid length.
[  107.377428][ T8618] netlink: 'syz.1.1171': attribute type 2 has an invalid length.
[  107.660759][ T8640] rdma_rxe: rxe_newlink: failed to add lo
[  108.024397][ T8667] netlink: 'syz.0.1193': attribute type 3 has an invalid length.
[  108.288421][ T8677] netlink: 'syz.0.1198': attribute type 4 has an invalid length.
[  108.304719][ T8677] netlink: 'syz.0.1198': attribute type 4 has an invalid length.
[  108.586003][ T8694] syzkaller0: entered promiscuous mode
[  108.587827][ T8694] syzkaller0: entered allmulticast mode
[  108.735452][ T8702] netlink: 'syz.0.1209': attribute type 9 has an invalid length.
[  108.738623][ T8702] netlink: 'syz.0.1209': attribute type 11 has an invalid length.
[  108.741839][ T8702] netlink: 'syz.0.1209': attribute type 12 has an invalid length.
[  109.373065][ T8765] sctp: [Deprecated]: syz.0.1240 (pid 8765) Use of int in maxseg socket option.
[  109.373065][ T8765] Use struct sctp_assoc_value instead
[  110.099477][ T8781] tap0: tun_chr_ioctl cmd 1074025680
[  110.246403][ T8789] netlink: 'syz.1.1248': attribute type 1 has an invalid length.
[  110.419733][ T8807] bridge_slave_1: left allmulticast mode
[  110.424283][ T8807] bridge_slave_1: left promiscuous mode
[  110.427007][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.449053][ T8807] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  110.908906][ T8850] netlink: 'syz.1.1277': attribute type 1 has an invalid length.
[  111.069559][ T8868] : renamed from lo (while UP)
[  111.232053][ T8882] __nla_validate_parse: 13 callbacks suppressed
[  111.232066][ T8882] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1292'.
[  111.539774][ T8910] batadv_slave_1: entered promiscuous mode
[  111.547873][ T8909] batadv_slave_1: left promiscuous mode
[  111.826136][ T5863] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.829169][ T5863] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.942969][ T8925] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.969736][ T8925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.995547][ T5863] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.998232][ T5863] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.233960][ T8948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1321'.
[  112.680959][ T8961] validate_nla: 2 callbacks suppressed
[  112.680973][ T8961] netlink: 'syz.2.1326': attribute type 1 has an invalid length.
[  112.704565][ T8961] 8021q: adding VLAN 0 to HW filter on device bond3
[  112.725221][ T8961] vlan2: entered promiscuous mode
[  112.727392][ T8961] bond3: entered promiscuous mode
[  112.729757][ T8961] vlan2: entered allmulticast mode
[  112.731961][ T8961] bond3: entered allmulticast mode
[  112.751892][ T8961] bond3: (slave bridge2): making interface the new active one
[  112.755218][ T8961] bridge2: entered promiscuous mode
[  112.757637][ T8961] bridge2: entered allmulticast mode
[  112.765142][ T8961] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  113.155972][ T8974] netlink: 'syz.0.1330': attribute type 1 has an invalid length.
[  113.172680][ T8974] 8021q: adding VLAN 0 to HW filter on device bond5
[  113.201115][ T8974] vlan2: entered allmulticast mode
[  113.205961][ T8974] bond5: entered allmulticast mode
[  113.217159][ T8974] bond5: (slave geneve2): making interface the new active one
[  113.219608][ T8974] geneve2: entered allmulticast mode
[  113.225447][ T8974] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  113.238552][ T8974] syz.0.1330 (8974) used greatest stack depth: 18376 bytes left
[  113.388005][ T8978] netlink: 'syz.1.1331': attribute type 1 has an invalid length.
[  113.391231][ T8978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.884320][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'.
[  114.040856][ T9010] vlan3: entered promiscuous mode
[  114.043495][ T9010] bond0: entered promiscuous mode
[  114.050524][ T9010] bond_slave_0: entered promiscuous mode
[  114.053743][ T9010] bond_slave_1: entered promiscuous mode
[  114.154230][ T9013] syzkaller0: entered promiscuous mode
[  114.156180][ T9013] syzkaller0: entered allmulticast mode
[  114.327829][ T9016] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  114.330791][ T9016] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  114.605334][ T9025] syzkaller0: entered promiscuous mode
[  114.607226][ T9025] syzkaller0: entered allmulticast mode
[  115.331075][ T9034] syzkaller0: entered promiscuous mode
[  115.332955][ T9034] syzkaller0: entered allmulticast mode
[  116.470160][ T9056] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1367'.
[  116.474141][ T9056] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  117.000201][ T9073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1374'.
[  117.209705][ T9085] netlink: 'syz.1.1380': attribute type 4 has an invalid length.
[  117.213676][ T9085] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1380'.
[  117.639078][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'.
[  118.983199][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1420'.
[  119.440448][ T9210] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  121.894106][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'.
[  121.980886][ T9239] netlink: 'syz.1.1445': attribute type 9 has an invalid length.
[  121.985965][ T9239] netlink: 'syz.1.1445': attribute type 11 has an invalid length.
[  121.989159][ T9239] netlink: 'syz.1.1445': attribute type 12 has an invalid length.
[  121.993646][ T9239] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1445'.
[  121.997452][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1445'.
[  122.053826][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1446'.
[  122.057591][ T9241] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.060793][ T9241] batadv0: mtu less than device minimum
[  122.066544][ T9241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  122.071971][ T9241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  122.077039][ T9241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  122.082097][ T9241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  122.086907][ T9241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  122.091862][ T9241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  122.096720][ T9241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  122.101010][ T9241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  122.105677][ T9241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  122.151517][ T9241] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.650106][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1458'.
[  124.163632][ T9274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1459'.
[  124.444152][ T9292] netlink: 'syz.1.1465': attribute type 11 has an invalid length.
[  124.585423][ T9300] netlink: 'syz.2.1470': attribute type 5 has an invalid length.
[  124.699263][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'.
[  124.777381][ T9313] netlink: 'syz.1.1476': attribute type 13 has an invalid length.
[  124.780744][ T9313] netlink: 'syz.1.1476': attribute type 17 has an invalid length.
[  125.160830][ T9312] batman_adv: batadv0: Interface deactivated: dummy0
[  125.369058][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.554932][ T9312] veth0_macvtap: left allmulticast mode
[  125.833963][ T9313] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.837013][ T9313] 8021q: adding VLAN 0 to HW filter on device team0
[  125.844148][ T9313] batman_adv: batadv0: Interface activated: dummy0
[  125.891480][ T5826] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.895390][ T5826] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.898785][ T5826] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  125.920104][ T5826] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.923386][ T5826] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.926258][ T5826] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  125.929074][ T5826] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.932537][ T5826] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.935957][ T5826] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  125.939270][ T5826] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.941951][ T5826] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.944707][ T5826] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  125.957762][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'.
[  126.095216][ T9345] trusted_key: syz.0.1488 sent an empty control message without MSG_MORE.
[  126.316724][ T9355] sctp: [Deprecated]: syz.2.1492 (pid 9355) Use of int in maxseg socket option.
[  126.316724][ T9355] Use struct sctp_assoc_value instead
[  127.103381][   T24] IPVS: starting estimator thread 0...
[  127.179510][ T9384] net_ratelimit: 32 callbacks suppressed
[  127.179520][ T9384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.208140][ T9375] IPVS: using max 85 ests per chain, 204000 per kthread
[  127.354440][ T9399] netlink: 'syz.0.1504': attribute type 13 has an invalid length.
[  127.357157][ T9399] netlink: 'syz.0.1504': attribute type 17 has an invalid length.
[  127.501109][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.503863][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.685345][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.704233][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.074395][ T9399] syz_tun: left promiscuous mode
[  128.105269][ T9399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.155030][ T5826] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.161967][ T5826] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.168215][ T5826] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.171255][ T5826] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.195326][ T5826] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.204116][ T5826] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.207758][ T5826] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.225473][ T5826] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.270187][ T9427] netlink: 'syz.0.1520': attribute type 7 has an invalid length.
[  128.274046][ T9424] syzkaller0: entered promiscuous mode
[  128.275890][ T9424] syzkaller0: entered allmulticast mode
[  128.280348][ T9427] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1520'.
[  128.377144][ T9437] netlink: 'syz.2.1525': attribute type 30 has an invalid length.
[  128.466819][ T9445] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  128.495783][ T9445] debugfs: 'netdev:syzkaller0' already exists in 'phy4'
[  128.512290][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'.
[  128.517743][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'.
[  128.536036][ T9445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.792503][ T9474] netlink: 'syz.2.1543': attribute type 1 has an invalid length.
[  128.796454][ T9474] netlink: 'syz.2.1543': attribute type 2 has an invalid length.
[  129.534171][ T9498] netlink: 'syz.1.1553': attribute type 1 has an invalid length.
[  129.553403][ T9498] 8021q: adding VLAN 0 to HW filter on device bond6
[  129.576793][ T9498] bond6: (slave veth7): Enslaving as an active interface with a down link
[  129.611556][ T9498] netlink: 'syz.1.1553': attribute type 1 has an invalid length.
[  129.622127][ T9498] 8021q: adding VLAN 0 to HW filter on device batadv1
[  129.626011][ T9498] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  129.666784][ T9503] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1554'.
[  129.671291][ T9503] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1554'.
[  130.074106][ T9526] erspan0: entered promiscuous mode
[  130.311823][ T9546] netlink: 'syz.2.1573': attribute type 10 has an invalid length.
[  130.315753][ T9546] bond0: (slave wlan1): Opening slave failed
[  130.814892][ T9577] 8021q: VLANs not supported on 26
[  131.448900][ T9625] xt_hashlimit: size too large, truncated to 1048576
[  132.390758][ T9676] pim6reg: entered allmulticast mode
[  132.399149][ T9675] pim6reg: left allmulticast mode
[  132.470897][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'.
[  132.515669][ T9688] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.1638'.
[  132.580990][ T9697] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.646713][ T9700] netlink: 'syz.2.1643': attribute type 21 has an invalid length.
[  132.679518][ T9702] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1644'.
[  132.811415][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1650'.
[  133.312716][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1659'.
[  133.315657][ T9752] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  133.447019][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'.
[  133.522377][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'.
[  133.526301][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1674'.
[  133.530926][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'.
[  133.537606][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1674'.
[  133.839516][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1686'.
[  133.895369][ T9813] syzkaller0: entered promiscuous mode
[  133.897489][ T9813] syzkaller0: entered allmulticast mode
[  133.938535][ T9817] netlink: 'syz.0.1692': attribute type 61 has an invalid length.
[  133.941688][ T9817] netlink: 'syz.0.1692': attribute type 62 has an invalid length.
[  134.138294][ T9829] xt_bpf: check failed: parse error
[  134.226229][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1700'.
[  134.299928][ T9839] netlink: 'syz.2.1702': attribute type 75 has an invalid length.
[  134.356955][ T9843] netlink: 'syz.2.1704': attribute type 19 has an invalid length.
[  134.398449][ T9847] netlink: 'syz.2.1706': attribute type 1 has an invalid length.
[  134.625848][ T9858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  134.629124][ T9858] IPv6: NLM_F_CREATE should be set when creating new route
[  134.645499][ T9858] lo: entered allmulticast mode
[  134.652331][ T9858] tunl0: entered allmulticast mode
[  134.661779][ T9858] gre0: entered allmulticast mode
[  134.671115][ T9858] gretap0: entered allmulticast mode
[  134.691480][ T9859] netlink: 'syz.2.1711': attribute type 30 has an invalid length.
[  134.707600][ T9858] erspan0: entered allmulticast mode
[  134.723767][ T9858] ip_vti0: entered allmulticast mode
[  134.733641][ T9858] ip6_vti0: entered allmulticast mode
[  134.752141][ T9858] sit0: entered allmulticast mode
[  134.759575][ T9858] ip6tnl0: entered allmulticast mode
[  134.783225][ T9858] ip6gre0: entered allmulticast mode
[  134.792655][ T9858] syz_tun: entered allmulticast mode
[  134.798742][ T9858] ip6gretap0: entered allmulticast mode
[  134.803650][ T9858] bridge0: entered allmulticast mode
[  134.809393][ T9858] vcan0: entered allmulticast mode
[  134.815147][ T9858] bond0: entered allmulticast mode
[  134.816994][ T9858] bond_slave_0: entered allmulticast mode
[  134.818843][ T9858] bond_slave_1: entered allmulticast mode
[  134.823577][ T9858] team0: entered allmulticast mode
[  134.825304][ T9858] team_slave_0: entered allmulticast mode
[  134.829993][ T9858] team_slave_1: entered allmulticast mode
[  134.834818][ T9858] dummy0: entered allmulticast mode
[  134.842128][ T9858] nlmon0: entered allmulticast mode
[  134.846500][ T9858] caif0: entered allmulticast mode
[  134.848416][ T9858] vxcan0: entered allmulticast mode
[  134.850225][ T9858] vxcan1: entered allmulticast mode
[  134.851986][ T9858] veth0: entered allmulticast mode
[  134.853929][ T9858] veth1: entered allmulticast mode
[  134.855863][ T9858] wg1: entered allmulticast mode
[  134.857564][ T9858] wg2: entered allmulticast mode
[  134.859325][ T9858] veth0_to_bridge: entered allmulticast mode
[  134.861431][ T9858] veth1_to_bridge: entered allmulticast mode
[  134.864080][ T9858] bridge_slave_1: entered allmulticast mode
[  134.866171][ T9858] veth0_to_bond: entered allmulticast mode
[  134.868200][ T9858] veth1_to_bond: entered allmulticast mode
[  134.870332][ T9858] veth0_to_team: entered allmulticast mode
[  134.872417][ T9858] veth1_to_team: entered allmulticast mode
[  134.875181][ T9858] veth1_to_batadv: entered allmulticast mode
[  134.877229][ T9858] batadv_slave_1: entered allmulticast mode
[  134.879287][ T9858] xfrm0: entered allmulticast mode
[  134.880957][ T9858] veth0_to_hsr: entered allmulticast mode
[  134.883194][ T9858] hsr_slave_0: entered allmulticast mode
[  134.885426][ T9858] veth1_to_hsr: entered allmulticast mode
[  134.887483][ T9858] hsr_slave_1: entered allmulticast mode
[  134.889293][ T9858] hsr0: entered allmulticast mode
[  134.891055][ T9858] veth1_virt_wifi: entered allmulticast mode
[  134.893437][ T9858] veth0_virt_wifi: entered allmulticast mode
[  134.895645][ T9858] virt_wifi0: entered allmulticast mode
[  134.897467][ T9858] veth1_vlan: entered allmulticast mode
[  134.899497][ T9858] veth0_vlan: entered allmulticast mode
[  134.901397][ T9858] vlan0: entered allmulticast mode
[  134.903684][ T9858] vlan1: entered allmulticast mode
[  134.905503][ T9858] macvlan0: entered allmulticast mode
[  134.907376][ T9858] macvlan1: entered allmulticast mode
[  134.909179][ T9858] ipvlan0: entered allmulticast mode
[  134.911329][ T9858] ipvlan1: entered allmulticast mode
[  134.913801][ T9858] veth1_macvtap: entered allmulticast mode
[  134.915642][ T9858] veth0_macvtap: entered allmulticast mode
[  134.917623][ T9858] macvtap0: entered allmulticast mode
[  134.919445][ T9858] macsec0: entered allmulticast mode
[  134.921260][ T9858] geneve0: entered allmulticast mode
[  134.923296][ T9858] geneve1: entered allmulticast mode
[  134.925489][ T9858] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  134.927886][ T9858] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  134.930300][ T9858] bond1: entered allmulticast mode
[  134.932249][ T9858] ipip0: entered allmulticast mode
[  134.934756][ T9858] bond2: entered allmulticast mode
[  134.936504][ T9858] geneve2: entered allmulticast mode
[  134.938482][ T9858] ip6tnl1: entered allmulticast mode
[  134.940570][ T9858] netdevsim netdevsim2 eth0: entered allmulticast mode
[  134.943321][ T9858] netdevsim netdevsim2 eth1: entered allmulticast mode
[  134.946245][ T9858] netdevsim netdevsim2 eth2: entered allmulticast mode
[  134.949048][ T9858] netdevsim netdevsim2 eth3: entered allmulticast mode
[  134.951735][ T9858] macsec1: entered allmulticast mode
[  134.954361][ T9858] bridge1: entered allmulticast mode
[  134.956169][ T9858] gtp0: entered allmulticast mode
[  134.958176][ T9858] sit1: entered allmulticast mode
[  134.970903][ T9858] vlan2: left promiscuous mode
[  134.972988][ T9858] bond3: left promiscuous mode
[  134.974606][ T9858] bridge2: left promiscuous mode
[  134.979191][ T9858] gre1: entered allmulticast mode
[  134.990308][ T9858] bond4: entered allmulticast mode
[  135.002471][ T9858] vxlan0: entered allmulticast mode
[  135.004924][ T9858] veth2: entered allmulticast mode
[  135.006833][ T9858] veth3: entered allmulticast mode
[  135.362270][ T9891] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  135.365168][ T9891] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  135.682919][ T9926] netlink: 'syz.2.1737': attribute type 142 has an invalid length.
[  135.720512][ T9930] syzkaller1: entered promiscuous mode
[  135.722919][ T9930] syzkaller1: entered allmulticast mode
[  135.755401][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1740'.
[  136.196894][ T9976] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  136.199521][ T9976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.258885][ T9980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.261305][ T9980] IPv6: NLM_F_CREATE should be set when creating new route
[  136.263822][ T9980] IPv6: NLM_F_CREATE should be set when creating new route
[  136.266238][ T9980] IPv6: NLM_F_CREATE should be set when creating new route
[  136.315968][ T9986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1764'.
[  137.496166][T10039] batman_adv: batadv0: Interface deactivated: dummy0
[  137.594729][T10041] vlan3: entered allmulticast mode
[  137.597316][T10041] bridge_slave_0: entered allmulticast mode
[  137.600151][T10041] bridge0: port 1(vlan3) entered blocking state
[  137.603161][T10041] bridge0: port 1(vlan3) entered disabled state
[  137.613938][T10041] vlan3: entered promiscuous mode
[  137.615632][T10041] bridge_slave_0: entered promiscuous mode
[  137.657907][T10042] syzkaller0: entered promiscuous mode
[  137.659990][T10042] syzkaller0: entered allmulticast mode
[  138.317501][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  138.836249][T10109] gretap1: entered promiscuous mode
[  138.838547][T10109] batman_adv: batadv0: Adding interface: gretap1
[  138.840518][T10109] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  138.868348][T10109] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  139.264528][T10126] __nla_validate_parse: 3 callbacks suppressed
[  139.264598][T10126] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1817'.
[  139.688842][T10140] openvswitch: netlink: Missing valid actions attribute.
[  139.697733][T10140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.849883][T10163] netlink: zone id is out of range
[  139.852131][T10163] netlink: del zone limit has 8 unknown bytes
[  140.252894][T10184] nbd0: detected capacity change from 0 to 63
[  140.265949][T10190] netlink: 'syz.0.1836': attribute type 1 has an invalid length.
[  140.272839][T10190] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1836'.
[  140.965633][   T55] block nbd0: Receive control failed (result -104)
[  141.058296][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'.
[  141.061751][T10227] openvswitch: netlink: Missing key (keys=40, expected=80)
[  141.084427][T10229] netlink: 'syz.2.1856': attribute type 1 has an invalid length.
[  141.087659][T10229] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1856'.
[  141.096312][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'.
[  141.293549][T10250] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1867'.
[  141.372293][T10259] syzkaller1: entered promiscuous mode
[  141.374224][T10259] syzkaller1: entered allmulticast mode
[  141.486811][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1868'.
[  141.499150][T10251] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000
[  143.186501][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1914'.
[  143.189527][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1914'.
[  143.430171][T10376] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1924'.
[  143.632106][T10387] netlink: 'syz.1.1928': attribute type 1 has an invalid length.
[  143.744169][T10393] 8021q: adding VLAN 0 to HW filter on device bond6
[  143.765928][T10393] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link
[  144.318334][T10418] __nla_validate_parse: 2 callbacks suppressed
[  144.318350][T10418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1944'.
[  144.325527][T10418] netlink: 'syz.0.1944': attribute type 7 has an invalid length.
[  144.328828][T10418] netlink: 'syz.0.1944': attribute type 8 has an invalid length.
[  144.331975][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1944'.
[  144.380427][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1943'.
[  144.391251][T10421] syzkaller0: entered promiscuous mode
[  144.395359][T10421] syzkaller0: entered allmulticast mode
[  144.426621][T10419] 8021q: adding VLAN 0 to HW filter on device bond7
[  144.479203][T10419] netlink: 'syz.1.1943': attribute type 1 has an invalid length.
[  144.654829][T10430] Unsupported ieee802154 address type: 0
[  145.376761][T10449] netlink: 'syz.2.1958': attribute type 178 has an invalid length.
[  145.861880][T10474] netlink: 'syz.1.1970': attribute type 1 has an invalid length.
[  146.095758][T10491] batman_adv: batadv0: Removing interface: dummy0
[  146.124319][T10491] bond0: (slave bond_slave_0): Releasing backup interface
[  146.131308][T10491] bond0: (slave bond_slave_1): Releasing backup interface
[  146.148169][T10491] team0: Port device C removed
[  146.156453][T10491] team0: Port device team_slave_1 removed
[  146.158756][T10491] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.166400][T10491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  148.295530][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2008'.
[  149.391351][T10603] ipt_ECN: cannot use operation on non-tcp rule
[  149.824797][T10619] netlink: 'syz.1.2029': attribute type 1 has an invalid length.
[  149.827369][T10619] netlink: 'syz.1.2029': attribute type 1 has an invalid length.
[  149.830171][T10619] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2029'.
[  150.282252][T10632] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  150.565221][T10648] syz.2.2043 uses old SIOCAX25GETINFO
[  150.644714][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'.
[  150.647509][T10654] vlan0: entered promiscuous mode
[  150.911022][T10662] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32)
[  151.425772][T10691] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2063'.
[  151.430419][T10691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2063'.
[  151.449804][T10691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2063'.
[  159.529243][T10719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2075'.
[  167.692643][    C0] sched: DL replenish lagged too much
[  170.485367][   T98] block nbd0: Possible stuck request ffff888102f08000: control (read@0,1024B). Runtime 30 seconds
[  170.495910][   T98] block nbd0: Possible stuck request ffff888102f08200: control (read@1024,1024B). Runtime 30 seconds
[  170.499139][   T98] block nbd0: Possible stuck request ffff888102f08400: control (read@2048,1024B). Runtime 30 seconds
[  170.502410][   T98] block nbd0: Possible stuck request ffff888102f08600: control (read@3072,1024B). Runtime 30 seconds
[  182.121389][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  182.239523][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  182.330042][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  182.489757][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  182.642851][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  183.280023][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  183.398584][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  183.445103][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  183.927818][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  184.965948][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  187.373415][   T54] Bluetooth: hci3: command tx timeout
[  189.468175][   T54] Bluetooth: hci3: command tx timeout
[  191.798161][   T54] Bluetooth: hci3: command tx timeout
[  191.907840][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.927502][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.942818][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  192.974370][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  193.065691][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  193.909196][ T5816] Bluetooth: hci3: command tx timeout
[  195.450870][ T5816] Bluetooth: hci4: command tx timeout
[  197.520645][ T5816] Bluetooth: hci4: command tx timeout
[  199.614255][ T5816] Bluetooth: hci4: command tx timeout
[  200.942379][ T5258] udevd[5258]: worker [9945] /devices/virtual/block/nbd0 is taking a long time
[  201.095857][   T98] block nbd0: Possible stuck request ffff888102f08000: control (read@0,1024B). Runtime 60 seconds
[  201.099997][   T98] block nbd0: Possible stuck request ffff888102f08200: control (read@1024,1024B). Runtime 60 seconds
[  201.119842][   T98] block nbd0: Possible stuck request ffff888102f08400: control (read@2048,1024B). Runtime 60 seconds
[  201.139359][   T98] block nbd0: Possible stuck request ffff888102f08600: control (read@3072,1024B). Runtime 60 seconds
[  201.779925][ T5816] Bluetooth: hci4: command tx timeout
[  212.648298][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2093'.
[  212.726418][T10774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2093'.
[  229.500488][T10738] bond3: (slave macvlan2): Releasing backup interface
[  231.253684][   T98] block nbd0: Possible stuck request ffff888102f08000: control (read@0,1024B). Runtime 90 seconds
[  231.256962][   T98] block nbd0: Possible stuck request ffff888102f08200: control (read@1024,1024B). Runtime 90 seconds
[  231.260302][   T98] block nbd0: Possible stuck request ffff888102f08400: control (read@2048,1024B). Runtime 90 seconds
[  231.279142][   T98] block nbd0: Possible stuck request ffff888102f08600: control (read@3072,1024B). Runtime 90 seconds
[  237.159036][T10789] netlink: 'syz.1.2096': attribute type 13 has an invalid length.
[  237.161380][T10789] netlink: 'syz.1.2096': attribute type 17 has an invalid length.
[  237.458303][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2096'.
[  242.683589][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  242.718787][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  242.782100][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  242.937929][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  242.980156][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.951170][T10728] bond1: (slave syz_tun): Releasing backup interface
[  245.785346][   T54] Bluetooth: hci1: command tx timeout
[  247.839917][   T54] Bluetooth: hci1: command tx timeout
[  249.936507][   T54] Bluetooth: hci1: command tx timeout
[  251.917874][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  252.018385][ T5816] Bluetooth: hci1: command tx timeout
[  252.047610][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  252.108264][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  252.224706][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  252.285644][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  253.094783][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  253.136444][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  253.175852][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  253.382233][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  253.481671][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  254.647531][ T5816] Bluetooth: hci2: command tx timeout
[  255.835223][ T5816] Bluetooth: hci5: command tx timeout
[  256.729601][ T5816] Bluetooth: hci2: command tx timeout
[  257.925843][ T5816] Bluetooth: hci5: command tx timeout
[  258.808748][ T5816] Bluetooth: hci2: command tx timeout
[  260.022997][ T5816] Bluetooth: hci5: command tx timeout
[  261.058828][ T5816] Bluetooth: hci2: command tx timeout
[  262.613113][ T5816] Bluetooth: hci5: command tx timeout
[  262.846519][T10803] block nbd0: Possible stuck request ffff888102f08000: control (read@0,1024B). Runtime 120 seconds
[  262.850126][T10803] block nbd0: Possible stuck request ffff888102f08200: control (read@1024,1024B). Runtime 120 seconds
[  262.863238][T10803] block nbd0: Possible stuck request ffff888102f08400: control (read@2048,1024B). Runtime 120 seconds
[  262.866490][T10803] block nbd0: Possible stuck request ffff888102f08600: control (read@3072,1024B). Runtime 120 seconds
[  293.229150][T10803] block nbd0: Possible stuck request ffff888102f08000: control (read@0,1024B). Runtime 150 seconds
[  293.232446][T10803] block nbd0: Possible stuck request ffff888102f08200: control (read@1024,1024B). Runtime 150 seconds
[  293.242670][T10803] block nbd0: Possible stuck request ffff888102f08400: control (read@2048,1024B). Runtime 150 seconds
[  293.246270][T10803] block nbd0: Possible stuck request ffff888102f08600: control (read@3072,1024B). Runtime 150 seconds
[  303.372094][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  303.424686][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  303.658908][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  303.746897][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  303.819040][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  306.106899][   T54] Bluetooth: hci0: command tx timeout
[  308.168603][ T5816] Bluetooth: hci0: command tx timeout
[  309.389979][ T5816] Bluetooth: hci3: command 0x0406 tx timeout
[  309.605142][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  309.634879][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  309.739103][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  309.834388][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  309.883237][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  310.391713][ T5816] Bluetooth: hci0: command tx timeout
[  311.020036][ T5817] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  311.308237][ T5817] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  311.365728][ T5817] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  311.506206][ T5817] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  311.592312][ T5817] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  312.497825][ T5817] Bluetooth: hci0: command tx timeout
[  321.278783][ T5258] udevd[5258]: worker [9945] /devices/virtual/block/nbd0 timeout; kill it
[  321.291150][ T5258] udevd[5258]: seq 12596 '/devices/virtual/block/nbd0' killed
[  364.209629][T10816] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  364.252176][T10816] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  364.293179][T10816] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  364.519484][T10816] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  364.568519][T10816] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  365.690062][T10816] Bluetooth: hci1: command 0x0406 tx timeout
[  369.272262][T10803] block nbd0: Possible stuck request ffff888102f08000: control (read@0,1024B). Runtime 180 seconds
[  369.313392][T10803] block nbd0: Possible stuck request ffff888102f08200: control (read@1024,1024B). Runtime 180 seconds
[  369.316750][T10803] block nbd0: Possible stuck request ffff888102f08400: control (read@2048,1024B). Runtime 180 seconds
[  369.320177][T10803] block nbd0: Possible stuck request ffff888102f08600: control (read@3072,1024B). Runtime 180 seconds
[  371.059194][ T5816] Bluetooth: hci4: command tx timeout
[  373.273602][ T5810] Bluetooth: hci4: command tx timeout
[  375.308460][ T5810] Bluetooth: hci7: command tx timeout
[  375.308661][T10814] Bluetooth: hci6: command tx timeout
[  375.368052][T10814] Bluetooth: hci4: command tx timeout
[  375.732119][T10814] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  375.828259][ T5810] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  375.909445][T10814] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  376.037888][T10814] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  376.143050][T10814] Bluetooth: hci2: command 0x0406 tx timeout
[  376.208367][T10814] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  377.382192][   T54] Bluetooth: hci6: command tx timeout
[  377.394354][   T54] Bluetooth: hci7: command tx timeout
[  377.450907][ T5817] Bluetooth: hci4: command tx timeout
[  377.461332][T10814] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  377.555016][ T5817] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  377.613559][ T5817] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  377.813131][ T5817] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  377.887962][ T5817] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  379.121055][T10814] Bluetooth: hci8: command tx timeout
[  379.454362][ T5817] Bluetooth: hci7: command tx timeout
[  379.456242][ T5817] Bluetooth: hci6: command tx timeout
[  380.340323][T10814] Bluetooth: hci9: command tx timeout
[  381.204299][T10814] Bluetooth: hci5: command 0x0406 tx timeout
[  381.263267][T10814] Bluetooth: hci8: command tx timeout
[  381.526629][ T5817] Bluetooth: hci6: command tx timeout
[  381.528345][ T5817] Bluetooth: hci7: command tx timeout
[  382.485670][T10814] Bluetooth: hci9: command tx timeout
[  383.304761][T10814] Bluetooth: hci8: command tx timeout
[  384.645961][   T54] Bluetooth: hci9: command tx timeout
[  385.362436][   T54] Bluetooth: hci8: command tx timeout
[  386.732329][   T54] Bluetooth: hci9: command tx timeout
[  404.990957][T10803] block nbd0: Possible stuck request ffff888102f08000: control (read@0,1024B). Runtime 210 seconds
[  405.049104][T10803] block nbd0: Possible stuck request ffff888102f08200: control (read@1024,1024B). Runtime 210 seconds
[  405.092457][T10803] block nbd0: Possible stuck request ffff888102f08400: control (read@2048,1024B). Runtime 210 seconds
[  405.105900][T10803] block nbd0: Possible stuck request ffff888102f08600: control (read@3072,1024B). Runtime 210 seconds
[  428.795795][T10814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  428.867848][T10814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  428.940655][T10814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  429.188629][T10814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  429.283132][T10814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  431.693092][   T54] Bluetooth: hci0: command tx timeout
[  433.829584][   T54] Bluetooth: hci0: command tx timeout
[  435.338687][T10803] block nbd0: Possible stuck request ffff888102f08000: control (read@0,1024B). Runtime 240 seconds
[  435.342288][T10803] block nbd0: Possible stuck request ffff888102f08200: control (read@1024,1024B). Runtime 240 seconds
[  435.357165][T10803] block nbd0: Possible stuck request ffff888102f08400: control (read@2048,1024B). Runtime 240 seconds
[  435.361370][T10803] block nbd0: Possible stuck request ffff888102f08600: control (read@3072,1024B). Runtime 240 seconds
[  435.970551][   T54] Bluetooth: hci0: command tx timeout
[  438.031723][   T54] Bluetooth: hci0: command tx timeout
[  438.937630][ T5810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  438.966491][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  439.001202][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  439.077698][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  439.511759][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  439.573234][ T5810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  439.618259][ T5810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  439.882239][ T5810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  439.980548][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  440.437289][ T5810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  442.722954][ T5810] Bluetooth: hci4: command tx timeout
[  443.371602][ T5810] Bluetooth: hci6: command tx timeout
[  444.825758][ T5810] Bluetooth: hci4: command tx timeout
[  445.452283][ T5810] Bluetooth: hci6: command tx timeout
[  446.888812][ T5810] Bluetooth: hci4: command tx timeout
[  447.563589][ T5810] Bluetooth: hci6: command tx timeout
[  448.958885][ T5810] Bluetooth: hci4: command tx timeout
[  449.624536][ T5810] Bluetooth: hci6: command tx timeout
[  465.998534][   T34] INFO: task udevd:9945 blocked for more than 143 seconds.
[  466.001343][   T34]       Not tainted syzkaller #0
[  466.075024][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  466.082911][   T34] task:udevd           state:D stack:22496 pid:9945  tgid:9945  ppid:5258   task_flags:0x400140 flags:0x00080002
[  466.086396][   T34] Call Trace:
[  466.087442][   T34]  <TASK>
[  466.088370][   T34]  __schedule+0x15dd/0x52d0
[  466.089740][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  466.091290][   T34]  ? __pfx___schedule+0x10/0x10
[  466.193709][T10803] block nbd0: Possible stuck request ffff888102f08000: control (read@0,1024B). Runtime 270 seconds
[  466.197168][T10803] block nbd0: Possible stuck request ffff888102f08200: control (read@1024,1024B). Runtime 270 seconds
[  466.200626][T10803] block nbd0: Possible stuck request ffff888102f08400: control (read@2048,1024B). Runtime 270 seconds
[  466.214590][T10803] block nbd0: Possible stuck request ffff888102f08600: control (read@3072,1024B). Runtime 270 seconds
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  466.524086][   T34]  ? schedule+0x90/0x360
[  466.525911][   T34]  schedule+0x164/0x360
[  466.527643][   T34]  io_schedule+0x7f/0xd0
[  466.529425][   T34]  folio_wait_bit_common+0x6d8/0xbc0
[  466.531668][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  466.639492][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  466.641521][   T34]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  466.653180][   T34]  do_read_cache_folio+0x1ad/0x590
[  466.655287][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  466.657524][   T34]  read_part_sector+0xb6/0x2b0
[  466.659517][   T34]  adfspart_check_POWERTEC+0x92/0xef0
[  466.661683][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  466.956335][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  466.958227][   T34]  bdev_disk_changed+0x7ba/0x1550
[  466.959777][   T34]  ? bdev_open+0xe0/0xd30
[  466.961216][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  467.494403][   T34]  blkdev_get_whole+0x380/0x510
[  467.496052][   T34]  bdev_open+0x31e/0xd30
[  467.497569][   T34]  blkdev_open+0x470/0x610
[  467.499165][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  467.501055][   T34]  do_dentry_open+0x785/0x14e0
[  468.046112][   T34]  vfs_open+0x3b/0x340
[  468.047433][   T34]  ? path_openat+0x2df0/0x3860
[  468.048912][   T34]  path_openat+0x2e08/0x3860
[  468.050376][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  468.052037][   T34]  ? stack_depot_save_flags+0x33/0x810
[  468.059472][   T34]  ? __pfx_path_openat+0x10/0x10
[  468.060960][   T34]  ? __x64_sys_openat+0x138/0x170
[  468.062526][   T34]  ? do_syscall_64+0x14d/0xf80
[  468.077461][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.079380][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  468.102155][   T34]  do_file_open+0x23e/0x4a0
[  468.110085][   T34]  ? __pfx_do_file_open+0x10/0x10
[  468.111784][   T34]  ? _raw_spin_unlock+0x28/0x50
[  468.125310][   T34]  ? alloc_fd+0x64b/0x6c0
[  468.127009][   T34]  do_sys_openat2+0x113/0x200
[  468.128647][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  468.130570][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  468.132383][   T34]  ? rcu_is_watching+0x15/0xb0
[  468.508017][   T34]  __x64_sys_openat+0x138/0x170
[  468.510358][   T34]  do_syscall_64+0x14d/0xf80
[  468.512241][   T34]  ? trace_irq_disable+0x3b/0x150
[  468.532412][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.603209][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.605472][   T34] RIP: 0033:0x7f8961b789a4
[  468.606977][   T34] RSP: 002b:00007fff157c8100 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  468.609620][   T34] RAX: ffffffffffffffda RBX: 0000556238d5c010 RCX: 00007f8961b789a4
[  468.612286][   T34] RDX: 00000000000a0800 RSI: 0000556238d5c1e0 RDI: 00000000ffffff9c
[  468.787025][   T34] RBP: 0000556238d5c1e0 R08: 0000000000000001 R09: 3fffffffffffffff
[  468.789521][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  468.791986][   T34] R13: 0000556238d72950 R14: 0000000000000001 R15: 0000556238d5b910
[  468.828735][   T34]  </TASK>
[  468.897291][   T34] 
[  468.897291][   T34] Showing all locks held in the system:
[  468.899790][   T34] 1 lock held by khungtaskd/34:
[  468.901769][   T34]  #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  469.162977][   T34] 2 locks held by getty/5635:
[  469.164879][   T34]  #0: ffff888112f3f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  469.168114][   T34]  #1: ffffc900034b02f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  469.171256][   T34] 4 locks held by kworker/u8:3/5840:
[  469.345734][   T34] 6 locks held by kworker/u8:4/5863:
[  469.347571][   T34]  #0: ffff8881012ae148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  469.351367][   T34]  #1: ffffc90006ecfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  469.591874][   T34]  #2: ffffffff8fbc1950 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  469.653042][   T34]  #3: ffff888022a25130 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x11b/0x3f0
[  469.656946][   T34]  #4: ffff888022a24250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x12d/0x3f0
[  469.661129][   T34]  #5: ffffffff8e7647c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  469.782359][   T34] 1 lock held by udevd/9945:
[  469.885927][   T34]  #0: ffff88816d7b3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  469.936652][   T34] 2 locks held by syz-executor/10745:
[  469.938444][   T34]  #0: ffffffff8fbc1950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  469.941284][   T34]  #1: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: fib6_rules_net_exit_batch+0x20/0xc0
[  470.005173][   T34] 3 locks held by syz-executor/10795:
[  470.007248][   T34]  #0: ffffffff8fbc1950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  470.010720][   T34]  #1: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0xa00
[  470.154104][   T34]  #2: ffffffff8e5ed5f0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0xc74/0x2370
[  470.158584][   T34] 2 locks held by syz-executor/10799:
[  470.160758][   T34]  #0: ffffffff8fbc1950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  470.193269][   T34]  #1: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x120
[  470.197220][   T34] 2 locks held by syz-executor/10801:
[  470.199444][   T34]  #0: ffffffff8fbc1950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  470.258288][   T34]  #1: ffffffff8f928310 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x92/0x350
[  470.262084][   T34] 2 locks held by syz-executor/10815:
[  470.513875][   T34]  #0: ffffffff8fbc1950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  470.517028][   T34]  #1: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840
[  470.520086][   T34] 5 locks held by syz-executor/10820:
[  470.521786][   T34]  #0: ffffffff8fbc1950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  470.598949][   T34]  #1: ffffffff8f928150 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0
[  470.601954][   T34]  #2: ffffffff8f928310 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0
[  470.675149][   T34]  #3: ffff88816d758ff8 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650
[  470.678598][   T34]  #4: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0
[  470.681629][   T34] 4 locks held by syz-executor/10822:
[  470.791408][   T34]  #0: ffffffff8fbc1950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  470.835176][   T34]  #1: ffffffff8f928150 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0
[  470.839033][   T34]  #2: ffffffff8f928310 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0
[  470.895139][   T34]  #3: ffff88816d758ff8 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650
[  470.899311][   T34] 1 lock held by syz-executor/10834:
[  470.901470][   T34]  #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  470.945890][   T34] 1 lock held by syz-executor/10838:
[  470.948054][   T34]  #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  470.951683][   T34] 1 lock held by syz-executor/10839:
[  470.967280][   T34]  #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  470.970201][   T34] 
[  470.970958][   T34] =============================================
[  470.970958][   T34] 
[  470.999174][   T34] NMI backtrace for cpu 0
[  470.999193][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  470.999204][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  470.999211][   T34] Call Trace:
[  470.999216][   T34]  <TASK>
[  470.999222][   T34]  dump_stack_lvl+0xe8/0x150
[  470.999241][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  470.999255][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  470.999271][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  470.999284][   T34]  sys_info+0x135/0x170
[  470.999299][   T34]  watchdog+0xfd9/0x1030
[  470.999314][   T34]  ? watchdog+0x21a/0x1030
[  470.999329][   T34]  kthread+0x388/0x470
[  470.999342][   T34]  ? __pfx_watchdog+0x10/0x10
[  470.999351][   T34]  ? __pfx_kthread+0x10/0x10
[  470.999362][   T34]  ret_from_fork+0x51e/0xb90
[  470.999380][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  470.999394][   T34]  ? __switch_to+0xc7d/0x1450
[  470.999410][   T34]  ? __pfx_kthread+0x10/0x10
[  470.999422][   T34]  ret_from_fork_asm+0x1a/0x30
[  470.999448][   T34]  </TASK>
[  470.999452][   T34] Sending NMI from CPU 0 to CPUs 1:
[  471.138054][    C1] NMI backtrace for cpu 1
[  471.138066][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  471.138074][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  471.138078][    C1] RIP: 0010:debug_lockdep_rcu_enabled+0x2c/0x40
[  471.138091][    C1] Code: 1e fa 31 c0 83 3d b3 57 62 04 00 74 1d 83 3d aa 89 62 04 00 74 14 65 48 8b 0d e8 17 6d 07 31 c0 83 b9 54 0b 00 00 00 0f 94 c0 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90
[  471.138096][    C1] RSP: 0018:ffffc900001d7510 EFLAGS: 00000246
[  471.138103][    C1] RAX: 0000000000000001 RBX: ffffffff81882446 RCX: ffff8881604f57c0
[  471.138107][    C1] RDX: 0000000073623caa RSI: ffffffff8e16b62d RDI: ffffffff8c27d100
[  471.138111][    C1] RBP: dffffc0000000000 R08: ffffffff81767e95 R09: ffffffff8e75e5e0
[  471.138115][    C1] R10: ffffc900001d7638 R11: ffffffff81b0d0f0 R12: 1ffff9200003aebd
[  471.138119][    C1] R13: ffffc900001d7620 R14: ffffc900001d75e8 R15: ffffffff81767e95
[  471.138124][    C1] FS:  0000000000000000(0000) GS:ffff8882a9457000(0000) knlGS:0000000000000000
[  471.138129][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  471.138133][    C1] CR2: 00007f1409f47e20 CR3: 000000011a420000 CR4: 00000000000006f0
[  471.138160][    C1] Call Trace:
[  471.138164][    C1]  <TASK>
[  471.138167][    C1]  unwind_next_frame+0xcb/0x23c0
[  471.138180][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  471.138188][    C1]  ? handle_softirqs+0x22a/0x870
[  471.138197][    C1]  ? run_ksoftirqd+0x36/0x60
[  471.138205][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  471.138212][    C1]  arch_stack_walk+0x11b/0x150
[  471.138222][    C1]  ? run_ksoftirqd+0x36/0x60
[  471.138231][    C1]  stack_trace_save+0xa9/0x100
[  471.138237][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  471.138244][    C1]  kasan_save_track+0x3e/0x80
[  471.138251][    C1]  ? kasan_save_track+0x3e/0x80
[  471.138283][    C1]  ? kasan_save_free_info+0x46/0x50
[  471.138291][    C1]  ? __kasan_slab_free+0x5c/0x80
[  471.138297][    C1]  ? kfree+0x1c1/0x630
[  471.138302][    C1]  ? ref_tracker_free+0x522/0x840
[  471.138308][    C1]  ? dst_destroy+0x10f/0x350
[  471.138317][    C1]  ? rcu_core+0x7cd/0x1070
[  471.138325][    C1]  ? handle_softirqs+0x22a/0x870
[  471.138332][    C1]  ? run_ksoftirqd+0x36/0x60
[  471.138346][    C1]  kasan_save_free_info+0x46/0x50
[  471.138355][    C1]  __kasan_slab_free+0x5c/0x80
[  471.138362][    C1]  kfree+0x1c1/0x630
[  471.138367][    C1]  ? ref_tracker_free+0x522/0x840
[  471.138372][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  471.138380][    C1]  ref_tracker_free+0x522/0x840
[  471.138386][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  471.138392][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  471.138398][    C1]  ? dst_destroy+0x10f/0x350
[  471.138405][    C1]  ? rcu_core+0x7cd/0x1070
[  471.138411][    C1]  ? handle_softirqs+0x22a/0x870
[  471.138418][    C1]  ? run_ksoftirqd+0x36/0x60
[  471.138426][    C1]  ? smpboot_thread_fn+0x541/0xa50
[  471.138434][    C1]  ? kthread+0x388/0x470
[  471.138439][    C1]  ? ret_from_fork+0x51e/0xb90
[  471.138447][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  471.138458][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  471.138465][    C1]  ? __pfx_ipv4_dst_destroy+0x10/0x10
[  471.138473][    C1]  ? __pfx_ipv4_dst_destroy+0x10/0x10
[  471.138479][    C1]  dst_destroy+0x10f/0x350
[  471.138487][    C1]  ? rcu_core+0x751/0x1070
[  471.138494][    C1]  ? __pfx_dst_destroy_rcu+0x10/0x10
[  471.138502][    C1]  rcu_core+0x7cd/0x1070
[  471.138511][    C1]  ? __pfx_rcu_core+0x10/0x10
[  471.138519][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  471.138527][    C1]  handle_softirqs+0x22a/0x870
[  471.138535][    C1]  ? run_ksoftirqd+0x36/0x60
[  471.138544][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  471.138552][    C1]  run_ksoftirqd+0x36/0x60
[  471.138559][    C1]  smpboot_thread_fn+0x541/0xa50
[  471.138567][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  471.138576][    C1]  kthread+0x388/0x470
[  471.138582][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  471.138589][    C1]  ? __pfx_kthread+0x10/0x10
[  471.138595][    C1]  ret_from_fork+0x51e/0xb90
[  471.138603][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  471.138610][    C1]  ? __switch_to+0xc7d/0x1450
[  471.138617][    C1]  ? __pfx_kthread+0x10/0x10
[  471.138623][    C1]  ret_from_fork_asm+0x1a/0x30
[  471.138633][    C1]  </TASK>
[  474.586308][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  474.589122][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  474.592857][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  474.596853][   T34] Call Trace:
[  474.598152][   T34]  <TASK>
[  474.599322][   T34]  vpanic+0x56c/0xa60
[  474.600870][   T34]  ? __pfx___schedule+0x10/0x10
[  474.602673][   T34]  ? __pfx_vpanic+0x10/0x10
[  474.604415][   T34]  ? __pfx_console_unlock+0x10/0x10
[  474.606354][   T34]  panic+0xc5/0xd0
[  474.607825][   T34]  ? __pfx_panic+0x10/0x10
[  474.609541][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  474.611589][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  474.614027][   T34]  watchdog+0x1023/0x1030
[  474.615751][   T34]  ? watchdog+0x21a/0x1030
[  474.617520][   T34]  kthread+0x388/0x470
[  474.619075][   T34]  ? __pfx_watchdog+0x10/0x10
[  474.620939][   T34]  ? __pfx_kthread+0x10/0x10
[  474.622681][   T34]  ret_from_fork+0x51e/0xb90
[  474.624517][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  474.626592][   T34]  ? __switch_to+0xc7d/0x1450
[  474.628428][   T34]  ? __pfx_kthread+0x10/0x10
[  474.629900][   T34]  ret_from_fork_asm+0x1a/0x30
[  474.631467][   T34]  </TASK>
[  474.633273][   T34] Kernel Offset: disabled
[  474.634705][   T34] Rebooting in 86400 seconds..
