last executing test programs:

1m24.290115988s ago: executing program 2 (id=6870):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x61, 0x0, 0x0)

1m24.230835365s ago: executing program 2 (id=6871):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

1m24.230117935s ago: executing program 2 (id=6872):
syz_emit_ethernet(0xa2, &(0x7f00000008c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x6c, 0x11, 0x0, @remote, @local, {[@hopopts={0x2c}], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0)

1m24.170988381s ago: executing program 2 (id=6874):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001840)=ANY=[@ANYBLOB="680200000005010400000000000000000e000008540201000100000033"], 0x268}, 0x1, 0x0, 0x0, 0x15}, 0x4000800)

1m24.170748216s ago: executing program 2 (id=6875):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x30044889)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500002b"], 0x0)
sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

1m24.117302982s ago: executing program 2 (id=6877):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000), 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b04000000000000000002000000580004802400076e3cc2186cc67f636b65740001140002800800024000000003080001400000000230000180080001006e61740024000280084eba424e4a4ffa8700024000000002080001400000000108000740000000580900010073797a30cc396dbc4b64efd9000000000900020073797a3200000000140000001100010000000000000000000000000acc36a6601dd484fe33115b445015e6e6508e9d43746918e6e809000000000000006743e6"], 0xac}}, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000000)={0x7, &(0x7f0000000300)=[{}, {}, {@none}, {}, {}, {@fixed}, {@fixed}]})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x8040)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000000d14040029bd0100fcefdf56a9533429841e5897fe0fd389941225"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'veth0_to_bridge\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @empty, @val={@void}, {@ipv4={0x6000, @tipc={{0x5, 0x4, 0x0, 0x1, 0x40, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xb}, 0x0, 0x2}}}}}}}}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80001, {0x0, 0x0, 0x0, r12, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x703}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)

1m9.423560156s ago: executing program 0 (id=7141):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x2}]}, 0x30}}, 0x0)

1m9.41872051s ago: executing program 0 (id=7143):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x6}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x16}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x20040054)

1m9.257780288s ago: executing program 0 (id=7148):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8)
sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000d40)="b2", 0x1}], 0x1}}], 0x1, 0x4004844)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)={0x0, 0xb76}, &(0x7f00000003c0)=0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)

1m9.127556363s ago: executing program 32 (id=6877):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000), 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b04000000000000000002000000580004802400076e3cc2186cc67f636b65740001140002800800024000000003080001400000000230000180080001006e61740024000280084eba424e4a4ffa8700024000000002080001400000000108000740000000580900010073797a30cc396dbc4b64efd9000000000900020073797a3200000000140000001100010000000000000000000000000acc36a6601dd484fe33115b445015e6e6508e9d43746918e6e809000000000000006743e6"], 0xac}}, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000000)={0x7, &(0x7f0000000300)=[{}, {}, {@none}, {}, {}, {@fixed}, {@fixed}]})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x8040)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000000d14040029bd0100fcefdf56a9533429841e5897fe0fd389941225"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'veth0_to_bridge\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @empty, @val={@void}, {@ipv4={0x6000, @tipc={{0x5, 0x4, 0x0, 0x1, 0x40, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xb}, 0x0, 0x2}}}}}}}}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80001, {0x0, 0x0, 0x0, r12, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x703}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)

1m9.080017597s ago: executing program 0 (id=7153):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a7260180", @ANYRES32], 0x26c0}}, 0x4010)

1m9.040203704s ago: executing program 0 (id=7154):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="2d000000010001", 0x7)

1m8.97974193s ago: executing program 0 (id=7155):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b70200000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d699b89e890c10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b95060000009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079227e98cc07c09c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b9267aa0b28d69a74ffdea613e892f0f9ff9468e4cb6dd65fd7bf3124702c6b1c2aea53ee0cb83ff180aa18b625d1667459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd1778b0838100000031d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9495635a9fca19d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da21f6f57020dd4f1f4f15edd7a0b1e24c6f79e3ea72a29c7928f000000006c5c8dddea685405273c7967d2c1a14efe0d53cb4b95a1ed7203000000ed52e5c08822cdcf2bc058ff9aab481926312fc7c88b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c8b10ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e40891"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

53.882816204s ago: executing program 33 (id=7155):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

43.119491119s ago: executing program 3 (id=7606):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004)

43.03720157s ago: executing program 3 (id=7607):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x65bf, 0x6, 0x4, 0x1, 0xffffffff}, 0x50)

43.036819964s ago: executing program 3 (id=7609):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0)
shutdown(r1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1d, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe5", &(0x7f0000000180)=""/114, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x8000}, 0x50)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r3, 0x107, 0xb, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
write(r2, &(0x7f0000000040)="05000000010000", 0x7)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)

42.897041658s ago: executing program 3 (id=7613):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0xfe97, [{0x40105, 0x1, 0x5}], 'M6U'}, @datasec={0x7, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}, {0x0, [0x61, 0x2e, 0x61]}}, &(0x7f0000001b00)=""/3, 0x45, 0x3, 0x1, 0x5}, 0x28)

42.811544079s ago: executing program 3 (id=7617):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8404)

42.719887025s ago: executing program 3 (id=7619):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f00000001c0)={'gre0\x00', <r0=>0x0, 0x80, 0x8000, 0x3, 0x3, {{0xc, 0x4, 0x0, 0x7, 0x30, 0x67, 0x0, 0x5f, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x14, 0x44, 0x0, 0x0, [0x12a6, 0x4, 0x3, 0x3]}, @ssrr={0x89, 0x7, 0x72, [@multicast2]}, @noop]}}}}})
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xf)
unshare(0x6a040000)
socketpair(0x8, 0x100000005, 0x0, &(0x7f0000000100))

27.739215893s ago: executing program 34 (id=7619):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f00000001c0)={'gre0\x00', <r0=>0x0, 0x80, 0x8000, 0x3, 0x3, {{0xc, 0x4, 0x0, 0x7, 0x30, 0x67, 0x0, 0x5f, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x14, 0x44, 0x0, 0x0, [0x12a6, 0x4, 0x3, 0x3]}, @ssrr={0x89, 0x7, 0x72, [@multicast2]}, @noop]}}}}})
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xf)
unshare(0x6a040000)
socketpair(0x8, 0x100000005, 0x0, &(0x7f0000000100))

16.832861594s ago: executing program 4 (id=8032):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

16.832458552s ago: executing program 4 (id=8034):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

16.721070723s ago: executing program 4 (id=8039):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x4}]}, {0x0, [0x30, 0x30, 0x5f, 0x61, 0x3e]}}, 0x0, 0x2b, 0x0, 0x1, 0x3}, 0x28)

16.648083345s ago: executing program 4 (id=8041):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000840)={0x24e, 0x8, 0x1, 0x5, 0x1, 0x4, 0xc, 0x7, r2}, 0x20)

16.647893097s ago: executing program 1 (id=8042):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)

16.647602805s ago: executing program 1 (id=8043):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0xfffffffffffffffe, {0x0, 0x1}}, 0x18)
bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x2, {0x1, 0xfe, 0x4}, 0x1}, 0x18)

16.647255332s ago: executing program 4 (id=8044):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000ec0)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9)

16.572849631s ago: executing program 4 (id=8046):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xe)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4001}, 0x4000800)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x20, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x4}, {0x0, 0x5}}}, 0x24}}, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000008bc0)=[{{&(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}}, {{&(0x7f0000003440)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000005880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}], 0x18}}], 0x2, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="2f0429bd7000fbdbdf25030000000c0002000700000000000000080001000000000005000a00ff000000400007800c0001"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)

16.572670449s ago: executing program 1 (id=8047):
syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)

16.524494632s ago: executing program 1 (id=8049):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

16.443565399s ago: executing program 1 (id=8050):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd700000000000647262675f70725f686d61635f736861333834"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)

16.442958045s ago: executing program 1 (id=8052):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0)

16.375177367s ago: executing program 5 (id=8054):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

16.026250404s ago: executing program 5 (id=8055):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r0, r0, 0x37, 0x2028, 0x4}, 0x20)

15.944841521s ago: executing program 5 (id=8056):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4)

15.944404178s ago: executing program 5 (id=8057):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)

15.874153651s ago: executing program 5 (id=8058):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x70bd2c, 0x25dfdbfc, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x20, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x5, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in6=@local}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

15.87392632s ago: executing program 5 (id=8059):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4180)

1.004224717s ago: executing program 35 (id=8046):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xe)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4001}, 0x4000800)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x20, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x4}, {0x0, 0x5}}}, 0x24}}, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000008bc0)=[{{&(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}}, {{&(0x7f0000003440)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000005880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}], 0x18}}], 0x2, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="2f0429bd7000fbdbdf25030000000c0002000700000000000000080001000000000005000a00ff000000400007800c0001"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)

961.91134ms ago: executing program 36 (id=8052):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0)

0s ago: executing program 37 (id=8059):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4180)

kernel console output (not intermixed with test programs):

7185] wg1 speed is unknown, defaulting to 1000
[  267.220005][T17199] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.443119][T17213] sock: sock_timestamping_bind_phc: sock not bind to device
[  267.492015][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4862'.
[  267.641150][T17226] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4865'.
[  267.764332][T17238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4869'.
[  268.016639][T17256] v: renamed from ip6_vti0 (while UP)
[  268.394461][T17283] wg1 speed is unknown, defaulting to 1000
[  268.776056][T17318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.811498][T17318] syzkaller0: entered promiscuous mode
[  268.813255][T17318] syzkaller0: entered allmulticast mode
[  268.815381][T17318] tipc: Resetting bearer <eth:syzkaller0>
[  268.831045][T17317] tipc: Resetting bearer <eth:syzkaller0>
[  268.886910][T17332] __nla_validate_parse: 3 callbacks suppressed
[  268.886930][T17332] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4913'.
[  269.732435][T17338] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4916'.
[  270.009609][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4921'.
[  270.282809][T17317] tipc: Disabling bearer <eth:syzkaller0>
[  270.373686][T17350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4922'.
[  271.154043][T17395] netlink: 'syz.0.4943': attribute type 6 has an invalid length.
[  271.173213][T17395] netlink: 'syz.0.4943': attribute type 12 has an invalid length.
[  271.176238][T17395] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4943'.
[  271.270231][T17397] wg1 speed is unknown, defaulting to 1000
[  271.441400][T17400] netlink: 'syz.0.4944': attribute type 33 has an invalid length.
[  271.444850][T17400] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4944'.
[  271.575204][T17416] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4950'.
[  271.671641][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4955'.
[  271.806883][T17439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4962'.
[  271.826677][T17436] wg1 speed is unknown, defaulting to 1000
[  272.559651][T17496] pimreg: entered allmulticast mode
[  272.563337][T17496] dvmrp0: left allmulticast mode
[  272.565435][T17496] pimreg: left allmulticast mode
[  272.591425][T17498] netlink: 'syz.2.4989': attribute type 29 has an invalid length.
[  272.595337][T17498] netlink: 'syz.2.4989': attribute type 29 has an invalid length.
[  272.598843][T17498] netlink: 'syz.2.4989': attribute type 29 has an invalid length.
[  272.602119][T17498] netlink: 'syz.2.4989': attribute type 29 has an invalid length.
[  272.605479][T17498] netlink: 'syz.2.4989': attribute type 29 has an invalid length.
[  272.611170][T17498] netlink: 'syz.2.4989': attribute type 29 has an invalid length.
[  272.614478][T17498] netlink: 'syz.2.4989': attribute type 29 has an invalid length.
[  272.619769][T17498] netlink: 'syz.2.4989': attribute type 29 has an invalid length.
[  272.631352][T17498] netlink: 'syz.2.4989': attribute type 29 has an invalid length.
[  272.634671][T17498] netlink: 'syz.2.4989': attribute type 29 has an invalid length.
[  272.696892][T17504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4992'.
[  273.075462][T17534] openvswitch: netlink: ct_state flags 7fffffff unsupported
[  273.809567][T17602] pim6reg99999999: entered allmulticast mode
[  273.876968][T17610] openvswitch: netlink: IPv4 tun info is not correct
[  273.934099][T17609] wg1 speed is unknown, defaulting to 1000
[  273.970469][T17617] __nla_validate_parse: 8 callbacks suppressed
[  273.970484][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5042'.
[  274.041625][T17609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5038'.
[  274.251507][T17635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5047'.
[  274.255136][T17635] netdevsim0: renamed from gre0 (while UP)
[  274.265015][T17635] netdevsim0: entered promiscuous mode
[  274.531793][T17667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.696014][T17681] bridge8: entered promiscuous mode
[  275.802886][T17742] ip6gre0: entered allmulticast mode
[  275.974319][T17748] wg1 speed is unknown, defaulting to 1000
[  276.085662][T17757] lo speed is unknown, defaulting to 1000
[  276.088956][T17757] lo speed is unknown, defaulting to 1000
[  276.093850][T17757] lo speed is unknown, defaulting to 1000
[  276.114799][T17757] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  276.185618][T17757] lo speed is unknown, defaulting to 1000
[  276.190217][T17757] lo speed is unknown, defaulting to 1000
[  276.194453][T17757] lo speed is unknown, defaulting to 1000
[  276.374906][ T5918] lo speed is unknown, defaulting to 1000
[  276.374985][ T5876] lo speed is unknown, defaulting to 1000
[  276.472338][T17779] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5111'.
[  276.476869][T17779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5111'.
[  276.506231][T17779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5111'.
[  276.975375][T17818] wg1 speed is unknown, defaulting to 1000
[  276.992347][T17818] lo speed is unknown, defaulting to 1000
[  277.580676][T17869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5143'.
[  277.601523][T17871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5144'.
[  277.606816][T17869] bond0: option coupled_control: invalid value (247)
[  277.802601][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5155'.
[  277.805580][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5155'.
[  278.074881][T17912] syzkaller1: entered promiscuous mode
[  278.080053][T17912] syzkaller1: entered allmulticast mode
[  278.618116][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  279.026216][T17944] __nla_validate_parse: 3 callbacks suppressed
[  279.026232][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5178'.
[  279.080355][T17948] validate_nla: 37 callbacks suppressed
[  279.080374][T17948] netlink: 'syz.2.5180': attribute type 1 has an invalid length.
[  279.122605][T17948] bond9: (slave geneve4): making interface the new active one
[  279.125478][T17948] bond9: (slave geneve4): Enslaving as an active interface with an up link
[  279.132463][T17946] pimreg: entered allmulticast mode
[  279.140129][ T5910] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  279.143688][ T5910] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  279.146667][ T5910] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  279.151036][ T5910] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  279.234376][T17957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.238751][T17957] syzkaller0: entered promiscuous mode
[  279.240993][T17957] syzkaller0: entered allmulticast mode
[  279.248254][T17957] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  279.261264][T17957] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  279.266635][T17957] tipc: Resetting bearer <eth:syzkaller0>
[  279.270725][T17956] tipc: Resetting bearer <eth:syzkaller0>
[  279.281516][T17960] sctp: [Deprecated]: syz.1.5184 (pid 17960) Use of struct sctp_assoc_value in delayed_ack socket option.
[  279.281516][T17960] Use struct sctp_sack_info instead
[  279.281802][T17956] tipc: Disabling bearer <eth:syzkaller0>
[  279.295749][T17959] syzkaller0: left promiscuous mode
[  279.535138][T17974] netlink: 'syz.0.5192': attribute type 9 has an invalid length.
[  280.605328][T18042] netlink: 'syz.2.5225': attribute type 1 has an invalid length.
[  280.608628][T18042] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5225'.
[  280.930272][T18065] netlink: 'syz.1.5235': attribute type 30 has an invalid length.
[  280.993645][T18072] bridge0: failed insert local address into bridge forwarding table
[  281.080048][T18079] netlink: 'syz.0.5243': attribute type 12 has an invalid length.
[  281.083807][T18079] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.5243'.
[  281.379171][T18105] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5254'.
[  281.565900][T18113] wg1 speed is unknown, defaulting to 1000
[  281.572794][T18113] lo speed is unknown, defaulting to 1000
[  282.003816][T18140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5269'.
[  282.071078][T18146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5273'.
[  282.075532][T18146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5273'.
[  282.388388][T18175] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5285'.
[  283.495299][T18213] netlink: 'syz.2.5302': attribute type 4 has an invalid length.
[  283.667383][T18220] nbd0: detected capacity change from 0 to 549764202496
[  283.678678][T18228] netlink: 'syz.2.5307': attribute type 8 has an invalid length.
[  283.710642][T18220] wg1 speed is unknown, defaulting to 1000
[  283.719975][T18220] lo speed is unknown, defaulting to 1000
[  283.807478][   T57] block nbd0: Receive control failed (result -104)
[  283.870774][T18240] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.880627][T18240] syzkaller0: entered promiscuous mode
[  284.139954][T18256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5319'.
[  284.145168][T18256] chnl_net:caif_netlink_parms(): no params data found
[  284.714746][T18283] netlink: 'syz.1.5332': attribute type 3 has an invalid length.
[  285.310633][T18307] netlink: 'syz.0.5341': attribute type 1 has an invalid length.
[  285.311038][T18308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5342'.
[  285.495151][T18321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5344'.
[  285.502212][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5344'.
[  285.540618][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5344'.
[  285.642013][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5350'.
[  286.575548][T18361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5364'.
[  286.578961][T18361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5364'.
[  286.923309][T18381] pim6reg1: entered promiscuous mode
[  286.925518][T18381] pim6reg1: entered allmulticast mode
[  287.031724][T18389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5378'.
[  287.134614][T18396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.150126][T18396] syzkaller0: entered promiscuous mode
[  287.152386][T18396] syzkaller0: entered allmulticast mode
[  287.220936][T18396] tipc: Resetting bearer <eth:syzkaller0>
[  287.225398][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.228913][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.237797][T18394] tipc: Resetting bearer <eth:syzkaller0>
[  287.256519][T18394] tipc: Disabling bearer <eth:syzkaller0>
[  287.641970][T18436] IPv6: NLM_F_REPLACE set, but no existing node found!
[  287.803811][T18442] bond8: (slave macvlan3): Releasing backup interface
[  287.838015][T18442] bond9: (slave geneve4): Releasing active interface
[  287.852191][T18443] syz.2.5403: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  287.859400][T18443] CPU: 1 UID: 0 PID: 18443 Comm: syz.2.5403 Not tainted syzkaller #0 PREEMPT(full) 
[  287.859424][T18443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.859435][T18443] Call Trace:
[  287.859443][T18443]  <TASK>
[  287.859452][T18443]  dump_stack_lvl+0x189/0x250
[  287.859482][T18443]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.859500][T18443]  ? __pfx__printk+0x10/0x10
[  287.859518][T18443]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  287.859534][T18443]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  287.859552][T18443]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  287.859603][T18443]  warn_alloc+0x214/0x310
[  287.859627][T18443]  ? stack_depot_save_flags+0x40/0x860
[  287.859650][T18443]  ? __pfx_warn_alloc+0x10/0x10
[  287.859671][T18443]  ? kasan_save_track+0x4f/0x80
[  287.859687][T18443]  ? xskq_create+0x56/0x170
[  287.859704][T18443]  ? xsk_init_queue+0xb0/0x110
[  287.859719][T18443]  ? xsk_setsockopt+0x4dc/0x8d0
[  287.859757][T18443]  ? do_sock_setsockopt+0x17c/0x1b0
[  287.859773][T18443]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  287.859786][T18443]  ? do_syscall_64+0xfa/0x3b0
[  287.859797][T18443]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.859820][T18443]  __vmalloc_node_range_noprof+0x125/0x12f0
[  287.859863][T18443]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  287.859886][T18443]  ? __kasan_kmalloc+0x93/0xb0
[  287.859916][T18443]  vmalloc_user_noprof+0xad/0xf0
[  287.859939][T18443]  ? xskq_create+0xbf/0x170
[  287.859961][T18443]  xskq_create+0xbf/0x170
[  287.859982][T18443]  xsk_init_queue+0xb0/0x110
[  287.859999][T18443]  xsk_setsockopt+0x4dc/0x8d0
[  287.860018][T18443]  ? __pfx_xsk_setsockopt+0x10/0x10
[  287.860032][T18443]  ? __pfx_aa_sk_perm+0x10/0x10
[  287.860056][T18443]  ? aa_sock_opt_perm+0xff/0x1b0
[  287.860073][T18443]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  287.860089][T18443]  ? __pfx_xsk_setsockopt+0x10/0x10
[  287.860110][T18443]  do_sock_setsockopt+0x17c/0x1b0
[  287.860129][T18443]  __x64_sys_setsockopt+0x13f/0x1b0
[  287.860149][T18443]  do_syscall_64+0xfa/0x3b0
[  287.860165][T18443]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.860188][T18443]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.860203][T18443]  ? exc_page_fault+0x9f/0xf0
[  287.860225][T18443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.860239][T18443] RIP: 0033:0x7fad4838eba9
[  287.860254][T18443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.860269][T18443] RSP: 002b:00007fad4926d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  287.860287][T18443] RAX: ffffffffffffffda RBX: 00007fad485d6090 RCX: 00007fad4838eba9
[  287.860297][T18443] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  287.860306][T18443] RBP: 00007fad48411e19 R08: 0000000000000004 R09: 0000000000000000
[  287.860314][T18443] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.860324][T18443] R13: 00007fad485d6128 R14: 00007fad485d6090 R15: 00007ffe0adf8bd8
[  287.860349][T18443]  </TASK>
[  287.860501][T18443] Mem-Info:
[  287.973193][T18443] active_anon:5591 inactive_anon:0 isolated_anon:0
[  287.973193][T18443]  active_file:1348 inactive_file:38329 isolated_file:0
[  287.973193][T18443]  unevictable:1768 dirty:217 writeback:0
[  287.973193][T18443]  slab_reclaimable:10542 slab_unreclaimable:88967
[  287.973193][T18443]  mapped:19176 shmem:2433 pagetables:919
[  287.973193][T18443]  sec_pagetables:0 bounce:0
[  287.973193][T18443]  kernel_misc_reclaimable:0
[  287.973193][T18443]  free:249736 free_pcp:24419 free_cma:0
[  287.975047][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  287.995794][T18443] Node 0 active_anon:11752kB inactive_anon:0kB active_file:3628kB inactive_file:20640kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40964kB dirty:824kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4980kB pagetables:2156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  288.008066][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  288.011317][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  288.014604][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  288.018068][T18443] Node 1 active_anon:10612kB inactive_anon:0kB active_file:1764kB inactive_file:132676kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35740kB dirty:44kB writeback:0kB shmem:4928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7120kB pagetables:1520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  288.030346][T18443] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  288.041834][T18443] lowmem_reserve[]: 0 811 811 811 811
[  288.044050][T18443] Node 0 DMA32 free:280044kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11752kB inactive_anon:0kB active_file:3628kB inactive_file:20640kB unevictable:3536kB writepending:824kB present:1556484kB managed:830904kB mlocked:0kB bounce:0kB free_pcp:45976kB local_pcp:16368kB free_cma:0kB
[  288.058762][T18443] lowmem_reserve[]: 0 0 0 0 0
[  288.060660][T18443] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  288.072891][T18443] lowmem_reserve[]: 0 0 854 854 854
[  288.075044][T18443] Node 1 Normal free:245048kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10612kB inactive_anon:0kB active_file:1764kB inactive_file:132676kB unevictable:3536kB writepending:44kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:51504kB local_pcp:30060kB free_cma:0kB
[  288.089339][T18443] lowmem_reserve[]: 0 0 0 0 0
[  288.091163][T18443] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  288.095650][T18443] Node 0 DMA32: 1323*4kB (UME) 612*8kB (UME) 322*16kB (UME) 312*32kB (UM) 186*64kB (UM) 143*128kB (UME) 89*256kB (UME) 24*512kB (UME) 17*1024kB (UME) 4*2048kB (M) 40*4096kB (UM) = 280044kB
[  288.102535][T18443] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  288.109575][T18443] Node 1 Normal: 1086*4kB (UE) 74*8kB (UM) 493*16kB (UME) 169*32kB (UM) 104*64kB (UM) 144*128kB (UM) 40*256kB (UM) 8*512kB (UE) 17*1024kB (UME) 7*2048kB (UME) 38*4096kB (UM) = 245048kB
[  288.115920][T18443] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  288.119258][T18443] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  288.122317][T18443] 42110 total pagecache pages
[  288.123749][T18443] 0 pages in swap cache
[  288.125013][T18443] Free swap  = 124996kB
[  288.126305][T18443] Total swap = 124996kB
[  288.129435][T18443] 786301 pages RAM
[  288.130901][T18443] 0 pages HighMem/MovableOnly
[  288.132662][T18443] 241343 pages reserved
[  288.134221][T18443] 0 pages cma reserved
[  288.200940][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5404'.
[  288.331706][T18451] wg1 speed is unknown, defaulting to 1000
[  288.335408][T18451] lo speed is unknown, defaulting to 1000
[  288.480299][T18451] netlink: 'syz.2.5406': attribute type 2 has an invalid length.
[  288.542572][T18462] delete_channel: no stack
[  289.558053][T18532] netlink: 'syz.1.5440': attribute type 2 has an invalid length.
[  289.561248][T18532] __nla_validate_parse: 2 callbacks suppressed
[  289.561261][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5440'.
[  289.570521][T18532] netlink: 'syz.1.5440': attribute type 2 has an invalid length.
[  289.573413][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5440'.
[  289.669783][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5444'.
[  289.672615][T18541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5444'.
[  289.675871][T18541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5444'.
[  290.273277][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5469'.
[  290.284160][T18595] netlink: 'syz.2.5470': attribute type 3 has an invalid length.
[  290.849966][T18641] netlink: 'syz.1.5489': attribute type 2 has an invalid length.
[  290.852973][T18641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5489'.
[  291.079716][T18664] nbd: must specify at least one socket
[  291.240270][T18683] netlink: 'syz.0.5508': attribute type 12 has an invalid length.
[  291.243111][T18683] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5508'.
[  291.614363][T18694] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  292.082254][T18713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5522'.
[  292.165559][ T5910] tipc: Subscription rejected, illegal request
[  292.413580][T18731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5531'.
[  292.875995][T18773] netlink: 'syz.0.5553': attribute type 16 has an invalid length.
[  292.971957][T18780] netlink: 'syz.0.5554': attribute type 13 has an invalid length.
[  292.974935][T18780] netlink: 'syz.0.5554': attribute type 17 has an invalid length.
[  293.045470][T18780] 8021q: adding VLAN 0 to HW filter on device team0
[  293.052530][T18780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  293.124577][T18777] wg1 speed is unknown, defaulting to 1000
[  293.130977][T18777] lo speed is unknown, defaulting to 1000
[  293.154102][T18787] netlink: 'syz.1.5558': attribute type 3 has an invalid length.
[  293.285523][T18794] netlink: 'syz.1.5561': attribute type 12 has an invalid length.
[  293.292511][T18794] netlink: 'syz.1.5561': attribute type 11 has an invalid length.
[  293.580994][ T1270] page_pool_release_retry() stalled pool shutdown: id 24, 3360 inflight 181 sec
[  293.604971][T18813] pim6reg: entered allmulticast mode
[  293.619799][T18813] pim6reg: left allmulticast mode
[  293.814813][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  294.094469][T18840] tun0: tun_chr_ioctl cmd 1074025675
[  294.096623][T18840] tun0: persist enabled
[  294.102274][T18840] tun0: tun_chr_ioctl cmd 1074025675
[  294.104348][T18840] tun0: persist enabled
[  294.632193][T18883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  294.640268][   T47] lo speed is unknown, defaulting to 1000
[  294.642442][   T47] syz2: Port: 1 Link DOWN
[  294.668579][T18889] netlink: 'syz.0.5604': attribute type 1 has an invalid length.
[  294.671214][T18889] __nla_validate_parse: 17 callbacks suppressed
[  294.671227][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5604'.
[  294.801259][T18905] netlink: 'syz.0.5611': attribute type 11 has an invalid length.
[  295.011555][T18921] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  295.038417][T18925] syzkaller1: entered promiscuous mode
[  295.040381][T18925] syzkaller1: entered allmulticast mode
[  295.104159][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5624'.
[  295.110994][T18931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5624'.
[  295.160417][T18938] netdevsim0: left promiscuous mode
[  295.162556][T18938] netdevsim0: entered allmulticast mode
[  295.164891][T18938] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  295.178815][T18941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5629'.
[  295.283766][T18951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.286601][T18951] syzkaller0: entered promiscuous mode
[  295.288651][T18951] syzkaller0: entered allmulticast mode
[  295.342777][T18951] tipc: Resetting bearer <eth:syzkaller0>
[  295.346326][T18946] tipc: Resetting bearer <eth:syzkaller0>
[  295.374357][T18946] tipc: Disabling bearer <eth:syzkaller0>
[  295.452602][T18967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5643'.
[  295.790723][T19005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5659'.
[  295.956384][T19022] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5668'.
[  295.962852][T19022] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5668'.
[  295.995331][T19026] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  296.001363][T19026] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  296.110648][T19036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5675'.
[  296.458122][T19073] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5692'.
[  297.008434][T19091] netlink: 'syz.1.5700': attribute type 1 has an invalid length.
[  297.025651][T19091] 8021q: adding VLAN 0 to HW filter on device bond4
[  297.040541][T19091] bond4: (slave geneve2): making interface the new active one
[  297.044494][T19091] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  297.048129][ T5719] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.057361][ T5719] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.061741][ T5719] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.068778][T19091] bond4: entered promiscuous mode
[  297.070780][T19091] geneve2: entered promiscuous mode
[  297.074141][ T5719] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.951981][T19144] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  298.067345][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  298.077879][T19153] netlink: 'syz.0.5729': attribute type 2 has an invalid length.
[  298.081082][T19153] netlink: 'syz.0.5729': attribute type 2 has an invalid length.
[  298.084279][T19153] netlink: 'syz.0.5729': attribute type 2 has an invalid length.
[  298.091429][T19153] netlink: 'syz.0.5729': attribute type 2 has an invalid length.
[  298.094749][T19153] netlink: 'syz.0.5729': attribute type 2 has an invalid length.
[  298.102465][T19153] netlink: 'syz.0.5729': attribute type 2 has an invalid length.
[  298.105675][T19153] netlink: 'syz.0.5729': attribute type 2 has an invalid length.
[  298.108868][T19153] netlink: 'syz.0.5729': attribute type 2 has an invalid length.
[  298.111940][T19153] netlink: 'syz.0.5729': attribute type 2 has an invalid length.
[  298.238398][T19160] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.241943][T19160] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.245187][T19160] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  298.250948][T19160] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  298.315792][T19160] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.321138][T19160] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.324966][T19160] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  298.329567][T19160] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  298.373247][T19160] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.376948][T19160] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.380803][T19160] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  298.383920][T19160] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  298.434716][T19160] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.440586][T19160] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.444719][T19160] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  298.448891][T19160] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  298.459278][T19169] !: renamed from dummy0
[  298.530798][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  298.537200][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  298.540825][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  298.546599][   T13] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  298.562871][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  298.565995][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  298.569349][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  298.572829][   T13] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  298.585329][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  298.588726][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  298.591791][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  298.595070][   T13] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  298.611947][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  298.615196][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  298.620592][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  298.623649][   T13] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  298.892469][T19194] erspan0: left promiscuous mode
[  298.932559][T19194] 8021q: adding VLAN 0 to HW filter on device team0
[  298.941901][T19194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  299.024079][T19199] wg1 speed is unknown, defaulting to 1000
[  299.029170][T19199] lo speed is unknown, defaulting to 1000
[  300.430408][T19219] __nla_validate_parse: 3 callbacks suppressed
[  300.430423][T19219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5759'.
[  300.624575][T19233] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5766'.
[  300.627860][T19233] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5766'.
[  300.802757][T19249] openvswitch: netlink: IPv4 tun info is not correct
[  300.922074][T19259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5777'.
[  301.233557][T19288] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5790'.
[  301.565571][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5799'.
[  301.713456][T19321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5806'.
[  301.744269][T19325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5808'.
[  301.946403][T19346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.018983][T19351] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5820'.
[  302.022010][T19351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5820'.
[  302.095621][T19354] syzkaller0: create flow: hash 686224320 index 1
[  302.180893][T19364] syzkaller0: delete flow: hash 686224320 index 1
[  303.017548][ T5236] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  303.762442][T19395] validate_nla: 6 callbacks suppressed
[  303.762463][T19395] netlink: 'syz.0.5839': attribute type 1 has an invalid length.
[  304.107327][T19426] netlink: 'syz.2.5853': attribute type 2 has an invalid length.
[  304.191855][T19436] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  304.732258][T19459] netlink: 'syz.1.5867': attribute type 3 has an invalid length.
[  304.757882][T19456] 8021q: adding VLAN 0 to HW filter on device bond11
[  305.407330][T19477] wg1: entered promiscuous mode
[  305.421671][T19477] wg1: entered allmulticast mode
[  305.524191][T19486] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  305.534622][T19488] netlink: 'syz.2.5880': attribute type 1 has an invalid length.
[  305.540966][T19488] netlink: 'syz.2.5880': attribute type 1 has an invalid length.
[  305.544246][T19488] __nla_validate_parse: 9 callbacks suppressed
[  305.544266][T19488] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5880'.
[  306.655141][T19507] wg1 speed is unknown, defaulting to 1000
[  306.662252][T19507] lo speed is unknown, defaulting to 1000
[  306.787164][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  307.358157][T19566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5915'.
[  307.361802][T19566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5915'.
[  307.430581][T19570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5917'.
[  307.459247][T19570] tap0: tun_chr_ioctl cmd 1074025677
[  307.461247][T19570] tap0: linktype set to 0
[  307.466674][T19572] sctp: [Deprecated]: syz.2.5918 (pid 19572) Use of int in maxseg socket option.
[  307.466674][T19572] Use struct sctp_assoc_value instead
[  308.911337][T19653] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.5955'.
[  309.114480][T19670] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5959'.
[  309.629918][T19700] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5974'.
[  309.647684][T19702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5975'.
[  309.709446][T19704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.716324][T19704] syzkaller0: entered promiscuous mode
[  309.719037][T19704] syzkaller0: entered allmulticast mode
[  309.752582][T19704] tipc: Resetting bearer <eth:syzkaller0>
[  309.756185][T19703] tipc: Resetting bearer <eth:syzkaller0>
[  309.773358][T19703] tipc: Disabling bearer <eth:syzkaller0>
[  309.789332][T19708] netlink: 'syz.1.5978': attribute type 7 has an invalid length.
[  309.891429][T19714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5981'.
[  309.928813][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5982'.
[  310.316566][T19737] : entered promiscuous mode
[  310.550344][T19757] __nla_validate_parse: 5 callbacks suppressed
[  310.550356][T19757] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5999'.
[  310.556713][T19757] netem: invalid attributes len -16
[  311.148914][T19790] netlink: 'syz.1.6015': attribute type 62 has an invalid length.
[  311.375154][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6022'.
[  311.495539][T19813] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6026'.
[  311.603776][T19820] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6029'.
[  311.636072][T19822] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6030'.
[  311.693093][T19826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6032'.
[  311.813333][T19836] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.844349][T19838] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6038'.
[  313.181120][T19882] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.184496][T19882] syzkaller0: entered promiscuous mode
[  313.186457][T19882] syzkaller0: entered allmulticast mode
[  313.204247][T19882] tipc: Resetting bearer <eth:syzkaller0>
[  313.209159][T19881] tipc: Resetting bearer <eth:syzkaller0>
[  313.221012][T19881] tipc: Disabling bearer <eth:syzkaller0>
[  313.355488][T19886] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  313.715009][T19904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6069'.
[  313.750732][T19906] netlink: 'syz.1.6070': attribute type 2 has an invalid length.
[  313.756898][T19906] netlink: 'syz.1.6070': attribute type 2 has an invalid length.
[  313.759813][T19906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6070'.
[  313.823503][T19908] netlink: 'syz.1.6071': attribute type 1 has an invalid length.
[  313.826705][T19908] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6071'.
[  313.836107][   T61] block nbd0: Possible stuck request ffff8880213f0000: control (read@0,4096B). Runtime 30 seconds
[  313.914073][T19912] netlink: 'syz.0.6073': attribute type 1 has an invalid length.
[  313.943587][T19912] bond6: entered promiscuous mode
[  313.945952][T19912] 8021q: adding VLAN 0 to HW filter on device bond6
[  313.981623][T19912] batadv1: entered promiscuous mode
[  313.983764][T19912] batadv1: entered allmulticast mode
[  313.992789][T19912] 8021q: adding VLAN 0 to HW filter on device batadv1
[  314.000440][T19912] bond6: (slave batadv1): making interface the new active one
[  314.004674][T19912] bond6: (slave batadv1): Enslaving as an active interface with an up link
[  314.740713][T19967] bond0 (unregistering): Released all slaves
[  316.085222][T20033] __nla_validate_parse: 5 callbacks suppressed
[  316.085240][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6119'.
[  316.100078][T20035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.260275][T20047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6125'.
[  316.387399][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[  316.529225][T20067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6134'.
[  316.553017][T20067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6134'.
[  316.781720][T20076] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.6137'.
[  317.168669][T20094] netlink: 'syz.2.6146': attribute type 10 has an invalid length.
[  317.318113][T20104] syzkaller0: entered promiscuous mode
[  317.320286][T20104] syzkaller0: entered allmulticast mode
[  317.365312][T20107] netlink: 'syz.0.6152': attribute type 1 has an invalid length.
[  318.736158][T20107] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  318.740627][T20112] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  318.744602][T20117] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.031477][T20145] netlink: 'syz.2.6164': attribute type 10 has an invalid length.
[  319.078182][T20149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6166'.
[  319.093377][T20152] netlink: 'syz.1.6163': attribute type 13 has an invalid length.
[  319.096494][T20152] netlink: 'syz.1.6163': attribute type 17 has an invalid length.
[  319.118882][T20152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  319.890804][T20164] delete_channel: no stack
[  319.919436][T20167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6173'.
[  320.541659][T20225] raw_sendmsg: syz.0.6200 forgot to set AF_INET. Fix it!
[  320.589499][T20229] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6202'.
[  320.603438][T20229] netlink: 'syz.0.6202': attribute type 1 has an invalid length.
[  320.625596][T20229] 8021q: adding VLAN 0 to HW filter on device bond8
[  321.896149][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6221'.
[  321.993210][T20280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6224'.
[  322.269565][T20304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6233'.
[  322.486462][T20313] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6235'.
[  322.512450][T20310] netlink: 'syz.0.6234': attribute type 1 has an invalid length.
[  322.515085][T20310] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6234'.
[  322.518385][T20310] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6234'.
[  322.581224][T20317] netlink: 'syz.1.6237': attribute type 1 has an invalid length.
[  323.112311][T20335] geneve3: entered promiscuous mode
[  323.115121][T20335] geneve3: entered allmulticast mode
[  323.119851][ T5910] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.123253][ T5910] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  323.132538][ T5910] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.136801][ T5910] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  323.143849][ T5910] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.154301][ T5910] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  323.186505][ T5910] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.199206][ T5910] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  323.275481][T20351] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  323.491218][T20366] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.576200][T20381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6264'.
[  325.163264][T20473] wg1 speed is unknown, defaulting to 1000
[  325.166017][T20473] lo speed is unknown, defaulting to 1000
[  325.424235][T20493] netlink: 'syz.0.6312': attribute type 5 has an invalid length.
[  325.435699][T20493] netlink: 'syz.0.6312': attribute type 5 has an invalid length.
[  325.706208][T20527] syzkaller0: entered promiscuous mode
[  325.710081][T20527] syzkaller0: entered allmulticast mode
[  326.514531][T20571] netlink: 'syz.0.6347': attribute type 1 has an invalid length.
[  326.535639][T20571] 8021q: adding VLAN 0 to HW filter on device bond9
[  326.541113][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6347'.
[  326.600720][T20576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6349'.
[  327.352155][T20624] sctp: [Deprecated]: syz.2.6369 (pid 20624) Use of struct sctp_assoc_value in delayed_ack socket option.
[  327.352155][T20624] Use struct sctp_sack_info instead
[  327.578076][T20634] wg1 speed is unknown, defaulting to 1000
[  327.581170][T20634] lo speed is unknown, defaulting to 1000
[  328.063096][T20649] delete_channel: no stack
[  328.191712][T20653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6380'.
[  328.216589][T20653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6380'.
[  328.396941][T20663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6383'.
[  328.439721][T20667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  328.503782][T20670] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  328.721144][T20682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6394'.
[  328.799255][T20691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6399'.
[  328.896572][T20691] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6399'.
[  328.986697][T20703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6405'.
[  329.148849][T20717] netlink: 'syz.0.6412': attribute type 21 has an invalid length.
[  329.152985][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6412'.
[  329.156780][T20717] netlink: 'syz.0.6412': attribute type 21 has an invalid length.
[  329.159892][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6412'.
[  329.255873][T20725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6416'.
[  329.329765][T20732] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  329.411930][T20732] batadv_slave_0: entered promiscuous mode
[  329.608245][T20757] siw: device registration error -23
[  329.781855][T20769] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  329.853602][T20769] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  329.913530][T20769] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  329.981810][T20769] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  330.066238][ T5719] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  330.083682][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  330.100723][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  330.116258][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  330.376839][T20798] pim6reg1: entered promiscuous mode
[  330.382326][T20798] pim6reg1: entered allmulticast mode
[  330.536639][T20814] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  331.286559][T20868] tipc: MTU too low for tipc bearer
[  331.531846][T20884] unsupported nlmsg_type 40
[  332.270588][T20937] netlink: 'syz.2.6513': attribute type 1 has an invalid length.
[  332.274487][T20937] netlink: 'syz.2.6513': attribute type 2 has an invalid length.
[  332.278172][T20937] netlink: 'syz.2.6513': attribute type 1 has an invalid length.
[  332.282839][T20939] netlink: 'syz.0.6514': attribute type 4 has an invalid length.
[  333.596196][T21002] openvswitch: netlink: Flow actions attr not present in new flow.
[  333.844403][T21021] netlink: 'syz.0.6550': attribute type 3 has an invalid length.
[  333.863433][T21023] __nla_validate_parse: 14 callbacks suppressed
[  333.863449][T21023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6551'.
[  333.972860][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6556'.
[  334.114411][ T5875] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  334.193782][T21064] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  334.640976][T21093] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.702050][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6583'.
[  334.740814][T21104] openvswitch: netlink: IPv6 tunnel dst address is zero
[  334.785533][T21110] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6587'.
[  334.911289][T21118] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  334.914888][T21118] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  334.934096][T21120] 8021q: adding VLAN 0 to HW filter on device bond5
[  335.074161][T21135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6598'.
[  335.129825][T21139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6600'.
[  335.245022][T21147] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6604'.
[  335.346335][T21153] netlink: 'syz.0.6607': attribute type 13 has an invalid length.
[  335.370427][T21153] wg1 speed is unknown, defaulting to 1000
[  335.375020][T21153] lo speed is unknown, defaulting to 1000
[  335.485094][T21162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6610'.
[  335.488711][T21162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6610'.
[  335.610928][T21168] netlink: 'syz.1.6613': attribute type 6 has an invalid length.
[  335.691210][T21172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6615'.
[  335.772814][T21174] 8021q: adding VLAN 0 to HW filter on device bond6
[  336.266194][T21196] netlink: 'syz.1.6626': attribute type 13 has an invalid length.
[  336.604526][T21228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  336.607220][T21228] IPv6: NLM_F_CREATE should be set when creating new route
[  336.612760][T21228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  336.615003][T21228] IPv6: NLM_F_CREATE should be set when creating new route
[  336.857497][T21254] netlink: 'syz.1.6654': attribute type 1 has an invalid length.
[  337.507296][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  337.799137][T21286] xt_limit: Overflow, try lower: 604147548/4200216962
[  338.054413][T21295] vlan1: entered promiscuous mode
[  338.056497][T21295] bond0: entered promiscuous mode
[  338.159274][T21305] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  338.630914][T21320] wg1: left promiscuous mode
[  338.632932][T21320] wg1: left allmulticast mode
[  338.635488][T21320] bridge_slave_0: left allmulticast mode
[  338.649489][T21320] vlan4: left allmulticast mode
[  338.651642][T21320] veth1: left allmulticast mode
[  338.653980][T21320] ip6tnl2: left promiscuous mode
[  338.659831][T21320] bond4: left promiscuous mode
[  338.661412][T21320] geneve2: left promiscuous mode
[  338.664181][T21320] geneve3: left promiscuous mode
[  338.665949][T21320] geneve3: left allmulticast mode
[  338.691981][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  338.695343][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  338.703146][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  338.706551][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  338.913346][T21327] netlink: 'syz.0.6684': attribute type 6 has an invalid length.
[  339.027310][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[  339.745813][T21370] netlink: 'syz.1.6703': attribute type 58 has an invalid length.
[  339.749833][T21370] __nla_validate_parse: 15 callbacks suppressed
[  339.749845][T21370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6703'.
[  339.974512][T21380] policy can only be matched on NF_INET_PRE_ROUTING
[  339.974534][T21380] unable to load match
[  340.473975][T21424] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6729'.
[  341.028884][T21460] netlink: 'syz.2.6744': attribute type 11 has an invalid length.
[  341.094270][T21465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  341.255160][T21474] netlink: 'syz.2.6750': attribute type 21 has an invalid length.
[  341.261100][T21474] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6750'.
[  341.265741][T21474] netlink: 'syz.2.6750': attribute type 4 has an invalid length.
[  341.271799][T21474] netlink: 'syz.2.6750': attribute type 3 has an invalid length.
[  341.274902][T21474] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6750'.
[  341.540880][T21490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6757'.
[  341.673734][T21502] tipc: Resetting bearer <eth:syzkaller0>
[  341.676404][T21502] tipc: Resetting bearer <eth:syzkaller0>
[  342.238474][T21524] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1815685925)
[  342.242436][T21524] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  342.631542][T21547] netlink: 'syz.0.6782': attribute type 5 has an invalid length.
[  342.696536][T21554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6784'.
[  343.149851][T21583] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6799'.
[  343.353156][T21591] wg1 speed is unknown, defaulting to 1000
[  343.356333][T21591] lo speed is unknown, defaulting to 1000
[  343.560766][T21611] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0
[  343.912138][   T61] block nbd0: Possible stuck request ffff8880213f0000: control (read@0,4096B). Runtime 60 seconds
[  343.978734][T21634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6818'.
[  344.183330][T21653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6828'.
[  344.243586][T21657] netdevsim0: left allmulticast mode
[  344.254251][T21657] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  344.261789][ T1270] lo speed is unknown, defaulting to 1000
[  344.263763][ T1270] syz2: Port: 1 Link ACTIVE
[  344.590522][T21692] netlink: 'syz.2.6845': attribute type 5 has an invalid length.
[  344.623081][T21696] netlink: 'syz.2.6847': attribute type 4 has an invalid length.
[  344.646547][T21698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6848'.
[  344.695697][T21704] netlink: 'syz.2.6850': attribute type 1 has an invalid length.
[  344.778107][T21711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6855'.
[  344.934061][T21723] wg1 speed is unknown, defaulting to 1000
[  344.937357][T21723] lo speed is unknown, defaulting to 1000
[  345.373191][T21761] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6877'.
[  345.376535][T21761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6877'.
[  345.438431][T21764] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  345.442081][T21764] veth0_to_bridge: entered promiscuous mode
[  345.444259][T21764] veth0_to_bridge: entered allmulticast mode
[  345.474337][T21766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.477731][T21766] syzkaller0: entered promiscuous mode
[  345.479940][T21766] syzkaller0: entered allmulticast mode
[  345.499999][T21766] tipc: Resetting bearer <eth:syzkaller0>
[  345.503557][T21765] tipc: Resetting bearer <eth:syzkaller0>
[  345.518822][T21765] tipc: Disabling bearer <eth:syzkaller0>
[  347.265068][T21784] netlink: 'syz.1.6887': attribute type 32 has an invalid length.
[  347.273345][T21784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6887'.
[  347.389287][T21790] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.403938][T21790] bond0: (slave macvlan0): Opening slave failed
[  347.475994][T21790] bond6: (slave batadv1): Releasing active interface
[  348.185230][T21826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6907'.
[  348.319292][T21836] syzkaller1: entered promiscuous mode
[  348.321120][T21836] syzkaller1: entered allmulticast mode
[  348.399198][ T5296] udevd[5296]: worker [18060] /devices/virtual/block/nbd0 is taking a long time
[  348.525863][T21856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6921'.
[  348.860971][T21867] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  348.902743][T21877] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  348.906627][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  348.909703][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  348.912439][   T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20001 - 0
[  348.915212][   T13] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  348.920343][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  348.923583][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  348.926306][   T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20001 - 0
[  348.937311][   T13] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  348.941280][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  348.944362][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  348.948737][   T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20001 - 0
[  348.951538][   T13] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  348.954294][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  348.957425][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  348.960416][   T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20001 - 0
[  348.963620][   T13] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  349.304136][T21896] openvswitch: netlink: IPv4 tun info is not correct
[  349.352472][T21898] syzkaller1: entered promiscuous mode
[  349.354719][T21898] syzkaller1: entered allmulticast mode
[  349.501793][T21902] : renamed from veth0_to_bond
[  349.553842][T21906] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6942'.
[  349.556724][T21906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6942'.
[  349.560766][T21906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6942'.
[  349.669104][T21916] netlink: 'syz.0.6946': attribute type 21 has an invalid length.
[  349.783836][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6951'.
[  350.068132][T21958] netlink: 'syz.0.6967': attribute type 23 has an invalid length.
[  350.116742][T21960] __nla_validate_parse: 1 callbacks suppressed
[  350.116763][T21960] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6968'.
[  351.277484][T21969] netlink: 'syz.1.6973': attribute type 1 has an invalid length.
[  351.282334][T21969] nbd: error processing sock list
[  351.284268][T21969] block nbd1: shutting down sockets
[  351.315877][T21981] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4.
[  351.389278][T21983] wg1 speed is unknown, defaulting to 1000
[  351.392445][T21983] lo speed is unknown, defaulting to 1000
[  352.450589][T22001] netlink: 'syz.1.6983': attribute type 7 has an invalid length.
[  352.453948][T22001] netlink: 'syz.1.6983': attribute type 8 has an invalid length.
[  352.456648][T22001] netlink: 'syz.1.6983': attribute type 4 has an invalid length.
[  352.459915][T22001] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6983'.
[  352.972050][T22026] team0: Device macvtap2 is already an upper device of the team interface
[  353.363730][T22041] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7002'.
[  353.369687][T22040] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7002'.
[  353.773796][T22063] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  353.910424][ T1270] page_pool_release_retry() stalled pool shutdown: id 24, 3360 inflight 241 sec
[  353.941608][T22075] netlink: 'syz.1.7019': attribute type 4 has an invalid length.
[  354.066005][T22084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.193777][T22093] netlink: 'syz.0.7027': attribute type 1 has an invalid length.
[  354.231412][T22093] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  354.236536][T22093] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  354.509188][T22095] gretap1: entered promiscuous mode
[  354.554420][T22095] bond10: (slave gretap1): making interface the new active one
[  354.567750][T22095] bond10: (slave gretap1): Enslaving as an active interface with an up link
[  354.586405][T22096] macvlan0: entered promiscuous mode
[  354.589519][T22096] macvlan0: entered allmulticast mode
[  354.593022][T22096] bond10: entered promiscuous mode
[  354.596754][T22096] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  354.611345][T22096] bond10: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  354.620487][T22096] bond10: left promiscuous mode
[  354.648045][T22100] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  354.652224][T22100] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  354.656502][T22100] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  354.960691][T22124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7040'.
[  355.083596][T22134] netlink: 'syz.1.7044': attribute type 7 has an invalid length.
[  355.086521][T22134] netlink: 'syz.1.7044': attribute type 8 has an invalid length.
[  355.131220][T22136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7045'.
[  355.134237][T22136] netlink: 'syz.1.7045': attribute type 7 has an invalid length.
[  355.143327][T22136] netlink: 'syz.1.7045': attribute type 8 has an invalid length.
[  355.145824][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7045'.
[  355.803958][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7055'.
[  355.869787][T22160] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7055'.
[  356.291461][T22180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7065'.
[  356.297219][T22180] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7065'.
[  356.306321][T22180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7065'.
[  356.528944][T22204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7074'.
[  356.535926][T22204] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7074'.
[  356.560337][T22205] netlink: 'syz.0.7073': attribute type 13 has an invalid length.
[  356.591063][T22205] 8021q: adding VLAN 0 to HW filter on device team0
[  356.596133][T22205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  356.606690][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  356.653567][T22202] wg1 speed is unknown, defaulting to 1000
[  356.659867][T22202] lo speed is unknown, defaulting to 1000
[  356.696288][T22205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7073'.
[  356.791156][T22216] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  356.963244][T22226] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  357.030147][T22227] vlan2: entered promiscuous mode
[  357.031877][T22227] bond0: entered promiscuous mode
[  357.349396][T22230] wg1 speed is unknown, defaulting to 1000
[  357.352393][T22230] lo speed is unknown, defaulting to 1000
[  359.272071][T22318] wg1 speed is unknown, defaulting to 1000
[  359.279137][T22318] lo speed is unknown, defaulting to 1000
[  359.402012][T22326] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  359.725852][T22337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.730639][T22337] syzkaller0: entered promiscuous mode
[  359.732695][T22337] syzkaller0: entered allmulticast mode
[  359.763457][T22337] tipc: Resetting bearer <eth:syzkaller0>
[  359.767277][T22336] tipc: Resetting bearer <eth:syzkaller0>
[  359.777573][T22336] tipc: Disabling bearer <eth:syzkaller0>
[  360.290398][T22376] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  360.402263][T22382] netlink: del zone limit has 4 unknown bytes
[  360.525242][T22387] siw: device registration error -23
[  360.601202][T22387] validate_nla: 3 callbacks suppressed
[  360.601221][T22387] netlink: 'syz.0.7155': attribute type 4 has an invalid length.
[  360.700963][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  360.707336][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  360.711841][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  360.715470][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  360.722777][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  360.752214][T22397] wg1 speed is unknown, defaulting to 1000
[  360.755245][T22397] lo speed is unknown, defaulting to 1000
[  360.777476][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  360.873043][T22397] chnl_net:caif_netlink_parms(): no params data found
[  360.951418][T22397] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.954373][T22397] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.958688][T22397] bridge_slave_0: entered allmulticast mode
[  360.962737][T22397] bridge_slave_0: entered promiscuous mode
[  360.966947][T22397] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.970222][T22397] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.973145][T22397] bridge_slave_1: entered allmulticast mode
[  360.976112][T22397] bridge_slave_1: entered promiscuous mode
[  361.006625][T22397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.016173][T22397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.053270][T22397] team0: Port device team_slave_0 added
[  361.062917][T22397] team0: Port device team_slave_1 added
[  361.104072][T22397] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.107815][T22397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.120809][T22397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.126819][T22397] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.132494][T22397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.142825][T22397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.193660][T22397] hsr_slave_0: entered promiscuous mode
[  361.196962][T22397] hsr_slave_1: entered promiscuous mode
[  361.241418][T22413] netlink: 'syz.1.7163': attribute type 1 has an invalid length.
[  361.244767][T22413] __nla_validate_parse: 6 callbacks suppressed
[  361.244790][T22413] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7163'.
[  361.253606][T22413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7163'.
[  361.400726][T22397] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  361.406041][T22397] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  361.412689][T22397] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  361.419114][T22397] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  361.508011][T22397] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.528443][T22397] 8021q: adding VLAN 0 to HW filter on device team0
[  361.541213][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.543523][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.552007][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.554319][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.720492][T22397] 8021q: adding VLAN 0 to HW filter on device batadv0
[  361.762724][T22397] veth0_vlan: entered promiscuous mode
[  361.773159][T22397] veth1_vlan: entered promiscuous mode
[  361.800536][T22397] veth0_macvtap: entered promiscuous mode
[  361.806567][T22397] veth1_macvtap: entered promiscuous mode
[  361.830990][T22397] batman_adv: batadv0: Interface activated: batadv_slave_0
[  361.843821][T22397] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.854448][T22422] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.861669][T22422] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.866177][T22422] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.871136][T22422] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.975695][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.982339][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.030879][ T2177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.034158][ T2177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.155816][T22433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7165'.
[  362.160861][T22433] erspan0: entered promiscuous mode
[  362.163092][T22433] erspan0: entered allmulticast mode
[  362.166737][T22433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7165'.
[  362.292019][T22441] netlink: 'syz.3.7169': attribute type 5 has an invalid length.
[  362.506469][T22457] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  362.511522][T22457] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  362.778070][ T5236] Bluetooth: hci3: command tx timeout
[  363.360275][T22489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7192'.
[  363.480294][T22495] dvmrp1: tun_chr_ioctl cmd 1074025677
[  363.482246][T22495] dvmrp1: linktype set to 805
[  363.632985][T22502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7197'.
[  363.845083][T22515] wg1 speed is unknown, defaulting to 1000
[  363.850542][T22515] lo speed is unknown, defaulting to 1000
[  364.149796][T22515] netlink: 'syz.1.7203': attribute type 13 has an invalid length.
[  364.152961][T22515] netlink: 'syz.1.7203': attribute type 17 has an invalid length.
[  364.169742][T22515] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  364.341046][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7205'.
[  364.674168][T22539] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  364.816585][T22545] syzkaller1: entered promiscuous mode
[  364.819817][T22545] syzkaller1: entered allmulticast mode
[  364.857566][ T5236] Bluetooth: hci3: command tx timeout
[  365.075268][T22557] wg1 speed is unknown, defaulting to 1000
[  365.078858][T22557] lo speed is unknown, defaulting to 1000
[  365.126515][T22562] netlink: 368 bytes leftover after parsing attributes in process `syz.3.7223'.
[  365.212522][T22565] wg1 speed is unknown, defaulting to 1000
[  365.215449][T22565] lo speed is unknown, defaulting to 1000
[  366.016267][T22576] mac80211_hwsim hwsim29 ;: renamed from wlan0 (while UP)
[  366.325179][T22596] netlink: 'syz.3.7238': attribute type 10 has an invalid length.
[  366.332247][T22596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.336728][T22596] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  366.446138][T22605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7242'.
[  366.449989][T22605] netem: change failed
[  366.681607][T22620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7249'.
[  366.684865][T22620] tc_dump_action: action bad kind
[  366.948817][ T5236] Bluetooth: hci3: command tx timeout
[  367.545357][T22422] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  368.834322][T22679] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7271'.
[  368.894949][T22683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7273'.
[  368.919233][T22683] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7273'.
[  369.018403][ T5236] Bluetooth: hci3: command tx timeout
[  369.325502][    T9] IPVS: starting estimator thread 0...
[  369.401257][T22714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7287'.
[  369.404450][T22712] wg1 speed is unknown, defaulting to 1000
[  369.410781][T22712] lo speed is unknown, defaulting to 1000
[  369.413355][T22714] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  369.437339][T22709] IPVS: using max 64 ests per chain, 153600 per kthread
[  369.497580][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  369.532771][T22714] netlink: 'syz.1.7287': attribute type 3 has an invalid length.
[  369.535785][T22714] netlink: 'syz.1.7287': attribute type 1 has an invalid length.
[  369.541504][T22714] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.7287'.
[  370.173491][T22760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7308'.
[  370.350194][T22772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7314'.
[  370.571446][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7319'.
[  370.574526][T22784] openvswitch: netlink: Unknown nsh attribute 0
[  370.576850][T22784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.416011][T22832] delete_channel: no stack
[  371.835412][T22855] IPVS: Scheduler module ip_vs_sip not found
[  371.838798][T22855] IPVS: length: 141 != 8
[  371.878720][T22858] __nla_validate_parse: 1 callbacks suppressed
[  371.878735][T22858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7354'.
[  372.741013][T22869] erspan0: left promiscuous mode
[  372.743046][T22869] erspan0: left allmulticast mode
[  372.759180][T22869] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  372.868285][T22877] vlan2: entered allmulticast mode
[  372.870404][T22877] dummy0: entered allmulticast mode
[  373.411616][T22896] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7369'.
[  373.490134][T22898] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.7370'.
[  373.879599][T22924] netlink: 'syz.3.7383': attribute type 15 has an invalid length.
[  373.886573][T22924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7383'.
[  373.978977][   T61] block nbd0: Possible stuck request ffff8880213f0000: control (read@0,4096B). Runtime 90 seconds
[  374.170217][T22952] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7397'.
[  374.248009][T22958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7400'.
[  374.875147][T22989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7414'.
[  375.501957][T23024] wg1 speed is unknown, defaulting to 1000
[  375.505861][T23024] lo speed is unknown, defaulting to 1000
[  375.914645][T23041] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7437'.
[  375.929311][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  375.935038][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  375.939987][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  375.943816][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  375.947427][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  375.966232][T23041] veth15: entered promiscuous mode
[  376.000779][T23042] wg1 speed is unknown, defaulting to 1000
[  376.004487][T23042] lo speed is unknown, defaulting to 1000
[  376.167613][T23042] chnl_net:caif_netlink_parms(): no params data found
[  376.307966][T23042] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.310930][T23042] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.313934][T23042] bridge_slave_0: entered allmulticast mode
[  376.321668][T23042] bridge_slave_0: entered promiscuous mode
[  376.326110][T23042] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.330865][T23042] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.333542][T23042] bridge_slave_1: entered allmulticast mode
[  376.337809][T23042] bridge_slave_1: entered promiscuous mode
[  376.432116][T23042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.439531][T23042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.483697][T23042] team0: Port device team_slave_0 added
[  376.490024][T23042] team0: Port device team_slave_1 added
[  376.556462][T23042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.565703][T23042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.576909][T23042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.595906][T23042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.603080][T23042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.612577][T23042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.655973][T23042] hsr_slave_0: entered promiscuous mode
[  376.664844][T23042] hsr_slave_1: entered promiscuous mode
[  376.668112][T23042] debugfs: 'hsr0' already exists in 'hsr'
[  376.670158][T23042] Cannot create hsr debugfs directory
[  376.929818][T23042] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  376.936787][T23042] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  376.961976][T23042] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  376.970203][T23042] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  377.142634][T23042] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.164959][T23042] 8021q: adding VLAN 0 to HW filter on device team0
[  377.176129][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.178600][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.194051][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.196312][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  377.353037][T23042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.402771][T23083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7449'.
[  377.511443][T23042] veth0_vlan: entered promiscuous mode
[  377.518645][T23042] veth1_vlan: entered promiscuous mode
[  377.544706][T23042] veth0_macvtap: entered promiscuous mode
[  377.550321][T23042] veth1_macvtap: entered promiscuous mode
[  377.565273][T23042] batman_adv: batadv0: Interface activated: batadv_slave_0
[  377.579723][T23042] batman_adv: batadv0: Interface activated: batadv_slave_1
[  377.593283][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  377.596882][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.601439][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.609866][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.683380][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.685873][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.720278][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.723747][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.978376][ T5236] Bluetooth: hci4: command tx timeout
[  378.006743][T23123] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  378.741057][T23143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7470'.
[  379.908425][T23159] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7477'.
[  379.911117][T23159] nbd: illegal input index 65508
[  380.067420][ T5236] Bluetooth: hci4: command tx timeout
[  380.130001][T23171] bond0: up delay (18673) is not a multiple of miimon (100), value rounded to 18600 ms
[  380.133383][T23171] bond0: entered allmulticast mode
[  380.135721][T23171] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.259098][T23179] : renamed from batadv_slave_1 (while UP)
[  380.352485][T23183] tipc: Started in network mode
[  380.354460][T23183] tipc: Node identity 42d7602f188f, cluster identity 4711
[  380.356707][T23183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.360076][T23183] syzkaller0: entered promiscuous mode
[  380.361890][T23183] syzkaller0: entered allmulticast mode
[  380.406993][T23183] tipc: Resetting bearer <eth:syzkaller0>
[  380.411958][T23182] tipc: Resetting bearer <eth:syzkaller0>
[  380.447561][T23182] tipc: Disabling bearer <eth:syzkaller0>
[  380.606267][T23118] Set syz1 is full, maxelem 65536 reached
[  381.706863][T23247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7514'.
[  381.819078][T23250] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7515'.
[  381.900366][T23254] netlink: 'syz.1.7517': attribute type 4 has an invalid length.
[  381.918992][T23254] netlink: 'syz.1.7517': attribute type 4 has an invalid length.
[  382.075307][T23264] bond0: default FDB implementation only supports local addresses
[  382.131295][T23268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7524'.
[  382.138375][ T5236] Bluetooth: hci4: command tx timeout
[  382.164980][T22422] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  382.165016][T23268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7524'.
[  382.180972][T22422] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  382.187311][T22422] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  382.190755][T22422] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  382.254718][T23274] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7526'.
[  382.260535][T23273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7527'.
[  382.275036][T22422] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  382.282018][T22422] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  382.297801][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  382.356298][T23278] ip6tnl1: entered promiscuous mode
[  382.360177][T23278] ip6tnl1: entered allmulticast mode
[  382.367468][T23278] team0: Device ip6tnl1 is of different type
[  382.478871][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  382.489966][T23288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7534'.
[  382.946962][T23316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7548'.
[  383.019992][ T5315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  383.081087][T23324] openvswitch: netlink: Unknown key attributes 2
[  383.479005][T23356] netlink: 'syz.4.7566': attribute type 3 has an invalid length.
[  383.482050][T23356] netlink: 'syz.4.7566': attribute type 1 has an invalid length.
[  383.484839][T23356] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7566'.
[  383.766225][T23368] syzkaller1: entered promiscuous mode
[  383.769785][T23368] syzkaller1: entered allmulticast mode
[  383.862972][T23370] siw: device registration error -23
[  384.240876][ T5849] Bluetooth: hci4: command tx timeout
[  384.279064][T23384] syzkaller0: entered promiscuous mode
[  384.281238][T23384] syzkaller0: entered allmulticast mode
[  384.293205][T23384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.298528][T23383] tipc: Resetting bearer <eth:syzkaller0>
[  385.419366][ T1270] tipc: Node number set to 1515741231
[  385.683879][T23383] tipc: Disabling bearer <eth:syzkaller0>
[  386.144370][T23436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7601'.
[  386.153359][T23436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7601'.
[  386.238166][T23438] wg1 speed is unknown, defaulting to 1000
[  386.242293][T23438] lo speed is unknown, defaulting to 1000
[  386.445660][T23453] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7608'.
[  386.697356][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  386.779939][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  386.783809][T23471] bond0: left allmulticast mode
[  386.804312][T23471] veth15: left promiscuous mode
[  386.824328][T23480] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  388.304362][T23476] wg1 speed is unknown, defaulting to 1000
[  388.309859][T23476] lo speed is unknown, defaulting to 1000
[  388.361155][T23495] bond0: (slave rose0): Enslaving as an active interface with an up link
[  388.412723][T23495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7626'.
[  388.633545][T23513] netlink: 'syz.1.7634': attribute type 1 has an invalid length.
[  388.636846][T23513] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7634'.
[  388.940549][T23530] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  388.943300][T23530] syzkaller0: entered promiscuous mode
[  388.945144][T23530] syzkaller0: entered allmulticast mode
[  388.950755][T23530] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  388.970959][T23530] tipc: Resetting bearer <eth:syzkaller0>
[  388.974121][T23529] tipc: Resetting bearer <eth:syzkaller0>
[  388.987459][T23529] tipc: Disabling bearer <eth:syzkaller0>
[  389.058307][T23536] bond4: (slave geneve2): Releasing active interface
[  389.456946][T23562] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7659'.
[  389.502655][T23564] netlink: 826 bytes leftover after parsing attributes in process `syz.4.7660'.
[  389.619799][T23568] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7662'.
[  390.195860][T23591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7672'.
[  390.624998][T23618] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.631704][T23618] syzkaller0: MTU too low for tipc bearer
[  390.636531][T23618] tipc: Disabling bearer <eth:syzkaller0>
[  391.112655][T23650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7698'.
[  391.326475][T23666] netlink: 'syz.1.7707': attribute type 5 has an invalid length.
[  392.680599][T23682] bridge8: entered allmulticast mode
[  393.521137][T23684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7714'.
[  393.882806][T23702] netlink: 'syz.4.7721': attribute type 4 has an invalid length.
[  393.916665][T23704] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7722'.
[  395.362965][T23750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7743'.
[  395.452548][   T33] audit: type=1800 audit(1757688599.408:7): pid=23754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7745" name="blkio.bfq.time_recursive" dev="tmpfs" ino=701 res=0 errno=0
[  395.737220][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  396.914047][T23754] syz.4.7745: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  396.921432][T23754] CPU: 1 UID: 0 PID: 23754 Comm: syz.4.7745 Not tainted syzkaller #0 PREEMPT(full) 
[  396.921445][T23754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  396.921451][T23754] Call Trace:
[  396.921456][T23754]  <TASK>
[  396.921462][T23754]  dump_stack_lvl+0x189/0x250
[  396.921487][T23754]  ? __pfx_dump_stack_lvl+0x10/0x10
[  396.921504][T23754]  ? __pfx__printk+0x10/0x10
[  396.921525][T23754]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  396.921545][T23754]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  396.921557][T23754]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  396.921575][T23754]  warn_alloc+0x214/0x310
[  396.921605][T23754]  ? __pfx_warn_alloc+0x10/0x10
[  396.921633][T23754]  ? __get_vm_area_node+0x28f/0x300
[  396.921647][T23754]  ? hash_netport4_resize+0x235/0x1b60
[  396.921666][T23754]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  396.921712][T23754]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  396.921733][T23754]  ? rcu_is_watching+0x15/0xb0
[  396.921746][T23754]  ? hash_netport4_resize+0x235/0x1b60
[  396.921759][T23754]  ? hash_netport4_resize+0x235/0x1b60
[  396.921772][T23754]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  396.921792][T23754]  ? hash_netport4_resize+0x235/0x1b60
[  396.921816][T23754]  hash_netport4_resize+0x235/0x1b60
[  396.921825][T23754]  ? hash_netport4_uadt+0xc97/0xf30
[  396.921841][T23754]  ? __pfx_hash_netport4_add+0x10/0x10
[  396.921855][T23754]  ? __pfx_hash_netport4_uadt+0x10/0x10
[  396.921874][T23754]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  396.921895][T23754]  call_ad+0x44e/0xb00
[  396.921923][T23754]  ? __pfx_call_ad+0x10/0x10
[  396.921952][T23754]  ? __nla_parse+0x40/0x60
[  396.921968][T23754]  ip_set_ad+0x791/0x930
[  396.921983][T23754]  ? __pfx_ip_set_ad+0x10/0x10
[  396.922012][T23754]  nfnetlink_rcv_msg+0xb4d/0x1130
[  396.922024][T23754]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  396.922047][T23754]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  396.922062][T23754]  ? kasan_save_free_info+0x46/0x50
[  396.922101][T23754]  netlink_rcv_skb+0x208/0x470
[  396.922117][T23754]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  396.922137][T23754]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  396.922164][T23754]  ? bpf_lsm_capable+0x9/0x20
[  396.922182][T23754]  ? security_capable+0x7e/0x2e0
[  396.922207][T23754]  nfnetlink_rcv+0x26a/0x2520
[  396.922225][T23754]  ? __dev_queue_xmit+0x1d79/0x3b50
[  396.922249][T23754]  ? __dev_queue_xmit+0x27b/0x3b50
[  396.922273][T23754]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  396.922290][T23754]  ? __pfx___dev_queue_xmit+0x10/0x10
[  396.922319][T23754]  ? ref_tracker_free+0x63a/0x7d0
[  396.922368][T23754]  ? __asan_memcpy+0x40/0x70
[  396.922382][T23754]  ? __pfx_ref_tracker_free+0x10/0x10
[  396.922408][T23754]  ? skb_clone+0x246/0x3a0
[  396.922421][T23754]  ? __netlink_deliver_tap+0x807/0x850
[  396.922435][T23754]  ? netlink_deliver_tap+0x2e/0x1b0
[  396.922459][T23754]  ? netlink_deliver_tap+0x2e/0x1b0
[  396.922487][T23754]  netlink_unicast+0x82f/0x9e0
[  396.922512][T23754]  ? __pfx_netlink_unicast+0x10/0x10
[  396.922534][T23754]  ? netlink_sendmsg+0x642/0xb30
[  396.922545][T23754]  ? skb_put+0x11b/0x210
[  396.922561][T23754]  netlink_sendmsg+0x805/0xb30
[  396.922573][T23754]  ? __pfx_netlink_sendmsg+0x10/0x10
[  396.922582][T23754]  ? aa_sock_msg_perm+0xf1/0x1d0
[  396.922592][T23754]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  396.922602][T23754]  ? __pfx_netlink_sendmsg+0x10/0x10
[  396.922609][T23754]  __sock_sendmsg+0x21c/0x270
[  396.922623][T23754]  ____sys_sendmsg+0x505/0x830
[  396.922634][T23754]  ? __pfx_____sys_sendmsg+0x10/0x10
[  396.922648][T23754]  ? import_iovec+0x74/0xa0
[  396.922659][T23754]  ___sys_sendmsg+0x21f/0x2a0
[  396.922669][T23754]  ? __pfx____sys_sendmsg+0x10/0x10
[  396.922695][T23754]  ? __fget_files+0x2a/0x420
[  396.922702][T23754]  ? __fget_files+0x3a0/0x420
[  396.922713][T23754]  __x64_sys_sendmsg+0x19b/0x260
[  396.922724][T23754]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  396.922741][T23754]  ? do_syscall_64+0xbe/0x3b0
[  396.922752][T23754]  do_syscall_64+0xfa/0x3b0
[  396.922759][T23754]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.922772][T23754]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.922785][T23754]  ? exc_page_fault+0x9f/0xf0
[  396.922809][T23754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.922822][T23754] RIP: 0033:0x7f23c1f8eba9
[  396.922833][T23754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.922840][T23754] RSP: 002b:00007f23c2e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  396.922853][T23754] RAX: ffffffffffffffda RBX: 00007f23c21d5fa0 RCX: 00007f23c1f8eba9
[  396.922862][T23754] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000007
[  396.922870][T23754] RBP: 00007f23c2011e19 R08: 0000000000000000 R09: 0000000000000000
[  396.922881][T23754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.922889][T23754] R13: 00007f23c21d6038 R14: 00007f23c21d5fa0 R15: 00007ffd78b22478
[  396.922903][T23754]  </TASK>
[  396.922908][T23754] Mem-Info:
[  397.089922][T23754] active_anon:6654 inactive_anon:0 isolated_anon:0
[  397.089922][T23754]  active_file:1348 inactive_file:38375 isolated_file:0
[  397.089922][T23754]  unevictable:1768 dirty:233 writeback:0
[  397.089922][T23754]  slab_reclaimable:11376 slab_unreclaimable:156040
[  397.089922][T23754]  mapped:28579 shmem:2436 pagetables:1090
[  397.089922][T23754]  sec_pagetables:0 bounce:0
[  397.089922][T23754]  kernel_misc_reclaimable:0
[  397.089922][T23754]  free:154807 free_pcp:22000 free_cma:0
[  397.104758][T23754] Node 0 active_anon:13116kB inactive_anon:0kB active_file:3544kB inactive_file:20676kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40904kB dirty:852kB writeback:0kB shmem:4816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5540kB pagetables:2328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  397.115447][T23754] Node 1 active_anon:13500kB inactive_anon:0kB active_file:1848kB inactive_file:132824kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:73412kB dirty:80kB writeback:0kB shmem:4928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7804kB pagetables:2032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  397.125563][T23754] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  397.136706][T23754] lowmem_reserve[]: 0 811 811 811 811
[  397.138949][T23754] Node 0 DMA32 free:180960kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13116kB inactive_anon:0kB active_file:3544kB inactive_file:20676kB unevictable:3536kB writepending:852kB present:1556484kB managed:830904kB mlocked:0kB bounce:0kB free_pcp:36528kB local_pcp:16236kB free_cma:0kB
[  397.151146][T23754] lowmem_reserve[]: 0 0 0 0 0
[  397.153078][T23754] Node 1 DMA32 free:362588kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1196kB inactive_anon:0kB active_file:8kB inactive_file:16kB unevictable:0kB writepending:4kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:21928kB local_pcp:11904kB free_cma:0kB
[  397.164835][T23754] lowmem_reserve[]: 0 0 854 854 854
[  397.166913][T23754] Node 1 Normal free:60320kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12304kB inactive_anon:0kB active_file:1840kB inactive_file:132808kB unevictable:3536kB writepending:76kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:29544kB local_pcp:14660kB free_cma:0kB
[  397.182654][T23754] lowmem_reserve[]: 0 0 0 0 0
[  397.184571][T23754] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  397.189576][T23754] Node 0 DMA32: 1032*4kB (UME) 331*8kB (UME) 152*16kB (UME) 315*32kB (UME) 137*64kB (UME) 91*128kB (UME) 98*256kB (UM) 43*512kB (UME) 18*1024kB (UM) 9*2048kB (UM) 14*4096kB (UM) = 181016kB
[  397.196718][T23754] Node 1 DMA32: 23*4kB (UE) 12*8kB (UME) 2*16kB (UM) 2*32kB (UE) 23*64kB (UME) 9*128kB (UME) 3*256kB (UM) 1*512kB (E) 4*1024kB (UM) 3*2048kB (ME) 85*4096kB (M) = 362588kB
[  397.203551][T23754] Node 1 Normal: 227*4kB (UME) 244*8kB (M) 179*16kB (UME) 330*32kB (UME) 154*64kB (UM) 45*128kB (UM) 17*256kB (UME) 5*512kB (UM) 9*1024kB (UM) 6*2048kB (M) 0*4096kB = 60316kB
[  397.209165][T23754] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  397.211917][T23754] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  397.214685][T23754] 42159 total pagecache pages
[  397.216044][T23754] 0 pages in swap cache
[  397.217647][T23754] Free swap  = 124996kB
[  397.219148][T23754] Total swap = 124996kB
[  397.220654][T23754] 786301 pages RAM
[  397.222009][T23754] 0 pages HighMem/MovableOnly
[  397.223591][T23754] 241343 pages reserved
[  397.225086][T23754] 0 pages cma reserved
[  397.450652][T23774] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7754'.
[  397.523847][T23780] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  397.700015][T23793] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7763'.
[  397.789781][T23799] netlink: 'syz.1.7766': attribute type 32 has an invalid length.
[  397.792308][T23799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7766'.
[  397.795984][T23799] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  397.911849][T23806] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7769'.
[  397.915673][T23806] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7769'.
[  398.006826][T23812] netlink: 'syz.4.7772': attribute type 21 has an invalid length.
[  398.010066][T23812] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7772'.
[  398.013398][T23812] netlink: 'syz.4.7772': attribute type 4 has an invalid length.
[  398.016199][T23812] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7772'.
[  398.208647][T23819] macsec1: entered promiscuous mode
[  398.210849][T23819] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode
[  398.213964][T23819] macsec1: entered allmulticast mode
[  398.216060][T23819] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode
[  398.822015][T23846] __nla_validate_parse: 1 callbacks suppressed
[  398.822034][T23846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7787'.
[  399.629765][T23865] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7796'.
[  399.841976][T23869] wg1 speed is unknown, defaulting to 1000
[  399.845998][T23869] lo speed is unknown, defaulting to 1000
[  400.189446][T23889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7805'.
[  400.243697][T23891] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  400.248200][T23891] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  401.422792][T23913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7814'.
[  401.660886][T23932] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  401.709241][T23938] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7827'.
[  401.951022][T23958] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.7836'.
[  402.084016][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  402.089346][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  402.092920][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  402.096760][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  402.101164][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  402.143849][T23967] wg1 speed is unknown, defaulting to 1000
[  402.147799][T23967] lo speed is unknown, defaulting to 1000
[  402.281546][T23962] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.299837][T23967] chnl_net:caif_netlink_parms(): no params data found
[  402.396983][T23962] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.410735][T23967] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.413856][T23967] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.416980][T23967] bridge_slave_0: entered allmulticast mode
[  402.421226][T23967] bridge_slave_0: entered promiscuous mode
[  402.426001][T23967] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.429388][T23967] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.432480][T23967] bridge_slave_1: entered allmulticast mode
[  402.436345][T23967] bridge_slave_1: entered promiscuous mode
[  402.485103][T23962] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.521699][T23967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.529674][T23967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.586973][T23962] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.601645][T23967] team0: Port device team_slave_0 added
[  402.607774][T23967] team0: Port device team_slave_1 added
[  402.647229][T23967] batman_adv: batadv0: Adding interface: batadv_slave_0
[  402.650302][T23967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.661583][T23967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.668375][T23967] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.671325][T23967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.682195][T23967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.740761][T23967] hsr_slave_0: entered promiscuous mode
[  402.744132][T23967] hsr_slave_1: entered promiscuous mode
[  402.749689][T23967] debugfs: 'hsr0' already exists in 'hsr'
[  402.752124][T23967] Cannot create hsr debugfs directory
[  402.791430][ T5719] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.804982][ T5719] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.872260][ T5719] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.886914][ T5875] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.114088][T23967] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  403.149494][T23967] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  403.162015][T23967] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  403.166237][T23990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7846'.
[  403.170456][T23967] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  403.173361][T23990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7846'.
[  403.249564][   T56] block nbd1: Receive control failed (result -32)
[  403.381896][T23967] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.414372][T23967] 8021q: adding VLAN 0 to HW filter on device team0
[  403.440695][ T2177] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.443504][ T2177] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.459697][ T2177] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.462217][ T2177] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.641450][T23967] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.689288][T24023] syzkaller1: entered promiscuous mode
[  403.691724][T24023] syzkaller1: entered allmulticast mode
[  403.792805][T23967] veth0_vlan: entered promiscuous mode
[  403.800591][T23967] veth1_vlan: entered promiscuous mode
[  403.822806][T23967] veth0_macvtap: entered promiscuous mode
[  403.826990][T23967] veth1_macvtap: entered promiscuous mode
[  403.839332][T23967] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.852565][T23967] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.861187][ T5875] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.864882][ T5875] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.870870][ T5875] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.874271][ T5875] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.971327][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.974023][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.000471][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.002970][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.060267][   T61] block nbd0: Possible stuck request ffff8880213f0000: control (read@0,4096B). Runtime 120 seconds
[  404.137570][ T5236] Bluetooth: hci5: command tx timeout
[  404.261500][T24034] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  404.264428][T24028] IPVS: starting estimator thread 0...
[  404.348655][T24038] IPVS: using max 38 ests per chain, 91200 per kthread
[  404.766630][T24058] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.799731][T24059] 8021q: adding VLAN 0 to HW filter on device batadv1
[  404.804102][T24059] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  404.812944][T24059] team0: Failed to send options change via netlink (err -105)
[  404.815952][T24059] team0: Port device batadv1 added
[  405.434740][T24058] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.446940][T24061] lo: entered allmulticast mode
[  405.450880][T24061] lo: left allmulticast mode
[  405.530560][T24065] tc_dump_action: action bad kind
[  406.217639][ T5236] Bluetooth: hci5: command tx timeout
[  406.493398][T24058] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.710838][T24079] netlink: 'syz.4.7878': attribute type 6 has an invalid length.
[  406.858412][T24058] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.944106][T24085] can: request_module (can-proto-0) failed.
[  406.956260][T22422] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.965902][T22422] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.982796][ T5719] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.016951][ T5719] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.189340][T24096] tipc: Started in network mode
[  407.190951][T24096] tipc: Node identity c22c9734bc57, cluster identity 4711
[  407.193711][T24096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.196878][T24096] syzkaller0: entered promiscuous mode
[  407.198875][T24096] syzkaller0: entered allmulticast mode
[  407.221855][T24096] tipc: Resetting bearer <eth:syzkaller0>
[  407.247511][T24095] tipc: Resetting bearer <eth:syzkaller0>
[  407.278270][T24095] tipc: Disabling bearer <eth:syzkaller0>
[  407.826403][T24115] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  408.120434][T24121] pimreg3: entered allmulticast mode
[  408.297563][ T5236] Bluetooth: hci5: command tx timeout
[  408.499735][T24133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7901'.
[  408.555935][T24139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7903'.
[  408.705180][T24151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7910'.
[  408.734512][T24151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7910'.
[  408.743802][T24153] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7911'.
[  408.747934][T24153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7911'.
[  409.012842][T24180] netlink: 'syz.1.7923': attribute type 1 has an invalid length.
[  409.016389][T24180] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7923'.
[  409.096822][T24188] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  409.422367][T24213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7939'.
[  409.733306][T24236] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7951'.
[  409.784849][T24242] netlink: 'syz.1.7953': attribute type 1 has an invalid length.
[  409.787772][T24242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7953'.
[  409.848920][T24246] netlink: 'syz.1.7956': attribute type 8 has an invalid length.
[  410.212178][T24259] netlink: 'syz.4.7961': attribute type 2 has an invalid length.
[  410.215363][T24259] netlink: 'syz.4.7961': attribute type 1 has an invalid length.
[  410.377388][ T5236] Bluetooth: hci5: command tx timeout
[  410.384143][T24265] IPVS: Scheduler module ip_vs_sip not found
[  411.374946][T24325] netlink: 'syz.5.7991': attribute type 1 has an invalid length.
[  411.473735][T24333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  412.377300][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  412.635129][T24415] netlink: 'syz.4.8032': attribute type 1 has an invalid length.
[  412.642735][T24415] netlink: 'syz.4.8032': attribute type 2 has an invalid length.
[  412.645295][T24417] veth0_to_bond: entered promiscuous mode
[  413.521290][T24464] __nla_validate_parse: 11 callbacks suppressed
[  413.521307][T24464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8056'.
[  414.217355][ T1270] page_pool_release_retry() stalled pool shutdown: id 24, 3360 inflight 301 sec
[  421.977573][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  428.662045][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  428.665401][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  428.670188][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  428.674142][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  428.677336][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  428.708214][T24474] wg1 speed is unknown, defaulting to 1000
[  428.710870][T24474] lo speed is unknown, defaulting to 1000
[  428.771587][ T5236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  428.776223][ T5236] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  428.781855][ T5236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  428.785182][ T5236] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  428.791296][ T5236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  428.832919][T24477] wg1 speed is unknown, defaulting to 1000
[  428.841058][T24477] lo speed is unknown, defaulting to 1000
[  428.841220][T24474] chnl_net:caif_netlink_parms(): no params data found
[  428.932406][T24474] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.935063][T24474] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.937567][T24474] bridge_slave_0: entered allmulticast mode
[  428.940401][T24474] bridge_slave_0: entered promiscuous mode
[  428.945306][T24474] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.948520][T24474] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.951446][T24474] bridge_slave_1: entered allmulticast mode
[  428.955248][T24474] bridge_slave_1: entered promiscuous mode
[  428.998563][T24474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.009312][T24474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.065151][T24474] team0: Port device team_slave_0 added
[  429.069692][T24474] team0: Port device team_slave_1 added
[  429.111309][T24474] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.114007][T24474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.124398][T24474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.129406][T24477] chnl_net:caif_netlink_parms(): no params data found
[  429.137379][T24474] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.140070][T24474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.150416][T24474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.254582][T24474] hsr_slave_0: entered promiscuous mode
[  429.258014][T24474] hsr_slave_1: entered promiscuous mode
[  429.260919][T24474] debugfs: 'hsr0' already exists in 'hsr'
[  429.263236][T24474] Cannot create hsr debugfs directory
[  429.308967][T24477] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.311947][T24477] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.314815][T24477] bridge_slave_0: entered allmulticast mode
[  429.319211][T24477] bridge_slave_0: entered promiscuous mode
[  429.329626][T24477] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.332492][T24477] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.335541][T24477] bridge_slave_1: entered allmulticast mode
[  429.339070][T24477] bridge_slave_1: entered promiscuous mode
[  429.397835][T24477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.411707][T24477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.472793][T24477] team0: Port device team_slave_0 added
[  429.518078][T24477] team0: Port device team_slave_1 added
[  429.598435][T24477] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.601244][T24477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.616866][T24477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.635605][T24477] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.639650][T24477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.650196][T24477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.741444][T24477] hsr_slave_0: entered promiscuous mode
[  429.744734][T24477] hsr_slave_1: entered promiscuous mode
[  429.753486][T24477] debugfs: 'hsr0' already exists in 'hsr'
[  429.755821][T24477] Cannot create hsr debugfs directory
[  429.810983][ T5849] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  429.815188][ T5849] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  429.819778][ T5849] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  429.824282][ T5849] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  429.835547][ T5849] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  429.966797][T24491] wg1 speed is unknown, defaulting to 1000
[  429.975920][T24491] lo speed is unknown, defaulting to 1000
[  430.183551][T24491] chnl_net:caif_netlink_parms(): no params data found
[  430.278634][T24491] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.281717][T24491] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.284637][T24491] bridge_slave_0: entered allmulticast mode
[  430.288457][T24491] bridge_slave_0: entered promiscuous mode
[  430.293252][T24491] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.296210][T24491] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.303666][T24491] bridge_slave_1: entered allmulticast mode
[  430.308179][T24491] bridge_slave_1: entered promiscuous mode
[  430.347475][T24491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.354959][T24491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.388878][T24491] team0: Port device team_slave_0 added
[  430.394002][T24491] team0: Port device team_slave_1 added
[  430.428984][T24491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.431726][T24491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.441869][T24491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.448109][T24491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.450290][T24491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.458433][T24491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.495080][T24491] hsr_slave_0: entered promiscuous mode
[  430.497962][T24491] hsr_slave_1: entered promiscuous mode
[  430.500780][T24491] debugfs: 'hsr0' already exists in 'hsr'
[  430.502934][T24491] Cannot create hsr debugfs directory
[  430.699171][ T5236] Bluetooth: hci6: command tx timeout
[  430.857450][ T5236] Bluetooth: hci7: command tx timeout
[  431.897494][ T5236] Bluetooth: hci8: command tx timeout
[  432.777854][ T5236] Bluetooth: hci6: command tx timeout
[  432.937442][ T5236] Bluetooth: hci7: command tx timeout
[  433.987293][ T5236] Bluetooth: hci8: command tx timeout
[  434.138701][   T61] block nbd0: Possible stuck request ffff8880213f0000: control (read@0,4096B). Runtime 150 seconds
[  434.857413][ T5236] Bluetooth: hci6: command tx timeout
[  435.027642][ T5236] Bluetooth: hci7: command tx timeout
[  436.057804][ T5236] Bluetooth: hci8: command tx timeout
[  436.937383][ T5236] Bluetooth: hci6: command tx timeout
[  437.097297][ T5236] Bluetooth: hci7: command tx timeout
[  438.137840][ T5236] Bluetooth: hci8: command tx timeout
[  444.377497][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  450.137433][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  464.218908][   T61] block nbd0: Possible stuck request ffff8880213f0000: control (read@0,4096B). Runtime 180 seconds
[  466.674835][ T5296] udevd[5296]: worker [18060] /devices/virtual/block/nbd0 timeout; kill it
[  466.678784][ T5296] udevd[5296]: seq 16313 '/devices/virtual/block/nbd0' killed
[  474.537645][ T5918] page_pool_release_retry() stalled pool shutdown: id 24, 3360 inflight 362 sec
[  489.759923][ T5849] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  489.764810][ T5849] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  489.775563][ T5849] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  489.787780][ T5849] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  489.792551][ T5849] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  489.824999][T24509] wg1 speed is unknown, defaulting to 1000
[  489.835220][ T5236] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  489.841416][ T5236] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  489.845563][ T5236] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  489.851139][ T5236] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  489.855396][ T5236] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  489.859388][T24509] lo speed is unknown, defaulting to 1000
[  490.043974][T24511] wg1 speed is unknown, defaulting to 1000
[  490.051554][T24511] lo speed is unknown, defaulting to 1000
[  490.093997][T24509] chnl_net:caif_netlink_parms(): no params data found
[  490.205632][T24509] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.208643][T24509] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.211616][T24509] bridge_slave_0: entered allmulticast mode
[  490.215533][T24509] bridge_slave_0: entered promiscuous mode
[  490.219928][T24509] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.222373][T24509] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.224842][T24509] bridge_slave_1: entered allmulticast mode
[  490.229177][T24509] bridge_slave_1: entered promiscuous mode
[  490.263102][T24509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.286689][T24509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.357920][T24509] team0: Port device team_slave_0 added
[  490.362042][T24509] team0: Port device team_slave_1 added
[  490.392561][T24509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  490.395326][T24509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  490.408339][T24509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  490.412819][T24511] chnl_net:caif_netlink_parms(): no params data found
[  490.421390][T24509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  490.423628][T24509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  490.433032][T24509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  490.546857][T24509] hsr_slave_0: entered promiscuous mode
[  490.550295][T24509] hsr_slave_1: entered promiscuous mode
[  490.553168][T24509] debugfs: 'hsr0' already exists in 'hsr'
[  490.555519][T24509] Cannot create hsr debugfs directory
[  490.589735][T24511] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.592611][T24511] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.594910][T24511] bridge_slave_0: entered allmulticast mode
[  490.607307][T24511] bridge_slave_0: entered promiscuous mode
[  490.612050][T24511] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.614927][T24511] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.618695][T24511] bridge_slave_1: entered allmulticast mode
[  490.622710][T24511] bridge_slave_1: entered promiscuous mode
[  490.766991][ T5236] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  490.772463][ T5236] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  490.776407][ T5236] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  490.782260][ T5236] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  490.785706][ T5236] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  490.861325][T24511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.871142][T24511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.924336][T24511] team0: Port device team_slave_0 added
[  490.933444][T24526] wg1 speed is unknown, defaulting to 1000
[  490.938226][T24511] team0: Port device team_slave_1 added
[  490.958254][T24526] lo speed is unknown, defaulting to 1000
[  490.995705][T24511] batman_adv: batadv0: Adding interface: batadv_slave_0
[  491.006115][T24511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.018323][T24511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  491.036965][T24511] batman_adv: batadv0: Adding interface: batadv_slave_1
[  491.043933][T24511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.055184][T24511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  491.100199][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  491.182532][T24511] hsr_slave_0: entered promiscuous mode
[  491.185737][T24511] hsr_slave_1: entered promiscuous mode
[  491.188956][T24511] debugfs: 'hsr0' already exists in 'hsr'
[  491.191243][T24511] Cannot create hsr debugfs directory
[  491.455098][T24526] chnl_net:caif_netlink_parms(): no params data found
[  491.659715][T24526] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.662645][T24526] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.665687][T24526] bridge_slave_0: entered allmulticast mode
[  491.678462][T24526] bridge_slave_0: entered promiscuous mode
[  491.695433][T24526] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.699259][T24526] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.702517][T24526] bridge_slave_1: entered allmulticast mode
[  491.706633][T24526] bridge_slave_1: entered promiscuous mode
[  491.759221][T24526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  491.765880][T24526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  491.801392][T24526] team0: Port device team_slave_0 added
[  491.816167][T24526] team0: Port device team_slave_1 added
[  491.819012][ T5849] Bluetooth: hci9: command tx timeout
[  491.862937][T24526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  491.865771][T24526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.875949][T24526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  491.882505][T24526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  491.885578][T24526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.896409][T24526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  491.900927][ T5849] Bluetooth: hci10: command tx timeout
[  491.985416][T24526] hsr_slave_0: entered promiscuous mode
[  491.989267][T24526] hsr_slave_1: entered promiscuous mode
[  491.992266][T24526] debugfs: 'hsr0' already exists in 'hsr'
[  491.994550][T24526] Cannot create hsr debugfs directory
[  492.857774][ T5849] Bluetooth: hci11: command tx timeout
[  493.897679][ T5849] Bluetooth: hci9: command tx timeout
[  493.987824][ T5849] Bluetooth: hci10: command tx timeout
[  494.297712][   T61] block nbd0: Possible stuck request ffff8880213f0000: control (read@0,4096B). Runtime 210 seconds
[  494.947549][ T5849] Bluetooth: hci11: command tx timeout
[  495.978161][ T5849] Bluetooth: hci9: command tx timeout
[  496.058698][ T5849] Bluetooth: hci10: command tx timeout
[  497.017800][ T5849] Bluetooth: hci11: command tx timeout
[  498.067768][ T5849] Bluetooth: hci9: command tx timeout
[  498.147863][ T5849] Bluetooth: hci10: command tx timeout
[  498.299161][ T5849] Bluetooth: hci4: command 0x0406 tx timeout
[  499.097638][ T5236] Bluetooth: hci11: command tx timeout
[  503.417839][ T5849] Bluetooth: hci3: command 0x0406 tx timeout
[  506.457313][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  507.738146][   T34] INFO: task kworker/u8:1:13 blocked for more than 143 seconds.
[  507.741262][   T34]       Not tainted syzkaller #0
[  507.743461][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  507.749438][   T34] task:kworker/u8:1    state:D stack:22488 pid:13    tgid:13    ppid:2      task_flags:0x4208060 flags:0x00004000
[  507.754150][   T34] Workqueue: netns cleanup_net
[  507.756167][   T34] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  507.757606][   T34]  <TASK>
[  507.758974][   T34]  __schedule+0x1798/0x4cc0
[  507.760817][   T34]  ? __lock_acquire+0xab9/0xd20
[  507.762757][   T34]  ? __lock_acquire+0xab9/0xd20
[  507.764688][   T34]  ? __pfx___schedule+0x10/0x10
[  507.766794][   T34]  ? schedule+0x91/0x360
[  507.768782][   T34]  schedule+0x165/0x360
[  507.770400][   T34]  schedule_preempt_disabled+0x13/0x30
[  507.772622][   T34]  __mutex_lock+0x7e6/0x1350
[  507.774488][   T34]  ? __mutex_lock+0x5bb/0x1350
[  507.776467][   T34]  ? rdma_dev_change_netns+0x39/0x300
[  507.778760][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  507.780820][   T34]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  507.806846][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  507.809566][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  507.811687][   T34]  ? _raw_spin_unlock+0x28/0x50
[  507.813645][   T34]  rdma_dev_change_netns+0x39/0x300
[  507.815807][   T34]  rdma_dev_exit_net+0x203/0x340
[  507.823872][   T34]  ? __pfx___might_resched+0x10/0x10
[  507.826128][   T34]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  507.829147][   T34]  ? net_generic+0x1e/0x240
[  507.831026][   T34]  ? mutex_is_locked+0x17/0x50
[  507.832862][   T34]  ? rtnl_is_locked+0x15/0x20
[  507.834708][   T34]  ops_undo_list+0x49a/0x990
[  507.836569][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  507.839165][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  507.841226][   T34]  cleanup_net+0x4c5/0x800
[  507.843050][   T34]  ? __pfx_cleanup_net+0x10/0x10
[  507.845041][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  507.847279][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  507.849557][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  507.851872][   T34]  process_scheduled_works+0xae1/0x17b0
[  507.854138][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  507.856586][   T34]  worker_thread+0x8a0/0xda0
[  507.858937][   T34]  kthread+0x711/0x8a0
[  507.860675][   T34]  ? __pfx_worker_thread+0x10/0x10
[  507.862773][   T34]  ? __pfx_kthread+0x10/0x10
[  507.864689][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  507.866818][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  507.869239][   T34]  ? __pfx_kthread+0x10/0x10
[  507.871175][   T34]  ret_from_fork+0x3fc/0x770
[  507.873063][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  507.875195][   T34]  ? __switch_to_asm+0x39/0x70
[  507.877255][   T34]  ? __switch_to_asm+0x33/0x70
[  507.879407][   T34]  ? __pfx_kthread+0x10/0x10
[  507.881319][   T34]  ret_from_fork_asm+0x1a/0x30
[  507.883333][   T34]  </TASK>
[  507.884828][   T34] INFO: task syz.2.6877:21761 blocked for more than 143 seconds.
[  507.888223][   T34]       Not tainted syzkaller #0
[  507.890241][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  507.893705][   T34] task:syz.2.6877      state:D stack:23608 pid:21761 tgid:21760 ppid:5852   task_flags:0x400140 flags:0x00004004
[  507.898919][   T34] Call Trace:
[  507.900303][   T34]  <TASK>
[  507.901489][   T34]  __schedule+0x1798/0x4cc0
[  507.903385][   T34]  ? validate_chain+0x897/0x2140
[  507.905562][   T34]  ? __lock_acquire+0xab9/0xd20
[  507.907708][   T34]  ? __pfx___schedule+0x10/0x10
[  507.909707][   T34]  ? schedule+0x91/0x360
[  507.911403][   T34]  schedule+0x165/0x360
[  507.913082][   T34]  schedule_timeout+0x9a/0x270
[  507.915005][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  507.917486][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  507.919616][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  507.921738][   T34]  ? wait_for_completion+0x267/0x5d0
[  507.923909][   T34]  wait_for_completion+0x2bf/0x5d0
[  507.926046][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  507.928680][   T34]  ? up_write+0x1c4/0x420
[  507.930446][   T34]  ? remove_client_context+0xc0/0x1e0
[  507.932667][   T34]  disable_device+0x1c6/0x320
[  507.934611][   T34]  ? __pfx_disable_device+0x10/0x10
[  507.936661][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  507.938920][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  507.941371][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  507.943709][   T34]  nldev_dellink+0x2d1/0x320
[  507.945633][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  507.948471][   T34]  ? apparmor_capable+0x137/0x1b0
[  507.950539][   T34]  ? bpf_lsm_capable+0x9/0x20
[  507.952491][   T34]  ? security_capable+0x7e/0x2e0
[  507.954562][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  507.956559][   T34]  rdma_nl_rcv+0x6ae/0x980
[  507.958402][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  507.960362][   T34]  ? __lock_acquire+0xab9/0xd20
[  507.962292][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  507.964387][   T34]  netlink_unicast+0x82f/0x9e0
[  507.966390][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  507.968810][   T34]  ? netlink_sendmsg+0x642/0xb30
[  507.970898][   T34]  ? skb_put+0x11b/0x210
[  507.972628][   T34]  netlink_sendmsg+0x805/0xb30
[  507.974576][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  507.976745][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  507.979116][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  507.981243][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  507.983422][   T34]  __sock_sendmsg+0x21c/0x270
[  507.985354][   T34]  ____sys_sendmsg+0x505/0x830
[  507.987515][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  507.989683][   T34]  ? import_iovec+0x74/0xa0
[  507.991541][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  507.993407][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  507.995579][   T34]  ? __fget_files+0x2a/0x420
[  507.997549][   T34]  ? __fget_files+0x3a0/0x420
[  507.999433][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  508.001443][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  508.003709][   T34]  ? rcu_is_watching+0x15/0xb0
[  508.006242][   T34]  ? do_syscall_64+0xbe/0x3b0
[  508.008484][   T34]  do_syscall_64+0xfa/0x3b0
[  508.010404][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  508.012526][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.015039][   T34]  ? exc_page_fault+0x9f/0xf0
[  508.017079][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.019412][   T34] RIP: 0033:0x7fad4838eba9
[  508.021227][   T34] RSP: 002b:00007fad4928e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  508.024534][   T34] RAX: ffffffffffffffda RBX: 00007fad485d5fa0 RCX: 00007fad4838eba9
[  508.027869][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[  508.031110][   T34] RBP: 00007fad48411e19 R08: 0000000000000000 R09: 0000000000000000
[  508.034394][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.038129][   T34] R13: 00007fad485d6038 R14: 00007fad485d5fa0 R15: 00007ffe0adf8bd8
[  508.041341][   T34]  </TASK>
[  508.042635][   T34] INFO: task syz.0.7155:22387 blocked for more than 143 seconds.
[  508.045577][   T34]       Not tainted syzkaller #0
[  508.047640][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.051187][   T34] task:syz.0.7155      state:D stack:24296 pid:22387 tgid:22386 ppid:5854   task_flags:0x400140 flags:0x00004004
[  508.055937][   T34] Call Trace:
[  508.057447][   T34]  <TASK>
[  508.058624][   T34]  __schedule+0x1798/0x4cc0
[  508.060417][   T34]  ? __lock_acquire+0xab9/0xd20
[  508.062392][   T34]  ? __lock_acquire+0xab9/0xd20
[  508.064374][   T34]  ? __pfx___schedule+0x10/0x10
[  508.066331][   T34]  ? schedule+0x91/0x360
[  508.068367][   T34]  schedule+0x165/0x360
[  508.070155][   T34]  schedule_preempt_disabled+0x13/0x30
[  508.072266][   T34]  __mutex_lock+0x7e6/0x1350
[  508.074133][   T34]  ? __mutex_lock+0x5bb/0x1350
[  508.076127][   T34]  ? __ib_unregister_device+0x284/0x3f0
[  508.078650][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  508.080748][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  508.083255][   T34]  ? __up_read+0x280/0x680
[  508.085114][   T34]  ? __pfx___up_read+0x10/0x10
[  508.087175][   T34]  __ib_unregister_device+0x284/0x3f0
[  508.089333][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  508.091701][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  508.093996][   T34]  nldev_dellink+0x2d1/0x320
[  508.095907][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  508.098267][   T34]  ? is_bpf_text_address+0x26/0x2b0
[  508.100451][   T34]  ? apparmor_capable+0x137/0x1b0
[  508.102502][   T34]  ? bpf_lsm_capable+0x9/0x20
[  508.104482][   T34]  ? security_capable+0x7e/0x2e0
[  508.106478][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  508.109073][   T34]  rdma_nl_rcv+0x6ae/0x980
[  508.110896][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  508.112887][   T34]  ? __lock_acquire+0xab9/0xd20
[  508.114874][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  508.116988][   T34]  netlink_unicast+0x82f/0x9e0
[  508.118994][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  508.121072][   T34]  ? netlink_sendmsg+0x642/0xb30
[  508.123094][   T34]  ? skb_put+0x11b/0x210
[  508.124745][   T34]  netlink_sendmsg+0x805/0xb30
[  508.126721][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.129448][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  508.131448][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  508.133550][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.135676][   T34]  __sock_sendmsg+0x21c/0x270
[  508.137786][   T34]  ____sys_sendmsg+0x505/0x830
[  508.139757][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  508.141813][   T34]  ? import_iovec+0x74/0xa0
[  508.143565][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  508.145403][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  508.147939][   T34]  ? __fget_files+0x2a/0x420
[  508.149944][   T34]  ? __fget_files+0x3a0/0x420
[  508.151844][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  508.153735][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  508.156003][   T34]  ? rcu_is_watching+0x15/0xb0
[  508.158161][   T34]  ? do_syscall_64+0xbe/0x3b0
[  508.160037][   T34]  do_syscall_64+0xfa/0x3b0
[  508.161935][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  508.164132][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.166625][   T34]  ? exc_page_fault+0x9f/0xf0
[  508.168656][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.171087][   T34] RIP: 0033:0x7f6046f8eba9
[  508.172913][   T34] RSP: 002b:00007f6047eac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  508.176311][   T34] RAX: ffffffffffffffda RBX: 00007f60471d5fa0 RCX: 00007f6046f8eba9
[  508.179542][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  508.182704][   T34] RBP: 00007f6047011e19 R08: 0000000000000000 R09: 0000000000000000
[  508.186052][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.189746][   T34] R13: 00007f60471d6038 R14: 00007f60471d5fa0 R15: 00007ffdcfe4c978
[  508.192919][   T34]  </TASK>
[  508.194297][   T34] 
[  508.194297][   T34] Showing all locks held in the system:
[  508.200694][   T34] 4 locks held by kworker/u8:1/13:
[  508.202774][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  508.207389][   T34]  #1: ffffc90000107bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  508.211546][   T34]  #2: ffffffff8f52c450 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  508.215222][   T34]  #3: ffff88802a20c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  508.220153][   T34] 1 lock held by khungtaskd/34:
[  508.222163][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  508.226176][   T34] 2 locks held by getty/5678:
[  508.228253][   T34]  #0: ffff88810f20d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  508.232082][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  508.236238][   T34] 1 lock held by udevd/18060:
[  508.238562][   T34]  #0: ffff8880212cd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  508.242251][   T34] 2 locks held by syz.2.6877/21761:
[  508.244681][   T34]  #0: ffffffff99e6a918 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  508.249044][   T34]  #1: ffff88802a20c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  508.253628][   T34] 2 locks held by syz.0.7155/22387:
[  508.255773][   T34]  #0: ffffffff99e6a918 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  508.260116][   T34]  #1: ffff88802a20c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  508.264780][   T34] 2 locks held by syz.3.7619/23476:
[  508.266975][   T34]  #0: ffffffff8f52c450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  508.270795][   T34]  #1: ffff88802a20c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  508.275190][   T34] 6 locks held by syz.4.8046/24442:
[  508.277637][   T34]  #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.280983][   T34]  #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  508.284655][   T34]  #2: ffff888021378a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870
[  508.288926][   T34]  #3: ffff8880211adf58 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0
[  508.292614][   T34]  #4: ffff8880211ad8f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  508.297757][   T34]  #5: ffff8880211ad930 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  508.302771][   T34] 2 locks held by syz.1.8052/24457:
[  508.304968][   T34]  #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.308602][   T34]  #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  508.312115][   T34] 2 locks held by syz.5.8059/24470:
[  508.314138][   T34]  #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.317520][   T34]  #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  508.321136][   T34] 2 locks held by syz-executor/24474:
[  508.323216][   T34]  #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.326439][   T34]  #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  508.330097][   T34] 2 locks held by syz-executor/24477:
[  508.332203][   T34]  #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.335441][   T34]  #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  508.339270][   T34] 2 locks held by syz-executor/24491:
[  508.341423][   T34]  #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.344692][   T34]  #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  508.348667][   T34] 2 locks held by syz-executor/24509:
[  508.350813][   T34]  #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.354049][   T34]  #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  508.357714][   T34] 2 locks held by syz-executor/24511:
[  508.359776][   T34]  #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.363037][   T34]  #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  508.366887][   T34] 2 locks held by syz-executor/24526:
[  508.369412][   T34]  #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.372644][   T34]  #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  508.376162][   T34] 
[  508.378149][   T34] =============================================
[  508.378149][   T34] 
[  508.381440][   T34] NMI backtrace for cpu 0
[  508.381454][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  508.381469][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  508.381477][   T34] Call Trace:
[  508.381483][   T34]  <TASK>
[  508.381491][   T34]  dump_stack_lvl+0x189/0x250
[  508.381515][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  508.381531][   T34]  ? __pfx__printk+0x10/0x10
[  508.381566][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  508.381588][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  508.381606][   T34]  ? __pfx__printk+0x10/0x10
[  508.381627][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  508.381651][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  508.381670][   T34]  watchdog+0xf93/0xfe0
[  508.381694][   T34]  ? watchdog+0x1de/0xfe0
[  508.381716][   T34]  kthread+0x711/0x8a0
[  508.381735][   T34]  ? __pfx_watchdog+0x10/0x10
[  508.381751][   T34]  ? __pfx_kthread+0x10/0x10
[  508.381769][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  508.381787][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  508.381805][   T34]  ? __pfx_kthread+0x10/0x10
[  508.381821][   T34]  ret_from_fork+0x3fc/0x770
[  508.381839][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  508.381857][   T34]  ? __switch_to_asm+0x39/0x70
[  508.381872][   T34]  ? __switch_to_asm+0x33/0x70
[  508.381887][   T34]  ? __pfx_kthread+0x10/0x10
[  508.381903][   T34]  ret_from_fork_asm+0x1a/0x30
[  508.381961][   T34]  </TASK>
[  508.381967][   T34] Sending NMI from CPU 0 to CPUs 1:
[  508.440174][    C1] NMI backtrace for cpu 1
[  508.440195][    C1] CPU: 1 UID: 0 PID: 22422 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  508.440213][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  508.440222][    C1] Workqueue: bat_events batadv_nc_worker
[  508.440249][    C1] RIP: 0010:__local_bh_disable_ip+0x11a/0x190
[  508.440267][    C1] Code: 00 85 c0 74 09 31 db 31 ff e8 72 07 19 00 65 4c 8b 34 25 08 80 a0 92 49 81 c6 e0 14 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 dc 3a 9e 00 49 89 1e 48 c7 04 24 0e 36 e0 45 4b
[  508.440279][    C1] RSP: 0018:ffffc900029af8c0 EFLAGS: 00000246
[  508.440291][    C1] RAX: 1ffff110040ee29c RBX: 0000000000000000 RCX: 00000000015ee100
[  508.440300][    C1] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000
[  508.440308][    C1] RBP: ffffc900029af960 R08: ffffffff8fa39837 R09: 1ffffffff1f47306
[  508.440317][    C1] R10: dffffc0000000000 R11: fffffbfff1f47307 R12: 1ffff92000535f18
[  508.440326][    C1] R13: dffffc0000000000 R14: ffff8880207714e0 R15: dffffc0000000000
[  508.440336][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  508.440345][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  508.440354][    C1] CR2: 000055bdd8be55c8 CR3: 0000000022284000 CR4: 00000000000006f0
[  508.440386][    C1] Call Trace:
[  508.440393][    C1]  <TASK>
[  508.440402][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  508.440415][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  508.440427][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  508.440440][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  508.440457][    C1]  ? batadv_nc_purge_paths+0xe7/0x3b0
[  508.440479][    C1]  _raw_spin_lock_bh+0x1c/0x50
[  508.440497][    C1]  ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10
[  508.440514][    C1]  batadv_nc_purge_paths+0xe7/0x3b0
[  508.440537][    C1]  batadv_nc_worker+0x369/0x610
[  508.440554][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  508.440568][    C1]  process_scheduled_works+0xae1/0x17b0
[  508.440593][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  508.440612][    C1]  worker_thread+0x8a0/0xda0
[  508.440627][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  508.440647][    C1]  ? __kthread_parkme+0x7b/0x200
[  508.440665][    C1]  kthread+0x711/0x8a0
[  508.440681][    C1]  ? __pfx_worker_thread+0x10/0x10
[  508.440693][    C1]  ? __pfx_kthread+0x10/0x10
[  508.440708][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  508.440723][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  508.440741][    C1]  ? __pfx_kthread+0x10/0x10
[  508.440755][    C1]  ret_from_fork+0x3fc/0x770
[  508.440770][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  508.440784][    C1]  ? __switch_to_asm+0x39/0x70
[  508.440801][    C1]  ? __switch_to_asm+0x33/0x70
[  508.440816][    C1]  ? __pfx_kthread+0x10/0x10
[  508.440830][    C1]  ret_from_fork_asm+0x1a/0x30
[  508.440853][    C1]  </TASK>
[  508.441156][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  508.548524][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  508.551983][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  508.555445][   T34] Call Trace:
[  508.556540][   T34]  <TASK>
[  508.557575][   T34]  dump_stack_lvl+0x99/0x250
[  508.559134][   T34]  ? __asan_memcpy+0x40/0x70
[  508.560622][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  508.562401][   T34]  ? __pfx__printk+0x10/0x10
[  508.564035][   T34]  vpanic+0x281/0x750
[  508.565449][   T34]  ? __pfx_vpanic+0x10/0x10
[  508.566859][   T34]  ? preempt_schedule+0xae/0xc0
[  508.568565][   T34]  ? preempt_schedule_common+0x83/0xd0
[  508.570313][   T34]  panic+0xb9/0xc0
[  508.571527][   T34]  ? __pfx_panic+0x10/0x10
[  508.572898][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  508.574699][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  508.576705][   T34]  watchdog+0xfd2/0xfe0
[  508.578295][   T34]  ? watchdog+0x1de/0xfe0
[  508.579752][   T34]  kthread+0x711/0x8a0
[  508.581157][   T34]  ? __pfx_watchdog+0x10/0x10
[  508.582749][   T34]  ? __pfx_kthread+0x10/0x10
[  508.584364][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  508.586188][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  508.588261][   T34]  ? __pfx_kthread+0x10/0x10
[  508.590109][   T34]  ret_from_fork+0x3fc/0x770
[  508.591982][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  508.593981][   T34]  ? __switch_to_asm+0x39/0x70
[  508.595857][   T34]  ? __switch_to_asm+0x33/0x70
[  508.597750][   T34]  ? __pfx_kthread+0x10/0x10
[  508.599618][   T34]  ret_from_fork_asm+0x1a/0x30
[  508.601559][   T34]  </TASK>
[  508.603520][   T34] Kernel Offset: disabled
[  508.605214][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:51:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff8880205e8237 R9 =1ffff110040bd046 R10=dffffc0000000000 R11=ffffffff854f4700
R12=dffffc0000000000 R13=ffffffff99afd8ea R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f477c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7a23effa10 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000061 0000000030323038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=696b66722f393379 68702f3131323038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff8881066df400 RCX=03addfd2b1cf3500 RDX=0000000000000000
RSI=ffffffff8be33860 RDI=ffffffff8be33820 RBP=fffffffffffffe38 RSP=ffffc90003fcf998
R8 =0000000000000000 R9 =ffffffff8b479322 R10=dffffc0000000000 R11=ffffffff8b479250
R12=dffffc0000000000 R13=ffffffff8b479322 R14=ffffffff8e139f20 R15=000000000000030f
RIP=ffffffff81a66005 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7a23e8b962 CR3=000000002834c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
