last executing test programs:

16.814006713s ago: executing program 0 (id=18262):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x100, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x32, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
close(r0) (async)
close(r0)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000800000091100800000000c39500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x10001, 0x8, 0x34a, {0x0, 0x0, 0x0, 0x3, 0x86}, {0x5, 0x1, 0x6, 0x5, 0x7f, 0x2}, 0xff, 0x2, 0xfffffff8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44090}, 0x2000c810)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x12, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x2c, 0x0, &(0x7f0000000300))
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x10)

16.741219912s ago: executing program 0 (id=18264):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32, @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x4802}, 0x800)
pipe(&(0x7f0000000080)) (async)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
poll(&(0x7f0000000400), 0x0, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r2=>r1})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010028bd70044a34042509000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x48040)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)}, 0x4084840)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054)
write$nci(r7, &(0x7f0000000040)=ANY=[], 0x14)
write$nci(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="7037822f834d0001f808008c"], 0xc)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
close(0x3) (async)
close(0x3)
socket(0xf, 0x3, 0xf8000006) (async)
socket(0xf, 0x3, 0xf8000006)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0\x00'})
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001000010800002345348c6348d820d9f440e2560f0000000000000076fea78f2030ad939a31e3745f6bfaba95fb59e0b4e80bf81859f728c194ac3a53578abeb8ddb00d8b910bc2f2037b4fc401c704f98d808884f0f465874131e5637c9039561e0d881bb7d75c9fd85da19e94a7617ca329571b455ee82de32b9cf907b8fe7376e14bbcce418a56b2bfa2f0774e560e398197bb1e41397940cba5565ad75bb2fa492b5120cd0800"/181, @ANYRES32=r0, @ANYRES8=r4, @ANYRES32, @ANYRESHEX=r6], 0x34}, 0x1, 0x0, 0x0, 0x20004045}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001000010800002345348c6348d820d9f440e2560f0000000000000076fea78f2030ad939a31e3745f6bfaba95fb59e0b4e80bf81859f728c194ac3a53578abeb8ddb00d8b910bc2f2037b4fc401c704f98d808884f0f465874131e5637c9039561e0d881bb7d75c9fd85da19e94a7617ca329571b455ee82de32b9cf907b8fe7376e14bbcce418a56b2bfa2f0774e560e398197bb1e41397940cba5565ad75bb2fa492b5120cd0800"/181, @ANYRES32=r0, @ANYRES8=r4, @ANYRES32, @ANYRESHEX=r6], 0x34}, 0x1, 0x0, 0x0, 0x20004045}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bd00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES8=0x0], 0xfc}}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04bd6b08353efa3641776f56c7556fd37130912626a5f299cb052b4c5c9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40)
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x100, 0x8070bd2f, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)

16.625734426s ago: executing program 0 (id=18265):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x48}}, 0x0)
getsockname(r0, &(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x80)
r1 = socket$inet(0x2, 0x1, 0x3)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x2, 0x35c, [0x0, 0x200000000440, 0x200000000470, 0x20000000076c], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x60, 0x6000, 'veth1_virt_wifi\x00', 'veth1_macvtap\x00', 'wg1\x00', 'ip6tnl0\x00', @local, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xd6, [], [@common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffd}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}, {0x11, 0x26, 0xa01, 'caif0\x00', 'veth1_to_team\x00', 'team_slave_0\x00', 'wlan1\x00', @broadcast, [], @local, [0xff, 0x0, 0xff, 0xff, 0xff], 0xfe, 0x1a6, 0x1f6, [@time={{'time\x00', 0x0, 0x18}, {{0x6, 0x1, 0x1467a, 0x5ac9, 0xdfd, 0x6, 0x1}}}, @helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'RAS\x00'}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x81, 0x9db1, 0x0, 0x0, "94d576ab1531b2a2d0afe2aac8958ee63907a8500f7a316bfb02b4ed8dccab357c024aad0aaef5e9f51870ee58577c22dbb513f7544038be91fd1bbcf2bea668"}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz1\x00', {0x2}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x3d4)

16.52774629s ago: executing program 0 (id=18267):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
close(0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}]}, 0x94)
close(0x3)
r3 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x2400c080}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x8000)

16.035274602s ago: executing program 2 (id=18275):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5, @ANYBLOB="80684cc88585013e000b84e11df7a06b119d0b520c1b47ab8f5b14ae854e00d61d33f26dda1cd1eff856c99317705f36d139a2a7d0948805d3847396ece9c37d148108f15dca0e5a96de90025441de92662ba09c08b3d788c9da9d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)

15.955320253s ago: executing program 1 (id=18276):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x28, 0x2, 0x70bd27, 0x25dfdbfd, {0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@union={0xd, 0x0, 0x0, 0x5, 0x1, 0x5}]}, {0x0, [0x5f, 0x3e, 0x5f]}}, 0x0, 0x29, 0x0, 0x1}, 0x28)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x10, 0x1403, 0x2, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x3, &(0x7f0000000480)=ANY=[@ANYRES32=r1], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff7fffd}, 0x94)
unshare(0x2c020400)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r6=>0x0})
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r6, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r7, r8, 0x4, r4}, 0x10)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f00000011c0)={0x2, 'veth0_to_hsr\x00'}, 0x18)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="01002c214c1e258f9a568b8ba0d4"], 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x40000)

15.951061765s ago: executing program 2 (id=18277):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401000000000000000000080003000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x4000040)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

15.895544056s ago: executing program 1 (id=18278):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={<r1=>0x0, 0xba12}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={<r2=>r1, 0x5, 0x8000}, &(0x7f0000000180)=0x8)
bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2711}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x97, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={&(0x7f0000000200), 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@deltfilter={0x2c, 0x2d, 0x8, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x10}, {0xfff1, 0xfff1}, {0x9, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x800)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000640)={'veth0\x00', 0x2000})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-neon\x00'}, 0x58)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000700)={r2, 0xf7}, &(0x7f0000000740)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000780)=@sack_info={r2, 0x7, 0xfffffffa}, 0xc)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000007c0)=0x5, 0x4)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r6)
ioctl$XFS_IOC_GETPARENTS(r4, 0xc028583e, &(0x7f0000000940)={{[0xfffffff9, 0x0, 0x2, 0x8]}, 0x0, 0x1, 0x5, 0x0, &(0x7f0000000840)=[{{@align=0x8, {0x1000, 0x0, 0x0, 0xfffffffffffffffe}}, 0x3e548dbf, 0x0, 'veth0\x00'}, {{@align=0x3, {0x5, 0x4, 0xffffee34}}, 0x2, 0x0, 'xchacha20-neon\x00'}, {{@align=0x100000001, {0x5, 0x5, 0x200, 0x7}}, 0x7, 0x0, 'NLBL_MGMT\x00'}, {{@align=0xe, {0x68, 0x2, 0x3, 0x1}}, 0x7, 0x0, 'veth0\x00'}, {{@align=0x33, {0x6, 0x9, 0x3, 0x7}}, 0xfb86, 0x0, '/dev/net/tun\x00'}, {{@align=0x1ff, {0x3, 0xd, 0x427, 0x10000}}, 0x2, 0x0, '(\'\'\x00'}]})
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000980)={<r8=>0x0, 0x6}, &(0x7f00000009c0)=0x8)
ioctl$XFS_IOC_AG_GEOMETRY(r5, 0xc080583d, &(0x7f0000000a00)={0x3, 0x3ff, 0x80000001, 0x31, 0x7, 0x5, 0x59, 0x3})
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000a80)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x9, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]})
sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r7, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x88}, 0x44)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000c00)="930d0fd3e32547cbe0c7c30057189abe", 0x10)
sendmmsg$alg(r0, &(0x7f0000002ac0)=[{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000c40)="582db64707ff7c064bf6162d10223d60c1ebc65901de394488603422478f471f7e3713a7b409ceb104a14771992e473dd0d33397aba712ef40f63740ca41ca63953e2df5acd9f0198dc115addb5701f112f22d4d5d93f1e6a659e0ca295cb8f2ebb793617afc2ac071c732fcf73b48e9d981f3cfa02b9039a9d07365264d2ca4c44d6d5c90e1c2e8837bcbf66b472ab0a41ae5d22616a7d0002cab6f1081daa171", 0xa1}, {&(0x7f0000000d00)="bb3ed3a9e9a8a1b22fa1ae19cea589d94c4e1c594b6bd5104473324271dbb7bea70de9f011ae8135ba6f5f635e91d0ab4d3c70dd0378d34628f1026ec43baf94404b70e5b09dccf19fffb93171fecfcc8e746c77c85b858f50147271", 0x5c}, {&(0x7f0000000d80)="10b3c16837c0e2784eb543e88d34ad01d314eef66ab0903b39", 0x19}, {&(0x7f0000000dc0)="2acdef0e26c978db0f7e59837d509f6526b5a521c5944a433e60e8f90e0f207fa1af1fe7572a4cf0a4ca863eb2f423a8af9b39d58c122da76e75a1a6c3e5cbaff3673998fb8128e9565fc972a3dcdf57ac256e8937dce8e1ab580ed4ecbd347324c98f5ef062a5a25aedc18fda6856469978c956099ea2cfed783c043b452c707c3b5a1f2f27e3086981d0044c048cc5d3dc66da7e8cfcf283361dc31b8a6398e29ea7d6b557ecce99945a872888d79c1790666217e5942a03220e33ac1903ddd2187cfff8871e1ce1b6e994fdc4aca20949f917bbd4bdb6515af0dc07c085268b8566a24308704730d073", 0xeb}, {&(0x7f0000000ec0)="21189338b4f2aad9b8b2743eb887c01da288c6681b10a799c942490bcc3e73145d19d144116e4f07ecbb4a7f0889178b6072484bfd71028d584a9b56fba7da8de5", 0x41}, {&(0x7f0000000f40)="512ff7c901b7721674a6b5825cc501dd5281dc8c8f33f2648cceb6e6232c70df2e939ad9ba6c71b693ebba3324fed5e438153d40aa99e54d9f806d1a047144f7fc2709987594e25025025a1b32b9dbd8a5bf02e38fbc5caf8ee9df93471d836f68a87cc218caae", 0x67}], 0x6, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001040)="7bb7bd634a6819ba57d34c7164927776e1e826776908bfae76b47c6165fdc3f2f8a77dae7eee059ff343b481edfe4f260f2eee1c0d6159a47f9e4d13039656d3f9a7669ffafca20ca86f9ff5310e3fee9124c993", 0x54}, {&(0x7f00000010c0)="6fba7363896fef7399b8c2a9c323bfed412f7d06e75839c65ee309a745c1de12666516cbde0df4a5af9b78d26ce84bf928164491e4471ac9ff76f9cf13f6dc8af7efff565cb58162e3b8323877558fc25bf96aeaf9aede2595ca82fae3839fc56ae5d14df960ee545d12b4caebcb39103c5a984ab47b05fea98783e8face47ae908d99", 0x83}, {&(0x7f0000001180)="df545155881a5f688fd7f77ec4e25515ad32d12f8afe31fe5551ceab423b85bc086329a5ac6e29783604770d0069a41f14a6a43c5d6215721e55d7eecaf71501c283da1c83421338f9e22805bc4ef42abb076295c895f5ea822a4bcb64c0efdc0c2e76", 0x63}, {&(0x7f0000001200)="70ed11ae5d3145712a7add15e3cfec2b9dbdbd182d7041523d9d07c497db60bd5eed23ce0b47578af4f0d107592de2c6ccd2566c07450d501f6358324d7c00eb5d2f56dcd612071f15d825b0796d51c92d5cc552baae3dd0164aea5ed16fbe2a9f862223cc1908928f11a72b3c9b6ba67730dd4fe0fe81315314bf86be5f0dcb05b0c112d9c7ffa3920acf3e5c49ceff49f454509b9ccde1", 0x98}, {&(0x7f00000012c0)="078b01d21e3ff676223b75a9820d7292d61e520cfb30d30f455a5343c5bfa89689be60637c62bdcd0c37f1d7b31bb350a23ce3111e25bc64f0379c0cd64ddd3452e74fd642b0b5f38c6fdb600eef1228cb1b4fb16693383b53fe5bbf982699eabdeaf251244484d362bd92e9e72f588489f08ed3c65bd1873f571ab1f6fd994232919a8d507506d6786f00bcb3b6d0147ea57f02d72766add244c0c3b8eff2b4c4ff00aa9145bad8f6604afa8f3d1db27e417c6b1df8bf88fb5b75601a23ac2ef8a921d3f1c329fed1fb294d3201258ad9f0f63951c6450992dd3f7d92027e8541e3ff452fca371d1e7f5e0468", 0xed}, {&(0x7f00000013c0)="1e69c807528de4c22877f093deb186af7ed9d41c3ae794ee7d67e02eb128b17aec7e84d1e5151b816d113bcc05388fd4768f508b8450c0966b3ec53d3d749ecd2b54405a47ff028237f2093fd0140908adb4f1aefde95fcda14bd0e7c05252dbdeda6b38d111f763831909818072ce667a21a46a11cf231032d2c23d15add3cbbbed74f0832399d5a20dffce6ea437bcad2e9dfdfd3f91d6ff4c588356151140e66feefda3c3945bad6739f8d2b47953ee9a28c216102048d6d7010eb8e3aaf91659c795a07bc8e423c2c50bea6b4a4b29875914dc0a0a6de52d", 0xda}, {&(0x7f00000014c0)="9501c111c8964c71ae81412c413d7b8bd009e922b550b4973fea1315d934c97182d385de6fc6c5110120a324648dae23cce1be289b6ab36482e4c0993b7f10a9b6d63629eb2b9e4996ace7a82ca5b144fc120f4c5c3cae706b373e4d8719ce5b16e0ba1011faf703b42d107769c0f7905134248c8b620c60f8c1155cfff2add1dbe34764f783f0f7f13e", 0x8a}, {&(0x7f0000001580)="18b17d713f5a66e0ac8977c787199ef8c38c8ff305a584cd2d9f9ae5de696b861588fdbd435d8a1c51f15240f0a50d94e4b3e922f5daf99140bb22b9a382", 0x3e}, {&(0x7f00000015c0)="2ed1334a6428354630ad58b620cb89c748e7e4dd446f3e4b8f564f4c74473196993551cd68e408abecd9254f2aa2b5abad3a42efd33cb75b206fad9249c5ffde97e424d73453ab55e7c27785fab12cfef0325ce4878ea1b7", 0x58}], 0x9, 0x0, 0x0, 0x5}, {0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001700)="046f5e1cec417e6000a40687ab240adf1c0e9b9a3455e4", 0x17}], 0x1, &(0x7f0000001780)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xa0, 0x117, 0x2, 0x87, "eb0042968d75b575ca1b8c04abd0da9b219e0f5729c13ad14c90d56e28801d2c528e5592b59a44bae98d4d92d05e588a62213913bdd88ce0bb174a6ccad92fec2cd8ebb1929f9248f52bdac4c8c41ec77b34d459b1ef5a7b49a830c453fc9c8b6fb2cb7798f155c3279717d3b5c7f32aa28fea3f3da5818645cdde821980230f293e936e1742a5"}], 0xd0, 0x8081}, {0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001880)="7e46096fac46091d895559f92e1073fbf238a2841a5172ff9d02d9b5585f008391961d8335adf665bda341a8f9aa57d33361ea25d1a5abb0d321b764cd39fb46c39458e355d0645d4ef14d74bad3d2b1fdd9c97a4888378ca7e759b8e391b691", 0x60}], 0x1, &(0x7f0000001940)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x64a}, @iv={0x38, 0x117, 0x2, 0x1f, "4d06a8bc53a9a050f62dcd5fc98aa35056762ea3607a9065d5692be2def6b1"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xa8, 0x117, 0x2, 0x93, "9d605485c347c966f48e75289d36a257dc66b2652d5bedafed32218d04cee65200870d8dc975c06eedcc46b1e8439a902878f3f2ebb791504402de9778c29c894dc4498cb60ff8c6fe163f8d34552ec0118cb206cdbdb432d693b9e1cc337fa282ad860d1ce80059904973faa70435a7c0d49071e6cce814cdf4ed79fa26326f3ef86f0b402bbd043448f4312cd4e064bd9deb"}, @op={0x18}, @iv={0x28, 0x117, 0x2, 0x11, "4eaca87ae1ea1217842ac7931efd24f59c"}], 0x1168, 0x11}], 0x4, 0x810)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002c00), r6)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000002c40)={'wpan1\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000002d00)={&(0x7f0000002bc0), 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x40, r9, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "f57affc700a8d60a2b03a4fa1b85d948"}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002d40)={<r11=>r0})
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, &(0x7f0000002d80)={0x401, 0x18165f36, 0xfffffffd, 0x6}, 0x10)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000002dc0)={r8, 0x9}, &(0x7f0000002e00)=0x8)
ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000002f40)={<r12=>r4, &(0x7f0000002e40)='\x00', 0x80880, &(0x7f0000002e80)={@align=0x8000000000000001, {0xc, 0x7, 0x8000, 0x1}}, 0x0, &(0x7f0000002ec0), &(0x7f0000002f00)})
ioctl$XFS_IOC_PATH_TO_HANDLE(r12, 0xc0385869, &(0x7f0000003080)={r5, &(0x7f0000002f80)='\x00', 0x3, &(0x7f0000002fc0)={@align=0x4, {0x6, 0x8c, 0x4, 0x93a3}}, 0x26de, &(0x7f0000003000)={@_ha_fsid}, &(0x7f0000003040)=0x8})

15.844421174s ago: executing program 2 (id=18279):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x3, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair(0x1a, 0x1, 0x6, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x15)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000240)="a2e601c2dac313828eb489e8076354fac67d966851fc511bfa", 0x19}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000340)="9c121bc04c2529a70bfe4e5f7b434c42822ec47fd401795b21b008175c38e01f256c17fa7e1f3108afb4ac54da45a5da857410e15905c71420d8390f745fde4f9e33814668a8973321", 0x49}], 0x3)
writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000080))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r8, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000140)=0x600000, 0x4)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0)

15.837738717s ago: executing program 2 (id=18280):
r0 = socket(0x2, 0x2, 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r5 = socket$inet(0x2, 0x2, 0x1)
getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r6 = socket$inet(0x2, 0x2, 0x1) (async)
setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000080), 0x4)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xe, 0xb}, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) (async)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r2, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)=0x38e, 0x12) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={<r8=>0x0, @loopback, @broadcast}, 0x0)
bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x7, r8, 0x3, r0}, 0x10) (async)
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000480)=0x3)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r9, 0x0, 0x0, 0x6040015, 0x0, 0x0)

15.775525656s ago: executing program 1 (id=18281):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f00000000c0)=0xfffffffa)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000080)={0x3, 0x2, 0x2})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0x10000, 0x9, 0x4, 0x5})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x1200}, [@IFLA_ADDRESS={0xa}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x40008)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r4], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

15.713850515s ago: executing program 1 (id=18282):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x1f}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=@newtaction={0xd8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x3, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0xd85, 0x8000}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1066, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x100c4041}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
socket$inet6(0xa, 0x80000, 0xfc)
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000100)=""/125, 0x7d})
r3 = socket$inet6(0x10, 0x2, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}, @IFLA_BROADCAST={0x8, 0x2, @random="ebacfc9c3f34"}]}, 0x48}, 0x1, 0x0, 0x0, 0x600}, 0x8080)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'gretap0\x00', &(0x7f0000000980)={'syztnl1\x00', <r4=>0x0, 0x8000, 0x7800, 0x9, 0x20bd, {{0x14, 0x4, 0x1, 0x0, 0x50, 0x66, 0x0, 0xd6, 0x4, 0x0, @rand_addr=0x64010102, @loopback, {[@rr={0x7, 0x17, 0xb3, [@dev={0xac, 0x14, 0x14, 0x30}, @remote, @local, @loopback, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x4, 0xa2, 0x3, 0x8}, @generic={0x88, 0x7, "23772c85ab"}, @end, @generic={0x7, 0x3, "c3"}, @rr={0x7, 0x13, 0x8d, [@multicast1, @multicast1, @multicast1, @broadcast]}]}}}}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32], 0x68}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x240}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000f00)={0x1dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x800}, 0x4048091)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12, r11}, 0xc)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xdfa}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0xfffffffffffffe1a}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000080)
sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)

15.713329027s ago: executing program 2 (id=18283):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3)
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001780)=""/4104, 0x1008}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000000)=""/8, 0x8}], 0x4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x17, &(0x7f0000000540)=""/23, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="64bb6a97aa", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001480)="98", 0x1}, {0x0}], 0x2}}], 0x2, 0x4802d)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x404c014)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1)
close(0x3)

15.622233516s ago: executing program 0 (id=18284):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c2100801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800074000000003"], 0x104}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x1, 0x2, 0x2, 0x6, 0xc}, 0x20)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x0, 0xb0, 0xffffffff, 0x158, 0x158, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16, 0x2}, 0x0, 0x70, 0xb0, 0x48}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x24, "d7df2f5dfb96e3780ecf6fce52b1130f3a6eaa11a8adb9163040c9b77018"}}}, {{@ip={@multicast1, @multicast2, 0xff, 0xff, 'wlan1\x00', 'erspan0\x00', {}, {0xff}, 0x5c, 0x2, 0x53}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, @gre_key=0x2, @gre_key=0x2}}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @gre_key=0x7, @port=0x4e23}}}}, {{@ip={@loopback, @private=0xa010100, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0xffffffffffffffff, 0xb, 0x2}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0)
pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0)
r7 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10, 0x80000)
connect$phonet_pipe(r7, &(0x7f00000004c0)={0x23, 0x4, 0xd, 0x9}, 0x10)
sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x40030000000000}, 0x4000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)

15.618670862s ago: executing program 2 (id=18285):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', <r1=>0x0})
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
sendmsg$xdp(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)="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", 0x825}], 0x1, 0x0, 0x0, 0xc0}, 0x804)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
sendto(r3, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004140)=""/4096, 0x1000}, {0x0, 0x12}], 0x2}, 0x5}], 0x1, 0x102, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x2, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f80080001"], 0x168}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r8], 0x20}}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000080000000000095", @ANYRES32, @ANYRES8=r7, @ANYRESDEC=r7], &(0x7f0000000180)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x16}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYRES64=r4, @ANYRES16=r9, @ANYBLOB="00037cb37000ffdbdf250b00000014006e800400020004000100040001000400010005000800030000005000508004000500110001003076024dd544da7f38ef708a28000000080008800400010011000100272c011685f133b7db7020acac0000000800030001ac0f00080007000100000008000700010000000f000a00ccc707c6a0358dbd61a3450008003700010000000a000600080211000001000009000700fecc306b10000000"], 0xb0}, 0x1, 0x0, 0x0, 0x28c0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0xc048001}, 0x8000)
socket$l2tp(0x2, 0x2, 0x73)
socket$netlink(0x10, 0x3, 0x0)

15.617737597s ago: executing program 0 (id=18286):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d001480080018"], 0x38}, 0x1, 0x0, 0x0, 0x48855}, 0xc000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x810, 0xffffffffffffffff, 0x215ec000)
close(0x3)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa)
poll(&(0x7f0000002000)=[{r2, 0x93d4}], 0x1, 0x9)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'dummy0\x00', 0x1}, 0x18)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x28080)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

15.535246211s ago: executing program 1 (id=18287):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x6, 0x0, 0x70bd27, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x18, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x30}, 0x1, 0x7}, 0x11)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}, 0x0, 0x3, [{{0x2, 0x4e24, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}]}, 0x210)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850000f8ac00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
pipe(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940))
close(0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$netlink(0x10, 0x3, 0x8000000004)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r8, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
r9 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r9, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
socket$unix(0x1, 0x2, 0x0)

15.465807061s ago: executing program 1 (id=18288):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00\x00', 0x26, 0x1000c001, 0x0, 0x0)
close(0x3)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {}, 0x62d7})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f00000002c0)={'vlan1\x00', @random="02000000002b"})

54.235059ms ago: executing program 32 (id=18286):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d001480080018"], 0x38}, 0x1, 0x0, 0x0, 0x48855}, 0xc000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x810, 0xffffffffffffffff, 0x215ec000)
close(0x3)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa)
poll(&(0x7f0000002000)=[{r2, 0x93d4}], 0x1, 0x9)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'dummy0\x00', 0x1}, 0x18)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x28080)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2.697931ms ago: executing program 33 (id=18288):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00\x00', 0x26, 0x1000c001, 0x0, 0x0)
close(0x3)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {}, 0x62d7})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f00000002c0)={'vlan1\x00', @random="02000000002b"})

0s ago: executing program 34 (id=18285):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', <r1=>0x0})
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
sendmsg$xdp(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)="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", 0x825}], 0x1, 0x0, 0x0, 0xc0}, 0x804)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
sendto(r3, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004140)=""/4096, 0x1000}, {0x0, 0x12}], 0x2}, 0x5}], 0x1, 0x102, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x2, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f80080001"], 0x168}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r8], 0x20}}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000080000000000095", @ANYRES32, @ANYRES8=r7, @ANYRESDEC=r7], &(0x7f0000000180)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x16}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYRES64=r4, @ANYRES16=r9, @ANYBLOB="00037cb37000ffdbdf250b00000014006e800400020004000100040001000400010005000800030000005000508004000500110001003076024dd544da7f38ef708a28000000080008800400010011000100272c011685f133b7db7020acac0000000800030001ac0f00080007000100000008000700010000000f000a00ccc707c6a0358dbd61a3450008003700010000000a000600080211000001000009000700fecc306b10000000"], 0xb0}, 0x1, 0x0, 0x0, 0x28c0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0xc048001}, 0x8000)
socket$l2tp(0x2, 0x2, 0x73)
socket$netlink(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

eased all slaves
[ 1220.070959][ T4947] macsec0: entered allmulticast mode
[ 1220.163391][ T4957] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1220.166644][ T4957] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1220.530743][ T5030] netlink: 'syz.1.16870': attribute type 8 has an invalid length.
[ 1220.538108][ T5030] bond0: entered promiscuous mode
[ 1220.540964][ T5030] bond0: left promiscuous mode
[ 1220.621707][ T5032] ipvlan6: entered promiscuous mode
[ 1220.624915][ T5032] 8021q: adding VLAN 0 to HW filter on device ipvlan6
[ 1221.053149][ T5065] netlink: 'syz.2.16877': attribute type 8 has an invalid length.
[ 1221.260902][ T5072] vcan0: entered promiscuous mode
[ 1221.262490][ T5072] vcan0: entered allmulticast mode
[ 1243.428167][ T5080] netlink: 'syz.2.16882': attribute type 1 has an invalid length.
[ 1243.452921][ T5080] bond305: entered promiscuous mode
[ 1243.455464][ T5080] 8021q: adding VLAN 0 to HW filter on device bond305
[ 1243.462820][ T5080] __nla_validate_parse: 36 callbacks suppressed
[ 1243.462837][ T5080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16882'.
[ 1243.468465][ T5080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16882'.
[ 1243.469768][ T5085] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[ 1243.499003][ T5085] netlink: 'syz.1.16881': attribute type 1 has an invalid length.
[ 1243.533110][ T5089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16883'.
[ 1243.537315][ T5089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16883'.
[ 1243.541002][ T5089] netlink: 58 bytes leftover after parsing attributes in process `syz.0.16883'.
[ 1243.564014][ T5089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16883'.
[ 1243.582308][ T5091] netlink: 'syz.2.16884': attribute type 10 has an invalid length.
[ 1243.615393][ T5095] netlink: 'syz.1.16886': attribute type 8 has an invalid length.
[ 1243.663248][ T5098] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16887'.
[ 1243.674778][ T5098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16887'.
[ 1243.771160][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16891'.
[ 1243.875851][ T5118] bond340: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[ 1243.881188][ T5118] bond340 (unregistering): Released all slaves
[ 1243.892646][ T5115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16892'.
[ 1243.962561][ T5103]  speed is unknown, defaulting to 1000
[ 1244.018717][ T5125] bond340: option tlb_dynamic_lb: invalid value (5)
[ 1244.022417][ T5125] bond340 (unregistering): Released all slaves
[ 1244.041321][ T5127] bond340: option tlb_dynamic_lb: invalid value (5)
[ 1244.044950][ T5127] bond340 (unregistering): Released all slaves
[ 1244.311078][ T5137] x_tables: duplicate underflow at hook 2
[ 1244.671268][ T5168] netlink: 'syz.0.16904': attribute type 1 has an invalid length.
[ 1244.709749][ T5168] 8021q: adding VLAN 0 to HW filter on device bond309
[ 1244.757611][ T5168] 8021q: adding VLAN 0 to HW filter on device batadv12
[ 1244.763732][ T5168] bond309: (slave batadv12): making interface the new active one
[ 1244.772187][ T5168] bond309: (slave batadv12): Enslaving as an active interface with an up link
[ 1245.609747][ T5209] netlink: 'syz.2.16914': attribute type 4 has an invalid length.
[ 1245.706572][ T5220] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1245.862194][ T5209]  speed is unknown, defaulting to 1000
[ 1245.901750][ T5234] syzkaller0: entered promiscuous mode
[ 1245.904083][ T5234] syzkaller0: entered allmulticast mode
[ 1245.915439][ T5234] netlink: 'syz.0.16921': attribute type 1 has an invalid length.
[ 1245.986461][ T5234] bond310: (slave veth147): Enslaving as an active interface with a down link
[ 1246.020829][ T5234] netlink: 'syz.0.16921': attribute type 1 has an invalid length.
[ 1246.443351][ T5269] bond0: entered promiscuous mode
[ 1246.449192][ T5269] bond0: left promiscuous mode
[ 1246.625707][ T5284] netlink: 'syz.2.16937': attribute type 10 has an invalid length.
[ 1246.629168][ T5284] netlink: 'syz.2.16937': attribute type 10 has an invalid length.
[ 1246.649914][ T5287] vlan0: entered promiscuous mode
[ 1246.657080][ T5287] bond0: entered promiscuous mode
[ 1246.724763][ T5293] syzkaller0: entered allmulticast mode
[ 1247.329515][ T5328] dvmrp0: entered allmulticast mode
[ 1247.739222][ T5351] mac80211_hwsim hwsim319 wlan0: Caught tx_queue_len zero misconfig
[ 1247.857368][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1247.867669][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1247.872486][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1247.875896][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1248.852950][ T5437] validate_nla: 1 callbacks suppressed
[ 1248.852961][ T5437] netlink: 'syz.1.16974': attribute type 5 has an invalid length.
[ 1248.862672][ T5437] netlink: 'syz.1.16974': attribute type 8 has an invalid length.
[ 1248.868539][ T5439] netlink: 'syz.2.16975': attribute type 3 has an invalid length.
[ 1248.975024][ T5437] __nla_validate_parse: 36 callbacks suppressed
[ 1248.975037][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16974'.
[ 1249.025056][ T5452] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 1249.038942][ T5453] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 1249.059156][ T5455] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1249.131302][ T5466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16980'.
[ 1249.163967][ T5468] netlink: 'syz.1.16981': attribute type 10 has an invalid length.
[ 1249.172968][ T5468] netlink: 228 bytes leftover after parsing attributes in process `syz.1.16981'.
[ 1249.191867][ T5465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16980'.
[ 1249.202366][ T5465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16980'.
[ 1249.205548][ T5465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16980'.
[ 1249.252943][ T5474] netlink: 'syz.2.16982': attribute type 1 has an invalid length.
[ 1249.278848][ T5474] 8021q: adding VLAN 0 to HW filter on device bond306
[ 1249.292531][ T5474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16982'.
[ 1249.410386][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16983'.
[ 1249.462639][ T5477] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16983'.
[ 1249.515793][ T5494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16986'.
[ 1249.722188][ T5513] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1249.802111][ T5526] netlink: 'syz.2.16994': attribute type 1 has an invalid length.
[ 1249.839063][ T5528] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1249.842256][ T5528] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[ 1250.052858][ T5557] netlink: 'syz.1.17002': attribute type 1 has an invalid length.
[ 1250.111846][ T5556] bond340: (slave bridge175): making interface the new active one
[ 1250.114910][ T5556] bond340: (slave bridge175): Enslaving as an active interface with an up link
[ 1250.118314][ T5534]  speed is unknown, defaulting to 1000
[ 1250.144082][ T5559] Bluetooth: hci2: Opcode 0x0401 failed: -22
[ 1250.283967][ T5577] netlink: 'syz.2.17006': attribute type 1 has an invalid length.
[ 1250.362986][ T5587] vlan26: entered promiscuous mode
[ 1250.364934][ T5587] bridge0: entered promiscuous mode
[ 1250.514541][ T5591] wg1: left promiscuous mode
[ 1250.516148][ T5591] wg1: left allmulticast mode
[ 1250.540779][ T5591] mac80211_hwsim hwsim57 syzkaller0: left promiscuous mode
[ 1250.543837][ T5591] mac80211_hwsim hwsim57 syzkaller0: left allmulticast mode
[ 1250.588674][ T5591] bond281: left promiscuous mode
[ 1250.590471][ T5591] bridge185: left promiscuous mode
[ 1250.592537][ T5591] bond281: left allmulticast mode
[ 1250.594210][ T5591] bridge185: left allmulticast mode
[ 1250.596341][ T5591] bond282: left promiscuous mode
[ 1250.599963][ T5591] gretap12: left allmulticast mode
[ 1250.602438][ T5591] vlan24: left allmulticast mode
[ 1250.604419][ T5591] bridge190: left allmulticast mode
[ 1250.609261][ T5591] bond287: left promiscuous mode
[ 1250.612411][ T5591] bond289: left promiscuous mode
[ 1250.615341][ T5591] bridge194: left promiscuous mode
[ 1250.620135][ T5591] bridge195: left promiscuous mode
[ 1250.622331][ T5591] bridge196: left promiscuous mode
[ 1250.624034][ T5591] bridge197: left promiscuous mode
[ 1250.625860][ T5591] bond289: left allmulticast mode
[ 1250.628373][ T5591] bridge194: left allmulticast mode
[ 1250.630433][ T5591] bridge195: left allmulticast mode
[ 1250.632409][ T5591] bridge196: left allmulticast mode
[ 1250.634549][ T5591] bridge197: left allmulticast mode
[ 1250.638102][ T5591] gtp13: left promiscuous mode
[ 1250.640143][ T5591] gtp13: left allmulticast mode
[ 1250.648767][ T5591] bond291: left promiscuous mode
[ 1250.656344][ T5591] bond295: left promiscuous mode
[ 1250.662604][ T5591] bond295: left allmulticast mode
[ 1250.685238][ T5591] bond296: left promiscuous mode
[ 1250.691491][ T5591] bond297: left promiscuous mode
[ 1250.715825][ T5591] bond302: left promiscuous mode
[ 1250.732583][ T5591] bond305: left promiscuous mode
[ 1250.864061][ T5608] netlink: 'syz.1.17015': attribute type 2 has an invalid length.
[ 1250.873495][ T5608] !9: entered promiscuous mode
[ 1250.876445][ T5608] netlink: 'syz.1.17015': attribute type 2 has an invalid length.
[ 1250.880754][ T5608] !9: left promiscuous mode
[ 1251.163017][ T5639] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[ 1251.617573][ T5676] 8021q: adding VLAN 0 to HW filter on device bond307
[ 1251.738325][ T5688] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[ 1252.184487][ T5727] xt_hashlimit: size too large, truncated to 1048576
[ 1252.456148][ T5740] bpq0: left promiscuous mode
[ 1252.460435][ T5740] bpq0: left allmulticast mode
[ 1252.604121][ T5751] bond308: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 1252.611097][ T5751] bond308: (slave vxcan1): Error -95 calling set_mac_address
[ 1252.652211][ T5756] bond308: (slave bridge202): Enslaving as an active interface with a down link
[ 1252.858744][ T5754]  speed is unknown, defaulting to 1000
[ 1253.084561][ T5770] 8021q: adding VLAN 0 to HW filter on device bond341
[ 1253.221780][ T5770] veth194: entered promiscuous mode
[ 1253.250599][ T5770] bond341: (slave veth194): Enslaving as an active interface with an up link
[ 1253.747600][ T5823] 8021q: adding VLAN 0 to HW filter on device bond309
[ 1253.752731][ T5823] bond0: (slave bond309): making interface the new active one
[ 1253.755711][ T5823] bond309: entered allmulticast mode
[ 1253.767984][ T5823] bond0: (slave bond309): Enslaving as an active interface with an up link
[ 1253.785220][ T5809]  speed is unknown, defaulting to 1000
[ 1253.984611][ T5858] __nla_validate_parse: 93 callbacks suppressed
[ 1253.984631][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17071'.
[ 1253.993324][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17071'.
[ 1254.029130][ T5860] netlink: 9 bytes leftover after parsing attributes in process `syz.2.17072'.
[ 1254.183568][ T5871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17076'.
[ 1254.431988][ T5882] syzkaller0: entered promiscuous mode
[ 1254.434353][ T5882] syzkaller0: entered allmulticast mode
[ 1254.480588][ T5882] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1254.481181][ T5890] openvswitch: netlink: IP tunnel dst address not specified
[ 1254.501738][ T5882] syzkaller0: MTU too low for tipc bearer
[ 1254.517325][ T5882] tipc: Disabling bearer <eth:syzkaller0>
[ 1254.558809][ T5894] netlink: 84 bytes leftover after parsing attributes in process `syz.2.17084'.
[ 1254.562290][ T5894] netlink: 84 bytes leftover after parsing attributes in process `syz.2.17084'.
[ 1254.627913][ T5899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17085'.
[ 1254.649722][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17082'.
[ 1254.728249][ T5909] validate_nla: 7 callbacks suppressed
[ 1254.728265][ T5909] netlink: 'syz.0.17088': attribute type 8 has an invalid length.
[ 1254.733638][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17088'.
[ 1254.751663][ T5909] bond0: entered promiscuous mode
[ 1254.754916][ T5909] bond0: left promiscuous mode
[ 1254.870642][ T5919] netlink: 'syz.2.17093': attribute type 11 has an invalid length.
[ 1254.935746][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17092'.
[ 1254.952736][ T5921] netlink: 'syz.2.17094': attribute type 10 has an invalid length.
[ 1254.952751][ T5923] netlink: 'syz.2.17094': attribute type 10 has an invalid length.
[ 1255.017063][ T5930] netlink: 'syz.2.17095': attribute type 1 has an invalid length.
[ 1255.021305][ T5930] netlink: 'syz.2.17095': attribute type 1 has an invalid length.
[ 1255.047839][ T5930] bond310: option xmit_hash_policy: invalid value (10)
[ 1255.053653][ T5930] bond310 (unregistering): Released all slaves
[ 1255.355892][ T5953] netlink: 'syz.2.17101': attribute type 1 has an invalid length.
[ 1255.383211][ T5953] 8021q: adding VLAN 0 to HW filter on device bond310
[ 1255.458000][ T5953] bond310: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[ 1255.467726][ T5970] netlink: 'syz.0.17104': attribute type 19 has an invalid length.
[ 1255.471168][ T5970] netlink: 'syz.0.17104': attribute type 19 has an invalid length.
[ 1255.583798][ T5966] netlink: 'syz.1.17105': attribute type 4 has an invalid length.
[ 1255.587849][ T5966] 8021q: VLANs not supported on sit0
[ 1255.911852][ T6008] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[ 1255.921389][ T6008] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[ 1255.950184][ T6004] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1256.028447][ T6020] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[ 1256.033747][ T6018] TCP: TCP_TX_DELAY enabled
[ 1256.189799][ T6036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1256.192488][ T6036] IPv6: NLM_F_CREATE should be set when creating new route
[ 1256.195563][ T6036] IPv6: NLM_F_CREATE should be set when creating new route
[ 1256.199797][ T6036] IPv6: NLM_F_CREATE should be set when creating new route
[ 1256.773087][ T6075]  speed is unknown, defaulting to 1000
[ 1257.269653][ T6107] syzkaller1: entered promiscuous mode
[ 1257.272178][ T6107] syzkaller1: entered allmulticast mode
[ 1257.428171][T28977]  speed is unknown, defaulting to 1000
[ 1257.433421][T28977] syz2: Port: 1 Link ACTIVE
[ 1257.443913][T28977]  speed is unknown, defaulting to 1000
[ 1257.565641][ T6119]  speed is unknown, defaulting to 1000
[ 1257.614600][ T6137] tun1: tun_chr_ioctl cmd 1074025681
[ 1257.625123][ T6137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1257.845179][ T6152] syzkaller0: entered promiscuous mode
[ 1257.848613][ T6152] syzkaller0: entered allmulticast mode
[ 1257.854826][ T6148] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[ 1260.773390][ T6188] veth0_to_bridge: Caught tx_queue_len zero misconfig
[ 1260.806247][ T6197] xt_hashlimit: size too large, truncated to 1048576
[ 1260.806286][ T6198] xt_hashlimit: size too large, truncated to 1048576
[ 1260.809584][ T6197] xt_hashlimit: overflow, try lower: 0/0
[ 1260.815210][ T6198] xt_hashlimit: overflow, try lower: 0/0
[ 1260.820476][ T6197] IPVS: Unknown mcast interface: veth0_to_batadv
[ 1260.849258][ T6202] __nla_validate_parse: 30 callbacks suppressed
[ 1260.849269][ T6202] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17164'.
[ 1260.849308][ T6204] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[ 1261.073449][ T6228]  speed is unknown, defaulting to 1000
[ 1261.461850][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17171'.
[ 1261.480842][ T6237] bond311: entered promiscuous mode
[ 1261.482889][ T6237] 8021q: adding VLAN 0 to HW filter on device bond311
[ 1261.512612][ T6237] 8021q: adding VLAN 0 to HW filter on device bond312
[ 1261.517508][ T6237] bond312: entered promiscuous mode
[ 1261.520926][ T6237] bond311: (slave bond312): Enslaving as an active interface with an up link
[ 1261.619936][ T6243] validate_nla: 4 callbacks suppressed
[ 1261.619948][ T6243] netlink: 'syz.2.17172': attribute type 1 has an invalid length.
[ 1261.645900][ T6243] bond311: entered promiscuous mode
[ 1261.648880][ T6243] 8021q: adding VLAN 0 to HW filter on device bond311
[ 1261.656208][ T6243] netlink: 'syz.2.17172': attribute type 1 has an invalid length.
[ 1261.725777][ T6251] netlink: 'syz.2.17174': attribute type 1 has an invalid length.
[ 1261.929241][ T6267] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1261.932836][ T6267] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1261.979667][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17179'.
[ 1262.114118][ T6279] netlink: 'syz.2.17182': attribute type 1 has an invalid length.
[ 1262.135180][ T6279] bond313: entered promiscuous mode
[ 1262.137968][ T6279] 8021q: adding VLAN 0 to HW filter on device bond313
[ 1262.156446][ T6279] bond313: (slave bridge203): making interface the new active one
[ 1262.159312][ T6279] bridge203: entered promiscuous mode
[ 1262.163189][ T6279] bridge203: left promiscuous mode
[ 1262.422731][ T6293] netlink: 'syz.2.17186': attribute type 10 has an invalid length.
[ 1262.425960][ T6293] netlink: 'syz.2.17186': attribute type 10 has an invalid length.
[ 1262.585215][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17188'.
[ 1262.589534][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17188'.
[ 1262.593442][ T6300] netlink: 5 bytes leftover after parsing attributes in process `syz.0.17188'.
[ 1262.798097][ T6315] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.17190'.
[ 1262.830043][ T6320] bridge203: entered promiscuous mode
[ 1262.881538][ T6308]  speed is unknown, defaulting to 1000
[ 1262.909038][ T6331] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.17194'.
[ 1262.953775][ T6320] netlink: 68 bytes leftover after parsing attributes in process `syz.2.17194'.
[ 1262.954932][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17197'.
[ 1263.140832][ T6359] syzkaller0: entered promiscuous mode
[ 1263.142633][ T6359] syzkaller0: entered allmulticast mode
[ 1263.254663][ T6370] netlink: 'syz.2.17204': attribute type 1 has an invalid length.
[ 1263.271861][ T6362] bond342: Removing last ns target with arp_interval on
[ 1263.404259][ T6376] netlink: 'syz.1.17205': attribute type 21 has an invalid length.
[ 1263.424211][ T6376] netlink: 'syz.1.17205': attribute type 4 has an invalid length.
[ 1263.444749][ T6376] netlink: 'syz.1.17205': attribute type 1 has an invalid length.
[ 1263.502508][ T6386] IPVS: length: 101 != 8
[ 1263.666011][ T6403] batadv49: entered promiscuous mode
[ 1263.670630][ T6403] batadv49: entered allmulticast mode
[ 1263.673298][ T6403] 8021q: adding VLAN 0 to HW filter on device batadv49
[ 1263.710053][ T6407] batadv14: entered promiscuous mode
[ 1263.714940][ T6407] batadv14: entered allmulticast mode
[ 1263.717974][ T6407] 8021q: adding VLAN 0 to HW filter on device batadv14
[ 1263.809411][ T6422] sctp: [Deprecated]: syz.0.17217 (pid 6422) Use of int in max_burst socket option.
[ 1263.809411][ T6422] Use struct sctp_assoc_value instead
[ 1263.821173][ T6425] bond343: option ad_select: invalid value (34)
[ 1263.825781][ T6425] bond343 (unregistering): Released all slaves
[ 1264.012594][ T6432] bond26: (slave 26): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1264.020069][ T6432] bond26: (slave 26): Enslaving as an active interface with an up link
[ 1264.027401][ T6432] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1264.032966][T28980]  speed is unknown, defaulting to 1000
[ 1264.035654][T28977]  speed is unknown, defaulting to 1000
[ 1264.038319][T28975]  speed is unknown, defaulting to 1000
[ 1264.079571][ T6435] syzkaller0: entered promiscuous mode
[ 1264.310848][ T6451] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1264.341657][ T6451] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1264.365058][ T6452] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[ 1264.391182][ T6451] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1264.436077][ T6451] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1264.487604][ T5963] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1264.499029][ T5963] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1264.513884][ T5963] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1264.530707][ T5963] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1264.628505][ T6465] syzkaller0: entered promiscuous mode
[ 1264.637460][ T6465] syzkaller0: entered allmulticast mode
[ 1264.828741][ T6480] pim6reg: left allmulticast mode
[ 1264.934914][ T6477]  speed is unknown, defaulting to 1000
[ 1265.035397][ T6488] bond343: (slave bridge177): making interface the new active one
[ 1265.039151][ T6488] bond343: (slave bridge177): Enslaving as an active interface with an up link
[ 1265.245578][ T6495] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1265.511379][ T6520] 8021q: adding VLAN 0 to HW filter on device bond315
[ 1265.520668][ T6522] nbd: must specify a size in bytes for the device
[ 1265.543080][ T6525] nbd: must specify a size in bytes for the device
[ 1265.750004][ T6535]  speed is unknown, defaulting to 1000
[ 1266.031778][ T6544] bond344: option arp_interval: invalid value (18446744073709551615)
[ 1266.035206][ T6544] bond344: option arp_interval: allowed values 0 - 2147483647
[ 1266.042106][ T6544] bond344 (unregistering): Released all slaves
[ 1266.236173][ T6557] __nla_validate_parse: 27 callbacks suppressed
[ 1266.236189][ T6557] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17257'.
[ 1266.369714][ T6559] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.17258'.
[ 1266.375898][ T6559] netlink: 240 bytes leftover after parsing attributes in process `syz.0.17258'.
[ 1266.421787][ T6562] SET target dimension over the limit!
[ 1266.588593][ T6567] bridge207: entered promiscuous mode
[ 1266.591159][ T6567] bridge207: entered allmulticast mode
[ 1266.681753][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17262'.
[ 1266.685529][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17262'.
[ 1266.831925][ T6581] mac80211_hwsim hwsim57 syzkaller0: entered promiscuous mode
[ 1267.043151][ T6600] validate_nla: 10 callbacks suppressed
[ 1267.043163][ T6600] netlink: 'syz.1.17267': attribute type 1 has an invalid length.
[ 1267.049618][ T6600] netlink: 96 bytes leftover after parsing attributes in process `syz.1.17267'.
[ 1267.052617][ T6600] netlink: 1 bytes leftover after parsing attributes in process `syz.1.17267'.
[ 1267.056999][ T6600] netlink: 'syz.1.17267': attribute type 1 has an invalid length.
[ 1267.060293][ T6600] netlink: 'syz.1.17267': attribute type 8 has an invalid length.
[ 1267.063603][ T6600] netlink: 606 bytes leftover after parsing attributes in process `syz.1.17267'.
[ 1267.219032][ T6603] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 1267.225073][ T6604] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1267.225850][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17269'.
[ 1267.233150][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17269'.
[ 1267.237646][ T6604] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1267.298134][ T6600] tipc: Resetting bearer <eth:syzkaller0>
[ 1267.514339][ T6624] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 1, id = 0
[ 1267.514360][ T6612] batadv12: left allmulticast mode
[ 1267.520640][ T6612] batadv12: left promiscuous mode
[ 1267.523393][ T6612] bridge0: port 1(batadv12) entered disabled state
[ 1267.549863][ T6626] netlink: 'syz.0.17274': attribute type 4 has an invalid length.
[ 1267.802585][ T6626]  speed is unknown, defaulting to 1000
[ 1267.852128][ T6640] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 1267.902580][ T6644] netlink: 'syz.2.17279': attribute type 11 has an invalid length.
[ 1268.214356][ T6671] bridge178: entered promiscuous mode
[ 1268.216321][ T6671] macsec2: entered promiscuous mode
[ 1268.221322][ T6671] bridge178: port 1(macsec2) entered blocking state
[ 1268.224232][ T6671] bridge178: port 1(macsec2) entered disabled state
[ 1268.228043][ T6671] macsec2: entered allmulticast mode
[ 1268.230325][ T6671] bridge178: entered allmulticast mode
[ 1268.234175][ T6671] macsec2: left allmulticast mode
[ 1268.236168][ T6671] bridge178: left allmulticast mode
[ 1268.239638][ T6671] bridge178: left promiscuous mode
[ 1268.265252][ T6673] bridge208: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 1268.452372][ T6678] pim6reg1: entered promiscuous mode
[ 1268.454582][ T6678] pim6reg1: entered allmulticast mode
[ 1268.569469][ T6688] netlink: 'syz.1.17291': attribute type 2 has an invalid length.
[ 1268.603816][ T6688] !9: entered promiscuous mode
[ 1268.618912][ T6685] netlink: 'syz.1.17291': attribute type 2 has an invalid length.
[ 1268.621634][ T6685] !9: left promiscuous mode
[ 1269.002156][ T6730] xt_hashlimit: size too large, truncated to 1048576
[ 1290.390856][ T6742] __nla_validate_parse: 16 callbacks suppressed
[ 1290.390870][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17301'.
[ 1290.524900][ T6762] netlink: 'syz.0.17304': attribute type 10 has an invalid length.
[ 1290.535413][ T6759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17305'.
[ 1290.539498][ T6760] bond316: option arp_all_targets: invalid value (129)
[ 1290.543179][ T6760] bond316 (unregistering): Released all slaves
[ 1290.714805][ T6783] netlink: 'syz.2.17309': attribute type 1 has an invalid length.
[ 1290.736343][ T6787] syzkaller0: entered allmulticast mode
[ 1290.741308][ T6787] syzkaller0: entered promiscuous mode
[ 1290.744912][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17307'.
[ 1290.784468][ T6787] syzkaller0: left promiscuous mode
[ 1290.788483][ T6787] syzkaller0: left allmulticast mode
[ 1290.836470][ T6800] netlink: 'syz.2.17313': attribute type 4 has an invalid length.
[ 1290.847791][ T6800] netlink: 240 bytes leftover after parsing attributes in process `syz.2.17313'.
[ 1290.855067][ T6798] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17311'.
[ 1290.869112][ T6800] netlink: 64 bytes leftover after parsing attributes in process `syz.2.17313'.
[ 1290.921749][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17315'.
[ 1290.962508][ T6807] netlink: 14 bytes leftover after parsing attributes in process `syz.1.17315'.
[ 1290.995819][ T6813] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1291.078849][ T6813] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1291.151423][ T6830] netlink: 'syz.2.17321': attribute type 1 has an invalid length.
[ 1291.338250][ T6834] netlink: 'syz.1.17319': attribute type 10 has an invalid length.
[ 1291.561986][ T6830] bond317: entered promiscuous mode
[ 1291.563855][ T6830] bond317: entered allmulticast mode
[ 1291.566430][ T6830] 8021q: adding VLAN 0 to HW filter on device bond317
[ 1291.582261][ T6831] macvlan10: entered promiscuous mode
[ 1291.584542][ T6831] macvlan10: entered allmulticast mode
[ 1291.589905][ T6831] 8021q: adding VLAN 0 to HW filter on device macvlan10
[ 1291.612790][ T6813] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1291.699450][ T6813] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1291.706434][ T6837] nbd: couldn't find a device at index 0
[ 1291.785192][ T5703] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1291.803798][ T5703] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1291.834917][ T5703] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1291.861903][ T5703] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1291.862630][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17324'.
[ 1291.873277][ T6847] bridge0: port 1(gretap0) entered blocking state
[ 1291.876137][ T6847] bridge0: port 1(gretap0) entered disabled state
[ 1291.879980][ T6847] gretap0: entered allmulticast mode
[ 1291.883913][ T6847] gretap0: left allmulticast mode
[ 1291.984032][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17329'.
[ 1292.040429][ T6858] netlink: 'syz.2.17328': attribute type 1 has an invalid length.
[ 1292.045829][ T6868] netlink: 'syz.2.17328': attribute type 1 has an invalid length.
[ 1292.259054][ T6891] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[ 1292.297078][ T6884]  speed is unknown, defaulting to 1000
[ 1292.533547][ T6882]  speed is unknown, defaulting to 1000
[ 1292.757878][ T6906] netlink: 'syz.2.17340': attribute type 13 has an invalid length.
[ 1292.769517][ T6908] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1292.773054][ T6908] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1292.776538][ T6908] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1292.822524][ T6906] netlink: 'syz.2.17340': attribute type 30 has an invalid length.
[ 1292.843538][ T6906] netlink: 'syz.2.17340': attribute type 30 has an invalid length.
[ 1292.859077][ T5703] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1292.895401][ T5703] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1292.901801][ T5703] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1292.905317][ T5703] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1292.987785][ T6919] bridge0: entered allmulticast mode
[ 1293.276320][ T6922]  speed is unknown, defaulting to 1000
[ 1293.545364][ T6959] !9: entered promiscuous mode
[ 1293.550693][ T6959] !9: left promiscuous mode
[ 1293.752212][ T6988] gre0: entered promiscuous mode
[ 1293.754262][ T6988] gre0: entered allmulticast mode
[ 1293.794574][ T6990] bridge195: the hash_elasticity option has been deprecated and is always 16
[ 1293.801134][ T6990] bridge195: entered allmulticast mode
[ 1293.830520][ T6992] bridge210: entered promiscuous mode
[ 1293.838187][ T6992] bridge210: entered allmulticast mode
[ 1294.023537][ T7015] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1294.070990][ T7021] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[ 1294.252645][ T7037] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1294.260023][ T7037] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1294.500939][ T7060] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[ 1294.606802][ T7071] 8021q: adding VLAN 0 to HW filter on device bond319
[ 1294.610867][ T7071] bond318: (slave bond319): making interface the new active one
[ 1294.618239][ T7071] bond318: (slave bond319): Enslaving as an active interface with an up link
[ 1294.636216][ T7073] 8021q: adding VLAN 0 to HW filter on device bond318
[ 1294.703529][ T7097] syzkaller0: entered promiscuous mode
[ 1294.705673][ T7097] syzkaller0: entered allmulticast mode
[ 1294.770873][ T7099] tipc: Resetting bearer <eth:syzkaller0>
[ 1294.876440][ T7092]  speed is unknown, defaulting to 1000
[ 1295.024475][ T7111] veth1: entered promiscuous mode
[ 1295.034450][ T7111] veth1: entered allmulticast mode
[ 1295.092729][ T7116] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[ 1295.383689][ T7137] syzkaller1: entered allmulticast mode
[ 1295.429521][ T7139] __nla_validate_parse: 108 callbacks suppressed
[ 1295.429539][ T7139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17402'.
[ 1295.436445][ T7139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1295.561237][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17405'.
[ 1295.761584][ T7166] validate_nla: 14 callbacks suppressed
[ 1295.761602][ T7166] netlink: 'syz.0.17408': attribute type 1 has an invalid length.
[ 1295.813921][ T7166] bond316: (slave bridge196): making interface the new active one
[ 1295.820446][ T7166] bond316: (slave bridge196): Enslaving as an active interface with an up link
[ 1295.830677][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17408'.
[ 1295.834639][ T7166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17408'.
[ 1295.840303][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17408'.
[ 1295.844044][ T7166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17408'.
[ 1296.250294][ T7186]  speed is unknown, defaulting to 1000
[ 1296.424100][ T7193] netlink: 'syz.1.17416': attribute type 1 has an invalid length.
[ 1296.484989][ T7194] netlink: 14 bytes leftover after parsing attributes in process `syz.1.17416'.
[ 1296.695489][ T7213] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[ 1296.743272][ T7217] netlink: 'syz.2.17422': attribute type 1 has an invalid length.
[ 1296.751676][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17422'.
[ 1296.795711][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17423'.
[ 1296.831342][ T7213]  speed is unknown, defaulting to 1000
[ 1296.898592][ T7225] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17424'.
[ 1296.991063][ T7223] netlink: 'syz.2.17424': attribute type 5 has an invalid length.
[ 1296.999950][ T7227] bond345: entered promiscuous mode
[ 1297.001946][ T7227] 8021q: adding VLAN 0 to HW filter on device bond345
[ 1297.204782][ T7248] netlink: 'syz.1.17430': attribute type 1 has an invalid length.
[ 1297.232635][ T7248] 8021q: adding VLAN 0 to HW filter on device bond346
[ 1297.273060][ T7248] bond346: (slave veth200): Enslaving as an active interface with a down link
[ 1297.286113][ T7248] 8021q: adding VLAN 0 to HW filter on device batadv50
[ 1297.290120][ T7248] bond346: (slave batadv50): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[ 1297.306324][ T7253] sctp: [Deprecated]: syz.2.17432 (pid 7253) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1297.306324][ T7253] Use struct sctp_sack_info instead
[ 1297.438801][ T7253]  speed is unknown, defaulting to 1000
[ 1297.723539][ T7294] netlink: 'syz.1.17446': attribute type 3 has an invalid length.
[ 1297.989766][ T7316] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1298.023799][ T7316] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1298.040652][ T7317] netlink: 'syz.0.17453': attribute type 2 has an invalid length.
[ 1298.061698][ T7317] netlink: 'syz.0.17453': attribute type 2 has an invalid length.
[ 1298.073581][ T7316] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1298.122721][ T7316] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1298.193030][ T5703] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1298.205414][ T5703] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1298.219405][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1298.243683][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1298.348187][ T7332] tap0: tun_chr_ioctl cmd 1074812117
[ 1298.353927][ T7332] tap0: tun_chr_ioctl cmd 2147767521
[ 1298.693658][ T7356] xt_HMARK: spi-set and port-set can't be combined
[ 1298.919870][ T7369] netlink: 'syz.1.17468': attribute type 9 has an invalid length.
[ 1299.395636][ T7409] netlink: 'syz.1.17477': attribute type 21 has an invalid length.
[ 1299.466404][ T7409] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20001
[ 1299.471629][ T7412] syzkaller1: entered promiscuous mode
[ 1299.473843][ T7412] syzkaller1: entered allmulticast mode
[ 1299.535699][ T7396] mac80211_hwsim hwsim57 syzkaller0: entered allmulticast mode
[ 1299.580294][ T7396] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1299.935895][ T7438] macvlan10: entered promiscuous mode
[ 1299.939719][ T7438] macvlan10: entered allmulticast mode
[ 1299.943883][ T7438] bond320: entered promiscuous mode
[ 1299.946575][ T7438] 8021q: adding VLAN 0 to HW filter on device macvlan10
[ 1299.954271][ T7438] bond320: left promiscuous mode
[ 1300.199865][ T7456] 8021q: adding VLAN 0 to HW filter on device bond348
[ 1300.299972][ T7446]  speed is unknown, defaulting to 1000
[ 1300.363673][ T7456] bond348: (slave veth202): Enslaving as an active interface with a down link
[ 1300.374996][ T7461] gtp15: entered promiscuous mode
[ 1300.381885][ T7461] gtp15: entered allmulticast mode
[ 1300.624267][ T7468] 8021q: adding VLAN 0 to HW filter on device bond322
[ 1300.633413][ T7468] bond321: (slave bond322): making interface the new active one
[ 1300.639110][ T7468] bond321: (slave bond322): Enslaving as an active interface with an up link
[ 1300.657311][ T7469] __nla_validate_parse: 38 callbacks suppressed
[ 1300.657328][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17492'.
[ 1300.664755][ T7468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17492'.
[ 1300.678203][ T7469] 8021q: adding VLAN 0 to HW filter on device bond321
[ 1300.718065][ T7468] vlan26: entered promiscuous mode
[ 1300.720327][ T7468] bond321: entered promiscuous mode
[ 1300.722532][ T7468] bond322: entered promiscuous mode
[ 1300.763446][ T7469] vlan26: entered promiscuous mode
[ 1300.881072][ T7482] validate_nla: 5 callbacks suppressed
[ 1300.881083][ T7482] netlink: 'syz.0.17496': attribute type 1 has an invalid length.
[ 1300.910312][ T7487] Set syz0 is full, maxelem 0 reached
[ 1300.924877][ T7483] nbd: must specify at least one socket
[ 1300.962636][ T7489] netlink: 14 bytes leftover after parsing attributes in process `syz.0.17496'.
[ 1301.053867][ T7498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17499'.
[ 1301.075069][ T7499] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17499'.
[ 1301.148721][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17500'.
[ 1301.168624][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17501'.
[ 1301.173182][ T7514] netlink: 'syz.2.17501': attribute type 1 has an invalid length.
[ 1301.177755][ T7513] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1301.180414][ T7514] netlink: 174 bytes leftover after parsing attributes in process `syz.2.17501'.
[ 1301.410676][ T7535] 8021q: adding VLAN 0 to HW filter on device bond349
[ 1301.418686][ T7535] bond0: (slave bond349): making interface the new active one
[ 1301.422592][ T7535] bond349: entered promiscuous mode
[ 1301.428066][ T7535] bond0: (slave bond349): Enslaving as an active interface with an up link
[ 1301.433092][ T7539] workqueue: Failed to create a rescuer kthread for wq "bond350": -EINTR
[ 1301.544610][ T7552] netlink: 180 bytes leftover after parsing attributes in process `syz.1.17510'.
[ 1301.558079][ T7552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17510'.
[ 1301.751320][ T7571]  speed is unknown, defaulting to 1000
[ 1301.969302][ T7593] sctp: [Deprecated]: syz.1.17520 (pid 7593) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1301.969302][ T7593] Use struct sctp_sack_info instead
[ 1302.357956][ T7609] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1302.374651][ T7609] netlink: 'syz.1.17525': attribute type 4 has an invalid length.
[ 1302.424012][ T7621] netlink: 'syz.2.17526': attribute type 1 has an invalid length.
[ 1302.445713][ T7621] 8021q: adding VLAN 0 to HW filter on device bond323
[ 1302.462583][ T7621] vlan26: entered promiscuous mode
[ 1302.464738][ T7621] bond323: entered promiscuous mode
[ 1302.467969][ T7621] vlan26: entered allmulticast mode
[ 1302.470179][ T7621] bond323: entered allmulticast mode
[ 1302.748310][ T7634] macvlan10: entered allmulticast mode
[ 1302.750662][ T7634] 1{X: entered allmulticast mode
[ 1302.754554][ T7634] 1{X: left allmulticast mode
[ 1303.308119][ T7646]  speed is unknown, defaulting to 1000
[ 1303.454714][ T7647]  speed is unknown, defaulting to 1000
[ 1303.573344][ T7673] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1303.874445][ T7684] netlink: 'syz.2.17543': attribute type 16 has an invalid length.
[ 1303.878493][ T7684] netlink: 'syz.2.17543': attribute type 17 has an invalid length.
[ 1304.192617][ T7708] bond324 (unregistering): Released all slaves
[ 1304.215243][ T7711] syzkaller1: left allmulticast mode
[ 1304.220897][ T7711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1304.245436][ T7711] sysfs: cannot create duplicate filename '/class/ieee80211/π!'
[ 1304.249888][ T7711] CPU: 0 UID: 0 PID: 7711 Comm: syz.1.17551 Not tainted syzkaller #0 PREEMPT(full) 
[ 1304.249900][ T7711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1304.249906][ T7711] Call Trace:
[ 1304.249909][ T7711]  <TASK>
[ 1304.249914][ T7711]  dump_stack_lvl+0xe8/0x150
[ 1304.249929][ T7711]  sysfs_warn_dup+0x8e/0xa0
[ 1304.249941][ T7711]  sysfs_do_create_link_sd+0xc0/0x110
[ 1304.249952][ T7711]  device_add_class_symlinks+0x1cf/0x240
[ 1304.249968][ T7711]  device_add+0x475/0xb70
[ 1304.249981][ T7711]  wiphy_register+0x1d73/0x2d50
[ 1304.249999][ T7711]  ? __pfx_wiphy_register+0x10/0x10
[ 1304.250009][ T7711]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1304.250017][ T7711]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1304.250030][ T7711]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1304.250045][ T7711]  ieee80211_register_hw+0x3571/0x4220
[ 1304.250060][ T7711]  ? ieee80211_register_hw+0x1411/0x4220
[ 1304.250072][ T7711]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1304.250087][ T7711]  ? __hrtimer_setup+0x181/0x200
[ 1304.250097][ T7711]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1304.250107][ T7711]  mac80211_hwsim_new_radio+0x2f97/0x5330
[ 1304.250132][ T7711]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1304.250143][ T7711]  ? kstrndup+0xbf/0x160
[ 1304.250157][ T7711]  hwsim_new_radio_nl+0xf35/0x1bd0
[ 1304.250177][ T7711]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1304.250192][ T7711]  ? rcu_is_watching+0x15/0xb0
[ 1304.250202][ T7711]  ? trace_kmalloc+0x2a/0x110
[ 1304.250213][ T7711]  ? __nla_parse+0x40/0x60
[ 1304.250225][ T7711]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1304.250240][ T7711]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1304.250253][ T7711]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1304.250271][ T7711]  ? bpf_lsm_capable+0x9/0x20
[ 1304.250281][ T7711]  ? security_capable+0x7e/0x2c0
[ 1304.250292][ T7711]  genl_rcv_msg+0x61c/0x7a0
[ 1304.250305][ T7711]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1304.250315][ T7711]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1304.250326][ T7711]  ? __lock_acquire+0x6b5/0x2cf0
[ 1304.250341][ T7711]  netlink_rcv_skb+0x232/0x4b0
[ 1304.250350][ T7711]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1304.250362][ T7711]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1304.250378][ T7711]  ? down_read+0x272/0x2e0
[ 1304.250385][ T7711]  ? genl_rcv+0xd/0x40
[ 1304.250396][ T7711]  genl_rcv+0x28/0x40
[ 1304.250405][ T7711]  netlink_unicast+0x80f/0x9b0
[ 1304.250417][ T7711]  ? __pfx_netlink_unicast+0x10/0x10
[ 1304.250426][ T7711]  ? netlink_sendmsg+0x650/0xb40
[ 1304.250434][ T7711]  ? skb_put+0x11b/0x210
[ 1304.250445][ T7711]  netlink_sendmsg+0x813/0xb40
[ 1304.250458][ T7711]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1304.250468][ T7711]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1304.250478][ T7711]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1304.250487][ T7711]  ____sys_sendmsg+0x972/0x9f0
[ 1304.250497][ T7711]  ? futex_unqueue+0x211/0x240
[ 1304.250509][ T7711]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1304.250524][ T7711]  ? import_iovec+0x73/0xa0
[ 1304.250536][ T7711]  ___sys_sendmsg+0x2a5/0x360
[ 1304.250546][ T7711]  ? try_to_wake_up+0x7fc/0x1390
[ 1304.250556][ T7711]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1304.250569][ T7711]  ? futex_wait+0x29a/0x380
[ 1304.250596][ T7711]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1304.250608][ T7711]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1304.250622][ T7711]  ? rcu_is_watching+0x15/0xb0
[ 1304.250637][ T7711]  do_syscall_64+0x14d/0xf80
[ 1304.250648][ T7711]  ? trace_irq_disable+0x3b/0x150
[ 1304.250658][ T7711]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1304.250668][ T7711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1304.250675][ T7711] RIP: 0033:0x7f72d6b9c799
[ 1304.250685][ T7711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1304.250692][ T7711] RSP: 002b:00007f72d7af9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1304.250701][ T7711] RAX: ffffffffffffffda RBX: 00007f72d6e15fa0 RCX: 00007f72d6b9c799
[ 1304.250707][ T7711] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[ 1304.250711][ T7711] RBP: 00007f72d6c32bd9 R08: 0000000000000000 R09: 0000000000000000
[ 1304.250716][ T7711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1304.250720][ T7711] R13: 00007f72d6e16038 R14: 00007f72d6e15fa0 R15: 00007ffca9cd18b8
[ 1304.250774][ T7711]  </TASK>
[ 1304.475297][ T7721] bond26: (slave 26): Releasing backup interface
[ 1304.498347][ T7721] bond26: (slave 26): last VLAN challenged slave left bond - VLAN blocking is removed
[ 1304.521156][ T7721] bond303: (slave bond304): Releasing backup interface
[ 1304.526366][ T7721] bond309: (slave batadv12): Releasing active interface
[ 1304.534685][ T7721] bond310: (slave veth147): Releasing active interface
[ 1304.534712][ T7729] netlink: 'syz.1.17555': attribute type 1 has an invalid length.
[ 1304.550716][ T7721] bond311: (slave bond312): Releasing backup interface
[ 1304.554446][ T7721] bond312: left promiscuous mode
[ 1304.563493][ T7721] bond316: (slave bridge196): Releasing active interface
[ 1304.585665][T28979]  speed is unknown, defaulting to 1000
[ 1304.589586][T28979] syz2: Port: 1 Link DOWN
[ 1304.591191][T28978]  speed is unknown, defaulting to 1000
[ 1304.649821][ T7729] 8021q: adding VLAN 0 to HW filter on device bond350
[ 1304.714605][T17753] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1304.719975][T17753] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1304.723605][T17753] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1304.728620][T17753] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1304.790326][ T7747] netlink: 'syz.0.17559': attribute type 2 has an invalid length.
[ 1304.886892][ T7751] ipvlan3: entered allmulticast mode
[ 1304.889219][ T7751] mac80211_hwsim hwsim256 wlan0: entered allmulticast mode
[ 1304.961126][ T7756] 8021q: VLANs not supported on nlmon0
[ 1305.841037][ T7770] netlink: 'syz.1.17567': attribute type 2 has an invalid length.
[ 1305.844835][ T7770] netlink: 'syz.1.17567': attribute type 2 has an invalid length.
[ 1305.889956][ T7770] validate_nla: 30 callbacks suppressed
[ 1305.889973][ T7770] netlink: 'syz.1.17567': attribute type 2 has an invalid length.
[ 1306.117394][ T7794] __nla_validate_parse: 25 callbacks suppressed
[ 1306.117411][ T7794] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.17572'.
[ 1306.135965][ T7777]  speed is unknown, defaulting to 1000
[ 1306.291667][ T7810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17575'.
[ 1306.412526][ T7814] netlink: 'syz.0.17576': attribute type 8 has an invalid length.
[ 1306.422142][ T7814] mac80211_hwsim hwsim369 wlan1: Master is either lo or non-ether device
[ 1306.452021][ T7816] netlink: 'syz.2.17577': attribute type 9 has an invalid length.
[ 1306.572106][ T7824] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[ 1306.672729][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17583'.
[ 1306.858260][ T7846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17589'.
[ 1306.927633][ T7850] xt_hashlimit: size too large, truncated to 1048576
[ 1306.987132][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17591'.
[ 1307.040934][ T7850] syzkaller1: entered promiscuous mode
[ 1307.042912][ T7850] syzkaller1: entered allmulticast mode
[ 1307.141625][ T7859] Cannot find del_set index 3 as target
[ 1307.148018][ T7848]  speed is unknown, defaulting to 1000
[ 1307.388955][ T5963] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1307.392189][ T5963] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1307.407997][ T5963] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1307.413241][ T5963] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1307.474982][ T7879] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[ 1307.583083][ T7892] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1307.651614][ T7892] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1307.702259][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17601'.
[ 1307.724899][ T7892] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1307.758715][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17605'.
[ 1307.819074][ T7892] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1307.922777][ T5703] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1307.950403][ T5703] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1307.956638][ T7904]  speed is unknown, defaulting to 1000
[ 1307.961226][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17608'.
[ 1307.965698][ T7912] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17608'.
[ 1307.965880][ T7544] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1308.028631][ T5703] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1308.046933][T28978] page_pool_release_retry() stalled pool shutdown: id 337, 1 inflight 60 sec
[ 1308.150482][ T7911]  speed is unknown, defaulting to 1000
[ 1308.171734][ T7924] bond1: (slave 26): Releasing backup interface
[ 1308.175001][ T7924] bond1: (slave 26): last VLAN challenged slave left bond - VLAN blocking is removed
[ 1308.191950][ T7924] bond280: (slave veth163): Releasing active interface
[ 1308.194267][ T7924] bond280: (slave veth163): the permanent HWaddr of slave - 2a:86:61:66:24:46 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1308.204367][ T7924] bond280: (slave veth165): Releasing active interface
[ 1308.227696][ T7924] bond281: (slave bridge185): Removing an active aggregator
[ 1308.232169][ T7924] bond281: (slave bridge185): Releasing backup interface
[ 1308.237595][ T7924] bond283: (slave gretap12): Releasing active interface
[ 1308.247953][ T7924] bond286: (slave ip6gretap0): Releasing backup interface
[ 1308.253043][ T7924] bond289: (slave bridge194): Removing an active aggregator
[ 1308.257427][ T7924] bond289: (slave bridge194): Releasing backup interface
[ 1308.260405][ T7924] bond289: (slave bridge194): the permanent HWaddr of slave - 76:1a:d9:0e:3c:8e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1308.269789][ T7924] bond289: (slave bridge195): Releasing backup interface
[ 1308.274327][ T7924] bond289: (slave bridge196): Releasing backup interface
[ 1308.279914][ T7924] bond289: (slave bridge197): Releasing backup interface
[ 1308.284858][ T7924] bond292: (slave veth167): Releasing active interface
[ 1308.291731][ T7924] bond298: left allmulticast mode
[ 1308.293897][ T7924] bond298: left promiscuous mode
[ 1308.296153][ T7924] wlan1: port 1(bond298) entered disabled state
[ 1308.303863][ T7924] bond299: (slave bond300): Releasing backup interface
[ 1308.306646][ T7924] bond299: (slave bond300): the permanent HWaddr of slave - 32:5a:46:a7:f2:e4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1308.313780][ T7924] bond300: left promiscuous mode
[ 1308.315844][ T7924] bond299: (slave bond301): making interface the new active one
[ 1308.318847][ T7924] bond301: entered promiscuous mode
[ 1308.323233][ T7924] bond299: (slave bond301): Releasing backup interface
[ 1308.326123][ T7924] bond301: left promiscuous mode
[ 1308.330248][ T7924] bond303: (slave veth171): Releasing active interface
[ 1308.335520][ T7924] bond308: (slave bridge202): Releasing active interface
[ 1308.343951][ T7924] bond0: (slave bond309): Releasing active interface
[ 1308.346255][ T7924] bond309: left allmulticast mode
[ 1308.358621][ T7924] bond318: (slave bond319): Releasing backup interface
[ 1308.367500][ T7924] bond321: (slave bond322): Releasing backup interface
[ 1308.370026][ T7924] bond322: left promiscuous mode
[ 1308.407649][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17611'.
[ 1308.419124][ T7926] SET target dimension over the limit!
[ 1308.580396][ T7932] pim6reg1: entered promiscuous mode
[ 1308.582710][ T7932] pim6reg1: entered allmulticast mode
[ 1309.118726][ T7962] netlink: 'syz.0.17619': attribute type 10 has an invalid length.
[ 1309.232885][ T7978] syzkaller1: entered promiscuous mode
[ 1309.234829][ T7978] syzkaller1: entered allmulticast mode
[ 1309.588205][ T8006] 8021q: adding VLAN 0 to HW filter on device bond318
[ 1309.608756][ T8010] netlink: 'syz.2.17630': attribute type 8 has an invalid length.
[ 1309.717173][ T8017] netlink: 'syz.1.17632': attribute type 1 has an invalid length.
[ 1309.742141][ T8017] 8021q: adding VLAN 0 to HW filter on device bond351
[ 1309.800015][ T8017] bond351: (slave veth204): Enslaving as an active interface with a down link
[ 1309.821895][ T8026] netlink: 'syz.0.17634': attribute type 26 has an invalid length.
[ 1309.825068][ T8026] netlink: 'syz.0.17634': attribute type 26 has an invalid length.
[ 1309.882244][ T8017] 8021q: adding VLAN 0 to HW filter on device batadv50
[ 1309.884694][ T8017] bond351: (slave batadv50): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[ 1309.899576][ T8026] 1X: renamed from 60X
[ 1309.903277][ T8026] 1X: entered allmulticast mode
[ 1309.905045][ T8026] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 1309.967535][ T8020]  speed is unknown, defaulting to 1000
[ 1310.030761][ T8036] netlink: 'syz.0.17635': attribute type 10 has an invalid length.
[ 1310.066291][ T8042] openvswitch: : Dropping previously announced user features
[ 1310.119524][ T8042] bond352: entered promiscuous mode
[ 1310.125450][ T8042] bond352: entered allmulticast mode
[ 1310.129702][ T8042] 8021q: adding VLAN 0 to HW filter on device bond352
[ 1310.383709][ T8053]  speed is unknown, defaulting to 1000
[ 1310.644686][ T8068] netlink: 'syz.2.17645': attribute type 2 has an invalid length.
[ 1310.654678][ T8068] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[ 1310.964273][ T8085] 8021q: adding VLAN 0 to HW filter on device bond324
[ 1310.979348][ T8085] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1311.027740][ T8085] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1311.118605][ T8085] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1311.187281][ T8085] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1311.222920][ T8116] __nla_validate_parse: 20 callbacks suppressed
[ 1311.222936][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17656'.
[ 1311.244041][ T7544] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1311.264392][ T7544] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1311.277669][ T7544] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1311.291938][ T7544] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1311.459496][ T8130] validate_nla: 1 callbacks suppressed
[ 1311.459513][ T8130] netlink: 'syz.1.17661': attribute type 1 has an invalid length.
[ 1311.490601][ T8130] 8021q: adding VLAN 0 to HW filter on device bond354
[ 1311.512813][ T8137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17663'.
[ 1311.565359][ T8137] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1311.831809][ T8148] bond325: entered promiscuous mode
[ 1311.844042][ T8135] vcan0: entered promiscuous mode
[ 1311.846253][ T8135] vcan0: entered allmulticast mode
[ 1311.875572][ T8135] bond325: (slave vcan0): The slave device specified does not support setting the MAC address
[ 1311.907355][ T8135] bond325: (slave vcan0): Error -95 calling set_mac_address
[ 1311.917920][ T8168] netlink: 'syz.1.17668': attribute type 4 has an invalid length.
[ 1311.925062][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17668'.
[ 1311.959157][ T8168] gtp18: entered promiscuous mode
[ 1311.961436][ T8168] gtp18: entered allmulticast mode
[ 1312.001296][ T8152]  speed is unknown, defaulting to 1000
[ 1312.063587][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17669'.
[ 1312.087456][ T8172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17669'.
[ 1312.162396][ T8175] mac80211_hwsim hwsim57 syzkaller0: Caught tx_queue_len zero misconfig
[ 1312.183380][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17670'.
[ 1312.261195][ T8179] vlan7: entered allmulticast mode
[ 1312.263404][ T8179] bridge181: entered allmulticast mode
[ 1312.291559][ T8178] netlink: 'syz.2.17672': attribute type 1 has an invalid length.
[ 1312.294844][ T8178] netlink: 'syz.2.17672': attribute type 2 has an invalid length.
[ 1312.307043][ T8178] netlink: 'syz.2.17672': attribute type 1 has an invalid length.
[ 1312.309729][ T8178] netlink: 'syz.2.17672': attribute type 3 has an invalid length.
[ 1312.312466][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17672'.
[ 1312.636189][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17676'.
[ 1312.642084][ T8195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17676'.
[ 1312.690776][ T8197] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17677'.
[ 1312.696589][ T8197] netlink: Unknown conntrack attr (type=13313, max=9)
[ 1312.756056][ T8204] netlink: 'syz.0.17680': attribute type 16 has an invalid length.
[ 1312.764401][ T8204] netlink: 'syz.0.17680': attribute type 16 has an invalid length.
[ 1312.925747][ T8214] mac80211_hwsim hwsim57 syzkaller0: left promiscuous mode
[ 1312.934508][ T8214] mac80211_hwsim hwsim57 syzkaller0: left allmulticast mode
[ 1313.011347][ T8214] bond311: left promiscuous mode
[ 1313.024177][ T8214] bond313: left promiscuous mode
[ 1313.035265][ T8214] bridge203: left promiscuous mode
[ 1313.083326][ T8214] bridge207: left promiscuous mode
[ 1313.085523][ T8214] bridge207: left allmulticast mode
[ 1313.094001][ T8214] bond317: left promiscuous mode
[ 1313.096176][ T8214] bond317: left allmulticast mode
[ 1313.163312][ T8214] vlan26: left promiscuous mode
[ 1313.165462][ T8214] bond323: left promiscuous mode
[ 1313.170907][ T8214] vlan26: left allmulticast mode
[ 1313.173025][ T8214] bond323: left allmulticast mode
[ 1313.200197][T17753] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1313.203866][T17753] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1313.207661][T17753] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1313.212280][T17753] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1313.383348][ T8234] siw: device registration error -23
[ 1313.580945][ T8248] tunl0: Caught tx_queue_len zero misconfig
[ 1313.759768][ T8259] bond319 (unregistering): Released all slaves
[ 1313.809344][ T8267] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1313.812568][ T8267] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1314.030862][ T8292] nbd: must specify a size in bytes for the device
[ 1314.562437][ T8339] netlink: 'syz.2.17712': attribute type 22 has an invalid length.
[ 1314.574979][ T8339] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1314.672115][ T8351] netlink: 'syz.2.17715': attribute type 1 has an invalid length.
[ 1314.708629][ T8351] 8021q: adding VLAN 0 to HW filter on device bond328
[ 1314.725327][ T8351] xt_hashlimit: size too large, truncated to 1048576
[ 1314.740439][ T8354] bond319 (unregistering): Released all slaves
[ 1314.743452][ T8351] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1314.779129][ T8358] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1315.022888][ T8374] vlan27: entered allmulticast mode
[ 1315.024703][ T8374] bridge211: entered allmulticast mode
[ 1315.028747][ T8374] bridge211: port 1(bond0) entered blocking state
[ 1315.034261][ T8374] bridge211: port 1(bond0) entered disabled state
[ 1315.256103][ T8353] syz.0.17717 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1315.271379][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.0.17717 Not tainted syzkaller #0 PREEMPT(full) 
[ 1315.271400][ T8353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1315.271408][ T8353] Call Trace:
[ 1315.271414][ T8353]  <TASK>
[ 1315.271422][ T8353]  dump_stack_lvl+0xe8/0x150
[ 1315.271445][ T8353]  dump_header+0xd3/0x4c0
[ 1315.271463][ T8353]  oom_kill_process+0x3ab/0x970
[ 1315.271481][ T8353]  out_of_memory+0x106c/0x1410
[ 1315.271493][ T8353]  ? percpu_ref_put+0x19/0x180
[ 1315.271509][ T8353]  ? __pfx___mutex_lock+0x10/0x10
[ 1315.271534][ T8353]  ? __pfx_out_of_memory+0x10/0x10
[ 1315.271545][ T8353]  ? do_raw_spin_unlock+0x4d/0x210
[ 1315.271594][ T8353]  try_charge_memcg+0xc53/0x1560
[ 1315.271613][ T8353]  ? __lock_acquire+0x6b5/0x2cf0
[ 1315.271640][ T8353]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1315.271652][ T8353]  ? xa_load+0x60/0x210
[ 1315.271678][ T8353]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 1315.271696][ T8353]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 1315.271719][ T8353]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[ 1315.271737][ T8353]  __swap_cache_prepare_and_add+0x52a/0x700
[ 1315.271769][ T8353]  swap_cache_alloc_folio+0xf1/0x240
[ 1315.271790][ T8353]  swap_cluster_readahead+0x369/0x690
[ 1315.271813][ T8353]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1315.271841][ T8353]  ? get_vma_policy+0x27b/0x3c0
[ 1315.271859][ T8353]  swapin_readahead+0x196/0xc50
[ 1315.271887][ T8353]  ? __pfx_swapin_readahead+0x10/0x10
[ 1315.271906][ T8353]  ? swap_table_get+0x1e/0x260
[ 1315.271921][ T8353]  ? swap_table_get+0x1e/0x260
[ 1315.271936][ T8353]  ? swap_table_get+0x1e/0x260
[ 1315.271953][ T8353]  ? swap_table_get+0x216/0x260
[ 1315.271971][ T8353]  ? swap_cache_get_folio+0x513/0x520
[ 1315.271993][ T8353]  do_swap_page+0x54f/0x58d0
[ 1315.272011][ T8353]  ? __lock_acquire+0x6b5/0x2cf0
[ 1315.272041][ T8353]  ? do_swap_page+0x12c/0x58d0
[ 1315.272055][ T8353]  ? __pfx_do_swap_page+0x10/0x10
[ 1315.272070][ T8353]  ? __pte_offset_map+0x1ae/0x240
[ 1315.272090][ T8353]  ? pte_offset_map_rw_nolock+0xea/0x160
[ 1315.272111][ T8353]  handle_mm_fault+0x12d2/0x3310
[ 1315.272140][ T8353]  ? handle_mm_fault+0xee/0x3310
[ 1315.272164][ T8353]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1315.272180][ T8353]  ? lock_vma_under_rcu+0x45a/0x500
[ 1315.272213][ T8353]  do_user_addr_fault+0xa73/0x1340
[ 1315.272235][ T8353]  ? rcu_is_watching+0x15/0xb0
[ 1315.272253][ T8353]  ? trace_page_fault_user+0x84/0x210
[ 1315.272293][ T8353]  exc_page_fault+0x6a/0xc0
[ 1315.272313][ T8353]  asm_exc_page_fault+0x26/0x30
[ 1315.272326][ T8353] RIP: 0033:0x7f6c2b55cfce
[ 1315.272339][ T8353] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1315.272350][ T8353] RSP: 002b:00007ffc7b5728c8 EFLAGS: 00010246
[ 1315.272364][ T8353] RAX: 0000000000000000 RBX: 0000555591eea500 RCX: 00007f6c2b55cfce
[ 1315.272373][ T8353] RDX: 00007ffc7b572920 RSI: 0000000000000000 RDI: 0000000000000000
[ 1315.272382][ T8353] RBP: 00007f6c2b817da0 R08: 0000000000000000 R09: 0000000000000000
[ 1315.272390][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000141258
[ 1315.272398][ T8353] R13: 00007f6c2b81609c R14: 000000000014109e R15: 00007f6c2b816090
[ 1315.272422][ T8353]  </TASK>
[ 1315.273697][ T8353] memory: usage 307200kB, limit 307200kB, failcnt 552
[ 1315.410535][ T8353] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0
[ 1315.414647][ T8353] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[ 1315.417992][ T8353] Memory cgroup stats for /syz0:
[ 1315.418098][ T8353] cache 0
[ 1315.421589][ T8353] rss 0
[ 1315.422819][ T8353] rss_huge 0
[ 1315.424247][ T8353] shmem 0
[ 1315.425594][ T8353] mapped_file 0
[ 1315.427496][ T8353] dirty 0
[ 1315.428700][ T8353] writeback 0
[ 1315.429786][ T8353] workingset_refault_anon 1
[ 1315.431263][ T8353] workingset_refault_file 0
[ 1315.432792][ T8353] swap 212992
[ 1315.433887][ T8353] swapcached 225280
[ 1315.435343][ T8353] pgpgin 613508
[ 1315.437452][ T8353] pgpgout 613505
[ 1315.438928][ T8353] pgfault 1176612
[ 1315.440454][ T8353] pgmajfault 7
[ 1315.441890][ T8353] inactive_anon 8192
[ 1315.443675][ T8353] active_anon 4096
[ 1315.445308][ T8353] inactive_file 0
[ 1315.447127][ T8353] active_file 0
[ 1315.448556][ T8353] unevictable 0
[ 1315.450067][ T8353] hierarchical_memory_limit 314572800
[ 1315.452317][ T8353] hierarchical_memsw_limit 9223372036854771712
[ 1315.454872][ T8353] total_cache 0
[ 1315.456259][ T8353] total_rss 0
[ 1315.460549][ T8353] total_rss_huge 0
[ 1315.462144][ T8353] total_shmem 0
[ 1315.463643][ T8353] total_mapped_file 0
[ 1315.465299][ T8353] total_dirty 0
[ 1315.467111][ T8353] total_writeback 0
[ 1315.468721][ T8353] total_workingset_refault_anon 1
[ 1315.470794][ T8353] total_workingset_refault_file 0
[ 1315.472899][ T8353] total_swap 212992
[ 1315.474541][ T8353] total_swapcached 225280
[ 1315.476391][ T8353] total_pgpgin 613513
[ 1315.478528][ T8353] total_pgpgout 613510
[ 1315.480374][ T8353] total_pgfault 1176641
[ 1315.482144][ T8353] total_pgmajfault 7
[ 1315.485214][ T8353] total_inactive_anon 8192
[ 1315.488081][ T8353] total_active_anon 4096
[ 1315.490291][ T8353] total_inactive_file 0
[ 1315.492186][ T8353] total_active_file 0
[ 1315.494050][ T8353] total_unevictable 0
[ 1315.495795][ T8353] anon_cost 0
[ 1315.498890][ T8353] file_cost 0
[ 1315.500216][ T8353] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.17717,pid=8353,uid=0
[ 1315.506647][ T8353] Memory cgroup out of memory: Killed process 8353 (syz.0.17717) total-vm:102488kB, anon-rss:1244kB, file-rss:23292kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[ 1316.405210][ T8410] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 1316.416329][ T8410] __nla_validate_parse: 33 callbacks suppressed
[ 1316.416345][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17727'.
[ 1316.785657][ T8437] netlink: 68 bytes leftover after parsing attributes in process `syz.2.17733'.
[ 1316.801287][ T8442] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17734'.
[ 1316.805860][ T8442] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17734'.
[ 1316.810213][ T8442] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17734'.
[ 1316.814098][ T8442] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17734'.
[ 1316.818853][ T8442] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17734'.
[ 1316.827202][ T8442] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17734'.
[ 1316.833820][ T8442] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17734'.
[ 1316.838367][ T8442] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17734'.
[ 1316.943464][ T8457] netlink: 'syz.2.17737': attribute type 1 has an invalid length.
[ 1316.949406][ T8456] netlink: 'syz.2.17737': attribute type 1 has an invalid length.
[ 1317.074592][ T8461] block nbd2: not configured, cannot reconfigure
[ 1317.218002][ T8480] bond330: (slave bond331): Releasing backup interface
[ 1317.228625][ T8480] bond332: (slave bond333): Releasing backup interface
[ 1317.239156][ T8480] bond335: (slave veth184): Releasing active interface
[ 1317.243028][ T8480] bond338: (slave bridge173): Releasing active interface
[ 1317.251640][ T8480] bond340: (slave bridge175): Releasing active interface
[ 1317.256201][ T8480] bond341: (slave veth194): Releasing backup interface
[ 1317.261139][ T8480] bond343: (slave bridge177): Releasing active interface
[ 1317.265265][ T8480] bond346: (slave veth200): Releasing active interface
[ 1317.270432][ T8480] bond348: (slave veth202): Releasing active interface
[ 1317.274341][ T8480] bond0: (slave bond349): Releasing active interface
[ 1317.276796][ T8480] bond349: left promiscuous mode
[ 1317.285845][ T8480] bond351: (slave veth204): Releasing active interface
[ 1317.285911][ T8488] netlink: 'syz.2.17744': attribute type 1 has an invalid length.
[ 1317.300947][ T8488] netlink: 'syz.2.17744': attribute type 1 has an invalid length.
[ 1317.307833][ T8482] bridge0: port 1(wlan0) entered blocking state
[ 1317.310798][ T8482] bridge0: port 1(wlan0) entered disabled state
[ 1317.313855][ T8482] mac80211_hwsim hwsim391 wlan0: entered allmulticast mode
[ 1317.329849][ T8482] mac80211_hwsim hwsim391 wlan0: entered promiscuous mode
[ 1317.552376][ T8495] vti7: entered promiscuous mode
[ 1317.554605][ T8495] vti7: entered allmulticast mode
[ 1317.615523][ T8497] bond329: Invalid ad_actor_system MAC address.
[ 1317.618633][ T8497] bond329: option ad_actor_system: invalid value (7)
[ 1317.623522][ T8497] bond329 (unregistering): Released all slaves
[ 1318.389237][ T8515]  speed is unknown, defaulting to 1000
[ 1318.524268][ T8529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1318.650499][ T8531] netlink: 'syz.0.17758': attribute type 6 has an invalid length.
[ 1318.748935][ T8552] netlink: 'syz.1.17763': attribute type 13 has an invalid length.
[ 1318.754593][ T8552] netlink: 'syz.1.17763': attribute type 17 has an invalid length.
[ 1318.775124][ T8552] gre0: left promiscuous mode
[ 1318.777729][ T8552] gre0: left allmulticast mode
[ 1318.796390][ T8552] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[ 1318.948204][ T8568] netlink: 'syz.2.17768': attribute type 10 has an invalid length.
[ 1318.992937][ T8570] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1318.995608][ T8570] syzkaller1: linktype set to 768
[ 1319.019832][ T8572] bridge212: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 1319.194581][ T8587] ipvlan7: entered allmulticast mode
[ 1319.197433][ T8587] bond171: entered allmulticast mode
[ 1319.363020][ T8595] netlink: 'syz.0.17777': attribute type 1 has an invalid length.
[ 1319.590968][ T8636] syzkaller1: entered promiscuous mode
[ 1319.592619][ T8636] syzkaller1: entered allmulticast mode
[ 1319.620413][ T8638] netlink: 'syz.0.17788': attribute type 1 has an invalid length.
[ 1319.641541][ T8638] bond319: entered promiscuous mode
[ 1319.644301][ T8638] 8021q: adding VLAN 0 to HW filter on device bond319
[ 1320.630450][ T8699] bond329: entered promiscuous mode
[ 1320.633218][ T8699] 8021q: adding VLAN 0 to HW filter on device bond329
[ 1320.645571][ T8699] vlan27: left allmulticast mode
[ 1320.648361][ T8699] bridge211: left allmulticast mode
[ 1320.650822][ T8699] vti7: left promiscuous mode
[ 1320.652923][ T8699] vti7: left allmulticast mode
[ 1320.655190][ T8699] ipvlan7: left allmulticast mode
[ 1320.657991][ T8699] bond171: left allmulticast mode
[ 1320.661157][ T8699] bond329: left promiscuous mode
[ 1320.753792][ T8713] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1320.757800][ T8713] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[ 1320.764802][ T8713] tipc: Resetting bearer <eth:syzkaller0>
[ 1320.991183][ T8734] bond330: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[ 1320.997110][ T8734] bond330 (unregistering): Released all slaves
[ 1321.499012][ T8772] __nla_validate_parse: 63 callbacks suppressed
[ 1321.499027][ T8772] netlink: 228 bytes leftover after parsing attributes in process `syz.0.17823'.
[ 1321.607121][ T8780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17824'.
[ 1321.610385][ T8780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17824'.
[ 1321.613951][ T8780] netlink: 72 bytes leftover after parsing attributes in process `syz.0.17824'.
[ 1321.641223][ T8780] 1X: left allmulticast mode
[ 1321.642856][ T8780] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 1321.647833][T28981]  speed is unknown, defaulting to 1000
[ 1321.650290][T28981] syz2: Port: 1 Link ACTIVE
[ 1321.755226][ T8791] netlink: 224 bytes leftover after parsing attributes in process `syz.0.17828'.
[ 1321.788702][ T8791] bond320: (slave veth153): Enslaving as an active interface with a down link
[ 1321.796245][ T8791] netlink: 14 bytes leftover after parsing attributes in process `syz.0.17828'.
[ 1321.828908][ T8794] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17829'.
[ 1321.844278][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17830'.
[ 1321.886454][ T8800] bond0: Caught tx_queue_len zero misconfig
[ 1321.958658][ T8807] validate_nla: 13 callbacks suppressed
[ 1321.958674][ T8807] netlink: 'syz.0.17834': attribute type 13 has an invalid length.
[ 1322.033086][ T8807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17834'.
[ 1322.169915][ T8814] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17836'.
[ 1322.174294][ T8815] netlink: 'syz.0.17835': attribute type 13 has an invalid length.
[ 1322.179871][ T8815] netlink: 'syz.0.17835': attribute type 17 has an invalid length.
[ 1322.272802][ T8815] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 1322.417667][ T8827] netlink: 'syz.0.17839': attribute type 13 has an invalid length.
[ 1322.569949][ T8834] bond330: option xmit_hash_policy: invalid value (10)
[ 1322.574670][ T8834] bond330 (unregistering): Released all slaves
[ 1322.649064][ T8839] netlink: 'syz.0.17844': attribute type 4 has an invalid length.
[ 1322.649615][ T8842] netlink: 'syz.0.17844': attribute type 4 has an invalid length.
[ 1322.664715][T28979]  speed is unknown, defaulting to 1000
[ 1322.667118][T28975]  speed is unknown, defaulting to 1000
[ 1322.715867][ T8852] netlink: 'syz.0.17847': attribute type 29 has an invalid length.
[ 1322.899743][ T8870] bridge0: entered allmulticast mode
[ 1322.940057][ T8874] netlink: 'syz.1.17851': attribute type 1 has an invalid length.
[ 1322.976252][ T8874] bond356: entered promiscuous mode
[ 1322.988865][ T8874] 8021q: adding VLAN 0 to HW filter on device bond356
[ 1323.059868][ T8890] netlink: 'syz.0.17853': attribute type 9 has an invalid length.
[ 1323.180138][ T8906] syzkaller0: Caught tx_queue_len zero misconfig
[ 1323.306552][ T8925] bond0: entered promiscuous mode
[ 1323.309053][ T8925] bond0: left promiscuous mode
[ 1323.384581][ T8934] mac80211_hwsim hwsim57 syzkaller0: entered promiscuous mode
[ 1323.388327][ T8934] mac80211_hwsim hwsim57 syzkaller0: entered allmulticast mode
[ 1323.401960][ T8934] bond330: entered promiscuous mode
[ 1323.403946][ T8934] 8021q: adding VLAN 0 to HW filter on device bond330
[ 1323.439555][ T8916]  speed is unknown, defaulting to 1000
[ 1323.581065][ T8951] netlink: 'syz.2.17869': attribute type 1 has an invalid length.
[ 1323.642429][ T8951] vlan28: entered allmulticast mode
[ 1323.644301][ T8951] bond331: entered allmulticast mode
[ 1323.758193][ T8961] bond321: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1323.768348][ T8961] bond321 (unregistering): Released all slaves
[ 1323.803753][ T8965] team0: entered promiscuous mode
[ 1323.805906][ T8965] team0: entered allmulticast mode
[ 1323.809306][ T8965] 8021q: adding VLAN 0 to HW filter on device team0
[ 1323.820118][ T8965] team8 (uninitialized): Failed to send options change via netlink (err -105)
[ 1323.832828][ T8965] team8: entered promiscuous mode
[ 1323.834579][ T8965] team8: entered allmulticast mode
[ 1323.836553][ T8965] 8021q: adding VLAN 0 to HW filter on device team8
[ 1323.890523][ T8969] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[ 1323.961855][ T8972] 8021q: adding VLAN 0 to HW filter on device bond321
[ 1323.985413][ T8972] veth157: entered promiscuous mode
[ 1323.991306][ T8972] bond321: (slave veth157): Enslaving as an active interface with an up link
[ 1324.020345][ T8976] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004
[ 1324.429093][ T9003] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[ 1324.642919][ T9026] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[ 1324.721381][ T8968] delete_channel: no stack
[ 1325.418914][ T9100] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 1325.609085][ T9113] pim6reg1: entered promiscuous mode
[ 1325.610917][ T9113] pim6reg1: entered allmulticast mode
[ 1325.783781][ T9119] 8021q: adding VLAN 0 to HW filter on device bond322
[ 1326.384583][ T9154] bond323: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1326.395311][ T9154] bond323 (unregistering): Released all slaves
[ 1326.426016][ T9152] pim6reg: entered allmulticast mode
[ 1326.429167][ T9152] pim6reg: left allmulticast mode
[ 1326.563990][ T9172] __nla_validate_parse: 146 callbacks suppressed
[ 1326.564006][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17919'.
[ 1326.571610][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17919'.
[ 1326.609485][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17919'.
[ 1326.613689][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17919'.
[ 1326.711181][ T9176] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[ 1326.815230][ T9178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17923'.
[ 1326.835644][ T9179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17923'.
[ 1326.922484][ T9189] tap0: tun_chr_ioctl cmd 1074025677
[ 1326.925088][ T9189] tap0: linktype set to 6
[ 1327.205585][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17931'.
[ 1327.212095][ T9209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17931'.
[ 1327.302200][ T9215] validate_nla: 14 callbacks suppressed
[ 1327.302215][ T9215] netlink: 'syz.1.17932': attribute type 2 has an invalid length.
[ 1327.307956][ T9215] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17932'.
[ 1327.429244][ T9239] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1327.496879][ T9244] netlink: 'syz.0.17940': attribute type 3 has an invalid length.
[ 1327.979917][ T9285] bond357: entered promiscuous mode
[ 1327.982358][ T9285] 8021q: adding VLAN 0 to HW filter on device bond357
[ 1328.152903][ T9298] netlink: 104 bytes leftover after parsing attributes in process `syz.1.17955'.
[ 1328.161797][ T9299] netlink: 'syz.1.17955': attribute type 1 has an invalid length.
[ 1328.165025][ T9298] netlink: 'syz.1.17955': attribute type 1 has an invalid length.
[ 1328.872126][ T9322] netlink: 'syz.2.17961': attribute type 2 has an invalid length.
[ 1328.877474][ T9322] netlink: 'syz.2.17961': attribute type 2 has an invalid length.
[ 1328.881429][ T9322] netlink: 'syz.2.17961': attribute type 2 has an invalid length.
[ 1328.887016][ T9322] netlink: 'syz.2.17961': attribute type 1 has an invalid length.
[ 1328.889613][ T9322] netlink: 'syz.2.17961': attribute type 1 has an invalid length.
[ 1328.892032][ T9322] netlink: 'syz.2.17961': attribute type 1 has an invalid length.
[ 1328.993958][ T9340] netlink: 'syz.0.17965': attribute type 11 has an invalid length.
[ 1329.154804][ T9356] vlan28: entered allmulticast mode
[ 1329.294168][ T9366] nbd: couldn't find device at index 0
[ 1329.376898][ T9353] nbd0: detected capacity change from 0 to 63
[ 1329.642018][ T9387] batadv13: entered promiscuous mode
[ 1329.644237][ T9387] batadv13: entered allmulticast mode
[ 1329.653868][ T9387] 8021q: adding VLAN 0 to HW filter on device batadv13
[ 1329.889174][   T57] block nbd0: Receive control failed (result -104)
[ 1330.059911][ T9425] tunl0: entered promiscuous mode
[ 1330.067063][ T9425] tunl0: entered allmulticast mode
[ 1330.113789][ T9436] openvswitch: netlink: Missing valid actions attribute.
[ 1330.117477][ T9436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1330.133365][ T9436] pim6reg: entered allmulticast mode
[ 1330.137455][ T9436] pim6reg: left allmulticast mode
[ 1330.284396][ T9438] mac80211_hwsim hwsim57 syzkaller0: left promiscuous mode
[ 1330.289597][ T9438] mac80211_hwsim hwsim57 syzkaller0: left allmulticast mode
[ 1330.352378][ T9438] bond330: left promiscuous mode
[ 1330.357840][ T9438] team0: left promiscuous mode
[ 1330.365122][ T9438] team8: left promiscuous mode
[ 1330.370148][ T9438] team8: left allmulticast mode
[ 1330.374598][ T9438] vlan28: left allmulticast mode
[ 1330.377153][ T9438] team0: left allmulticast mode
[ 1330.378980][ T9438] batadv13: left promiscuous mode
[ 1330.380694][ T9438] batadv13: left allmulticast mode
[ 1330.669228][ T9446] team0: entered promiscuous mode
[ 1330.670941][ T9446] team0: entered allmulticast mode
[ 1330.672747][ T9446] 8021q: adding VLAN 0 to HW filter on device team0
[ 1330.675573][T28979]  speed is unknown, defaulting to 1000
[ 1330.675664][ T5703] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1330.677812][T28979] syz2: Port: 1 Link DOWN
[ 1330.684107][ T5703] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1330.693442][ T5703] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1330.698083][ T5703] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1330.793468][ T9460] pim6reg: entered allmulticast mode
[ 1330.796223][ T9462] pim6reg: left allmulticast mode
[ 1330.943152][ T9467] syzkaller1: entered promiscuous mode
[ 1330.945586][ T9467] syzkaller1: entered allmulticast mode
[ 1331.154545][ T9482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1331.313149][ T9488] bond323: (slave vcan0): refused to change device type
[ 1331.650491][ T9502] __nla_validate_parse: 14 callbacks suppressed
[ 1331.650507][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18011'.
[ 1331.707142][ T9506] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1331.711517][ T9506] mac80211_hwsim hwsim57 syzkaller0: entered promiscuous mode
[ 1331.719656][ T9506] mac80211_hwsim hwsim57 syzkaller0: entered allmulticast mode
[ 1332.034128][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18015'.
[ 1332.050740][ T9517] 8021q: adding VLAN 0 to HW filter on device bond332
[ 1332.056927][ T9529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18017'.
[ 1332.064008][ T9530] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1332.064230][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18015'.
[ 1332.155850][ T9536] 8021q: adding VLAN 0 to HW filter on device bond358
[ 1332.183514][ T9536] bond358: (slave veth208): Enslaving as an active interface with a down link
[ 1332.203807][ T9536] 8021q: adding VLAN 0 to HW filter on device batadv50
[ 1332.206482][ T9536] bond358: (slave batadv50): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[ 1332.404822][ T9564] validate_nla: 9 callbacks suppressed
[ 1332.404832][ T9564] netlink: 'syz.1.18022': attribute type 2 has an invalid length.
[ 1332.515079][ T9573] vxcan1: entered allmulticast mode
[ 1332.519446][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18026'.
[ 1332.528945][ T9575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18027'.
[ 1332.605090][ T9577] bond324: option miimon: invalid value (18446744073709551607)
[ 1332.614409][ T9577] bond324: option miimon: allowed values 0 - 2147483647
[ 1332.625226][ T9577] bond324 (unregistering): Released all slaves
[ 1332.625427][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18026'.
[ 1332.762056][ T9589] netlink: set zone limit has 4 unknown bytes
[ 1332.774374][ T9588] netlink: set zone limit has 4 unknown bytes
[ 1332.842906][ T9595] set match dimension is over the limit!
[ 1332.891189][ T9601] rds_sendmsg: 55 callbacks suppressed
[ 1332.891200][ T9601] atomic_op ffff8881c77fa998 conn xmit_atomic 0000000000000000
[ 1332.897651][ T9603] netlink: 72 bytes leftover after parsing attributes in process `syz.0.18032'.
[ 1332.959655][ T9610] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[ 1332.984969][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18035'.
[ 1332.996640][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18035'.
[ 1333.108412][ T9605]  speed is unknown, defaulting to 1000
[ 1333.336017][ T9626] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1333.721781][ T9671] netlink: 'syz.2.18055': attribute type 24 has an invalid length.
[ 1333.823792][ T9669] gre0: entered promiscuous mode
[ 1333.825430][ T9669] gre0: entered allmulticast mode
[ 1333.948379][ T9676]  speed is unknown, defaulting to 1000
[ 1334.078190][ T9723] netlink: 'syz.0.18064': attribute type 9 has an invalid length.
[ 1334.133996][ T9729] mac80211_hwsim hwsim391 wlan0: left allmulticast mode
[ 1334.137045][ T9729] mac80211_hwsim hwsim391 wlan0: left promiscuous mode
[ 1334.140260][ T9729] bridge0: port 1(wlan0) entered disabled state
[ 1334.267801][ T9737] netlink: 'syz.2.18066': attribute type 3 has an invalid length.
[ 1334.271108][ T9737] netlink: 'syz.2.18066': attribute type 3 has an invalid length.
[ 1334.325688][ T9738] macsec2: entered allmulticast mode
[ 1334.433461][ T9754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1335.392457][ T9785] veth210: entered promiscuous mode
[ 1335.429904][ T9788] mac80211_hwsim hwsim57 syzkaller0: left promiscuous mode
[ 1335.432312][ T9788] mac80211_hwsim hwsim57 syzkaller0: left allmulticast mode
[ 1335.651346][ T9821] netlink: 'syz.2.18086': attribute type 10 has an invalid length.
[ 1335.730392][ T9832] netlink: 'syz.0.18088': attribute type 1 has an invalid length.
[ 1335.745993][ T9832] 8021q: adding VLAN 0 to HW filter on device bond324
[ 1335.811058][ T9845] netlink: 'syz.1.18092': attribute type 21 has an invalid length.
[ 1335.853730][ T9849] bond333: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1335.858612][ T9849] bond333 (unregistering): Released all slaves
[ 1336.085035][ T9860] pim6reg99999999: entered allmulticast mode
[ 1336.111099][ T9852]  speed is unknown, defaulting to 1000
[ 1336.304426][ T9886] pim6reg: entered allmulticast mode
[ 1336.337813][ T9888] pim6reg: left allmulticast mode
[ 1336.395919][ T9884] netlink: 'syz.2.18105': attribute type 1 has an invalid length.
[ 1336.400998][ T9896] netlink: 'syz.1.18106': attribute type 1 has an invalid length.
[ 1336.418851][ T9884] bond333: entered promiscuous mode
[ 1336.420983][ T9884] 8021q: adding VLAN 0 to HW filter on device bond333
[ 1336.484221][ T9902] IPv6: Can't replace route, no match found
[ 1336.488280][ T9884] 8021q: adding VLAN 0 to HW filter on device bond333
[ 1336.488680][ T9902] IPv6: Can't replace route, no match found
[ 1336.491393][ T9884] bond333: (slave wireguard15): The slave device specified does not support setting the MAC address
[ 1336.497327][ T9884] bond333: (slave wireguard15): Setting fail_over_mac to active for active-backup mode
[ 1336.504310][ T9884] bond333: (slave wireguard15): making interface the new active one
[ 1336.507296][ T9884] wireguard15: entered promiscuous mode
[ 1336.510319][ T9884] bond333: (slave wireguard15): Enslaving as an active interface with an up link
[ 1336.784990][ T9921] __nla_validate_parse: 22 callbacks suppressed
[ 1336.785005][ T9921] netlink: 56 bytes leftover after parsing attributes in process `syz.1.18113'.
[ 1336.805120][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18111'.
[ 1336.844680][ T9928] wg1: entered promiscuous mode
[ 1336.847992][ T9928] wg1: entered allmulticast mode
[ 1337.097815][ T9952] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1337.195124][ T9964] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1337.263823][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18125'.
[ 1337.485818][ T9985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18132'.
[ 1337.716491][T10014] sit0: entered promiscuous mode
[ 1337.721370][T10014] sit0: entered allmulticast mode
[ 1337.781501][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18142'.
[ 1337.784450][T10021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18142'.
[ 1338.051615][T10039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18146'.
[ 1338.060469][T10039] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18146'.
[ 1338.278507][T10062] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1338.281781][T10062] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1338.648060][T10071] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1338.747590][T10080] syzkaller1: left promiscuous mode
[ 1338.749395][T10080] syzkaller1: left allmulticast mode
[ 1338.830610][T10084] validate_nla: 3 callbacks suppressed
[ 1338.830620][T10084] netlink: 'syz.1.18157': attribute type 1 has an invalid length.
[ 1338.835783][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18157'.
[ 1338.912295][T10090] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18158'.
[ 1339.195382][T10116] netlink: 'syz.0.18167': attribute type 1 has an invalid length.
[ 1339.295926][T10128] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[ 1339.303312][ T7544] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1339.307327][ T7544] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1339.310720][ T7544] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1339.314436][ T7544] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1339.345188][T10131] netlink: 'syz.0.18171': attribute type 1 has an invalid length.
[ 1339.447295][T10139] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1339.516300][T10141] netlink: 'syz.0.18174': attribute type 10 has an invalid length.
[ 1339.522470][T10141] netlink: 'syz.0.18174': attribute type 10 has an invalid length.
[ 1339.755453][T10156] netlink: 'syz.1.18179': attribute type 1 has an invalid length.
[ 1339.943239][T10169] netlink: 'syz.0.18184': attribute type 1 has an invalid length.
[ 1340.068692][T10176] netlink: 'syz.0.18186': attribute type 1 has an invalid length.
[ 1340.106159][T10176] bond328: entered promiscuous mode
[ 1340.109080][T10176] 8021q: adding VLAN 0 to HW filter on device bond328
[ 1340.119239][T10176] bond328: entered allmulticast mode
[ 1340.143344][T10176] bond328: (slave bridge203): making interface the new active one
[ 1340.147345][T10176] bridge203: entered promiscuous mode
[ 1340.149821][T10176] bridge203: entered allmulticast mode
[ 1340.153845][T10176] bond328: (slave bridge203): Enslaving as an active interface with an up link
[ 1340.163318][T10176] netlink: 'syz.0.18186': attribute type 1 has an invalid length.
[ 1340.189786][T10183] veth175: entered promiscuous mode
[ 1340.214947][T10176] bond329: entered promiscuous mode
[ 1340.217795][T10176] 8021q: adding VLAN 0 to HW filter on device bond329
[ 1340.524697][T10223] netlink: 'syz.2.18197': attribute type 1 has an invalid length.
[ 1340.720806][T10242] x_tables: duplicate entry at hook 2
[ 1340.787552][T10245] bond330: (slave bridge204): making interface the new active one
[ 1340.791109][T10245] bond330: (slave bridge204): Enslaving as an active interface with an up link
[ 1340.942291][T10263] macsec10: entered promiscuous mode
[ 1340.944548][T10263] bridge210: entered promiscuous mode
[ 1341.266443][T10285]  speed is unknown, defaulting to 1000
[ 1341.802691][T10355] __nla_validate_parse: 38 callbacks suppressed
[ 1341.802708][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18232'.
[ 1341.922015][T10374] siw: device registration error -23
[ 1342.041916][T10379] bond361 (unregistering): Released all slaves
[ 1342.165546][T10393] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1342.229297][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18239'.
[ 1342.386549][T10400] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18241'.
[ 1342.498660][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18243'.
[ 1342.651526][T10409] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1342.654462][T10409] pim6reg1: entered promiscuous mode
[ 1342.656090][T10409] pim6reg1: entered allmulticast mode
[ 1342.712548][T10415] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18248'.
[ 1342.751352][T10421] x_tables: duplicate underflow at hook 1
[ 1342.762234][T10423] veth1: entered promiscuous mode
[ 1342.764444][T10423] veth1: entered allmulticast mode
[ 1342.801906][T10427] tipc: Enabling of bearer <eth:caif0> rejected, max 3 bearers permitted
[ 1342.820409][T10429] netlink: zone id is out of range
[ 1342.822499][T10429] netlink: zone id is out of range
[ 1342.824334][T10429] netlink: zone id is out of range
[ 1342.826260][T10429] netlink: zone id is out of range
[ 1342.828554][T10429] netlink: zone id is out of range
[ 1342.830405][T10429] netlink: get zone limit has 4 unknown bytes
[ 1342.861343][T10427] netlink: 3 bytes leftover after parsing attributes in process `syz.1.18253'.
[ 1342.864775][T10427] 1X: renamed from 60X
[ 1342.885799][T10436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18256'.
[ 1342.889435][T10427] 1X: entered allmulticast mode
[ 1342.891517][T10427] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 1342.922955][T10436] 8021q: adding VLAN 0 to HW filter on device bond331
[ 1342.959701][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18257'.
[ 1342.963356][T10448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18257'.
[ 1342.996222][T10443] netlink: 548 bytes leftover after parsing attributes in process `syz.1.18258'.
[ 1343.343869][T10478] vlan19: entered allmulticast mode
[ 1343.346094][T10478] bridge_slave_0: entered allmulticast mode
[ 1343.683088][T10492] lo: Caught tx_queue_len zero misconfig
[ 1343.828692][T10507] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[ 1343.862916][T10509] 8021q: adding VLAN 0 to HW filter on device bond336
[ 1343.897259][T10509] veth177: entered promiscuous mode
[ 1343.903496][T10509] bond336: (slave veth177): Enslaving as an active interface with an up link
[ 1343.914439][T10513] IPVS: stopping backup sync thread 27515 ...
[ 1343.942058][T10515] validate_nla: 18 callbacks suppressed
[ 1343.942075][T10515] netlink: 'syz.2.18277': attribute type 1 has an invalid length.
[ 1343.969450][T10515] 8021q: adding VLAN 0 to HW filter on device bond337
[ 1344.239923][T10545] netlink: 'syz.0.18284': attribute type 5 has an invalid length.
[ 1344.279471][T10550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1359.738069][  T127] block nbd0: Possible stuck request ffff88805da10000: control (read@0,1024B). Runtime 30 seconds
[ 1359.742506][  T127] block nbd0: Possible stuck request ffff88805da10200: control (read@1024,1024B). Runtime 30 seconds
[ 1359.748122][  T127] block nbd0: Possible stuck request ffff88805da10400: control (read@2048,1024B). Runtime 30 seconds
[ 1359.752566][  T127] block nbd0: Possible stuck request ffff88805da10600: control (read@3072,1024B). Runtime 30 seconds
[ 1359.965574][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1359.972601][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1359.977483][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1359.981496][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1359.985067][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1360.101228][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1360.108840][T10572] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1360.114557][T10572] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1360.121916][T10572] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1360.127956][T10572] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1360.131334][T10572] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1360.135591][T10580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1360.136569][T10572] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1360.139816][T10580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1360.150361][T10572] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1360.155791][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1360.169542][T10572] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1360.172535][T10572] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1360.188437][T10581] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1360.191463][T10572] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1360.507821][T10573]  speed is unknown, defaulting to 1000
[ 1360.599748][T10576]  speed is unknown, defaulting to 1000
[ 1360.698253][T10573] chnl_net:caif_netlink_parms(): no params data found
[ 1360.751088][T10570]  speed is unknown, defaulting to 1000
[ 1360.759619][T10576] chnl_net:caif_netlink_parms(): no params data found
[ 1360.834955][T10573] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1360.837688][T10573] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1360.840473][T10573] bridge_slave_0: entered allmulticast mode
[ 1360.843861][T10573] bridge_slave_0: entered promiscuous mode
[ 1360.855032][T10573] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1360.857664][T10573] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1360.860374][T10573] bridge_slave_1: entered allmulticast mode
[ 1360.863909][T10573] bridge_slave_1: entered promiscuous mode
[ 1360.899044][T10573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1360.915553][T10573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1360.940114][T10576] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1360.943019][T10576] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1360.946004][T10576] bridge_slave_0: entered allmulticast mode
[ 1360.950747][T10576] bridge_slave_0: entered promiscuous mode
[ 1360.955631][T10576] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1360.959340][T10576] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1360.962592][T10576] bridge_slave_1: entered allmulticast mode
[ 1360.965912][T10576] bridge_slave_1: entered promiscuous mode
[ 1360.998068][T10573] team0: Port device team_slave_0 added
[ 1361.031982][T10573] team0: Port device team_slave_1 added
[ 1361.041851][T10576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1361.064742][T10576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1361.111247][T10573] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1361.114522][T10573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1361.126552][T10573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1361.134083][T10573] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1361.137460][T10573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1361.148681][T10573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1361.177891][T10576] team0: Port device team_slave_0 added
[ 1361.186779][T10570] chnl_net:caif_netlink_parms(): no params data found
[ 1361.199604][T10576] team0: Port device team_slave_1 added
[ 1361.270365][T10576] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1361.273148][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1361.281986][T10576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1361.305916][T10576] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1361.308781][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1361.318295][T10576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1361.330312][T10573] hsr_slave_0: entered promiscuous mode
[ 1361.334102][T10573] hsr_slave_1: entered promiscuous mode
[ 1361.447959][T10570] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1361.451102][T10570] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1361.454650][T10570] bridge_slave_0: entered allmulticast mode
[ 1361.459419][T10570] bridge_slave_0: entered promiscuous mode
[ 1361.464048][T10570] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1361.467429][T10570] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1361.470783][T10570] bridge_slave_1: entered allmulticast mode
[ 1361.475275][T10570] bridge_slave_1: entered promiscuous mode
[ 1361.539452][T10576] hsr_slave_0: entered promiscuous mode
[ 1361.543256][T10576] hsr_slave_1: entered promiscuous mode
[ 1361.546472][T10576] debugfs: 'hsr0' already exists in 'hsr'
[ 1361.549595][T10576] Cannot create hsr debugfs directory
[ 1361.556182][T10570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1361.580988][T10570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1361.659272][T10570] team0: Port device team_slave_0 added
[ 1361.682499][T10570] team0: Port device team_slave_1 added
[ 1361.758250][T10570] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1361.761119][T10570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1361.772733][T10570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1361.782434][T10570] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1361.785290][T10570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1361.796267][T10570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1361.893555][T10570] hsr_slave_0: entered promiscuous mode
[ 1361.897988][T10570] hsr_slave_1: entered promiscuous mode
[ 1361.901429][T10570] debugfs: 'hsr0' already exists in 'hsr'
[ 1361.903875][T10570] Cannot create hsr debugfs directory
[ 1362.207200][T10572] Bluetooth: hci4: command tx timeout
[ 1362.287538][T10572] Bluetooth: hci5: command tx timeout
[ 1362.287592][ T5805] Bluetooth: hci3: command tx timeout
[ 1364.287005][ T5805] Bluetooth: hci4: command tx timeout
[ 1364.367482][ T5805] Bluetooth: hci3: command tx timeout
[ 1364.367585][T10572] Bluetooth: hci5: command tx timeout
[ 1366.367051][T10572] Bluetooth: hci4: command tx timeout
[ 1366.447646][T10572] Bluetooth: hci3: command tx timeout
[ 1366.447717][ T5805] Bluetooth: hci5: command tx timeout
[ 1368.446945][ T5805] Bluetooth: hci4: command tx timeout
[ 1368.527039][ T5805] Bluetooth: hci3: command tx timeout
[ 1368.538203][ T5805] Bluetooth: hci5: command tx timeout
[ 1389.817349][  T127] block nbd0: Possible stuck request ffff88805da10000: control (read@0,1024B). Runtime 60 seconds
[ 1389.821849][  T127] block nbd0: Possible stuck request ffff88805da10200: control (read@1024,1024B). Runtime 60 seconds
[ 1389.826394][  T127] block nbd0: Possible stuck request ffff88805da10400: control (read@2048,1024B). Runtime 60 seconds
[ 1389.831094][  T127] block nbd0: Possible stuck request ffff88805da10600: control (read@3072,1024B). Runtime 60 seconds
[ 1392.180993][ T5255] udevd[5255]: worker [6863] /devices/virtual/block/nbd0 is taking a long time
[ 1419.888553][  T127] block nbd0: Possible stuck request ffff88805da10000: control (read@0,1024B). Runtime 90 seconds
[ 1419.892727][  T127] block nbd0: Possible stuck request ffff88805da10200: control (read@1024,1024B). Runtime 90 seconds
[ 1419.897270][  T127] block nbd0: Possible stuck request ffff88805da10400: control (read@2048,1024B). Runtime 90 seconds
[ 1419.901206][  T127] block nbd0: Possible stuck request ffff88805da10600: control (read@3072,1024B). Runtime 90 seconds
[ 1419.961806][T10572] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1419.966532][T10572] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1419.971936][T10572] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1419.975893][T10572] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1419.980585][T10572] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1420.108164][T10607]  speed is unknown, defaulting to 1000
[ 1420.204877][T10607] chnl_net:caif_netlink_parms(): no params data found
[ 1420.292947][T10607] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1420.296099][T10607] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1420.299888][T10607] bridge_slave_0: entered allmulticast mode
[ 1420.304402][T10607] bridge_slave_0: entered promiscuous mode
[ 1420.310419][T10607] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1420.313325][T10607] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1420.317532][T10607] bridge_slave_1: entered allmulticast mode
[ 1420.321683][T10607] bridge_slave_1: entered promiscuous mode
[ 1420.353529][T10607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1420.361270][T10607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1420.394614][T10607] team0: Port device team_slave_0 added
[ 1420.400847][T10607] team0: Port device team_slave_1 added
[ 1420.427615][T10607] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1420.430539][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1420.441446][T10607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1420.448430][T10607] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1420.451261][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1420.462323][T10607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1420.508205][T10607] hsr_slave_0: entered promiscuous mode
[ 1420.511949][T10607] hsr_slave_1: entered promiscuous mode
[ 1420.515259][T10607] debugfs: 'hsr0' already exists in 'hsr'
[ 1420.518176][T10607] Cannot create hsr debugfs directory
[ 1420.969485][ T5805] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1420.979515][ T5805] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1420.985226][ T5805] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1420.988329][ T5810] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1420.995311][ T5805] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1420.995720][ T5810] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1421.002146][ T5805] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1421.002162][ T5810] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1421.011909][ T5810] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1421.014595][ T5810] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1421.159153][T10617]  speed is unknown, defaulting to 1000
[ 1421.255102][T10619]  speed is unknown, defaulting to 1000
[ 1421.300483][T10617] chnl_net:caif_netlink_parms(): no params data found
[ 1421.383230][T10617] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1421.385502][T10617] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1421.388428][T10617] bridge_slave_0: entered allmulticast mode
[ 1421.391549][T10617] bridge_slave_0: entered promiscuous mode
[ 1421.398589][T10617] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1421.400902][T10617] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1421.404126][T10617] bridge_slave_1: entered allmulticast mode
[ 1421.409159][T10617] bridge_slave_1: entered promiscuous mode
[ 1421.444793][T10617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1421.456133][T10617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1421.503675][T10617] team0: Port device team_slave_0 added
[ 1421.509442][T10617] team0: Port device team_slave_1 added
[ 1421.539633][T10617] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1421.542534][T10617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1421.553114][T10617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1421.558439][T10619] chnl_net:caif_netlink_parms(): no params data found
[ 1421.567605][T10617] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1421.570500][T10617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1421.582114][T10617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1421.664713][T10617] hsr_slave_0: entered promiscuous mode
[ 1421.668851][T10617] hsr_slave_1: entered promiscuous mode
[ 1421.672003][T10617] debugfs: 'hsr0' already exists in 'hsr'
[ 1421.674306][T10617] Cannot create hsr debugfs directory
[ 1421.710334][T10619] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1421.713382][T10619] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1421.717343][T10619] bridge_slave_0: entered allmulticast mode
[ 1421.721680][T10619] bridge_slave_0: entered promiscuous mode
[ 1421.739149][T10619] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1421.742097][T10619] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1421.745367][T10619] bridge_slave_1: entered allmulticast mode
[ 1421.750587][T10619] bridge_slave_1: entered promiscuous mode
[ 1421.800805][T10619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1421.819360][T10619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1421.859863][T10619] team0: Port device team_slave_0 added
[ 1421.871593][T10619] team0: Port device team_slave_1 added
[ 1421.922993][T10619] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1421.925586][T10619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1421.935156][T10619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1421.948806][T10619] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1421.951436][T10619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1421.961450][T10619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1422.022824][T10619] hsr_slave_0: entered promiscuous mode
[ 1422.025901][T10619] hsr_slave_1: entered promiscuous mode
[ 1422.029658][T10619] debugfs: 'hsr0' already exists in 'hsr'
[ 1422.031526][T10619] Cannot create hsr debugfs directory
[ 1422.047018][T10581] Bluetooth: hci6: command tx timeout
[ 1423.087150][T10581] Bluetooth: hci8: command tx timeout
[ 1423.087512][ T5810] Bluetooth: hci7: command tx timeout
[ 1424.127181][ T5810] Bluetooth: hci6: command tx timeout
[ 1425.166977][ T5810] Bluetooth: hci7: command tx timeout
[ 1425.167152][T10581] Bluetooth: hci8: command tx timeout
[ 1426.207167][T10581] Bluetooth: hci6: command tx timeout
[ 1427.247529][T10581] Bluetooth: hci7: command tx timeout
[ 1427.247579][ T5810] Bluetooth: hci8: command tx timeout
[ 1428.287034][ T5810] Bluetooth: hci6: command tx timeout
[ 1429.327055][ T5810] Bluetooth: hci8: command tx timeout
[ 1429.327137][T10581] Bluetooth: hci7: command tx timeout
[ 1449.968028][  T127] block nbd0: Possible stuck request ffff88805da10000: control (read@0,1024B). Runtime 120 seconds
[ 1449.972464][  T127] block nbd0: Possible stuck request ffff88805da10200: control (read@1024,1024B). Runtime 120 seconds
[ 1449.977429][  T127] block nbd0: Possible stuck request ffff88805da10400: control (read@2048,1024B). Runtime 120 seconds
[ 1449.981857][  T127] block nbd0: Possible stuck request ffff88805da10600: control (read@3072,1024B). Runtime 120 seconds
[ 1480.057444][  T127] block nbd0: Possible stuck request ffff88805da10000: control (read@0,1024B). Runtime 150 seconds
[ 1480.061911][  T127] block nbd0: Possible stuck request ffff88805da10200: control (read@1024,1024B). Runtime 150 seconds
[ 1480.066366][  T127] block nbd0: Possible stuck request ffff88805da10400: control (read@2048,1024B). Runtime 150 seconds
[ 1480.072355][  T127] block nbd0: Possible stuck request ffff88805da10600: control (read@3072,1024B). Runtime 150 seconds
[ 1480.937481][ T5810] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1480.941553][ T5810] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1480.945064][ T5810] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1480.950987][ T5810] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1480.954916][ T5810] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1481.049567][T10636]  speed is unknown, defaulting to 1000
[ 1481.138126][T10636] chnl_net:caif_netlink_parms(): no params data found
[ 1481.194386][T10636] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1481.197162][T10636] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1481.200467][T10636] bridge_slave_0: entered allmulticast mode
[ 1481.203864][T10636] bridge_slave_0: entered promiscuous mode
[ 1481.207688][T10636] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1481.209955][T10636] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1481.212557][T10636] bridge_slave_1: entered allmulticast mode
[ 1481.215836][T10636] bridge_slave_1: entered promiscuous mode
[ 1481.235154][T10636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1481.242439][T10636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1481.261372][T10636] team0: Port device team_slave_0 added
[ 1481.265965][T10636] team0: Port device team_slave_1 added
[ 1481.285135][T10636] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1481.288210][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1481.297924][T10636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1481.303131][T10636] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1481.305422][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1481.314960][T10636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1481.346633][T10636] hsr_slave_0: entered promiscuous mode
[ 1481.350018][T10636] hsr_slave_1: entered promiscuous mode
[ 1481.352625][T10636] debugfs: 'hsr0' already exists in 'hsr'
[ 1481.354922][T10636] Cannot create hsr debugfs directory
[ 1481.951461][T10581] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1481.958110][T10581] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1481.963630][T10581] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1481.968375][T10581] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1481.971869][T10581] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1482.005839][ T5810] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1482.012314][ T5810] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1482.016589][ T5810] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1482.021146][ T5810] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1482.024575][ T5810] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1482.101648][T10646]  speed is unknown, defaulting to 1000
[ 1482.212722][T10646] chnl_net:caif_netlink_parms(): no params data found
[ 1482.254773][T10648]  speed is unknown, defaulting to 1000
[ 1482.330176][T10646] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1482.333316][T10646] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1482.336651][T10646] bridge_slave_0: entered allmulticast mode
[ 1482.341372][T10646] bridge_slave_0: entered promiscuous mode
[ 1482.356250][T10646] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1482.360039][T10646] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1482.363461][T10646] bridge_slave_1: entered allmulticast mode
[ 1482.369795][T10646] bridge_slave_1: entered promiscuous mode
[ 1482.405601][T10646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1482.416043][T10646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1482.450330][T10646] team0: Port device team_slave_0 added
[ 1482.459527][T10646] team0: Port device team_slave_1 added
[ 1482.497583][T10646] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1482.500342][T10646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1482.511632][T10646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1482.524243][T10646] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1482.526334][T10646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1482.535115][T10646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1482.550438][T10648] chnl_net:caif_netlink_parms(): no params data found
[ 1482.593822][T10646] hsr_slave_0: entered promiscuous mode
[ 1482.597140][T10646] hsr_slave_1: entered promiscuous mode
[ 1482.599801][T10646] debugfs: 'hsr0' already exists in 'hsr'
[ 1482.601626][T10646] Cannot create hsr debugfs directory
[ 1482.671903][T10648] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1482.674900][T10648] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1482.678833][T10648] bridge_slave_0: entered allmulticast mode
[ 1482.683469][T10648] bridge_slave_0: entered promiscuous mode
[ 1482.693219][T10648] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1482.696247][T10648] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1482.700418][T10648] bridge_slave_1: entered allmulticast mode
[ 1482.704561][T10648] bridge_slave_1: entered promiscuous mode
[ 1482.754897][T10648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1482.766614][T10648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1482.815528][T10648] team0: Port device team_slave_0 added
[ 1482.821772][T10648] team0: Port device team_slave_1 added
[ 1482.869169][T10648] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1482.872106][T10648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1482.882738][T10648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1482.904588][T10648] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1482.908150][T10648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1482.917656][T10648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1482.957258][T10648] hsr_slave_0: entered promiscuous mode
[ 1482.961093][T10648] hsr_slave_1: entered promiscuous mode
[ 1482.964102][T10648] debugfs: 'hsr0' already exists in 'hsr'
[ 1482.966195][T10648] Cannot create hsr debugfs directory
[ 1483.008384][T10581] Bluetooth: hci9: command tx timeout
[ 1484.047881][T10581] Bluetooth: hci11: command tx timeout
[ 1484.047970][ T5810] Bluetooth: hci10: command tx timeout
[ 1485.087582][ T5810] Bluetooth: hci9: command tx timeout
[ 1486.127373][ T5810] Bluetooth: hci10: command tx timeout
[ 1486.127560][T10578] Bluetooth: hci11: command tx timeout
[ 1486.607042][T10578] Bluetooth: hci3: command 0x0406 tx timeout
[ 1486.610043][ T5810] Bluetooth: hci4: command 0x0406 tx timeout
[ 1486.611983][T10578] Bluetooth: hci5: command 0x0406 tx timeout
[ 1487.167230][ T5805] Bluetooth: hci9: command tx timeout
[ 1488.207210][ T5805] Bluetooth: hci11: command tx timeout
[ 1488.217215][ T5805] Bluetooth: hci10: command tx timeout
[ 1489.247874][ T5805] Bluetooth: hci9: command tx timeout
[ 1490.287755][ T5805] Bluetooth: hci10: command tx timeout
[ 1490.287772][T10572] Bluetooth: hci11: command tx timeout
[ 1504.367487][   T35] INFO: task syz.2.18285:10548 blocked for more than 143 seconds.
[ 1504.370792][   T35]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
[ 1504.372949][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1504.376584][   T35] task:syz.2.18285     state:D stack:23872 pid:10548 tgid:10547 ppid:5811   task_flags:0x400140 flags:0x00080002
[ 1504.382292][   T35] Call Trace:
[ 1504.383738][   T35]  <TASK>
[ 1504.384988][   T35]  __schedule+0x1585/0x5340
[ 1504.387560][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1504.389696][   T35]  ? __pfx___schedule+0x10/0x10
[ 1504.391718][   T35]  ? schedule+0x90/0x360
[ 1504.393497][   T35]  schedule+0x164/0x360
[ 1504.395311][   T35]  schedule_preempt_disabled+0x13/0x30
[ 1504.398268][   T35]  __mutex_lock+0x7fe/0x1300
[ 1504.400256][   T35]  ? is_bpf_text_address+0x26/0x2b0
[ 1504.402435][   T35]  ? __mutex_lock+0x5ac/0x1300
[ 1504.404455][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[ 1504.406397][   T35]  ? __pfx___mutex_lock+0x10/0x10
[ 1504.409724][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1504.411831][   T35]  ? radix_tree_lookup+0x240/0x290
[ 1504.414016][   T35]  genl_rcv_msg+0x10b/0x7a0
[ 1504.415998][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1504.418886][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1504.420985][   T35]  netlink_rcv_skb+0x232/0x4b0
[ 1504.422974][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1504.425112][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1504.427933][   T35]  ? down_read+0x272/0x2e0
[ 1504.429637][   T35]  ? genl_rcv+0xd/0x40
[ 1504.431169][   T35]  genl_rcv+0x28/0x40
[ 1504.432847][   T35]  netlink_unicast+0x80f/0x9b0
[ 1504.434854][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[ 1504.437942][   T35]  ? netlink_sendmsg+0x650/0xb40
[ 1504.440061][   T35]  ? skb_put+0x11b/0x210
[ 1504.441871][   T35]  netlink_sendmsg+0x813/0xb40
[ 1504.443927][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1504.446192][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1504.451128][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1504.453378][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1504.455648][   T35]  __sys_sendto+0x672/0x710
[ 1504.458137][   T35]  ? __pfx___sys_sendto+0x10/0x10
[ 1504.459975][   T35]  ? exc_page_fault+0x6a/0xc0
[ 1504.461496][   T35]  ? do_user_addr_fault+0xc6f/0x1340
[ 1504.463441][   T35]  __x64_sys_sendto+0xde/0x100
[ 1504.465136][   T35]  do_syscall_64+0x14d/0xf80
[ 1504.466651][   T35]  ? trace_irq_disable+0x3b/0x150
[ 1504.468740][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.470749][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.473178][   T35] RIP: 0033:0x7f15c8b5cfce
[ 1504.475036][   T35] RSP: 002b:00007f15c9a7ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1504.479247][   T35] RAX: ffffffffffffffda RBX: 00007f15c9a7e6c0 RCX: 00007f15c8b5cfce
[ 1504.482435][   T35] RDX: 0000000000000020 RSI: 00007f15c9a7d000 RDI: 000000000000000b
[ 1504.485751][   T35] RBP: 0000000000000000 R08: 00007f15c9a7cf04 R09: 000000000000000c
[ 1504.489495][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b
[ 1504.492698][   T35] R13: 00007f15c9a7cf58 R14: 00007f15c9a7d000 R15: 0000000000000000
[ 1504.495662][   T35]  </TASK>
[ 1504.497433][   T35] INFO: task syz.0.18286:10550 blocked for more than 143 seconds.
[ 1504.500310][   T35]       Not tainted syzkaller #0
[ 1504.502264][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1504.505657][   T35] task:syz.0.18286     state:D stack:25856 pid:10550 tgid:10549 ppid:5803   task_flags:0x480140 flags:0x00080002
[ 1504.510881][   T35] Call Trace:
[ 1504.512139][   T35]  <TASK>
[ 1504.513269][   T35]  __schedule+0x1585/0x5340
[ 1504.514983][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1504.517693][   T35]  ? __pfx___schedule+0x10/0x10
[ 1504.519750][   T35]  ? schedule+0x90/0x360
[ 1504.521452][   T35]  schedule+0x164/0x360
[ 1504.523212][   T35]  blk_mq_freeze_queue_wait+0x101/0x180
[ 1504.525526][   T35]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[ 1504.528491][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1504.531226][   T35]  queue_limits_commit_update_frozen+0x55/0xd0
[ 1504.533831][   T35]  nbd_set_size+0x454/0x680
[ 1504.535790][   T35]  ? __pfx_nbd_set_size+0x10/0x10
[ 1504.538784][   T35]  ? nla_memcpy+0x5b/0xc0
[ 1504.556449][   T35]  nbd_genl_reconfigure+0x7f5/0x1ea0
[ 1504.559063][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[ 1504.561089][   T35]  ? rcu_is_watching+0x15/0xb0
[ 1504.562973][   T35]  ? trace_kmalloc+0x2a/0x110
[ 1504.564843][   T35]  ? __nla_parse+0x40/0x60
[ 1504.566560][   T35]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1504.572750][   T35]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1504.574506][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1504.576473][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1504.578599][   T35]  genl_rcv_msg+0x61c/0x7a0
[ 1504.579972][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1504.581523][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[ 1504.583579][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1504.585421][   T35]  netlink_rcv_skb+0x232/0x4b0
[ 1504.587693][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1504.589327][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1504.591181][   T35]  ? down_read+0x272/0x2e0
[ 1504.592898][   T35]  ? genl_rcv+0xd/0x40
[ 1504.594279][   T35]  genl_rcv+0x28/0x40
[ 1504.595902][   T35]  netlink_unicast+0x80f/0x9b0
[ 1504.598028][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[ 1504.599772][   T35]  ? netlink_sendmsg+0x650/0xb40
[ 1504.601323][   T35]  ? skb_put+0x11b/0x210
[ 1504.602786][   T35]  netlink_sendmsg+0x813/0xb40
[ 1504.604253][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1504.605879][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1504.608322][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1504.610024][   T35]  ____sys_sendmsg+0x972/0x9f0
[ 1504.611554][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1504.613521][   T35]  ? import_iovec+0x73/0xa0
[ 1504.615132][   T35]  ___sys_sendmsg+0x2a5/0x360
[ 1504.617391][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1504.619183][   T35]  ? futex_wake+0x4ac/0x580
[ 1504.620772][   T35]  ? __fget_files+0x2a/0x420
[ 1504.622606][   T35]  ? __fget_files+0x3a0/0x420
[ 1504.624482][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1504.626318][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1504.628558][   T35]  ? rcu_is_watching+0x15/0xb0
[ 1504.630123][   T35]  do_syscall_64+0x14d/0xf80
[ 1504.631809][   T35]  ? trace_irq_disable+0x3b/0x150
[ 1504.633581][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.635706][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.638196][   T35] RIP: 0033:0x7f6c2b59c799
[ 1504.639646][   T35] RSP: 002b:00007f6c2c382028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1504.642540][   T35] RAX: ffffffffffffffda RBX: 00007f6c2b815fa0 RCX: 00007f6c2b59c799
[ 1504.645166][   T35] RDX: 0000000000028080 RSI: 0000200000000640 RDI: 0000000000000007
[ 1504.648445][   T35] RBP: 00007f6c2b632bd9 R08: 0000000000000000 R09: 0000000000000000
[ 1504.651025][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1504.653495][   T35] R13: 00007f6c2b816038 R14: 00007f6c2b815fa0 R15: 00007ffc7b5727e8
[ 1504.656628][   T35]  </TASK>
[ 1504.658164][   T35] INFO: task syz.1.18288:10561 blocked for more than 143 seconds.
[ 1504.660700][   T35]       Not tainted syzkaller #0
[ 1504.662410][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1504.665238][   T35] task:syz.1.18288     state:D stack:27328 pid:10561 tgid:10560 ppid:5807   task_flags:0x400140 flags:0x00080002
[ 1504.669569][   T35] Call Trace:
[ 1504.670741][   T35]  <TASK>
[ 1504.671940][   T35]  __schedule+0x1585/0x5340
[ 1504.673473][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1504.675029][   T35]  ? __pfx___schedule+0x10/0x10
[ 1504.676620][   T35]  ? schedule+0x90/0x360
[ 1504.678288][   T35]  schedule+0x164/0x360
[ 1504.679605][   T35]  schedule_preempt_disabled+0x13/0x30
[ 1504.681453][   T35]  __mutex_lock+0x7fe/0x1300
[ 1504.683139][   T35]  ? is_bpf_text_address+0x26/0x2b0
[ 1504.685147][   T35]  ? __mutex_lock+0x5ac/0x1300
[ 1504.687603][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[ 1504.689471][   T35]  ? __pfx___mutex_lock+0x10/0x10
[ 1504.691484][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1504.693424][   T35]  ? radix_tree_lookup+0x240/0x290
[ 1504.695218][   T35]  genl_rcv_msg+0x10b/0x7a0
[ 1504.697171][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1504.699166][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1504.700834][   T35]  netlink_rcv_skb+0x232/0x4b0
[ 1504.702565][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1504.704197][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1504.705854][   T35]  ? down_read+0x272/0x2e0
[ 1504.707812][   T35]  ? genl_rcv+0xd/0x40
[ 1504.709382][   T35]  genl_rcv+0x28/0x40
[ 1504.710717][   T35]  netlink_unicast+0x80f/0x9b0
[ 1504.712223][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[ 1504.713936][   T35]  ? netlink_sendmsg+0x650/0xb40
[ 1504.715591][   T35]  ? skb_put+0x11b/0x210
[ 1504.717283][   T35]  netlink_sendmsg+0x813/0xb40
[ 1504.718912][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1504.720870][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1504.722847][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1504.724426][   T35]  ____sys_sendmsg+0x972/0x9f0
[ 1504.725974][   T35]  ? futex_unqueue+0x211/0x240
[ 1504.728021][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1504.729933][   T35]  ? import_iovec+0x73/0xa0
[ 1504.731432][   T35]  ___sys_sendmsg+0x2a5/0x360
[ 1504.733010][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1504.734777][   T35]  ? futex_wait+0x29a/0x380
[ 1504.736423][   T35]  ? __fget_files+0x2a/0x420
[ 1504.738183][   T35]  ? __fget_files+0x3a0/0x420
[ 1504.739801][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1504.741478][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1504.743376][   T35]  do_syscall_64+0x14d/0xf80
[ 1504.745201][   T35]  ? trace_irq_disable+0x3b/0x150
[ 1504.747407][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.749393][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.751603][   T35] RIP: 0033:0x7f72d6b9c799
[ 1504.753099][   T35] RSP: 002b:00007f72d7af9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1504.755836][   T35] RAX: ffffffffffffffda RBX: 00007f72d6e15fa0 RCX: 00007f72d6b9c799
[ 1504.758626][   T35] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000004
[ 1504.761252][   T35] RBP: 00007f72d6c32bd9 R08: 0000000000000000 R09: 0000000000000000
[ 1504.763989][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1504.768381][   T35] R13: 00007f72d6e16038 R14: 00007f72d6e15fa0 R15: 00007ffca9cd18b8
[ 1504.771576][   T35]  </TASK>
[ 1504.772859][   T35] INFO: task syz.1.18288:10564 blocked for more than 143 seconds.
[ 1504.775438][   T35]       Not tainted syzkaller #0
[ 1504.777472][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1504.780941][   T35] task:syz.1.18288     state:D stack:27840 pid:10564 tgid:10560 ppid:5807   task_flags:0x400040 flags:0x00080002
[ 1504.785033][   T35] Call Trace:
[ 1504.786342][   T35]  <TASK>
[ 1504.787943][   T35]  __schedule+0x1585/0x5340
[ 1504.789707][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1504.791512][   T35]  ? __pfx___schedule+0x10/0x10
[ 1504.793234][   T35]  ? schedule+0x90/0x360
[ 1504.794596][   T35]  schedule+0x164/0x360
[ 1504.795977][   T35]  schedule_preempt_disabled+0x13/0x30
[ 1504.797918][   T35]  __mutex_lock+0x7fe/0x1300
[ 1504.799475][   T35]  ? is_bpf_text_address+0x26/0x2b0
[ 1504.801127][   T35]  ? __mutex_lock+0x5ac/0x1300
[ 1504.802652][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[ 1504.804133][   T35]  ? __pfx___mutex_lock+0x10/0x10
[ 1504.805773][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1504.807934][   T35]  ? radix_tree_lookup+0x240/0x290
[ 1504.809649][   T35]  genl_rcv_msg+0x10b/0x7a0
[ 1504.811395][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1504.813293][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1504.815028][   T35]  netlink_rcv_skb+0x232/0x4b0
[ 1504.817089][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1504.819080][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1504.820845][   T35]  ? down_read+0x272/0x2e0
[ 1504.822265][   T35]  ? genl_rcv+0xd/0x40
[ 1504.823567][   T35]  genl_rcv+0x28/0x40
[ 1504.824920][   T35]  netlink_unicast+0x80f/0x9b0
[ 1504.827213][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[ 1504.829123][   T35]  ? netlink_sendmsg+0x650/0xb40
[ 1504.830801][   T35]  ? skb_put+0x11b/0x210
[ 1504.832294][   T35]  netlink_sendmsg+0x813/0xb40
[ 1504.833816][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1504.835647][   T35]  ? __se_sys_ioctl+0x47/0x170
[ 1504.837602][   T35]  ? do_syscall_64+0x14d/0xf80
[ 1504.839288][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1504.840869][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1504.842513][   T35]  ____sys_sendmsg+0x972/0x9f0
[ 1504.844046][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1504.845732][   T35]  ? import_iovec+0x73/0xa0
[ 1504.848468][   T35]  ___sys_sendmsg+0x2a5/0x360
[ 1504.850464][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1504.852093][   T35]  ? tomoyo_path_number_perm+0x219/0x630
[ 1504.853858][   T35]  ? __fget_files+0x2a/0x420
[ 1504.855402][   T35]  ? __fget_files+0x3a0/0x420
[ 1504.857296][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1504.859040][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1504.860753][   T35]  ? rcu_is_watching+0x15/0xb0
[ 1504.862289][   T35]  ? __pfx_kcov_ioctl+0x10/0x10
[ 1504.863818][   T35]  do_syscall_64+0x14d/0xf80
[ 1504.865286][   T35]  ? trace_irq_disable+0x3b/0x150
[ 1504.867254][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.869307][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.871262][   T35] RIP: 0033:0x7f72d6b9c799
[ 1504.872734][   T35] RSP: 002b:00007f72d7ad8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1504.875366][   T35] RAX: ffffffffffffffda RBX: 00007f72d6e16090 RCX: 00007f72d6b9c799
[ 1504.878096][   T35] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000004
[ 1504.880766][   T35] RBP: 00007f72d6c32bd9 R08: 0000000000000000 R09: 0000000000000000
[ 1504.883330][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1504.886319][   T35] R13: 00007f72d6e16128 R14: 00007f72d6e16090 R15: 00007ffca9cd18b8
[ 1504.889340][   T35]  </TASK>
[ 1504.890443][   T35] INFO: task syz.1.18288:10565 blocked for more than 143 seconds.
[ 1504.892825][   T35]       Not tainted syzkaller #0
[ 1504.894386][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1504.898984][   T35] task:syz.1.18288     state:D stack:28648 pid:10565 tgid:10560 ppid:5807   task_flags:0x400040 flags:0x00080002
[ 1504.902683][   T35] Call Trace:
[ 1504.903804][   T35]  <TASK>
[ 1504.904799][   T35]  __schedule+0x1585/0x5340
[ 1504.906330][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1504.908539][   T35]  ? __pfx___schedule+0x10/0x10
[ 1504.910365][   T35]  ? schedule+0x90/0x360
[ 1504.911941][   T35]  schedule+0x164/0x360
[ 1504.913293][   T35]  schedule_preempt_disabled+0x13/0x30
[ 1504.915065][   T35]  __mutex_lock+0x7fe/0x1300
[ 1504.917607][   T35]  ? is_bpf_text_address+0x26/0x2b0
[ 1504.919352][   T35]  ? __mutex_lock+0x5ac/0x1300
[ 1504.920923][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[ 1504.922399][   T35]  ? __pfx___mutex_lock+0x10/0x10
[ 1504.923995][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1504.925560][   T35]  ? radix_tree_lookup+0x240/0x290
[ 1504.928139][   T35]  genl_rcv_msg+0x10b/0x7a0
[ 1504.929693][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1504.931355][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1504.933038][   T35]  netlink_rcv_skb+0x232/0x4b0
[ 1504.934608][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1504.936270][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1504.938577][   T35]  ? down_read+0x272/0x2e0
[ 1504.940347][   T35]  ? genl_rcv+0xd/0x40
[ 1504.941899][   T35]  genl_rcv+0x28/0x40
[ 1504.943224][   T35]  netlink_unicast+0x80f/0x9b0
[ 1504.944865][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[ 1504.946586][   T35]  ? netlink_sendmsg+0x650/0xb40
[ 1504.949090][   T35]  ? skb_put+0x11b/0x210
[ 1504.950459][   T35]  netlink_sendmsg+0x813/0xb40
[ 1504.951971][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1504.953625][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1504.955236][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1504.957498][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1504.959342][   T35]  __sys_sendto+0x672/0x710
[ 1504.961031][   T35]  ? __pfx___sys_sendto+0x10/0x10
[ 1504.962655][   T35]  ? exc_page_fault+0x6a/0xc0
[ 1504.964187][   T35]  ? do_user_addr_fault+0xc6f/0x1340
[ 1504.965862][   T35]  __x64_sys_sendto+0xde/0x100
[ 1504.967853][   T35]  do_syscall_64+0x14d/0xf80
[ 1504.969447][   T35]  ? trace_irq_disable+0x3b/0x150
[ 1504.971033][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.972939][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.974773][   T35] RIP: 0033:0x7f72d6b5cfce
[ 1504.976238][   T35] RSP: 002b:00007f72d7ab5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1504.979268][   T35] RAX: ffffffffffffffda RBX: 00007f72d7ab76c0 RCX: 00007f72d6b5cfce
[ 1504.982020][   T35] RDX: 0000000000000020 RSI: 00007f72d7ab6000 RDI: 0000000000000004
[ 1504.984530][   T35] RBP: 0000000000000000 R08: 00007f72d7ab5f04 R09: 000000000000000c
[ 1504.987381][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1504.989938][   T35] R13: 00007f72d7ab5f58 R14: 00007f72d7ab6000 R15: 0000000000000000
[ 1504.992592][   T35]  </TASK>
[ 1504.993703][   T35] 
[ 1504.993703][   T35] Showing all locks held in the system:
[ 1504.996249][   T35] 1 lock held by khungtaskd/35:
[ 1504.998397][   T35]  #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1505.001778][   T35] 2 locks held by getty/5632:
[ 1505.003440][   T35]  #0: ffff88810efac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1505.007545][   T35]  #1: ffffc9000356b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 1505.011395][   T35] 1 lock held by udevd/6863:
[ 1505.013060][   T35]  #0: ffff888061428358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[ 1505.016070][   T35] 2 locks held by syz.2.18285/10548:
[ 1505.018152][   T35]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1505.021194][   T35]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1505.024105][   T35] 6 locks held by syz.0.18286/10550:
[ 1505.025747][   T35]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1505.029007][   T35]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1505.032411][   T35]  #2: ffff888054d09278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[ 1505.036209][   T35]  #3: ffff888103f96f98 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[ 1505.039392][   T35]  #4: ffff888103f96938 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[ 1505.043353][   T35]  #5: ffff888103f96970 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[ 1505.047756][   T35] 2 locks held by syz.1.18288/10561:
[ 1505.049438][   T35]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1505.051965][   T35]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1505.054743][   T35] 2 locks held by syz.1.18288/10564:
[ 1505.056426][   T35]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1505.059299][   T35]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1505.062309][   T35] 2 locks held by syz.1.18288/10565:
[ 1505.063933][   T35]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1505.066503][   T35]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1505.069650][   T35] 2 locks held by syz-executor/10570:
[ 1505.071378][   T35]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1505.074052][   T35]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1505.077250][   T35] 2 locks held by syz-executor/10573:
[ 1505.079009][   T35]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1505.081547][   T35]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1505.084380][   T35] 2 locks held by syz-executor/10576:
[ 1505.086154][   T35]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1505.090851][   T35]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1505.094082][   T35] 2 locks held by syz-executor/10607:
[ 1505.095883][   T35]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1505.098922][   T35]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1505.101855][   T35] 2 locks held by syz-executor/10617:
[ 1505.103974][   T35]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1505.107918][   T35]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1505.110935][   T35] 2 locks held by syz-executor/10619:
[ 1505.112968][   T35]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1505.116039][   T35]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1505.120048][   T35] 2 locks held by syz-executor/10636:
[ 1505.121858][   T35]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1505.124596][   T35]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1505.127809][   T35] 2 locks held by syz-executor/10646:
[ 1505.129532][   T35]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1505.132225][   T35]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1505.135340][   T35] 2 locks held by syz-executor/10648:
[ 1505.137351][   T35]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1505.140102][   T35]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1505.143582][   T35] 
[ 1505.144584][   T35] =============================================
[ 1505.144584][   T35] 
[ 1505.148368][   T35] NMI backtrace for cpu 1
[ 1505.148378][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1505.148387][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1505.148392][   T35] Call Trace:
[ 1505.148395][   T35]  <TASK>
[ 1505.148399][   T35]  dump_stack_lvl+0xe8/0x150
[ 1505.148413][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[ 1505.148424][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1505.148434][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1505.148444][   T35]  sys_info+0x135/0x170
[ 1505.148451][   T35]  watchdog+0xfd9/0x1030
[ 1505.148464][   T35]  ? watchdog+0x21a/0x1030
[ 1505.148476][   T35]  kthread+0x388/0x470
[ 1505.148484][   T35]  ? __pfx_watchdog+0x10/0x10
[ 1505.148493][   T35]  ? __pfx_kthread+0x10/0x10
[ 1505.148500][   T35]  ret_from_fork+0x51e/0xb90
[ 1505.148511][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[ 1505.148519][   T35]  ? __switch_to+0xc7d/0x1450
[ 1505.148529][   T35]  ? __pfx_kthread+0x10/0x10
[ 1505.148536][   T35]  ret_from_fork_asm+0x1a/0x30
[ 1505.148551][   T35]  </TASK>
[ 1505.148554][   T35] Sending NMI from CPU 1 to CPUs 0:
[ 1505.193210][    C0] NMI backtrace for cpu 0
[ 1505.193224][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1505.193232][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1505.193237][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1505.193252][    C0] Code: 6e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 43 0d 1c 00 fb f4 <e9> 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1505.193258][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000206
[ 1505.193266][    C0] RAX: 0000000000c65553 RBX: ffffffff819a80dd RCX: 0000000080000001
[ 1505.193271][    C0] RDX: 0000000000000001 RSI: ffffffff8def2dd5 RDI: ffffffff8c27aa00
[ 1505.193276][    C0] RBP: ffffffff8e407eb0 R08: ffff88812103395b R09: 1ffff1102420672b
[ 1505.193281][    C0] R10: dffffc0000000000 R11: ffffed102420672c R12: ffffffff901186b0
[ 1505.193285][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000
[ 1505.193290][    C0] FS:  0000000000000000(0000) GS:ffff88818de64000(0000) knlGS:0000000000000000
[ 1505.193295][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1505.193306][    C0] CR2: 0000556300e77598 CR3: 0000000112738000 CR4: 00000000000006f0
[ 1505.193336][    C0] Call Trace:
[ 1505.193344][    C0]  <TASK>
[ 1505.193348][    C0]  default_idle+0x9/0x20
[ 1505.193356][    C0]  default_idle_call+0x72/0xb0
[ 1505.193365][    C0]  do_idle+0x1bd/0x500
[ 1505.193375][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1505.193385][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1505.193395][    C0]  cpu_startup_entry+0x43/0x60
[ 1505.193404][    C0]  rest_init+0x2de/0x300
[ 1505.193411][    C0]  start_kernel+0x385/0x3d0
[ 1505.193423][    C0]  x86_64_start_reservations+0x24/0x30
[ 1505.193431][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1505.193438][    C0]  common_startup_64+0x13e/0x147
[ 1505.193449][    C0]  </TASK>
[ 1505.259462][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[ 1505.261616][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1505.264590][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1505.268020][   T35] Call Trace:
[ 1505.269106][   T35]  <TASK>
[ 1505.270062][   T35]  vpanic+0x56c/0xa60
[ 1505.271355][   T35]  ? __pfx___schedule+0x10/0x10
[ 1505.272855][   T35]  ? __pfx_vpanic+0x10/0x10
[ 1505.274280][   T35]  ? __pfx_console_unlock+0x10/0x10
[ 1505.276012][   T35]  panic+0xc5/0xd0
[ 1505.277257][   T35]  ? __pfx_panic+0x10/0x10
[ 1505.278820][   T35]  ? preempt_schedule_thunk+0x16/0x30
[ 1505.281037][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1505.283089][   T35]  watchdog+0x1023/0x1030
[ 1505.284494][   T35]  ? watchdog+0x21a/0x1030
[ 1505.286130][   T35]  kthread+0x388/0x470
[ 1505.287895][   T35]  ? __pfx_watchdog+0x10/0x10
[ 1505.289871][   T35]  ? __pfx_kthread+0x10/0x10
[ 1505.291828][   T35]  ret_from_fork+0x51e/0xb90
[ 1505.293765][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[ 1505.295908][   T35]  ? __switch_to+0xc7d/0x1450
[ 1505.297752][   T35]  ? __pfx_kthread+0x10/0x10
[ 1505.299470][   T35]  ret_from_fork_asm+0x1a/0x30
[ 1505.301200][   T35]  </TASK>
[ 1505.302984][   T35] Kernel Offset: disabled
[ 1505.304684][   T35] Rebooting in 86400 seconds..
