last executing test programs:

16.553461395s ago: executing program 1 (id=5769):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0xdad9}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x6, 0x3ff, 0x28, @empty, @private2, 0x8, 0x8000, 0x9, 0x5}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan1\x00'})
socket(0x21, 0x5, 0x110)

16.483805779s ago: executing program 1 (id=5772):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800)
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000a40))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800", @ANYBLOB="9c49513c"], 0x1c}], 0x1}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x10, 0x80002, 0x0)
getsockopt(r5, 0x1, 0x6, &(0x7f0000000540)=""/67, &(0x7f0000000480)=0x43)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6163d90a909e3caa}, 0xc, &(0x7f00000001c0)={&(0x7f0000000bc0)={0x80, 0x1, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x70)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r11, 0xb0b}, 0x14}}, 0x0)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000c40)={0x19c, r12, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r11, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40051}, 0x20000004)

16.374140282s ago: executing program 1 (id=5773):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0104000001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44010)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r5, @ANYBLOB="0500330011"], 0x2c}}, 0x80)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x10)
r10 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
readv(r11, &(0x7f0000002540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000040)={0x1000, 0x7fff, 0x3, 0x2}, 0x10)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf25051600800c00010002"], 0x1618}], 0x1}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r9, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41)

16.32424636s ago: executing program 2 (id=5775):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x80, &(0x7f0000000040)={&(0x7f0000000140)=@newtclass={0x0, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x7, 0xfff2}, {0xfff1, 0x7}, {0xffe0, 0x10}}}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)

16.262623291s ago: executing program 2 (id=5776):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000007000000e27f000003"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x8, 0x0, 0x1}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000018000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002d0003050000f0000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r5, @ANYBLOB="000400002c45000008000a00", @ANYRES32=r5, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@deltfilter={0x44, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0x7}, {0xc, 0x8}, {0x3, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x9e}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @TCA_RATE={0x6, 0x5, {0x97, 0x60}}, @TCA_RATE={0x6, 0x5, {0xac, 0xf7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x80000000000000a, 0x2, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r7)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r8, @ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x40001)
r9 = socket$netlink(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r11 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYRES32=r8, @ANYRES16=r10, @ANYBLOB="010026bd70000000000025340b0000000000006b58a3a777fdfe46f45c570000000000000000f645b214fe973119bc9db4ac02662871c139d9d908e300000000000079d64a187baad828a7800700b520355b046121687b2b27e2ee790692c7aa34745eb67bd63a7995ff5b7068fecfebdeaf208f3480201a9be46ad9abd63143e4ff010000041a33b1958bc7e4cb6f4d65a1a7aa7226d7e9e0fa5862554d38d0817c3d4549f49d8bef67d8220c8d7bd7261792231dd8a06c6ee6e694ea6fed746617830d78f41359edf9ce3106651519bb13e08eaa0965ce03b5ec6b939687ab6010000000000000", @ANYRES32=r11, @ANYRESHEX], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000004)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r10, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x80dc)

16.113251078s ago: executing program 2 (id=5778):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wlan0\x00', <r0=>0x0})
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xffffff93, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="386b4b70214860d94cf38cf0f0a7531fe5500c7258d86cb0a303a13c3cec33cc9802efd05ffc55bab85d9d3c05404c796c0b3c94406e929bb5956628ac5dbeabe0141995deec69024f6856bf243575a7b0939cc2fb8583371b32a9955f4c91c48a2b611b72f72b63e2b02145095de46ff3b78aefb5b46054146692dddb4516eaccd971c3f796d2f21783e7ad47a9e7eba508c2db43bf9955e331a43e1e6da40ee431cd10d905fced551a14dc197579471cdef5456f17625bf71140e47f5ab5a65731e87d19f74449dbf25ce5", 0xcc}, {&(0x7f0000000240)="2f38b2c33902be36b17130755dc7061c3dd7c32dc3b4fb286b86e52bff865cbf01dec77966a2e06a5019f80482817c5a1238ab49beace8b9e0cdffac73a8dfd885d52dffef8e6a4b16cabf4c7ec209f6751afbae3d2a404f96bd6a0f2bee9fd0e142aaa6b1a31b1de4779db349b4c2d9baa6e38b58cd2e1a2400c88719edbc3ef9612e1c4c8e7679fa2992b84ec8a8101354b5b81176289db48dbf4ae1a37d67c5c449eef24fd952b9ac265a9bd47baedb93507cb77a6dd390b4f571", 0xbc}, {&(0x7f0000000000)="d5ee3759dbc46d", 0x7}, {&(0x7f0000000380)="5c51fb720b07f49229545495714ce41c270f7b7cdfbebaf8ec2391bfa9a20264c2cb5861b2cad057307820cd2cfd99a96eab0b9ee11160884f37015189d9b2623cc4425651833d4a5ad31f753b38b85c7046ccc56f9421d2b37d70f4202af2fe89666475852fb85cd3437b165e465ae4a3ab55e0fc", 0x75}], 0x4, &(0x7f0000000400)=[{0xd0, 0xff, 0x7, "793d31fd5e5f16ede59d02ae9fca93588a1ad0bc15b627afa392603c264e653e20410dcd9fad76b7280d2df44281e6c6c27614a13b4de9d9c250eca1dfe62baadd04a46a897664ac9e3e95ee4fc6edb683a8f61bc7f664602711e9e3d940b72efc86ced649ffc7b41a4defa4940b16496360db20f41ae7cfe4bd260c0889251a1e1d9e68b3b60250eeb9b1d74e1fdeb21120a780aea425c517501bf483ff4fd1a4dbc8708344244d3f03b7d406e514e31161be9639c40ebb68d6828c51"}, {0x110, 0x1, 0x9, "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"}], 0x1e0}, 0x24000091)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000026c0)={&(0x7f0000000700)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x400, 0x6f}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x30}}, 0x810)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x15, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x8001)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}}, 0x4044080)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0xc4081)
bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0xfd, 0x6, @multicast}, 0x14)
sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
close(0x3)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), r2)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000028c0)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x74, r8, 0xdcb5c058ff3f54ab, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4004)

16.112891896s ago: executing program 1 (id=5779):
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc0000000000000000000000000000000086009078003c000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

15.963348066s ago: executing program 2 (id=5781):
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000fffffffffffffff400", 0x1c)

15.962447163s ago: executing program 2 (id=5782):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x21c, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x44005}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
sendto$inet(r4, &(0x7f0000000540)="4d51ef84e85e8c3f477056c1eb7f5e03a65e45d7d83facb494ef2695c7617039efd6ba5a36e0c85004ef07f40ae6d0e7b883293433ffaf7f1a6782b5b83e8ccb3638a43093842bedb967be368240ae7e377fcc389d467844b7478daf202a882b1fd44d6d37b09217078e0b5410ffca6dba843c7b70909c01a1ec5642fbe4d9f2b43b3bafb705c65d703792d254ae682a8fe0f8928beae8ff8a2755dc9b31d386a8b848fd8fc824d54324bdc89bf901fdd8cc1720e380e4d241071aba8ca5b51c53465a429d283647752d13f61542d146af38e91ca89b4607f328dbf5b7a6a8979bf637b6ac3b0a3d2d5f40dc3040", 0xee, 0x40, &(0x7f0000000640)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x5}}, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4810) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r5, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4840}, 0x2400c844) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wlan1\x00', <r8=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xf976a8af06f23f3e}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r5, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
write(r7, &(0x7f0000000a80)="c144d4a65f495806d9bed60112d5b7b600da01c52aa28b377c148cb23c6a0829bcde9072d18f81eb0c1f59254cf5ed96463b3dbec14129af479593f1bf415f96d53e1f9dd14879568f2c693edccb0c4106203b0f8384422bd4b5db5a70cbff02c621375914f61ee004e094926d2129d040c3bf2aad986e6452a79f71afefa1f6c74fcea7fe4304d45a62d47dc7e14199ccb49763b2293f65b75c5034767c49c048a555a49f4a926213b84646eb6d150a6e3990fd77238f57eccf1fd2a255021f795ce956b3ca780b757a8fd6e6fe412b25c6275612c073cb28be8815b89ba62b58279b47b1bc5e20c53cc9c3a9874802ef", 0xf1) (async)
r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000b80)='syz0\x00', 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000bc0)='cpuacct.usage_all\x00', 0x0, 0x0) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r2) (rerun: 64)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r11, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, r12, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x30, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x10000000) (async)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r11)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, r13, 0x500, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x14}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'batadv0\x00', <r14=>0x0}) (async)
r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001040)=@o_path={&(0x7f0000001000)='./file0\x00', 0x0, 0x8, r9}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x0, &(0x7f0000000e80), &(0x7f0000000ec0)='syzkaller\x00', 0x416, 0xc, &(0x7f0000000f00)=""/12, 0x40f00, 0x2, '\x00', r14, 0x0, r10, 0x8, &(0x7f0000000f80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000fc0)={0x3, 0x7, 0x1, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001080)=[r10, r15], 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, &(0x7f0000001180)={0x5, 0x7, 0x1000, 0x0, 0x53, 0x7, 0x1}, 0xc) (async, rerun: 32)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r15, 0x6612)

15.903670833s ago: executing program 1 (id=5784):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'})

15.901418815s ago: executing program 2 (id=5786):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r8) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01c80101b7ac7474c5250f00000008002300", @ANYRES32=r10, @ANYBLOB="0500380000000000"], 0x24}, 0x1, 0x1000000, 0x0, 0x24008850}, 0x4004a040) (async)
r11 = socket(0x400000000010, 0x3, 0x0) (async)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x7, 0x6}, {0x9, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) (async)
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r14, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) (async)
sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) (async)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000"], 0x64}}, 0x0)
r15 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r15, 0x81f8943c, &(0x7f0000000540))
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000008a14000000110020e8641801000000000000000000"], 0x70}}, 0x0)

15.900975735s ago: executing program 1 (id=5787):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wlan0\x00', <r0=>0x0})
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xffffff93, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x400, 0x6f}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x28}}, 0x810)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002780), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000028c0)={&(0x7f0000002740), 0xc, &(0x7f0000002880)={&(0x7f0000000000)={0x78, r2, 0xdcb5c058ff3f54ab, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc8}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4, 0x0, 0x1}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r6, @ANYRESHEX=r4, @ANYRESOCT, @ANYRES16=r4, @ANYRES64=r5], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000010)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe0, r7, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x37d8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffc01}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9cc}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x30}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x16}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x86a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x397912c0}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040080}, 0x20000004)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x27}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2200009c}, 0x4004000)

15.744548076s ago: executing program 0 (id=5790):
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780085000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

15.61445493s ago: executing program 0 (id=5791):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000100660002000000000018000000ff00000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
write(r1, &(0x7f0000000240)="1317dc3b5a032938960e4384ecd18eeef421b947c022801331f9b80a9c7cf7e565c01a268bdecc6d8443a1c2dd701a503309b0fc62e29f6d82c1b5ff16b2", 0x3e)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0)
getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000580)={"a2c9ae9d81f51dbdb23d2f21fdf748a2", <r10=>0x0, 0x0, {0x5, 0xe4a}, {0x2b3e, 0x4}, 0x4, [0x5, 0xb32, 0x101, 0xe7a, 0x8000000000000000, 0x500c011b, 0x4, 0xe, 0xffff, 0x7fffffffffffffff, 0xc, 0x10001, 0x6c51, 0x1, 0x9, 0x80000001]})
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000006c0)={{r4}, r10, 0x2, @inherit={0x70, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000005000000000000000000000000000000faffffefffffffff01000000000000000100000000000000050000000000000030000000000000000900000000000000ffffffffffffffff0000000000000000080000000000000035040000000000000900000000000000"]}, @subvolid=0x5})
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB], 0x3c}}, 0x0)

15.464525934s ago: executing program 0 (id=5792):
r0 = socket(0x1e, 0x1, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x64, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x206e1}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x3c, 0x1a, 0x0, 0x1, [@AF_INET6={0x38, 0x2d, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x1, 0x8, 0x80}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x34}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

15.404001335s ago: executing program 0 (id=5793):
syz_emit_ethernet(0x66, &(0x7f0000000b00)=ANY=[@ANYBLOB="b9556d7defa30180c200000008004c000058fffd0000ff069078ac141400ac1e00018307d27f00000000000044080000000000060000004e24f8418cbf4c3d4f2ca9d5ab6f63fcfb2d26c3d7312045d1c2037934dfb6495b9d341fca27adc93ff3ea3f03097cd8eeadec7207c27196e3de732151896719e43bb4f1237e55770cd12f126db90c472fa362475c26ce4801f425fd1e1941eb1fb991ed734923021c60087635b2f652e7a68c91176e44a1bffd0ae5af0cfd4f1ffb4115cb80e0118d0b2066b5df15bf767bb6fd1bba45e132896e8d07bbb5348d64f6f2c3152d3e21c2b6c023bc24000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000000907800c500fe06f989acbd080a0000000000000005000000"], 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000800000000000000009500000000000000172b4af1e18a9da47396dd29f38f571fcc8d5ba10fe2a019b6dd6bb3fe69e46f297bf59a4c02bfd46e49acf1a6758a1d388d4dbaffb7d5ff5e35618f914e0aef7ddb949f55dc50072eab00f81b1c6fb4d80388ccdaa6fce5897937f6bb7a625d3fc7d2da1aedaebbccd940954bb74ca24471c85930da212f58f4fbbd8d3ba41f91"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r2 = socket(0x25, 0x5, 0x3)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000050}, 0x4085) (async)
sendto$unix(r2, &(0x7f0000000100)="f79e9c2cad951a7fd9c7e5043c9494ba5dce0bc603bfe4ea", 0x18, 0x22000004, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0xb, 0x2, 0x6}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async, rerun: 64)
unshare(0x0) (async, rerun: 64)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x14, r5, 0x1, 0x70bd29, 0x4}, 0x14}}, 0x20008004) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000200)={'wlan0\x00'}) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x2100, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a11000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001400000000000030000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async, rerun: 32)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r10=>0x0})
r11 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0a0000000100000000000000", @ANYRES32, @ANYBLOB="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"/343, @ANYRES64=0x0], 0x20) (async, rerun: 64)
ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x890b, &(0x7f0000000000)) (async, rerun: 64)
r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r12, 0x4004af77, &(0x7f0000000480)=0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x4890) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x890c, &(0x7f0000000000)={<r13=>0xffffffffffffffff})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r0, @ANYRES16=r9, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r10, @ANYRESHEX], 0x34}}, 0x44040) (async, rerun: 32)
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRES16=r13, @ANYBLOB="fcd429bd7000fd0500000000000000000008000300"/34, @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000045}, 0x4040000) (rerun: 32)

15.402904681s ago: executing program 0 (id=5794):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xe, @none, 0x9}, 0xe)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
connect$packet(r0, &(0x7f0000000080)={0x11, 0xef, r2, 0x1, 0x8, 0x6, @local}, 0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

15.243169066s ago: executing program 0 (id=5795):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a00), r0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x40)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"})

83.518686ms ago: executing program 32 (id=5795):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a00), r0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x40)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"})

34.144343ms ago: executing program 33 (id=5787):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wlan0\x00', <r0=>0x0})
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xffffff93, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x400, 0x6f}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x28}}, 0x810)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002780), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000028c0)={&(0x7f0000002740), 0xc, &(0x7f0000002880)={&(0x7f0000000000)={0x78, r2, 0xdcb5c058ff3f54ab, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc8}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4, 0x0, 0x1}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r6, @ANYRESHEX=r4, @ANYRESOCT, @ANYRES16=r4, @ANYRES64=r5], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000010)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe0, r7, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x37d8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffc01}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9cc}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x30}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x16}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x86a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x397912c0}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040080}, 0x20000004)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x27}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2200009c}, 0x4004000)

0s ago: executing program 34 (id=5786):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r8) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01c80101b7ac7474c5250f00000008002300", @ANYRES32=r10, @ANYBLOB="0500380000000000"], 0x24}, 0x1, 0x1000000, 0x0, 0x24008850}, 0x4004a040) (async)
r11 = socket(0x400000000010, 0x3, 0x0) (async)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x7, 0x6}, {0x9, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) (async)
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r14, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) (async)
sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) (async)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000"], 0x64}}, 0x0)
r15 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r15, 0x81f8943c, &(0x7f0000000540))
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000008a14000000110020e8641801000000000000000000"], 0x70}}, 0x0)

kernel console output (not intermixed with test programs):

ing preconfigured BSSID 50:50:50:50:50:50
[  428.599219][T18925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.697929][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  428.799527][T24914] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.875181][T24914] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.934010][T24918] netlink: 'syz.0.4894': attribute type 1 has an invalid length.
[  429.014424][T24918] 8021q: adding VLAN 0 to HW filter on device bond125
[  429.020408][T24914] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.077138][T24914] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.115657][T24918] netlink: 'syz.0.4894': attribute type 17 has an invalid length.
[  429.130432][T24918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  429.136501][ T5913] lo speed is unknown, defaulting to 1000
[  429.142767][ T5913] syz0: Port: 1 Link ACTIVE
[  429.144637][ T5913] lo speed is unknown, defaulting to 1000
[  429.147576][T24918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4894'.
[  429.224423][ T7137] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  429.245351][ T7137] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  429.273511][ T7137] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  429.285023][ T7137] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  429.305867][T24925] syzkaller1: entered promiscuous mode
[  429.310490][T24925] syzkaller1: entered allmulticast mode
[  429.316555][T24925] netlink: 'syz.0.4895': attribute type 7 has an invalid length.
[  429.320622][T24925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4895'.
[  429.450458][T24934] 8021q: adding VLAN 0 to HW filter on device bond104
[  429.479760][T24934] macvlan9: entered promiscuous mode
[  429.481588][T24934] macvlan9: entered allmulticast mode
[  429.483962][T24934] bond104: entered promiscuous mode
[  429.485881][T24934] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  429.490609][T24934] bond104: left promiscuous mode
[  429.605082][T24943] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  429.608990][T24943] syzkaller0: entered promiscuous mode
[  429.610747][T24943] syzkaller0: entered allmulticast mode
[  429.830272][T24965] 8021q: adding VLAN 0 to HW filter on device bond107
[  429.847458][T24965] tap0: tun_chr_ioctl cmd 1074812118
[  429.913313][T24971] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  429.993407][T24976] lo speed is unknown, defaulting to 1000
[  430.350948][T25010] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  430.459419][T25017] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  430.496307][T25010] syzkaller0: Caught tx_queue_len zero misconfig
[  430.505040][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.546909][T25022] tipc: Resetting bearer <eth:syzkaller0>
[  430.754624][T10895] lo speed is unknown, defaulting to 1000
[  430.782702][T10895] lo speed is unknown, defaulting to 1000
[  430.785206][ T5911] lo speed is unknown, defaulting to 1000
[  430.788187][ T5912] lo speed is unknown, defaulting to 1000
[  430.790052][ T5912] syz0: Port: 1 Link DOWN
[  430.794762][T10895] lo speed is unknown, defaulting to 1000
[  430.806553][T25042] __nla_validate_parse: 17 callbacks suppressed
[  430.806566][T25042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4927'.
[  430.833858][T25045] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  430.857972][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.860522][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.913599][T25054] netlink: 67 bytes leftover after parsing attributes in process `syz.0.4929'.
[  430.958332][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.961654][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.084056][T25066] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4933'.
[  431.247828][T25085] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4935'.
[  431.255174][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4935'.
[  431.263360][T25085] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4935'.
[  431.284533][T25094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4938'.
[  431.303316][T25094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4938'.
[  431.326197][T25094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4938'.
[  431.328087][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.364829][T25097] block nbd0: not configured, cannot reconfigure
[  431.424550][T25101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4940'.
[  431.489433][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.492826][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.555265][T25108] 8021q: adding VLAN 0 to HW filter on device bond108
[  431.559270][T25108] bridge0: port 1(bond108) entered blocking state
[  431.561870][T25108] bridge0: port 1(bond108) entered disabled state
[  431.564492][T25108] bond108: entered allmulticast mode
[  431.569329][T25108] bond108: entered promiscuous mode
[  431.827901][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  431.871493][T25132] bond120: (slave veth59): Releasing active interface
[  431.893419][T25134] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  431.901149][T25134] Unsupported ieee802154 address type: 0
[  431.953178][T25136] vxcan0: entered promiscuous mode
[  432.001258][T25140] warn_alloc: 2 callbacks suppressed
[  432.001272][T25140] syz.2.4954: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  432.012042][T25140] CPU: 0 UID: 0 PID: 25140 Comm: syz.2.4954 Not tainted syzkaller #0 PREEMPT(full) 
[  432.012063][T25140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  432.012080][T25140] Call Trace:
[  432.012087][T25140]  <TASK>
[  432.012094][T25140]  dump_stack_lvl+0x189/0x250
[  432.012118][T25140]  ? __pfx_dump_stack_lvl+0x10/0x10
[  432.012136][T25140]  ? __pfx__printk+0x10/0x10
[  432.012157][T25140]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  432.012175][T25140]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  432.012220][T25140]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  432.012240][T25140]  warn_alloc+0x214/0x310
[  432.012267][T25140]  ? __pfx_warn_alloc+0x10/0x10
[  432.012296][T25140]  ? __get_vm_area_node+0x28f/0x300
[  432.012317][T25140]  ? hash_netiface_create+0x358/0xfe0
[  432.012337][T25140]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  432.012357][T25140]  ? do_syscall_64+0xfa/0x3b0
[  432.012400][T25140]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  432.012426][T25140]  ? rcu_is_watching+0x15/0xb0
[  432.012442][T25140]  ? hash_netiface_create+0x358/0xfe0
[  432.012458][T25140]  ? hash_netiface_create+0x358/0xfe0
[  432.012472][T25140]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  432.012493][T25140]  ? hash_netiface_create+0x358/0xfe0
[  432.012509][T25140]  ? hash_netiface_create+0x2fe/0xfe0
[  432.012529][T25140]  hash_netiface_create+0x358/0xfe0
[  432.012553][T25140]  ? __nla_parse+0x40/0x60
[  432.012574][T25140]  ? __pfx_hash_netiface_create+0x10/0x10
[  432.012592][T25140]  ip_set_create+0xa97/0x1940
[  432.012610][T25140]  ? ip_set_create+0x4a2/0x1940
[  432.012636][T25140]  ? __pfx_ip_set_create+0x10/0x10
[  432.012683][T25140]  nfnetlink_rcv_msg+0xb4d/0x1130
[  432.012702][T25140]  ? kernel_text_address+0xa5/0xe0
[  432.012721][T25140]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  432.012754][T25140]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  432.012770][T25140]  ? stack_trace_save+0x9c/0xe0
[  432.012813][T25140]  ? __lock_acquire+0xab9/0xd20
[  432.012843][T25140]  netlink_rcv_skb+0x208/0x470
[  432.012862][T25140]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  432.012881][T25140]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  432.012907][T25140]  ? bpf_lsm_capable+0x9/0x20
[  432.012924][T25140]  ? security_capable+0x7e/0x2e0
[  432.012950][T25140]  nfnetlink_rcv+0x26a/0x2520
[  432.012967][T25140]  ? is_bpf_text_address+0x26/0x2b0
[  432.012989][T25140]  ? kernel_text_address+0xa5/0xe0
[  432.013009][T25140]  ? __kernel_text_address+0xd/0x40
[  432.013025][T25140]  ? unwind_get_return_address+0x4d/0x90
[  432.013041][T25140]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  432.013058][T25140]  ? arch_stack_walk+0xfc/0x150
[  432.013091][T25140]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  432.013111][T25140]  ? stack_depot_save_flags+0x40/0x860
[  432.013132][T25140]  ? __lock_acquire+0xab9/0xd20
[  432.013166][T25140]  ? __lock_acquire+0xab9/0xd20
[  432.013215][T25140]  ? netlink_deliver_tap+0x2e/0x1b0
[  432.013236][T25140]  ? netlink_deliver_tap+0x2e/0x1b0
[  432.013256][T25140]  netlink_unicast+0x82f/0x9e0
[  432.013276][T25140]  ? __pfx_netlink_unicast+0x10/0x10
[  432.013291][T25140]  ? netlink_sendmsg+0x642/0xb30
[  432.013304][T25140]  ? skb_put+0x11b/0x210
[  432.013322][T25140]  netlink_sendmsg+0x805/0xb30
[  432.013343][T25140]  ? __pfx_netlink_sendmsg+0x10/0x10
[  432.013361][T25140]  ? aa_sock_msg_perm+0xf1/0x1d0
[  432.013379][T25140]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  432.013391][T25140]  ? __pfx_netlink_sendmsg+0x10/0x10
[  432.013406][T25140]  __sock_sendmsg+0x21c/0x270
[  432.013423][T25140]  ____sys_sendmsg+0x505/0x830
[  432.013438][T25140]  ? __pfx_____sys_sendmsg+0x10/0x10
[  432.013456][T25140]  ? import_iovec+0x74/0xa0
[  432.013471][T25140]  ___sys_sendmsg+0x21f/0x2a0
[  432.013484][T25140]  ? __pfx____sys_sendmsg+0x10/0x10
[  432.013519][T25140]  ? __fget_files+0x2a/0x420
[  432.013534][T25140]  ? __fget_files+0x3a0/0x420
[  432.013557][T25140]  __x64_sys_sendmsg+0x19b/0x260
[  432.013570][T25140]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  432.013588][T25140]  ? rcu_is_watching+0x15/0xb0
[  432.013604][T25140]  ? do_syscall_64+0xbe/0x3b0
[  432.013623][T25140]  do_syscall_64+0xfa/0x3b0
[  432.013639][T25140]  ? lockdep_hardirqs_on+0x9c/0x150
[  432.013653][T25140]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.013665][T25140]  ? exc_page_fault+0x9f/0xf0
[  432.013681][T25140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.013692][T25140] RIP: 0033:0x7f44f298ebe9
[  432.013706][T25140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  432.013716][T25140] RSP: 002b:00007f44f37e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  432.013730][T25140] RAX: ffffffffffffffda RBX: 00007f44f2bb5fa0 RCX: 00007f44f298ebe9
[  432.013737][T25140] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000004e
[  432.013744][T25140] RBP: 00007f44f2a11e19 R08: 0000000000000000 R09: 0000000000000000
[  432.013750][T25140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  432.013756][T25140] R13: 00007f44f2bb6038 R14: 00007f44f2bb5fa0 R15: 00007fff22b34718
[  432.013776][T25140]  </TASK>
[  432.013782][T25140] Mem-Info:
[  432.198389][T25140] active_anon:23795 inactive_anon:0 isolated_anon:0
[  432.198389][T25140]  active_file:1585 inactive_file:38358 isolated_file:0
[  432.198389][T25140]  unevictable:1768 dirty:134 writeback:0
[  432.198389][T25140]  slab_reclaimable:14067 slab_unreclaimable:183551
[  432.198389][T25140]  mapped:19493 shmem:2466 pagetables:1100
[  432.198389][T25140]  sec_pagetables:0 bounce:0
[  432.198389][T25140]  kernel_misc_reclaimable:0
[  432.198389][T25140]  free:126688 free_pcp:25805 free_cma:0
[  432.213257][T25140] Node 0 active_anon:40900kB inactive_anon:0kB active_file:3908kB inactive_file:24240kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39300kB dirty:368kB writeback:0kB shmem:4864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13576kB pagetables:2624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  432.223071][T25140] Node 1 active_anon:54280kB inactive_anon:0kB active_file:2432kB inactive_file:129192kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38672kB dirty:168kB writeback:0kB shmem:5000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11900kB pagetables:1776kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  432.234780][T25140] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  432.244568][T25140] lowmem_reserve[]: 0 811 811 811 811
[  432.246614][T25140] Node 0 DMA32 free:89908kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40900kB inactive_anon:0kB active_file:3908kB inactive_file:24240kB unevictable:3536kB writepending:368kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:46260kB local_pcp:27832kB free_cma:0kB
[  432.256759][T25140] lowmem_reserve[]: 0 0 0 0 0
[  432.258513][T25140] Node 1 DMA32 free:355920kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11348kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:16060kB local_pcp:9948kB free_cma:0kB
[  432.273138][T25140] lowmem_reserve[]: 0 0 854 854 854
[  432.274864][T25140] Node 1 Normal free:45564kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43092kB inactive_anon:0kB active_file:2428kB inactive_file:129184kB unevictable:3536kB writepending:168kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:40964kB local_pcp:22676kB free_cma:0kB
[  432.287418][T25140] lowmem_reserve[]: 0 0 0 0 0
[  432.293798][T25140] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  432.297782][T25140] Node 0 DMA32: 454*4kB (UME) 1124*8kB (UME) 268*16kB (UME) 151*32kB (UME) 43*64kB (UME) 1*128kB (U) 16*256kB (UM) 19*512kB (UME) 14*1024kB (UM) 3*2048kB (UM) 8*4096kB (M) = 89880kB
[  432.303322][T25140] Node 1 DMA32: 71*4kB (UM) 107*8kB (UME) 131*16kB (UE) 84*32kB (UME) 63*64kB (UME) 49*128kB (UME) 25*256kB (UM) 15*512kB (UM) 12*1024kB (UME) 3*2048kB (UME) 75*4096kB (UM) = 355940kB
[  432.314611][T25140] Node 1 Normal: 553*4kB (UM) 243*8kB (UM) 98*16kB (UME) 107*32kB (ME) 112*64kB (UM) 40*128kB (UM) 10*256kB (UM) 2*512kB (ME) 6*1024kB (UE) 3*2048kB (UME) 2*4096kB (U) = 45500kB
[  432.320212][T25140] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  432.323613][T25140] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  432.326617][T25140] 42409 total pagecache pages
[  432.332685][T25140] 0 pages in swap cache
[  432.334026][T25140] Free swap  = 124996kB
[  432.335478][T25140] Total swap = 124996kB
[  432.336808][T25140] 786301 pages RAM
[  432.338355][T25140] 0 pages HighMem/MovableOnly
[  432.340205][T25140] 241330 pages reserved
[  432.341578][T25140] 0 pages cma reserved
[  432.407312][T25158] validate_nla: 14 callbacks suppressed
[  432.407327][T25158] netlink: 'syz.1.4957': attribute type 39 has an invalid length.
[  432.450257][T25162] syzkaller0: left promiscuous mode
[  432.451974][T25162] syzkaller0: left allmulticast mode
[  432.511935][T25172] netlink: 'syz.0.4961': attribute type 1 has an invalid length.
[  432.548349][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.557944][T25172] 8021q: adding VLAN 0 to HW filter on device bond126
[  432.578127][T25172] netlink: 'syz.0.4961': attribute type 2 has an invalid length.
[  432.581282][T25172] netlink: 'syz.0.4961': attribute type 1 has an invalid length.
[  432.687562][T25186] lo speed is unknown, defaulting to 1000
[  432.803938][T25195] syzkaller0: left promiscuous mode
[  432.812208][T25195] syzkaller0: left allmulticast mode
[  432.879739][T25191] netlink: 'syz.0.4965': attribute type 3 has an invalid length.
[  432.883057][T25191] netlink: 'syz.0.4965': attribute type 3 has an invalid length.
[  433.284290][T25214] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  433.289711][T25214] syzkaller0: entered promiscuous mode
[  433.291608][T25214] syzkaller0: entered allmulticast mode
[  433.588889][T25227] lo speed is unknown, defaulting to 1000
[  434.031870][T25251] netlink: 'syz.0.4980': attribute type 1 has an invalid length.
[  434.055230][T25251] 8021q: adding VLAN 0 to HW filter on device bond127
[  434.203107][T25251] 8021q: adding VLAN 0 to HW filter on device bond127
[  434.215372][T25251] bond127: (slave vxcan1): The slave device specified does not support setting the MAC address
[  434.225707][T25251] bond127: (slave vxcan1): Error -95 calling set_mac_address
[  434.394869][T25257] veth63: entered promiscuous mode
[  434.417168][T25257] bond127: (slave veth63): Enslaving as an active interface with a down link
[  434.424523][T25261] 8021q: adding VLAN 0 to HW filter on device bond127
[  434.545701][T25271] netlink: 'syz.0.4983': attribute type 2 has an invalid length.
[  434.870303][T25280] 8021q: adding VLAN 0 to HW filter on device bond34
[  435.253284][T25313] syzkaller0: entered promiscuous mode
[  435.256947][T25313] syzkaller0: entered allmulticast mode
[  435.502588][T25334] 8021q: adding VLAN 0 to HW filter on device bond109
[  435.506177][T25334] bond0: (slave bond109): Enslaving as a backup interface with a down link
[  435.668180][    C0] net_ratelimit: 4 callbacks suppressed
[  435.668198][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.765578][T25352] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  435.772304][T25352] syzkaller0: mtu greater than device maximum
[  436.050282][T25360] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  436.300475][T25374] __nla_validate_parse: 14 callbacks suppressed
[  436.300494][T25374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5013'.
[  436.317787][T25374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5013'.
[  436.320769][T25374] netlink: 'syz.0.5013': attribute type 11 has an invalid length.
[  436.453493][T25386] netlink: 'syz.2.5016': attribute type 12 has an invalid length.
[  436.576406][T25394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5019'.
[  436.651268][T25394] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  436.695888][T25397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5018'.
[  436.708644][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.711990][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.878644][T25412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5023'.
[  437.073893][T25419] dvmrp1: entered allmulticast mode
[  437.076303][T25420] dvmrp1: left allmulticast mode
[  437.270929][T25426] lo speed is unknown, defaulting to 1000
[  437.583348][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5030'.
[  437.748331][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.762602][T25449] validate_nla: 4 callbacks suppressed
[  437.762626][T25449] netlink: 'syz.0.5034': attribute type 6 has an invalid length.
[  437.767937][T25449] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5034'.
[  437.775046][T25450] bond106: (slave erspan0): Releasing active interface
[  437.784302][T25450] bond108: left allmulticast mode
[  437.790249][T25450] bond108: left promiscuous mode
[  437.795377][T25450] bridge0: port 1(bond108) entered disabled state
[  437.810226][T25450] bond0: (slave bond109): Releasing backup interface
[  437.846280][T25453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5034'.
[  438.376053][T25463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5036'.
[  438.422092][T25463] netlink: 'syz.1.5036': attribute type 12 has an invalid length.
[  438.432652][T25463] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5036'.
[  438.592541][T25468] netlink: 'syz.1.5037': attribute type 11 has an invalid length.
[  438.664052][T25474] vlan2: entered allmulticast mode
[  438.665731][T25474] erspan0: entered allmulticast mode
[  438.783281][T25486] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.788198][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.790696][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.874803][T25494] netlink: 'syz.0.5045': attribute type 2 has an invalid length.
[  438.889169][T25486] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.959774][T25486] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.034230][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  439.051171][T25504] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  439.089836][T25486] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.156234][T25513] bond128: entered promiscuous mode
[  439.158569][T25513] bond128: entered allmulticast mode
[  439.160734][T25513] 8021q: adding VLAN 0 to HW filter on device bond128
[  439.204829][ T7137] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  439.236415][ T7137] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  439.242631][ T7137] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  439.268763][ T5676] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  439.373021][T25527] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  439.828167][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.831460][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.098447][T25588] netlink: 'syz.0.5067': attribute type 10 has an invalid length.
[  440.313668][   T60] block nbd1: Possible stuck request ffff88803db08000: control (read@0,1024B). Runtime 90 seconds
[  440.321198][   T60] block nbd1: Possible stuck request ffff88803db08200: control (read@1024,1024B). Runtime 90 seconds
[  440.325518][   T60] block nbd1: Possible stuck request ffff88803db08400: control (read@2048,1024B). Runtime 90 seconds
[  440.329938][   T60] block nbd1: Possible stuck request ffff88803db08600: control (read@3072,1024B). Runtime 90 seconds
[  440.356543][T25599] pim6reg1: entered promiscuous mode
[  440.358648][T25599] pim6reg1: entered allmulticast mode
[  440.534248][T25602] netlink: 'syz.2.5071': attribute type 1 has an invalid length.
[  440.563053][T25602] 8021q: adding VLAN 0 to HW filter on device bond110
[  440.579181][T25602] bond110: (slave bridge122): making interface the new active one
[  440.583179][T25602] bond110: (slave bridge122): Enslaving as an active interface with an up link
[  440.596677][T25602] bond110: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  440.667152][T25608] netlink: 'syz.0.5072': attribute type 11 has an invalid length.
[  440.764473][T25616] netlink: 'syz.0.5075': attribute type 1 has an invalid length.
[  440.766480][T25614] lo speed is unknown, defaulting to 1000
[  440.816350][T25616] 8021q: adding VLAN 0 to HW filter on device bond130
[  440.838637][T25616] bond129: (slave bond130): making interface the new active one
[  440.842224][T25616] bond129: (slave bond130): Enslaving as an active interface with an up link
[  440.846293][T25620] erspan0: left allmulticast mode
[  440.868526][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.929425][T25620] tipc: Resetting bearer <eth:syzkaller0>
[  440.940842][T25620] syzkaller0: left promiscuous mode
[  440.942989][T25620] syzkaller0: left allmulticast mode
[  440.964640][T25620] veth53: left promiscuous mode
[  441.041654][T25619] bond0: (slave bond102): Releasing backup interface
[  441.062832][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  441.342429][T25642] vlan5: entered promiscuous mode
[  441.344586][T25642] gretap0: entered promiscuous mode
[  441.405335][T25644] __nla_validate_parse: 19 callbacks suppressed
[  441.405385][T25644] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5083'.
[  441.650408][T25654] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5086'.
[  441.655653][T25653] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5086'.
[  441.689646][T25657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5087'.
[  441.806066][T25660] lo speed is unknown, defaulting to 1000
[  441.832999][T25661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5088'.
[  441.836590][T25661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5088'.
[  441.844987][T25661] netlink: 'syz.2.5088': attribute type 20 has an invalid length.
[  441.897222][T25669] netlink: 'syz.1.5090': attribute type 9 has an invalid length.
[  441.908472][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  442.039009][T10895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  442.153127][T25672] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  442.183973][T25677] lo speed is unknown, defaulting to 1000
[  442.317861][T10895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  442.398996][T10895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  442.451342][T25680] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5092'.
[  442.455237][T25680] gretap0: entered promiscuous mode
[  442.458975][T25680] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5092'.
[  442.555070][T25699] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5097'.
[  442.565557][T25680] 0{X: renamed from gretap0
[  442.571750][T25680] 0{X: left promiscuous mode
[  442.573360][T25680] 0{X: entered allmulticast mode
[  442.582647][T25680] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  443.001480][T25713] netlink: 'syz.0.5101': attribute type 1 has an invalid length.
[  443.028255][ T5913] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  443.034474][T25713] 8021q: adding VLAN 0 to HW filter on device bond132
[  443.086773][T25716] netlink: 'syz.2.5102': attribute type 2 has an invalid length.
[  443.131143][T25716] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  443.307325][T25721] lo speed is unknown, defaulting to 1000
[  443.338676][T25728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5104'.
[  443.341692][T25728] openvswitch: netlink: Flow actions attr not present in new flow.
[  443.402451][T25732] dvmrp8: entered allmulticast mode
[  443.421387][T25730] dvmrp8: left allmulticast mode
[  443.891698][T25766] netlink: 'syz.2.5110': attribute type 2 has an invalid length.
[  444.416340][T25795] netlink: 'syz.0.5118': attribute type 10 has an invalid length.
[  444.427352][T25792] vti5: entered promiscuous mode
[  444.431658][T25792] vti5: entered allmulticast mode
[  444.512508][T25801] bond106: entered promiscuous mode
[  444.514521][T25801] bond106: entered allmulticast mode
[  444.516537][T25801] 8021q: adding VLAN 0 to HW filter on device bond106
[  444.629543][T25807] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.718876][T25807] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.825111][T25807] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.909354][T25807] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  445.006959][ T5910] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  445.091033][ T5910] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  445.094069][ T5910] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  445.097095][ T5910] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  445.499872][T25841] bond111: entered promiscuous mode
[  445.576340][T25844] 8021q: VLANs not supported on ip6_vti0
[  446.219959][T25850] netlink: 'syz.0.5133': attribute type 10 has an invalid length.
[  446.314064][T25853] netlink: 'syz.2.5134': attribute type 83 has an invalid length.
[  446.321123][T25853] netlink: 'syz.2.5134': attribute type 3 has an invalid length.
[  446.416056][T25864] netlink: 'syz.2.5138': attribute type 2 has an invalid length.
[  446.420985][T25864] netlink: 'syz.2.5138': attribute type 2 has an invalid length.
[  447.353891][T25890] lo speed is unknown, defaulting to 1000
[  447.603573][T25904] netlink: 'syz.1.5143': attribute type 1 has an invalid length.
[  447.653745][T25904] 8021q: adding VLAN 0 to HW filter on device bond107
[  448.357414][T25931] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  448.405023][T25929] lo speed is unknown, defaulting to 1000
[  448.645918][T25941] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  448.656336][T25941] __nla_validate_parse: 8 callbacks suppressed
[  448.656349][T25941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5151'.
[  448.665843][T25941] netlink: 'syz.1.5151': attribute type 5 has an invalid length.
[  448.673103][ T5913] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  448.686078][T25941] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5151'.
[  448.828884][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  448.946065][T25957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5155'.
[  449.118995][T25966] lo speed is unknown, defaulting to 1000
[  449.288202][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  449.531856][T25974] bridge0: failed insert local address into bridge forwarding table
[  449.535420][T25974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5161'.
[  449.624064][T25976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5162'.
[  449.749424][T25991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5165'.
[  449.812340][T25996] IPVS: set_ctl: invalid protocol: 17442 224.0.0.2:20001
[  450.150120][T26012] netlink: 'syz.2.5170': attribute type 1 has an invalid length.
[  450.412150][T26034] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  450.419672][T26034] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  450.577172][T26042] syzkaller0: entered promiscuous mode
[  450.581864][T26042] syzkaller0: entered allmulticast mode
[  450.608092][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.610752][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.786895][T26053] netlink: 'syz.1.5181': attribute type 58 has an invalid length.
[  450.791849][T26054] netlink: 'syz.1.5181': attribute type 58 has an invalid length.
[  450.794939][T26053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5181'.
[  450.798742][T26054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5181'.
[  450.809019][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.043099][T26064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5183'.
[  451.234602][T26076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5186'.
[  451.267992][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.270884][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.054251][T26124] netlink: 'syz.2.5193': attribute type 1 has an invalid length.
[  452.087039][T26124] 8021q: adding VLAN 0 to HW filter on device bond112
[  452.119944][T26124] bond112: (slave veth61): Enslaving as an active interface with a down link
[  452.133113][T26124] 8021q: adding VLAN 0 to HW filter on device batadv6
[  452.137980][T26124] bond112: (slave batadv6): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  452.308164][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.310645][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.353246][T26136] 8021q: adding VLAN 0 to HW filter on device bond113
[  452.361302][T26136] bond0: (slave bond113): Enslaving as a backup interface with a down link
[  453.203961][T26210] netlink: 'syz.2.5209': attribute type 1 has an invalid length.
[  453.281082][T26217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  453.283807][T26217] IPv6: NLM_F_CREATE should be set when creating new route
[  453.286522][T26217] IPv6: NLM_F_CREATE should be set when creating new route
[  453.300360][T26217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  453.348081][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.413197][T26216] tipc: Resetting bearer <eth:syzkaller0>
[  453.462683][T26216] bond0: left promiscuous mode
[  453.500877][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  453.504276][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  453.519488][T26220] lo speed is unknown, defaulting to 1000
[  453.525125][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  453.527979][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  454.314771][T26269] IPVS: Error connecting to the multicast addr
[  454.334024][T26269] netlink: 'syz.0.5215': attribute type 16 has an invalid length.
[  454.337349][T26269] netlink: 'syz.0.5215': attribute type 17 has an invalid length.
[  454.355669][T26269] tipc: Resetting bearer <eth:syzkaller0>
[  454.375754][T26269] mac80211_hwsim hwsim75 wlan0: left allmulticast mode
[  454.378539][T26269] mac80211_hwsim hwsim75 wlan0: left promiscuous mode
[  454.388601][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.391667][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.470948][T26272] __nla_validate_parse: 12 callbacks suppressed
[  454.470963][T26272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5216'.
[  454.526225][T26272] 8021q: adding VLAN 0 to HW filter on device bond108
[  454.597517][T26272] bond108: (slave bridge36): Enslaving as an active interface with an up link
[  454.639813][T26279] netlink: 'syz.2.5217': attribute type 2 has an invalid length.
[  454.683525][T26272] netlink: 'syz.1.5216': attribute type 1 has an invalid length.
[  454.714571][T26279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  454.756996][T26286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5218'.
[  454.790712][T26286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5218'.
[  454.794236][T26286] netlink: 'syz.1.5218': attribute type 7 has an invalid length.
[  455.017028][T26299] lo speed is unknown, defaulting to 1000
[  455.199683][T26314] netlink: 'syz.0.5223': attribute type 1 has an invalid length.
[  455.199701][T26301] netlink: 'syz.1.5220': attribute type 1 has an invalid length.
[  455.204779][T26301] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5220'.
[  455.209728][T26301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5220'.
[  455.239901][T26306] 8021q: adding VLAN 0 to HW filter on device bond114
[  455.303271][T26318] bond133: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  455.308407][T26318] bond133: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  455.314363][T26318] bond133: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  455.428269][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.539822][T26329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5227'.
[  455.669510][ T1118] block nbd2: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 30 seconds
[  455.673683][ T1118] block nbd2: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 30 seconds
[  455.678506][ T1118] block nbd2: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 30 seconds
[  455.682636][ T1118] block nbd2: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 30 seconds
[  455.774247][T26345] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5231'.
[  455.819439][T26348] netlink: 'syz.2.5232': attribute type 13 has an invalid length.
[  455.822518][T26348] netlink: 'syz.2.5232': attribute type 17 has an invalid length.
[  455.871541][T26348] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  455.898008][T26357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5231'.
[  456.184643][T26386] netlink: 'syz.1.5240': attribute type 1 has an invalid length.
[  456.243593][T26386] 8021q: adding VLAN 0 to HW filter on device bond109
[  456.280172][T26396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5239'.
[  456.286370][T26396] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5239'.
[  456.352795][T26390] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  456.423586][T26413] bond0: entered promiscuous mode
[  456.434570][T26413] bond0: left promiscuous mode
[  456.468419][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.471398][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.354948][T26437] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  457.433772][T26451] bond127: (slave veth63): Releasing active interface
[  457.439115][T26451] bond129: (slave bond130): Releasing backup interface
[  457.450632][T26453] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  457.465505][T26451] team0: Mode changed to "activebackup"
[  457.510053][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.635834][T26456] 8021q: adding VLAN 0 to HW filter on device bond111
[  457.641688][T26456] bond110: (slave bond111): making interface the new active one
[  457.644957][T26456] bond110: (slave bond111): Enslaving as an active interface with an up link
[  457.796331][T26476] bond108: (slave bridge36): Releasing backup interface
[  457.816590][T26476] bond110: (slave bond111): Releasing backup interface
[  458.127227][T26496] veth62: entered allmulticast mode
[  458.144995][T26497] veth62: entered allmulticast mode
[  458.157347][T26500] 0: left allmulticast mode
[  458.162132][T26500] hsr_slave_0: left allmulticast mode
[  458.169578][T26500] syzkaller0: left promiscuous mode
[  458.171624][T26500] syzkaller0: left allmulticast mode
[  458.192026][T26500] vlan0: left promiscuous mode
[  458.194000][T26500] geneve1: left promiscuous mode
[  458.200156][T26500] veth1: left promiscuous mode
[  458.202558][T26500] bridge26: left allmulticast mode
[  458.204804][T26500] sit8: left promiscuous mode
[  458.217312][T26500] bond85: left promiscuous mode
[  458.219719][T26500] bond85: left allmulticast mode
[  458.222488][T26500] macvlan0: left promiscuous mode
[  458.224973][T26500] veth35: left promiscuous mode
[  458.240745][T26500] geneve7: left promiscuous mode
[  458.244986][T26500] bond98: left promiscuous mode
[  458.247198][T26500] macvlan7: left promiscuous mode
[  458.250516][T26500] vlan1: left allmulticast mode
[  458.252516][T26500] veth1: left allmulticast mode
[  458.255353][T26500] bond101: left promiscuous mode
[  458.257206][T26500] bond103: left promiscuous mode
[  458.272683][T26500] bond103: left allmulticast mode
[  458.275285][T26500] vlan2: left allmulticast mode
[  458.277155][T26500] erspan0: left allmulticast mode
[  458.279313][T26500] vlan5: left promiscuous mode
[  458.281298][T26500] gretap0: left promiscuous mode
[  458.283419][T26500] vti5: left promiscuous mode
[  458.285047][T26500] vti5: left allmulticast mode
[  458.287088][T26500] bond106: left promiscuous mode
[  458.289019][T26500] bond106: left allmulticast mode
[  458.453481][T26508] tipc: Resetting bearer <eth:syzkaller0>
[  458.461919][T26508] syzkaller0: left promiscuous mode
[  458.464034][T26508] syzkaller0: left allmulticast mode
[  458.489200][T26508] bond111: left promiscuous mode
[  458.735142][T26523] lo speed is unknown, defaulting to 1000
[  458.881645][T26539] syzkaller0: entered promiscuous mode
[  458.883678][T26539] syzkaller0: entered allmulticast mode
[  459.135140][T26544] lo speed is unknown, defaulting to 1000
[  459.144382][T26554] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131
[  459.576110][T26577] __nla_validate_parse: 20 callbacks suppressed
[  459.576129][T26577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5281'.
[  459.633072][T26579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5282'.
[  459.668368][    C0] net_ratelimit: 4 callbacks suppressed
[  459.668381][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.754159][T26589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5285'.
[  459.862826][T26598] validate_nla: 5 callbacks suppressed
[  459.862842][T26598] netlink: 'syz.0.5286': attribute type 4 has an invalid length.
[  460.046826][T26602] lo speed is unknown, defaulting to 1000
[  460.145788][T26608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5290'.
[  460.199022][T26610] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5289'.
[  460.470157][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.473196][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.553925][T26608] bridge0: port 1(macvlan10) entered blocking state
[  460.556453][T26608] bridge0: port 1(macvlan10) entered disabled state
[  460.562060][T26608] macvlan10: entered allmulticast mode
[  460.564553][T26608] bridge0: entered allmulticast mode
[  460.575696][T26608] macvlan10: left allmulticast mode
[  460.581453][T26608] bridge0: left allmulticast mode
[  460.963450][T26630] sctp: [Deprecated]: syz.2.5293 (pid 26630) Use of int in maxseg socket option.
[  460.963450][T26630] Use struct sctp_assoc_value instead
[  460.974201][T26630] netlink: 'syz.2.5293': attribute type 1 has an invalid length.
[  461.071150][T26636] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5295'.
[  461.074520][T26636] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5295'.
[  461.143378][T26636] netlink: 'syz.2.5295': attribute type 6 has an invalid length.
[  461.146276][T26636] netlink: 'syz.2.5295': attribute type 5 has an invalid length.
[  461.149672][T26633] tipc: Resetting bearer <eth:syzkaller0>
[  461.152094][T26633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.160308][T26636] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5295'.
[  461.297139][T26645] netlink: 'syz.1.5298': attribute type 15 has an invalid length.
[  461.316587][T26648] netlink: 'syz.0.5300': attribute type 1 has an invalid length.
[  461.328607][T26645] syzkaller0: entered promiscuous mode
[  461.330867][T26645] syzkaller0: entered allmulticast mode
[  461.402394][T26652] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  461.415372][T26652] syzkaller0: Caught tx_queue_len zero misconfig
[  461.534312][T26664] netlink: 'syz.1.5306': attribute type 10 has an invalid length.
[  461.538922][T26664] bond0: Device is already in use.
[  461.588000][T26667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5308'.
[  461.593115][T26667] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  461.704891][T26675] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5311'.
[  461.941132][T26679] 8021q: adding VLAN 0 to HW filter on device bond113
[  461.964766][T26679] syzkaller0: left promiscuous mode
[  461.966893][T26679] syzkaller0: left allmulticast mode
[  462.065918][T26682] netlink: 'syz.2.5314': attribute type 2 has an invalid length.
[  462.155984][T26685] netlink: 'syz.2.5314': attribute type 2 has an invalid length.
[  462.214421][T26682] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  462.344084][T26693] netlink: 'syz.0.5316': attribute type 1 has an invalid length.
[  462.378662][T26691] delete_channel: no stack
[  462.541357][T26710] syzkaller0: entered promiscuous mode
[  462.543589][T26710] syzkaller0: entered allmulticast mode
[  462.546368][T26709] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  462.706031][T26712] geneve1: entered promiscuous mode
[  462.713390][T26712] geneve1: entered allmulticast mode
[  462.717562][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.723859][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.726647][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.737911][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.864517][T26741] block nbd0: not configured, cannot reconfigure
[  463.606728][T26761] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  463.625000][T26761] tipc: Resetting bearer <eth:syzkaller0>
[  463.805921][T26770] bond114: (slave bridge38): making interface the new active one
[  463.812420][T26770] bond114: (slave bridge38): Enslaving as an active interface with an up link
[  463.919395][T26781] openvswitch: netlink: Multiple metadata blocks provided
[  464.089928][T26795] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  464.245837][T26804] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:0
[  464.279191][T26804] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  464.996297][T26823] __nla_validate_parse: 15 callbacks suppressed
[  464.996317][T26823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5349'.
[  465.021470][T26824] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  465.046120][T26823] validate_nla: 3 callbacks suppressed
[  465.046184][T26823] netlink: 'syz.0.5349': attribute type 4 has an invalid length.
[  465.076772][T26823] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5349'.
[  465.083574][T26823] block nbd0: not configured, cannot reconfigure
[  465.106458][T26826] netlink: 'syz.1.5350': attribute type 4 has an invalid length.
[  465.147173][T26827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5349'.
[  465.235064][T26832] netlink: 'syz.0.5352': attribute type 10 has an invalid length.
[  465.244103][T26832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5352'.
[  465.251031][T26832] netlink: 'syz.0.5352': attribute type 10 has an invalid length.
[  465.254295][T26832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5352'.
[  465.258856][T26832] netlink: 'syz.0.5352': attribute type 10 has an invalid length.
[  465.262139][T26832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5352'.
[  465.268478][T26832] netlink: 'syz.0.5352': attribute type 10 has an invalid length.
[  465.271704][T26832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5352'.
[  465.275264][T26832] netlink: 'syz.0.5352': attribute type 10 has an invalid length.
[  465.278578][T26832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5352'.
[  465.281993][T26832] netlink: 'syz.0.5352': attribute type 10 has an invalid length.
[  465.285279][T26832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5352'.
[  465.289292][T26832] netlink: 'syz.0.5352': attribute type 10 has an invalid length.
[  465.307882][T26832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5352'.
[  465.316949][T26832] netlink: 'syz.0.5352': attribute type 10 has an invalid length.
[  465.446721][T26850] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  465.458782][T26843] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  465.486132][T26853] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  465.559095][T26856] _Z`Ԁ@: entered promiscuous mode
[  465.671028][T26870] pim6reg: left allmulticast mode
[  466.094718][T26889] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  466.352046][T26895] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  466.572840][T26899] (unnamed net_device) (uninitialized): option coupled_control: invalid value (71)
[  466.658911][T26904] bond0: Device is already in use.
[  466.912708][T26917] tipc: Resetting bearer <eth:syzkaller0>
[  466.964259][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.972735][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.976104][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.996437][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  467.087329][T26930] block nbd0: not configured, cannot reconfigure
[  467.147344][T26924] veth53: entered allmulticast mode
[  467.265792][T26941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  467.288449][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  467.342818][T26941] ipvlan0: entered promiscuous mode
[  467.346626][T26941] bridge0: port 1(ipvlan0) entered blocking state
[  467.355104][T26941] bridge0: port 1(ipvlan0) entered disabled state
[  467.358672][T26941] ipvlan0: entered allmulticast mode
[  467.362656][T26941] ipvlan0: left allmulticast mode
[  467.456066][T26951] 8021q: adding VLAN 0 to HW filter on device batadv0
[  467.469582][T26951] team0: Port device batadv0 added
[  467.525934][T26953] can: request_module (can-proto-3) failed.
[  467.559128][T26955] can: request_module (can-proto-3) failed.
[  467.778654][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  467.781629][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  467.824055][T26967] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  467.906081][T26969] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  468.140744][T26980] ip6tnl13: entered promiscuous mode
[  468.180825][T26982] bond114: (slave bridge38): Releasing active interface
[  468.205105][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  468.212837][T26982] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  468.215895][T26982] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  468.270259][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  468.525823][T26999] block nbd0: not configured, cannot reconfigure
[  468.662154][T27007] bond110: (slave bridge122): Releasing active interface
[  468.667259][T27007] bond112: (slave veth61): Releasing active interface
[  468.673729][T27007] bond0: (slave bond113): Releasing backup interface
[  468.787383][T27011] vlan0: entered promiscuous mode
[  468.793463][T27011] erspan0: entered promiscuous mode
[  468.805531][T27011] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  469.057450][T27023] macsec3: entered promiscuous mode
[  469.061046][T27023] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[  469.064001][T27023] macsec3: entered allmulticast mode
[  469.066061][T27023] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[  469.188337][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  469.242986][T27028] lo speed is unknown, defaulting to 1000
[  469.338893][T27033] vlan0: left promiscuous mode
[  469.341684][T27033] erspan0: left promiscuous mode
[  469.343768][T27033] tipc: Resetting bearer <eth:syzkaller0>
[  469.346608][T27033] syzkaller0: left promiscuous mode
[  469.352809][T27033] syzkaller0: left allmulticast mode
[  469.366173][T27033] ip6tnl13: left promiscuous mode
[  469.379535][T27033] mac80211_hwsim hwsim18 wlan0: left allmulticast mode
[  469.382017][T27033] mac80211_hwsim hwsim18 wlan0: left promiscuous mode
[  469.384488][T27033] macsec3: left promiscuous mode
[  469.386573][T27033] macsec3: left allmulticast mode
[  469.512159][T27046] dvmrp8: entered allmulticast mode
[  469.514952][T27046] dvmrp8: left allmulticast mode
[  469.621552][T27051] bridge93: port 1(veth67) entered blocking state
[  469.625315][T27051] bridge93: port 1(veth67) entered disabled state
[  469.632290][T27051] veth67: entered allmulticast mode
[  469.641264][T27051] veth67: entered promiscuous mode
[  469.645691][T27052] bridge93: port 2(veth0_to_bond) entered blocking state
[  469.649087][T27052] bridge93: port 2(veth0_to_bond) entered disabled state
[  469.651679][T27052] veth0_to_bond: entered allmulticast mode
[  469.671983][T27052] veth0_to_bond: entered promiscuous mode
[  470.056368][T27065] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  470.085677][T27065] __nla_validate_parse: 57 callbacks suppressed
[  470.085695][T27065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5426'.
[  470.110875][T27065] bridge94: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  470.252231][T27073] pim6reg1: entered promiscuous mode
[  470.254507][T27073] pim6reg1: entered allmulticast mode
[  470.316344][T27076] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5429'.
[  470.332517][T27078] block nbd0: not configured, cannot reconfigure
[  470.378877][T27080] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.387000][T27080] validate_nla: 35 callbacks suppressed
[  470.387015][T27080] netlink: 'syz.0.5432': attribute type 4 has an invalid length.
[  470.396989][   T60] block nbd1: Possible stuck request ffff88803db08000: control (read@0,1024B). Runtime 120 seconds
[  470.401290][   T60] block nbd1: Possible stuck request ffff88803db08200: control (read@1024,1024B). Runtime 120 seconds
[  470.406182][   T60] block nbd1: Possible stuck request ffff88803db08400: control (read@2048,1024B). Runtime 120 seconds
[  470.411071][   T60] block nbd1: Possible stuck request ffff88803db08600: control (read@3072,1024B). Runtime 120 seconds
[  470.545367][T27094] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  470.724662][T27103] syzkaller1: entered promiscuous mode
[  470.726875][T27103] syzkaller1: entered allmulticast mode
[  470.736900][T27115] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  470.833058][T27117] netlink: 'syz.1.5440': attribute type 1 has an invalid length.
[  470.866625][T27117] bond115: entered promiscuous mode
[  470.871516][T27117] 8021q: adding VLAN 0 to HW filter on device bond115
[  470.942508][T27125] netlink: 'syz.0.5443': attribute type 1 has an invalid length.
[  470.945599][T27125] netlink: 'syz.0.5443': attribute type 4 has an invalid length.
[  470.950629][T27126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5443'.
[  470.954168][T27126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5443'.
[  470.974140][T27125] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5443'.
[  470.988723][T27126] bridge0: port 1(vlan0) entered blocking state
[  470.991543][T27126] bridge0: port 1(vlan0) entered disabled state
[  470.994340][T27126] vlan0: entered allmulticast mode
[  470.996551][T27126] bridge0: entered allmulticast mode
[  471.017816][T27126] vlan0: left allmulticast mode
[  471.019939][T27126] bridge0: left allmulticast mode
[  471.029661][T27122] lo speed is unknown, defaulting to 1000
[  471.076172][T27132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5445'.
[  471.229946][T27137] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5446'.
[  471.294378][T27140] netlink: 'syz.1.5447': attribute type 1 has an invalid length.
[  471.370077][T27140] 8021q: adding VLAN 0 to HW filter on device bond116
[  471.415677][T27146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5448'.
[  471.415796][T27148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5448'.
[  471.442866][T27144] 8021q: adding VLAN 0 to HW filter on device bond116
[  471.459932][T27144] bond116: (slave vxcan3): The slave device specified does not support setting the MAC address
[  471.465598][T27144] bond116: (slave vxcan3): Error -95 calling set_mac_address
[  471.507354][T27140] bond116: (slave bridge39): Enslaving as an active interface with a down link
[  471.584970][T27156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5449'.
[  471.635105][T27157] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  471.648145][T27161] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  471.846903][T27164] rdma_rxe: rxe_newlink: failed to add lo
[  472.006184][T27164] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  472.031424][T27173] netlink: 'syz.0.5454': attribute type 1 has an invalid length.
[  472.067809][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  472.086072][T27180] netlink: 'syz.1.5455': attribute type 9 has an invalid length.
[  472.164168][T27183] netlink: 'syz.0.5456': attribute type 1 has an invalid length.
[  472.197326][T27183] bond134: entered promiscuous mode
[  472.200744][T27183] 8021q: adding VLAN 0 to HW filter on device bond134
[  472.224389][T27183] bond134: (slave bridge95): making interface the new active one
[  472.237714][T27191] netlink: 'syz.2.5458': attribute type 10 has an invalid length.
[  472.243507][T27183] bridge95: entered promiscuous mode
[  472.247110][T27183] bond134: (slave bridge95): Enslaving as an active interface with an up link
[  472.314766][T27198] netlink: 'syz.2.5460': attribute type 12 has an invalid length.
[  472.563557][T27214] 8021q: adding VLAN 0 to HW filter on device bond117
[  472.581083][T27214] 8021q: adding VLAN 0 to HW filter on device batadv6
[  472.587247][T27214] bond117: (slave batadv6): making interface the new active one
[  472.591733][T27214] bond117: (slave batadv6): Enslaving as an active interface with an up link
[  472.600617][ T5912] lo speed is unknown, defaulting to 1000
[  472.602946][ T5912] syz0: Port: 1 Link ACTIVE
[  472.604840][ T5912] lo speed is unknown, defaulting to 1000
[  472.723011][T27224] lo speed is unknown, defaulting to 1000
[  472.781663][T27226] pim6reg1: entered promiscuous mode
[  472.783474][T27226] pim6reg1: entered allmulticast mode
[  472.945936][T27237] IPVS: length: 49 != 24
[  473.413327][T27262] bridge41: entered allmulticast mode
[  473.420798][T27258] syzkaller1: entered allmulticast mode
[  473.424546][T27258] syzkaller1: left allmulticast mode
[  473.530772][T27269] vlan7: entered promiscuous mode
[  473.639841][T27277] 0{X: left allmulticast mode
[  473.644004][T27277] geneve1: left promiscuous mode
[  473.645819][T27277] geneve1: left allmulticast mode
[  473.653795][T27277] tipc: Resetting bearer <eth:syzkaller0>
[  473.657167][T27277] syzkaller0: left promiscuous mode
[  473.661155][T27277] syzkaller0: left allmulticast mode
[  473.724666][T27277] macsec1: left promiscuous mode
[  473.726508][T27277] macsec1: left allmulticast mode
[  473.728462][T27277] ip6tnl12: left promiscuous mode
[  473.730452][T27277] ip6tnl12: left allmulticast mode
[  473.733335][T27277] veth63: left promiscuous mode
[  473.735330][T27277] bond128: left promiscuous mode
[  473.737088][T27277] bond128: left allmulticast mode
[  473.785329][T27277] bond134: left promiscuous mode
[  473.787191][T27277] bridge95: left promiscuous mode
[  473.821849][ T5911] lo speed is unknown, defaulting to 1000
[  473.824326][ T5911] syz0: Port: 1 Link DOWN
[  473.826138][ T5911] lo speed is unknown, defaulting to 1000
[  473.907365][T27288] bridge0: port 1(batadv5) entered blocking state
[  473.912458][T27288] bridge0: port 1(batadv5) entered disabled state
[  473.915110][T27288] batadv5: entered allmulticast mode
[  473.919033][T27288] batadv5: entered promiscuous mode
[  474.424902][ T5910] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled
[  474.428635][ T5910] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled
[  474.485546][T27324] block nbd0: not configured, cannot reconfigure
[  474.576864][T27326] bridge96: port 1(veth69) entered blocking state
[  474.579690][T27326] bridge96: port 1(veth69) entered disabled state
[  474.582507][T27326] veth69: entered allmulticast mode
[  474.585573][T27326] veth69: entered promiscuous mode
[  474.658729][T27334] 8021q: adding VLAN 0 to HW filter on device bond15
[  474.745913][T27336] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  475.092769][T27360] __nla_validate_parse: 19 callbacks suppressed
[  475.092788][T27360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5508'.
[  475.104649][T27364] pim6reg: entered allmulticast mode
[  475.108879][T27364] pim6reg: left allmulticast mode
[  475.306556][T27380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5514'.
[  475.641784][T27401] tipc: Resetting bearer <eth:syzkaller0>
[  475.701542][T27404] syzkaller0: entered promiscuous mode
[  475.703335][T27404] syzkaller0: entered allmulticast mode
[  475.981992][T27418] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5524'.
[  476.331025][T27448] validate_nla: 14 callbacks suppressed
[  476.331040][T27448] netlink: 'syz.1.5532': attribute type 29 has an invalid length.
[  476.339221][T27448] netlink: 'syz.1.5532': attribute type 29 has an invalid length.
[  476.345744][T27448] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5532'.
[  476.350447][T27448] 0X: renamed from caif0
[  476.353565][T27448] tipc: Disabling bearer <ib:caif0>
[  476.356388][T27448] 0X: entered allmulticast mode
[  476.358629][T27448] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  476.393601][T27451] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  476.615730][T27460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5536'.
[  476.662541][T27462] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  476.671892][T27463] sctp: [Deprecated]: syz.2.5537 (pid 27463) Use of int in maxseg socket option.
[  476.671892][T27463] Use struct sctp_assoc_value instead
[  476.705246][T27466] pimreg: entered allmulticast mode
[  476.715316][T27470] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5539'.
[  476.720812][T27470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5539'.
[  476.729100][T27470] rdma_rxe: rxe_newlink: failed to add lo
[  476.741403][T27470] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  476.789774][T27472] netlink: 'syz.1.5540': attribute type 15 has an invalid length.
[  476.796073][T27472] netlink: 8756 bytes leftover after parsing attributes in process `syz.1.5540'.
[  476.815634][T27475] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5541'.
[  476.875557][T27478] bridge42: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  476.930087][T27482] 0X: left allmulticast mode
[  476.937214][T27482] mac80211_hwsim hwsim14 wlan1: left allmulticast mode
[  476.945695][T27482] tipc: Resetting bearer <eth:syzkaller0>
[  476.950229][T27482] syzkaller0: left promiscuous mode
[  476.952718][T27482] syzkaller0: left allmulticast mode
[  476.988183][T27482] veth53: left allmulticast mode
[  476.990504][T27482] bond115: left promiscuous mode
[  476.993357][T27482] bridge41: left allmulticast mode
[  477.100465][T27490] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  477.121941][T27492] bridge128: entered allmulticast mode
[  477.157991][T27492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5547'.
[  477.193492][T27494] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  477.199776][T27494] syzkaller0: entered promiscuous mode
[  477.202008][T27494] syzkaller0: entered allmulticast mode
[  477.238651][T27496] syzkaller0: entered promiscuous mode
[  477.240385][T27496] syzkaller0: entered allmulticast mode
[  477.394410][T27509] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  477.496803][T27519] netlink: 'syz.0.5555': attribute type 7 has an invalid length.
[  477.591002][T27522] netlink: 'syz.0.5556': attribute type 10 has an invalid length.
[  477.598924][T27522] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  477.805551][T27531] tipc: Resetting bearer <eth:syzkaller0>
[  477.808578][T27531] syzkaller0: left promiscuous mode
[  477.810688][T27531] syzkaller0: left allmulticast mode
[  477.913941][T27533] netlink: 'syz.1.5559': attribute type 4 has an invalid length.
[  478.181592][T27546] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  478.513810][T27547] tipc: Resetting bearer <eth:syzkaller0>
[  479.604952][T27560] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  479.632350][T27560] vlan0: entered promiscuous mode
[  479.634465][T27560] macvtap0: entered promiscuous mode
[  479.670554][T27563] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  479.804156][T27567] netlink: 'syz.0.5569': attribute type 10 has an invalid length.
[  480.324492][T27588] smc: net device bond0 applied user defined pnetid SYZ2
[  480.334238][T27588] __nla_validate_parse: 16 callbacks suppressed
[  480.334257][T27588] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5576'.
[  480.430125][T27596] netlink: 'syz.2.5577': attribute type 1 has an invalid length.
[  480.628938][ T5296] udevd[5296]: worker [18091] /devices/virtual/block/nbd1 is taking a long time
[  480.729044][T27588]  (unregistering): Released all slaves
[  480.780643][T27596] 8021q: adding VLAN 0 to HW filter on device bond119
[  480.822931][T27606] 8021q: adding VLAN 0 to HW filter on device bond117
[  480.825704][T27606] bridge0: port 2(bond117) entered blocking state
[  480.833546][T27606] bridge0: port 2(bond117) entered disabled state
[  480.839029][T27606] bond117: entered allmulticast mode
[  480.845610][T27606] bond117: entered promiscuous mode
[  480.859064][T27614] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  480.896479][T27618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5584'.
[  480.904432][T27619] bond0: Device is already in use.
[  480.910370][T27617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5583'.
[  480.925615][T27622] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  480.936057][T27622] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  480.982975][T27627] netlink: 'syz.1.5586': attribute type 4 has an invalid length.
[  481.039013][T27631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5588'.
[  481.042823][T27631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5588'.
[  481.098285][T27633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5589'.
[  481.212817][T27640] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5591'.
[  481.249086][T27640] netlink: 'syz.1.5591': attribute type 2 has an invalid length.
[  481.300239][T27647] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5592'.
[  481.355398][T27653] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  481.362107][T27643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5592'.
[  481.426628][T27655] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  481.491295][T27663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5596'.
[  481.897418][T27688] team0 (unregistering): Port device batadv0 removed
[  481.990194][T27699] sit0: entered allmulticast mode
[  482.004258][T27698] sit0: left allmulticast mode
[  482.120505][T27710] lo speed is unknown, defaulting to 1000
[  482.483476][T27729] lo speed is unknown, defaulting to 1000
[  482.579426][T27739] sctp: [Deprecated]: syz.1.5615 (pid 27739) Use of struct sctp_assoc_value in delayed_ack socket option.
[  482.579426][T27739] Use struct sctp_sack_info instead
[  482.771032][T27746] netlink: 'syz.1.5617': attribute type 30 has an invalid length.
[  482.795354][T27746] netlink: 'syz.1.5617': attribute type 30 has an invalid length.
[  482.799205][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  482.807931][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  482.828879][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  482.832122][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  483.376960][T27767] bond120: entered promiscuous mode
[  483.380087][T27767] bond120: entered allmulticast mode
[  483.382603][T27767] 8021q: adding VLAN 0 to HW filter on device bond120
[  483.394278][T27771] 8021q: VLANs not supported on ip6tnl0
[  483.565371][T27786] netlink: 'syz.0.5624': attribute type 12 has an invalid length.
[  483.645320][T27788] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  483.914081][T27804] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  483.916378][T27804] CPU: 0 UID: 0 PID: 27804 Comm: syz.1.5629 Not tainted syzkaller #0 PREEMPT(full) 
[  483.916391][T27804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  483.916398][T27804] Call Trace:
[  483.916403][T27804]  <TASK>
[  483.916409][T27804]  dump_stack_lvl+0x189/0x250
[  483.916426][T27804]  ? __pfx_dump_stack_lvl+0x10/0x10
[  483.916437][T27804]  ? __pfx__printk+0x10/0x10
[  483.916469][T27804]  ? kernfs_path_from_node+0x2f/0x290
[  483.916479][T27804]  ? kernfs_path_from_node+0x250/0x290
[  483.916488][T27804]  ? kernfs_path_from_node+0x2f/0x290
[  483.916500][T27804]  sysfs_warn_dup+0x8e/0xa0
[  483.916531][T27804]  sysfs_do_create_link_sd+0xc0/0x110
[  483.916542][T27804]  device_add_class_symlinks+0x1cf/0x240
[  483.916555][T27804]  device_add+0x475/0xb50
[  483.916566][T27804]  wiphy_register+0x1ba6/0x28d0
[  483.916588][T27804]  ? __pfx_wiphy_register+0x10/0x10
[  483.916599][T27804]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  483.916613][T27804]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  483.916630][T27804]  ieee80211_register_hw+0x3425/0x4080
[  483.916649][T27804]  ? ieee80211_register_hw+0x14a1/0x4080
[  483.916662][T27804]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  483.916673][T27804]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  483.916689][T27804]  ? __hrtimer_setup+0x187/0x210
[  483.916697][T27804]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  483.916711][T27804]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  483.916737][T27804]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  483.916748][T27804]  ? trace_kmalloc+0x1f/0xd0
[  483.916759][T27804]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  483.916772][T27804]  ? kstrndup+0xbf/0x160
[  483.916787][T27804]  hwsim_new_radio_nl+0xea4/0x1b10
[  483.916799][T27804]  ? __pfx___nla_validate_parse+0x10/0x10
[  483.916819][T27804]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  483.916837][T27804]  ? __nla_parse+0x40/0x60
[  483.916850][T27804]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  483.916865][T27804]  genl_family_rcv_msg_doit+0x215/0x300
[  483.916879][T27804]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  483.916895][T27804]  ? bpf_lsm_capable+0x9/0x20
[  483.916907][T27804]  ? security_capable+0x7e/0x2e0
[  483.916923][T27804]  genl_rcv_msg+0x60e/0x790
[  483.916936][T27804]  ? __pfx_genl_rcv_msg+0x10/0x10
[  483.916945][T27804]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  483.916963][T27804]  netlink_rcv_skb+0x208/0x470
[  483.916992][T27804]  ? __lock_acquire+0xab9/0xd20
[  483.917005][T27804]  ? __pfx_genl_rcv_msg+0x10/0x10
[  483.917016][T27804]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  483.917038][T27804]  ? down_read+0x1ad/0x2e0
[  483.917052][T27804]  genl_rcv+0x28/0x40
[  483.917061][T27804]  netlink_unicast+0x82f/0x9e0
[  483.917076][T27804]  ? __pfx_netlink_unicast+0x10/0x10
[  483.917089][T27804]  ? netlink_sendmsg+0x642/0xb30
[  483.917100][T27804]  ? skb_put+0x11b/0x210
[  483.917115][T27804]  netlink_sendmsg+0x805/0xb30
[  483.917132][T27804]  ? __pfx_netlink_sendmsg+0x10/0x10
[  483.917146][T27804]  ? aa_sock_msg_perm+0xf1/0x1d0
[  483.917159][T27804]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  483.917169][T27804]  ? __pfx_netlink_sendmsg+0x10/0x10
[  483.917187][T27804]  __sock_sendmsg+0x21c/0x270
[  483.917201][T27804]  ____sys_sendmsg+0x505/0x830
[  483.917214][T27804]  ? __pfx_____sys_sendmsg+0x10/0x10
[  483.917228][T27804]  ? import_iovec+0x74/0xa0
[  483.917240][T27804]  ___sys_sendmsg+0x21f/0x2a0
[  483.917251][T27804]  ? __pfx____sys_sendmsg+0x10/0x10
[  483.917281][T27804]  ? __fget_files+0x2a/0x420
[  483.917293][T27804]  ? __fget_files+0x3a0/0x420
[  483.917311][T27804]  __x64_sys_sendmsg+0x19b/0x260
[  483.917321][T27804]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  483.917336][T27804]  ? rcu_is_watching+0x15/0xb0
[  483.917347][T27804]  ? do_syscall_64+0xbe/0x3b0
[  483.917362][T27804]  do_syscall_64+0xfa/0x3b0
[  483.917372][T27804]  ? lockdep_hardirqs_on+0x9c/0x150
[  483.917383][T27804]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.917392][T27804]  ? exc_page_fault+0x9f/0xf0
[  483.917404][T27804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.917412][T27804] RIP: 0033:0x7f86eb18ebe9
[  483.917424][T27804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  483.917432][T27804] RSP: 002b:00007f86ec0d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  483.917442][T27804] RAX: ffffffffffffffda RBX: 00007f86eb3b5fa0 RCX: 00007f86eb18ebe9
[  483.917449][T27804] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  483.917455][T27804] RBP: 00007f86eb211e19 R08: 0000000000000000 R09: 0000000000000000
[  483.917460][T27804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  483.917466][T27804] R13: 00007f86eb3b6038 R14: 00007f86eb3b5fa0 R15: 00007ffc100a7eb8
[  483.917482][T27804]  </TASK>
[  485.191470][T27835] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  485.206857][T27835] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  485.331868][T27846] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  485.335630][T27846] veth0_to_bond: left allmulticast mode
[  485.337353][T27846] veth0_to_bond: left promiscuous mode
[  485.342354][T27846] bridge93: port 2(veth0_to_bond) entered disabled state
[  485.354729][T27846] veth67: left allmulticast mode
[  485.358016][T27846] veth67: left promiscuous mode
[  485.360259][T27846] bridge93: port 1(veth67) entered disabled state
[  485.367210][T27846] bond134: (slave bridge95): Releasing backup interface
[  485.375863][T27846] veth69: left allmulticast mode
[  485.379276][T27846] veth69: left promiscuous mode
[  485.384946][T27846] bridge96: port 1(veth69) entered disabled state
[  485.419859][T27846] netlink: 'syz.0.5641': attribute type 10 has an invalid length.
[  485.422401][T27846] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  485.486746][T27858] __nla_validate_parse: 18 callbacks suppressed
[  485.486765][T27858] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5643'.
[  485.544201][T27862] netlink: 'syz.0.5645': attribute type 1 has an invalid length.
[  485.550479][T27862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5645'.
[  485.748010][ T1118] block nbd2: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 60 seconds
[  485.751686][ T1118] block nbd2: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 60 seconds
[  485.755134][ T1118] block nbd2: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 60 seconds
[  485.761825][ T1118] block nbd2: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 60 seconds
[  485.869107][T27886] block nbd0: not configured, cannot reconfigure
[  485.943185][T27890] netlink: 'syz.0.5654': attribute type 1 has an invalid length.
[  485.997518][T27895] netlink: 'syz.0.5655': attribute type 1 has an invalid length.
[  486.001403][T27895] netlink: 'syz.0.5655': attribute type 4 has an invalid length.
[  486.004815][T27895] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5655'.
[  486.076964][T27897] lo speed is unknown, defaulting to 1000
[  486.301677][T27909] netlink: 63 bytes leftover after parsing attributes in process `syz.2.5659'.
[  486.355831][T27912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5660'.
[  486.361775][T27909] tipc: Resetting bearer <eth:syzkaller0>
[  486.365401][T27909] syzkaller0: left promiscuous mode
[  486.369508][T27909] syzkaller0: left allmulticast mode
[  486.398171][T27909] bridge128: left allmulticast mode
[  486.407058][T27909] bond120: left promiscuous mode
[  486.414998][T27909] bond120: left allmulticast mode
[  486.616099][T27917] tipc: Resetting bearer <eth:syzkaller0>
[  486.624083][T27917] syzkaller0: left promiscuous mode
[  486.626042][T27917] syzkaller0: left allmulticast mode
[  486.705519][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  486.721925][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  486.737145][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  486.748111][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  486.794240][T27926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5664'.
[  486.823954][T27929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5666'.
[  486.830932][T27926] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  486.836203][T27930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5665'.
[  486.844301][T27929] netlink: 'syz.2.5666': attribute type 22 has an invalid length.
[  486.861231][T27926] netlink: 'syz.1.5664': attribute type 9 has an invalid length.
[  486.864482][T27926] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5664'.
[  486.905274][T27930] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  486.916484][   T51] lo speed is unknown, defaulting to 1000
[  486.924425][   T51] syz1: Port: 1 Link ACTIVE
[  486.958183][   T51] lo speed is unknown, defaulting to 1000
[  487.201645][T27949] bond117: (slave batadv6): Releasing active interface
[  487.273504][T27948] ipvlan0: entered promiscuous mode
[  487.283258][T27948] bridge0: port 3(ipvlan0) entered blocking state
[  487.290716][T27948] bridge0: port 3(ipvlan0) entered disabled state
[  487.294034][T27948] ipvlan0: entered allmulticast mode
[  487.301712][T27948] ipvlan0: left allmulticast mode
[  487.686926][T27984] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5680'.
[  487.699483][T27984] batadv6: entered promiscuous mode
[  487.701584][T27984] batadv6: entered allmulticast mode
[  487.867057][T27989] validate_nla: 2 callbacks suppressed
[  487.867076][T27989] netlink: 'syz.2.5681': attribute type 1 has an invalid length.
[  487.915087][T27995] netlink: 'syz.2.5683': attribute type 1 has an invalid length.
[  487.965822][T28000] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  487.969837][T28000] syzkaller0: entered promiscuous mode
[  487.972174][T28000] syzkaller0: entered allmulticast mode
[  487.977312][T28000] x9: renamed from bridge_slave_0
[  488.021174][T28003] netlink: 'syz.2.5686': attribute type 1 has an invalid length.
[  488.041500][T28003] 8021q: adding VLAN 0 to HW filter on device bond122
[  488.452258][T11246] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  488.455440][T11246] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  488.480751][   T51] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  488.594801][T28019] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  488.648602][T28017] block nbd0: server does not support multiple connections per device.
[  488.651462][T28017] block nbd0: shutting down sockets
[  488.851789][T28039] netlink: 'syz.0.5697': attribute type 10 has an invalid length.
[  488.879219][   T51] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  488.904440][T28043] netlink: 'syz.2.5698': attribute type 3 has an invalid length.
[  488.977428][T28052] netem: incorrect ge model size
[  488.985342][T28052] netem: change failed
[  489.107100][T28064] bridge0: port 3(batadv6) entered blocking state
[  489.110987][T28064] bridge0: port 3(batadv6) entered disabled state
[  489.113755][T28064] batadv6: entered allmulticast mode
[  489.117986][T28064] batadv6: entered promiscuous mode
[  489.260200][T28069] netlink: 'syz.1.5706': attribute type 1 has an invalid length.
[  489.263323][T28069] netlink: 'syz.1.5706': attribute type 4 has an invalid length.
[  489.356424][T28081] lo speed is unknown, defaulting to 1000
[  489.440927][   T24] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  489.449288][T28084] geneve0: entered promiscuous mode
[  489.452820][ T5910] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.458836][ T5910] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.464822][ T5910] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  489.472270][ T5910] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  489.630681][ T5910] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled
[  489.633888][ T5910] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled
[  489.942074][T28120] pim6reg1: entered promiscuous mode
[  489.944392][T28120] pim6reg1: entered allmulticast mode
[  490.025633][T28124] pim6reg1: entered promiscuous mode
[  490.034787][T28124] pim6reg1: entered allmulticast mode
[  490.080687][T28120] bond119 (unregistering): Released all slaves
[  490.480261][T28143] netlink: 'syz.1.5729': attribute type 1 has an invalid length.
[  490.540193][T28145] netlink: 'syz.2.5730': attribute type 1 has an invalid length.
[  490.592170][T28145] 8021q: adding VLAN 0 to HW filter on device bond123
[  490.629889][T28145] veth63: entered promiscuous mode
[  490.643300][T28145] bond123: (slave veth63): Enslaving as an active interface with a down link
[  490.660273][T28151] __nla_validate_parse: 24 callbacks suppressed
[  490.660285][T28151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'.
[  490.665214][T28151] netlink: 'syz.1.5731': attribute type 5 has an invalid length.
[  490.665311][T28152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'.
[  490.670245][T28145] erspan0: entered allmulticast mode
[  490.675788][T28152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5731'.
[  490.688003][T28151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5731'.
[  490.688739][T28145] bond123: (slave erspan0): making interface the new active one
[  490.695851][T28145] erspan0: entered promiscuous mode
[  490.698032][T28145] bond123: (slave erspan0): Enslaving as an active interface with an up link
[  490.717381][T28152] geneve8: entered promiscuous mode
[  490.719854][T28152] geneve8: entered allmulticast mode
[  490.744422][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  490.750821][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  490.755573][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  490.759809][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  490.795816][T28157] bond116: (slave bridge39): Releasing active interface
[  490.801198][T28157] batadv5: left allmulticast mode
[  490.802810][T28157] batadv5: left promiscuous mode
[  490.804536][T28157] bridge0: port 1(batadv5) entered disabled state
[  490.810868][T28157] bond117: left allmulticast mode
[  490.813090][T28157] bond117: left promiscuous mode
[  490.815497][T28157] bridge0: port 2(bond117) entered disabled state
[  490.821324][T28157] batadv6: left allmulticast mode
[  490.823379][T28157] batadv6: left promiscuous mode
[  490.825641][T28157] bridge0: port 3(batadv6) entered disabled state
[  491.030355][T28167] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5734'.
[  491.086101][T28169] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  491.145114][T28174] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  491.156334][T28174] syzkaller0: entered promiscuous mode
[  491.159276][T28174] syzkaller0: entered allmulticast mode
[  491.162005][T28176] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5738'.
[  491.379765][T28186] 8021q: adding VLAN 0 to HW filter on device bond135
[  491.394019][T28185] vlan0: entered promiscuous mode
[  491.402465][T28185] bond135: entered promiscuous mode
[  491.405542][T28185] vlan0: entered allmulticast mode
[  491.410381][T28185] bond135: entered allmulticast mode
[  491.421721][T28191] bridge45: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  491.484298][T28193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  491.749281][T28205] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  491.803357][T28208] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  491.806164][T28208] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  491.810520][T28208] syzkaller0: entered promiscuous mode
[  491.812395][T28208] syzkaller0: entered allmulticast mode
[  491.976359][T28220] lo speed is unknown, defaulting to 1000
[  492.044152][T28225] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5752'.
[  492.166053][T28229] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5752'.
[  492.173918][T28229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5752'.
[  492.227902][    C1] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  492.510117][T28232] sctp: [Deprecated]: syz.1.5753 (pid 28232) Use of struct sctp_assoc_value in delayed_ack socket option.
[  492.510117][T28232] Use struct sctp_sack_info instead
[  492.524626][T28232] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  492.529407][T28232] CPU: 1 UID: 0 PID: 28232 Comm: syz.1.5753 Not tainted syzkaller #0 PREEMPT(full) 
[  492.529428][T28232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  492.529438][T28232] Call Trace:
[  492.529446][T28232]  <TASK>
[  492.529453][T28232]  dump_stack_lvl+0x189/0x250
[  492.529481][T28232]  ? __pfx_dump_stack_lvl+0x10/0x10
[  492.529501][T28232]  ? __pfx__printk+0x10/0x10
[  492.529526][T28232]  ? kernfs_path_from_node+0x2f/0x290
[  492.529543][T28232]  ? kernfs_path_from_node+0x250/0x290
[  492.529559][T28232]  ? kernfs_path_from_node+0x2f/0x290
[  492.529580][T28232]  sysfs_warn_dup+0x8e/0xa0
[  492.529627][T28232]  sysfs_do_create_link_sd+0xc0/0x110
[  492.529647][T28232]  device_add_class_symlinks+0x1cf/0x240
[  492.529669][T28232]  device_add+0x475/0xb50
[  492.529687][T28232]  wiphy_register+0x1ba6/0x28d0
[  492.529723][T28232]  ? __pfx_wiphy_register+0x10/0x10
[  492.529773][T28232]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  492.529797][T28232]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  492.529827][T28232]  ieee80211_register_hw+0x3425/0x4080
[  492.529858][T28232]  ? ieee80211_register_hw+0x14a1/0x4080
[  492.529882][T28232]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  492.529903][T28232]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  492.529928][T28232]  ? __hrtimer_setup+0x187/0x210
[  492.529943][T28232]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  492.529970][T28232]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  492.530018][T28232]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  492.530036][T28232]  ? trace_kmalloc+0x1f/0xd0
[  492.530055][T28232]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  492.530075][T28232]  ? kstrndup+0xbf/0x160
[  492.530100][T28232]  hwsim_new_radio_nl+0xea4/0x1b10
[  492.530123][T28232]  ? __pfx___nla_validate_parse+0x10/0x10
[  492.530158][T28232]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  492.530190][T28232]  ? __nla_parse+0x40/0x60
[  492.530216][T28232]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  492.530242][T28232]  genl_family_rcv_msg_doit+0x215/0x300
[  492.530268][T28232]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  492.530297][T28232]  ? bpf_lsm_capable+0x9/0x20
[  492.530318][T28232]  ? security_capable+0x7e/0x2e0
[  492.530345][T28232]  genl_rcv_msg+0x60e/0x790
[  492.530368][T28232]  ? __pfx_genl_rcv_msg+0x10/0x10
[  492.530384][T28232]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  492.530415][T28232]  netlink_rcv_skb+0x208/0x470
[  492.530434][T28232]  ? __lock_acquire+0xab9/0xd20
[  492.530458][T28232]  ? __pfx_genl_rcv_msg+0x10/0x10
[  492.530476][T28232]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  492.530516][T28232]  ? down_read+0x1ad/0x2e0
[  492.530539][T28232]  genl_rcv+0x28/0x40
[  492.530553][T28232]  netlink_unicast+0x82f/0x9e0
[  492.530579][T28232]  ? __pfx_netlink_unicast+0x10/0x10
[  492.530599][T28232]  ? netlink_sendmsg+0x642/0xb30
[  492.530627][T28232]  ? skb_put+0x11b/0x210
[  492.530655][T28232]  netlink_sendmsg+0x805/0xb30
[  492.530686][T28232]  ? __pfx_netlink_sendmsg+0x10/0x10
[  492.530708][T28232]  ? aa_sock_msg_perm+0xf1/0x1d0
[  492.530765][T28232]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  492.530781][T28232]  ? __pfx_netlink_sendmsg+0x10/0x10
[  492.530803][T28232]  __sock_sendmsg+0x21c/0x270
[  492.530825][T28232]  ____sys_sendmsg+0x505/0x830
[  492.530847][T28232]  ? __pfx_____sys_sendmsg+0x10/0x10
[  492.530871][T28232]  ? import_iovec+0x74/0xa0
[  492.530892][T28232]  ___sys_sendmsg+0x21f/0x2a0
[  492.530910][T28232]  ? __pfx____sys_sendmsg+0x10/0x10
[  492.530958][T28232]  ? __fget_files+0x2a/0x420
[  492.530980][T28232]  ? __fget_files+0x3a0/0x420
[  492.531012][T28232]  __x64_sys_sendmsg+0x19b/0x260
[  492.531029][T28232]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  492.531055][T28232]  ? rcu_is_watching+0x15/0xb0
[  492.531075][T28232]  ? do_syscall_64+0xbe/0x3b0
[  492.531101][T28232]  do_syscall_64+0xfa/0x3b0
[  492.531122][T28232]  ? lockdep_hardirqs_on+0x9c/0x150
[  492.531142][T28232]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.531157][T28232]  ? exc_page_fault+0x9f/0xf0
[  492.531177][T28232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.531192][T28232] RIP: 0033:0x7f86eb18ebe9
[  492.531208][T28232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  492.531222][T28232] RSP: 002b:00007f86ec0d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  492.531239][T28232] RAX: ffffffffffffffda RBX: 00007f86eb3b5fa0 RCX: 00007f86eb18ebe9
[  492.531248][T28232] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  492.531256][T28232] RBP: 00007f86eb211e19 R08: 0000000000000000 R09: 0000000000000000
[  492.531264][T28232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  492.531272][T28232] R13: 00007f86eb3b6038 R14: 00007f86eb3b5fa0 R15: 00007ffc100a7eb8
[  492.531298][T28232]  </TASK>
[  492.806594][T28237] block nbd0: Unsupported socket: shutdown callout must be supported.
[  492.921341][T28243] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5755'.
[  493.031529][T28247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  493.133074][T28260] validate_nla: 6 callbacks suppressed
[  493.133087][T28260] netlink: 'syz.2.5760': attribute type 1 has an invalid length.
[  493.420091][T28298] bond123: (slave erspan0): Releasing active interface
[  493.422429][T28298] erspan0: left promiscuous mode
[  493.443905][T28298] bond123: (slave veth63): Releasing active interface
[  493.468545][   T24] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  493.682743][T28315] wg2: entered promiscuous mode
[  493.684712][T28315] wg2: entered allmulticast mode
[  493.721844][T28315] syzkaller0: left promiscuous mode
[  493.723554][T28315] syzkaller0: left allmulticast mode
[  493.725855][T28321] 1: renamed from 70
[  493.734713][T28321] 1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  493.739197][T28321] 1: entered allmulticast mode
[  493.741260][T28321] hsr_slave_0: entered allmulticast mode
[  493.744518][T28321] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check.
[  493.904805][T28324] netlink: 'syz.1.5773': attribute type 1 has an invalid length.
[  493.939645][T28332] netlink: 'syz.2.5776': attribute type 1 has an invalid length.
[  493.990828][T28332] bond124: entered promiscuous mode
[  493.993201][T28332] 8021q: adding VLAN 0 to HW filter on device bond124
[  493.998997][T28337] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  494.006754][T28337] netlink: 'syz.0.5777': attribute type 6 has an invalid length.
[  494.094414][T28337] bond136: entered promiscuous mode
[  494.148288][   T51] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  494.593856][T28382] netlink: 'syz.0.5791': attribute type 1 has an invalid length.
[  494.643814][T28382] veth71: entered promiscuous mode
[  494.653115][T28382] bond137: (slave veth71): Enslaving as a backup interface with a down link
[  494.662299][T28382] 8021q: adding VLAN 0 to HW filter on device bond137
[  494.715086][T28386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  494.729012][   T24] lo speed is unknown, defaulting to 1000
[  494.732674][   T24] syz1: Port: 1 Link DOWN
[  494.734358][   T24] lo speed is unknown, defaulting to 1000
[  494.811518][T28393] vlan4: entered allmulticast mode
[  494.979299][T28396] x9: renamed from bridge_slave_0
[  497.012420][ T5296] udevd[5296]: worker [23097] /devices/virtual/block/nbd2 is taking a long time
[  500.467853][    C1] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  500.468632][   T60] block nbd1: Possible stuck request ffff88803db08000: control (read@0,1024B). Runtime 150 seconds
[  500.474229][   T60] block nbd1: Possible stuck request ffff88803db08200: control (read@1024,1024B). Runtime 150 seconds
[  500.477530][   T60] block nbd1: Possible stuck request ffff88803db08400: control (read@2048,1024B). Runtime 150 seconds
[  500.480965][   T60] block nbd1: Possible stuck request ffff88803db08600: control (read@3072,1024B). Runtime 150 seconds
[  510.343170][T28402] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  510.346856][T28402] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  510.351625][T28402] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  510.356227][T28402] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  510.359481][T28402] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  510.412163][T28400] lo speed is unknown, defaulting to 1000
[  510.446689][T28402] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  510.458224][T28402] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  510.461619][T28402] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  510.464583][T28402] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  510.467302][T28402] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  510.532270][T28402] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  510.535380][T28402] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  510.540143][T28402] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  510.547947][T28402] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  510.554189][T28402] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  510.604635][T28403] lo speed is unknown, defaulting to 1000
[  510.715025][T28405] lo speed is unknown, defaulting to 1000
[  510.763295][T28400] chnl_net:caif_netlink_parms(): no params data found
[  510.927191][T28403] chnl_net:caif_netlink_parms(): no params data found
[  510.998935][T28400] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.001133][T28400] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.003944][T28400] bridge_slave_0: entered allmulticast mode
[  511.008271][T28400] bridge_slave_0: entered promiscuous mode
[  511.039691][T28400] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.042625][T28400] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.045835][T28400] bridge_slave_1: entered allmulticast mode
[  511.050103][T28400] bridge_slave_1: entered promiscuous mode
[  511.129174][T28400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  511.134761][T28400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  511.187340][T28403] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.191511][T28403] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.194731][T28403] bridge_slave_0: entered allmulticast mode
[  511.209033][T28403] bridge_slave_0: entered promiscuous mode
[  511.241368][T28400] team0: Port device team_slave_0 added
[  511.253427][T28403] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.255854][T28403] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.258987][T28403] bridge_slave_1: entered allmulticast mode
[  511.262379][T28403] bridge_slave_1: entered promiscuous mode
[  511.266966][T28400] team0: Port device team_slave_1 added
[  511.385651][T28403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  511.392057][T28403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  511.420987][T28400] batman_adv: batadv0: Adding interface: batadv_slave_0
[  511.423425][T28400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  511.439086][T28400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  511.486215][T28403] team0: Port device team_slave_0 added
[  511.492173][T28400] batman_adv: batadv0: Adding interface: batadv_slave_1
[  511.494509][T28400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  511.503637][T28400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  511.507749][T28405] chnl_net:caif_netlink_parms(): no params data found
[  511.514573][T28403] team0: Port device team_slave_1 added
[  511.618877][T28403] batman_adv: batadv0: Adding interface: batadv_slave_0
[  511.621574][T28403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  511.645185][T28403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  511.659086][T28400] hsr_slave_0: entered promiscuous mode
[  511.661913][T28400] hsr_slave_1: entered promiscuous mode
[  511.664247][T28400] debugfs: 'hsr0' already exists in 'hsr'
[  511.666177][T28400] Cannot create hsr debugfs directory
[  511.677268][T28403] batman_adv: batadv0: Adding interface: batadv_slave_1
[  511.680279][T28403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  511.688373][T28403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  511.796295][T28405] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.800386][T28405] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.802897][T28405] bridge_slave_0: entered allmulticast mode
[  511.806252][T28405] bridge_slave_0: entered promiscuous mode
[  511.852698][T28403] hsr_slave_0: entered promiscuous mode
[  511.855304][T28403] hsr_slave_1: entered promiscuous mode
[  511.857446][T28403] debugfs: 'hsr0' already exists in 'hsr'
[  511.859491][T28403] Cannot create hsr debugfs directory
[  511.861377][T28405] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.863564][T28405] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.865875][T28405] bridge_slave_1: entered allmulticast mode
[  511.876032][T28405] bridge_slave_1: entered promiscuous mode
[  511.916812][T28405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  511.922687][T28405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  511.996565][T28405] team0: Port device team_slave_0 added
[  512.011456][T28405] team0: Port device team_slave_1 added
[  512.055103][T28405] batman_adv: batadv0: Adding interface: batadv_slave_0
[  512.057300][T28405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  512.065503][T28405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  512.070285][T28405] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.072471][T28405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  512.081220][T28405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  512.215248][T28405] hsr_slave_0: entered promiscuous mode
[  512.218365][T28405] hsr_slave_1: entered promiscuous mode
[  512.220769][T28405] debugfs: 'hsr0' already exists in 'hsr'
[  512.222586][T28405] Cannot create hsr debugfs directory
[  512.388703][T28402] Bluetooth: hci3: command tx timeout
[  512.557943][T28402] Bluetooth: hci4: command tx timeout
[  512.628224][T28402] Bluetooth: hci5: command tx timeout
[  514.467906][T28402] Bluetooth: hci3: command tx timeout
[  514.628023][T28402] Bluetooth: hci4: command tx timeout
[  514.708060][T28402] Bluetooth: hci5: command tx timeout
[  515.837867][    C1] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  515.841533][ T1118] block nbd2: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 90 seconds
[  515.845739][ T1118] block nbd2: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 90 seconds
[  515.850053][ T1118] block nbd2: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 90 seconds
[  515.854424][ T1118] block nbd2: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 90 seconds
[  516.548081][T28402] Bluetooth: hci3: command tx timeout
[  516.717967][T28402] Bluetooth: hci4: command tx timeout
[  516.788345][T28402] Bluetooth: hci5: command tx timeout
[  518.627931][T28402] Bluetooth: hci3: command tx timeout
[  518.797841][T28402] Bluetooth: hci4: command tx timeout
[  518.867961][T28402] Bluetooth: hci5: command tx timeout
[  530.461754][ T5296] udevd[5296]: worker [18091] /devices/virtual/block/nbd1 timeout; kill it
[  530.466848][ T5296] udevd[5296]: seq 36908 '/devices/virtual/block/nbd1' killed
[  530.548028][   T60] block nbd1: Possible stuck request ffff88803db08000: control (read@0,1024B). Runtime 180 seconds
[  530.551454][   T60] block nbd1: Possible stuck request ffff88803db08200: control (read@1024,1024B). Runtime 180 seconds
[  530.554784][   T60] block nbd1: Possible stuck request ffff88803db08400: control (read@2048,1024B). Runtime 180 seconds
[  530.559380][   T60] block nbd1: Possible stuck request ffff88803db08600: control (read@3072,1024B). Runtime 180 seconds
[  545.267821][    C1] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  545.908856][ T1118] block nbd2: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 120 seconds
[  545.913093][ T1118] block nbd2: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 120 seconds
[  545.917159][ T1118] block nbd2: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 120 seconds
[  545.921981][ T1118] block nbd2: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 120 seconds
[  560.628613][   T60] block nbd1: Possible stuck request ffff88803db08000: control (read@0,1024B). Runtime 210 seconds
[  560.632746][   T60] block nbd1: Possible stuck request ffff88803db08200: control (read@1024,1024B). Runtime 210 seconds
[  560.636636][   T60] block nbd1: Possible stuck request ffff88803db08400: control (read@2048,1024B). Runtime 210 seconds
[  560.647733][   T60] block nbd1: Possible stuck request ffff88803db08600: control (read@3072,1024B). Runtime 210 seconds
[  571.448723][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  571.452789][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  571.456137][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  571.460433][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  571.463235][ T5853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  571.504502][T28402] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  571.512769][T28428] lo speed is unknown, defaulting to 1000
[  571.515260][T28402] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  571.522112][T28402] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  571.526345][T28402] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  571.530064][T28402] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  571.625468][T28402] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  571.630768][T28402] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  571.634295][T28402] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  571.638319][T28402] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  571.641638][T28402] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  571.744257][T28430] lo speed is unknown, defaulting to 1000
[  571.964030][T28432] lo speed is unknown, defaulting to 1000
[  572.019771][T28428] chnl_net:caif_netlink_parms(): no params data found
[  572.262253][T28428] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.264920][T28428] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.267245][T28428] bridge_slave_0: entered allmulticast mode
[  572.270367][T28428] bridge_slave_0: entered promiscuous mode
[  572.277451][T28428] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.280990][T28428] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.283719][T28428] bridge_slave_1: entered allmulticast mode
[  572.286702][T28428] bridge_slave_1: entered promiscuous mode
[  572.338270][T28430] chnl_net:caif_netlink_parms(): no params data found
[  572.359505][T28428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  572.390581][T28428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  572.459314][T28428] team0: Port device team_slave_0 added
[  572.471467][T28428] team0: Port device team_slave_1 added
[  572.495384][T28432] chnl_net:caif_netlink_parms(): no params data found
[  572.586351][T28428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  572.596574][T28428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  572.605059][T28428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  572.609650][T28430] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.612316][T28430] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.614772][T28430] bridge_slave_0: entered allmulticast mode
[  572.625407][T28430] bridge_slave_0: entered promiscuous mode
[  572.629383][T28430] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.631736][T28430] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.634214][T28430] bridge_slave_1: entered allmulticast mode
[  572.637246][T28430] bridge_slave_1: entered promiscuous mode
[  572.655190][T28428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  572.658623][T28428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  572.668985][T28428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  572.776188][T28430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  572.797354][T28432] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.803129][T28432] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.805827][T28432] bridge_slave_0: entered allmulticast mode
[  572.824615][T28432] bridge_slave_0: entered promiscuous mode
[  572.840749][T28428] hsr_slave_0: entered promiscuous mode
[  572.858211][T28428] hsr_slave_1: entered promiscuous mode
[  572.860616][T28428] debugfs: 'hsr0' already exists in 'hsr'
[  572.862507][T28428] Cannot create hsr debugfs directory
[  572.880406][T28430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  572.883530][T28432] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.897017][T28432] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.900848][T28432] bridge_slave_1: entered allmulticast mode
[  572.905029][T28432] bridge_slave_1: entered promiscuous mode
[  573.015316][T28430] team0: Port device team_slave_0 added
[  573.032324][T28432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  573.041769][T28430] team0: Port device team_slave_1 added
[  573.049997][T28432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  573.099122][T28430] batman_adv: batadv0: Adding interface: batadv_slave_0
[  573.101279][T28430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.109812][T28430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  573.127584][T28430] batman_adv: batadv0: Adding interface: batadv_slave_1
[  573.132967][T28430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.141231][T28430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  573.163470][T28432] team0: Port device team_slave_0 added
[  573.179578][T28432] team0: Port device team_slave_1 added
[  573.218738][T28432] batman_adv: batadv0: Adding interface: batadv_slave_0
[  573.221683][T28432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.232918][T28432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  573.241158][T28432] batman_adv: batadv0: Adding interface: batadv_slave_1
[  573.244138][T28432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.255097][T28432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  573.339719][T28430] hsr_slave_0: entered promiscuous mode
[  573.343347][T28430] hsr_slave_1: entered promiscuous mode
[  573.346325][T28430] debugfs: 'hsr0' already exists in 'hsr'
[  573.350323][T28430] Cannot create hsr debugfs directory
[  573.426909][T28432] hsr_slave_0: entered promiscuous mode
[  573.435093][T28432] hsr_slave_1: entered promiscuous mode
[  573.438568][T28432] debugfs: 'hsr0' already exists in 'hsr'
[  573.440755][T28432] Cannot create hsr debugfs directory
[  573.508075][ T5853] Bluetooth: hci6: command tx timeout
[  573.591948][ T5853] Bluetooth: hci7: command tx timeout
[  573.668549][ T5853] Bluetooth: hci8: command tx timeout
[  575.587873][ T5853] Bluetooth: hci6: command tx timeout
[  575.668478][ T5853] Bluetooth: hci7: command tx timeout
[  575.758163][ T5853] Bluetooth: hci8: command tx timeout
[  575.998500][ T1118] block nbd2: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 150 seconds
[  576.001834][ T1118] block nbd2: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 150 seconds
[  576.005453][ T1118] block nbd2: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 150 seconds
[  576.008962][ T1118] block nbd2: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 150 seconds
[  577.678104][ T5853] Bluetooth: hci6: command tx timeout
[  577.748302][ T5853] Bluetooth: hci7: command tx timeout
[  577.827972][ T5853] Bluetooth: hci8: command tx timeout
[  579.747944][ T5853] Bluetooth: hci6: command tx timeout
[  579.828949][ T5853] Bluetooth: hci7: command tx timeout
[  579.908023][ T5853] Bluetooth: hci8: command tx timeout
[  590.717732][   T60] block nbd1: Possible stuck request ffff88803db08000: control (read@0,1024B). Runtime 240 seconds
[  590.721687][   T60] block nbd1: Possible stuck request ffff88803db08200: control (read@1024,1024B). Runtime 240 seconds
[  590.725520][   T60] block nbd1: Possible stuck request ffff88803db08400: control (read@2048,1024B). Runtime 240 seconds
[  590.729923][   T60] block nbd1: Possible stuck request ffff88803db08600: control (read@3072,1024B). Runtime 240 seconds
[  603.507905][    C1] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  606.075896][ T1118] block nbd2: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 180 seconds
[  606.080019][ T1118] block nbd2: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 180 seconds
[  606.084043][ T1118] block nbd2: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 180 seconds
[  606.088178][ T1118] block nbd2: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 180 seconds
[  607.382394][ T5296] udevd[5296]: worker [23097] /devices/virtual/block/nbd2 timeout; kill it
[  607.385742][ T5296] udevd[5296]: seq 43281 '/devices/virtual/block/nbd2' killed
[  620.788388][   T60] block nbd1: Possible stuck request ffff88803db08000: control (read@0,1024B). Runtime 270 seconds
[  620.791761][   T60] block nbd1: Possible stuck request ffff88803db08200: control (read@1024,1024B). Runtime 270 seconds
[  620.795138][   T60] block nbd1: Possible stuck request ffff88803db08400: control (read@2048,1024B). Runtime 270 seconds
[  620.798667][   T60] block nbd1: Possible stuck request ffff88803db08600: control (read@3072,1024B). Runtime 270 seconds
[  632.429880][T28402] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  632.433267][T28402] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  632.436269][T28402] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  632.447849][T28402] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  632.450680][T28402] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  632.495450][T28457] lo speed is unknown, defaulting to 1000
[  632.497011][T28402] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  632.511993][ T5237] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  632.515573][ T5237] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  632.525145][ T5237] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  632.525565][T28462] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  632.531571][T28462] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  632.534824][T28464] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  632.535283][T28462] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  632.539877][T28464] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  632.547309][T28464] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  632.651612][T28461] lo speed is unknown, defaulting to 1000
[  632.837401][T28457] chnl_net:caif_netlink_parms(): no params data found
[  632.948188][T28459] lo speed is unknown, defaulting to 1000
[  633.025122][T28457] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.037589][T28457] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.041223][T28457] bridge_slave_0: entered allmulticast mode
[  633.045350][T28457] bridge_slave_0: entered promiscuous mode
[  633.096569][T28457] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.100199][T28457] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.103314][T28457] bridge_slave_1: entered allmulticast mode
[  633.107573][T28457] bridge_slave_1: entered promiscuous mode
[  633.195794][T28457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  633.215115][T28457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  633.303861][T28457] team0: Port device team_slave_0 added
[  633.333496][T28457] team0: Port device team_slave_1 added
[  633.433496][T28457] batman_adv: batadv0: Adding interface: batadv_slave_0
[  633.436308][T28457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  633.458927][T28457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  633.474338][T28457] batman_adv: batadv0: Adding interface: batadv_slave_1
[  633.477112][T28457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  633.487818][T28457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  633.504280][T28461] chnl_net:caif_netlink_parms(): no params data found
[  633.673585][T28457] hsr_slave_0: entered promiscuous mode
[  633.676737][T28457] hsr_slave_1: entered promiscuous mode
[  633.680396][T28457] debugfs: 'hsr0' already exists in 'hsr'
[  633.682656][T28457] Cannot create hsr debugfs directory
[  633.703530][T28461] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.708400][T28461] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.711612][T28461] bridge_slave_0: entered allmulticast mode
[  633.718286][T28461] bridge_slave_0: entered promiscuous mode
[  633.723348][T28461] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.726256][T28461] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.729712][T28461] bridge_slave_1: entered allmulticast mode
[  633.733805][T28461] bridge_slave_1: entered promiscuous mode
[  633.857313][T28459] chnl_net:caif_netlink_parms(): no params data found
[  633.889929][T28461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  633.910174][T28461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  633.993425][T28461] team0: Port device team_slave_0 added
[  634.041719][T28461] team0: Port device team_slave_1 added
[  634.146120][T28461] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.151261][T28461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  634.161125][T28461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.212668][T28461] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.215428][T28461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  634.253522][T28461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  634.311533][T28459] bridge0: port 1(bridge_slave_0) entered blocking state
[  634.314407][T28459] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.327766][T28459] bridge_slave_0: entered allmulticast mode
[  634.332017][T28459] bridge_slave_0: entered promiscuous mode
[  634.336747][T28459] bridge0: port 2(bridge_slave_1) entered blocking state
[  634.342242][T28459] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.345262][T28459] bridge_slave_1: entered allmulticast mode
[  634.349579][T28459] bridge_slave_1: entered promiscuous mode
[  634.425626][T28461] hsr_slave_0: entered promiscuous mode
[  634.429557][T28461] hsr_slave_1: entered promiscuous mode
[  634.432551][T28461] debugfs: 'hsr0' already exists in 'hsr'
[  634.434761][T28461] Cannot create hsr debugfs directory
[  634.455677][T28459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  634.468344][ T5237] Bluetooth: hci9: command tx timeout
[  634.486515][T28459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  634.580701][T28459] team0: Port device team_slave_0 added
[  634.596423][T28459] team0: Port device team_slave_1 added
[  634.628348][ T5237] Bluetooth: hci10: command tx timeout
[  634.631699][ T5237] Bluetooth: hci11: command tx timeout
[  634.690557][T28459] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.692783][T28459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  634.701214][T28459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.753122][T28459] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.755242][T28459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  634.763217][T28459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  634.869991][T28459] hsr_slave_0: entered promiscuous mode
[  634.873422][T28459] hsr_slave_1: entered promiscuous mode
[  634.876341][T28459] debugfs: 'hsr0' already exists in 'hsr'
[  634.880044][T28459] Cannot create hsr debugfs directory
[  636.156588][ T1118] block nbd2: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 210 seconds
[  636.168303][ T1118] block nbd2: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 210 seconds
[  636.172706][ T1118] block nbd2: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 210 seconds
[  636.176895][ T1118] block nbd2: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 210 seconds
[  636.312333][T28483] Bluetooth: hci4: command 0x0406 tx timeout
[  636.315659][T28483] Bluetooth: hci5: command 0x0406 tx timeout
[  636.319147][T28462] Bluetooth: hci3: command 0x0406 tx timeout
[  636.548648][ T5853] Bluetooth: hci9: command tx timeout
[  636.708058][T28402] Bluetooth: hci10: command tx timeout
[  636.710395][ T5853] Bluetooth: hci11: command tx timeout
[  638.627965][ T5853] Bluetooth: hci9: command tx timeout
[  638.788005][ T5853] Bluetooth: hci11: command tx timeout
[  638.790284][ T5853] Bluetooth: hci10: command tx timeout
[  640.717957][T28402] Bluetooth: hci9: command tx timeout
[  640.868038][T28402] Bluetooth: hci10: command tx timeout
[  640.868092][ T5853] Bluetooth: hci11: command tx timeout
[  642.548258][   T34] INFO: task syz.1.5787:28361 blocked for more than 143 seconds.
[  642.551086][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  642.555365][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  642.559889][   T34] task:syz.1.5787      state:D stack:24816 pid:28361 tgid:28360 ppid:5840   task_flags:0x480140 flags:0x00004004
[  642.564602][   T34] Call Trace:
[  642.565944][   T34]  <TASK>
[  642.567155][   T34]  __schedule+0x1798/0x4cc0
[  642.584028][   T34]  ? __lock_acquire+0xab9/0xd20
[  642.586080][   T34]  ? __lock_acquire+0xab9/0xd20
[  642.588519][   T34]  ? __pfx___schedule+0x10/0x10
[  642.590531][   T34]  ? schedule+0x91/0x360
[  642.592268][   T34]  schedule+0x165/0x360
[  642.593932][   T34]  blk_mq_freeze_queue_wait+0xf4/0x170
[  642.596113][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  642.613848][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  642.616267][   T34]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  642.619009][   T34]  queue_limits_commit_update_frozen+0x5d/0x3e0
[  642.621481][   T34]  nbd_set_size+0x47e/0x6a0
[  642.623289][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  642.625252][   T34]  ? nla_memcpy+0x5b/0xc0
[  642.626908][   T34]  nbd_genl_size_set+0x2eb/0x3c0
[  642.637971][   T34]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  642.640164][   T34]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  642.642503][   T34]  ? bpf_lsm_capable+0x9/0x20
[  642.644400][   T34]  ? security_capable+0x7e/0x2e0
[  642.646295][   T34]  ? radix_tree_lookup+0x240/0x290
[  642.648738][   T34]  nbd_genl_reconfigure+0x409/0x1870
[  642.650911][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  642.653350][   T34]  ? __nla_parse+0x40/0x60
[  642.655204][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  642.658305][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  642.660579][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  642.663202][   T34]  ? stack_trace_save+0x9c/0xe0
[  642.665330][   T34]  genl_rcv_msg+0x60e/0x790
[  642.667324][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  642.669529][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  642.671980][   T34]  netlink_rcv_skb+0x208/0x470
[  642.673955][   T34]  ? __lock_acquire+0xab9/0xd20
[  642.676056][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  642.678445][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  642.680677][   T34]  ? down_read+0x1ad/0x2e0
[  642.682676][   T34]  genl_rcv+0x28/0x40
[  642.684419][   T34]  netlink_unicast+0x82f/0x9e0
[  642.686516][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  642.689240][   T34]  ? netlink_sendmsg+0x642/0xb30
[  642.691394][   T34]  ? skb_put+0x11b/0x210
[  642.693211][   T34]  netlink_sendmsg+0x805/0xb30
[  642.695332][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  642.697789][   T34]  ? __lock_acquire+0xab9/0xd20
[  642.699889][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  642.701959][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  642.704285][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  642.706514][   T34]  __sock_sendmsg+0x21c/0x270
[  642.708845][   T34]  ____sys_sendmsg+0x505/0x830
[  642.710861][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  642.713083][   T34]  ? import_iovec+0x74/0xa0
[  642.715034][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  642.717085][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  642.719520][   T34]  ? __fget_files+0x2a/0x420
[  642.721541][   T34]  ? __fget_files+0x3a0/0x420
[  642.723597][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  642.725747][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  642.728283][   T34]  ? rcu_is_watching+0x15/0xb0
[  642.730362][   T34]  ? do_syscall_64+0xbe/0x3b0
[  642.732394][   T34]  do_syscall_64+0xfa/0x3b0
[  642.734363][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  642.736640][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.739304][   T34]  ? exc_page_fault+0x9f/0xf0
[  642.741372][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.743762][   T34] RIP: 0033:0x7f86eb18ebe9
[  642.745699][   T34] RSP: 002b:00007f86ec0d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  642.749560][   T34] RAX: ffffffffffffffda RBX: 00007f86eb3b5fa0 RCX: 00007f86eb18ebe9
[  642.752979][   T34] RDX: 0000000000004004 RSI: 00002000000028c0 RDI: 0000000000000004
[  642.756357][   T34] RBP: 00007f86eb211e19 R08: 0000000000000000 R09: 0000000000000000
[  642.759780][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  642.763249][   T34] R13: 00007f86eb3b6038 R14: 00007f86eb3b5fa0 R15: 00007ffc100a7eb8
[  642.766530][   T34]  </TASK>
[  642.768245][   T34] INFO: task syz.1.5787:28373 blocked for more than 143 seconds.
[  642.771505][   T34]       Not tainted syzkaller #0
[  642.773544][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  642.777254][   T34] task:syz.1.5787      state:D stack:25896 pid:28373 tgid:28360 ppid:5840   task_flags:0x400140 flags:0x00004004
[  642.788561][   T34] Call Trace:
[  642.790073][   T34]  <TASK>
[  642.791382][   T34]  __schedule+0x1798/0x4cc0
[  642.793379][   T34]  ? __lock_acquire+0xab9/0xd20
[  642.795453][   T34]  ? __lock_acquire+0xab9/0xd20
[  642.797539][   T34]  ? __pfx___schedule+0x10/0x10
[  642.817862][   T34]  ? schedule+0x91/0x360
[  642.819740][   T34]  schedule+0x165/0x360
[  642.821591][   T34]  schedule_preempt_disabled+0x13/0x30
[  642.823961][   T34]  __mutex_lock+0x7e6/0x1360
[  642.825968][   T34]  ? __mutex_lock+0x5b6/0x1360
[  642.828278][   T34]  ? genl_rcv_msg+0x10d/0x790
[  642.830269][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  642.832398][   T34]  ? stack_trace_save+0x9c/0xe0
[  642.834525][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  642.836787][   T34]  ? radix_tree_lookup+0x240/0x290
[  642.839285][   T34]  genl_rcv_msg+0x10d/0x790
[  642.841282][   T34]  ? __lock_acquire+0xab9/0xd20
[  642.843438][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  642.845502][   T34]  netlink_rcv_skb+0x208/0x470
[  642.847444][   T34]  ? __lock_acquire+0xab9/0xd20
[  642.849668][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  642.851851][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  642.854134][   T34]  ? down_read+0x1ad/0x2e0
[  642.856084][   T34]  genl_rcv+0x28/0x40
[  642.858142][   T34]  netlink_unicast+0x82f/0x9e0
[  642.860200][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  642.862396][   T34]  ? netlink_sendmsg+0x642/0xb30
[  642.864546][   T34]  ? skb_put+0x11b/0x210
[  642.866331][   T34]  netlink_sendmsg+0x805/0xb30
[  642.868726][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  642.870977][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  642.873019][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  642.875190][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  642.877363][   T34]  __sock_sendmsg+0x21c/0x270
[  642.879758][   T34]  __sys_sendto+0x3bd/0x520
[  642.881755][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  642.883891][   T34]  ? fd_install+0x97/0x540
[  642.885821][   T34]  ? fd_install+0x30d/0x540
[  642.887850][   T34]  __x64_sys_sendto+0xde/0x100
[  642.889897][   T34]  do_syscall_64+0xfa/0x3b0
[  642.891900][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  642.894191][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.896849][   T34]  ? exc_page_fault+0x9f/0xf0
[  642.899002][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.901372][   T34] RIP: 0033:0x7f86eb190a7c
[  642.903221][   T34] RSP: 002b:00007f86ec0afec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  642.906753][   T34] RAX: ffffffffffffffda RBX: 00007f86ec0affc0 RCX: 00007f86eb190a7c
[  642.910435][   T34] RDX: 0000000000000020 RSI: 00007f86ec0b0010 RDI: 0000000000000008
[  642.913832][   T34] RBP: 0000000000000000 R08: 00007f86ec0aff14 R09: 000000000000000c
[  642.917236][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
[  642.920722][   T34] R13: 00007f86ec0aff68 R14: 00007f86ec0b0010 R15: 0000000000000000
[  642.923986][   T34]  </TASK>
[  642.925307][   T34] INFO: task syz.1.5787:28379 blocked for more than 143 seconds.
[  642.930876][   T34]       Not tainted syzkaller #0
[  642.933063][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  642.936711][   T34] task:syz.1.5787      state:D stack:27944 pid:28379 tgid:28360 ppid:5840   task_flags:0x400040 flags:0x00004004
[  642.957963][   T34] Call Trace:
[  642.959457][   T34]  <TASK>
[  642.960740][   T34]  __schedule+0x1798/0x4cc0
[  642.962725][   T34]  ? __lock_acquire+0xab9/0xd20
[  642.964846][   T34]  ? __lock_acquire+0xab9/0xd20
[  642.966821][   T34]  ? __pfx___schedule+0x10/0x10
[  642.977934][   T34]  ? schedule+0x91/0x360
[  642.979656][   T34]  schedule+0x165/0x360
[  642.981250][   T34]  schedule_preempt_disabled+0x13/0x30
[  642.983291][   T34]  __mutex_lock+0x7e6/0x1360
[  642.985140][   T34]  ? __mutex_lock+0x5b6/0x1360
[  642.987026][   T34]  ? genl_rcv_msg+0x10d/0x790
[  642.997762][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  642.999821][   T34]  ? stack_trace_save+0x9c/0xe0
[  643.001770][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  643.003935][   T34]  ? radix_tree_lookup+0x240/0x290
[  643.006195][   T34]  genl_rcv_msg+0x10d/0x790
[  643.016802][   T34]  ? __lock_acquire+0xab9/0xd20
[  643.026311][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  643.029296][   T34]  netlink_rcv_skb+0x208/0x470
[  643.030999][   T34]  ? __lock_acquire+0xab9/0xd20
[  643.032628][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  643.034364][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  643.036209][   T34]  ? down_read+0x1ad/0x2e0
[  643.037879][   T34]  genl_rcv+0x28/0x40
[  643.039226][   T34]  netlink_unicast+0x82f/0x9e0
[  643.040747][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  643.042417][   T34]  ? netlink_sendmsg+0x642/0xb30
[  643.044094][   T34]  ? skb_put+0x11b/0x210
[  643.045453][   T34]  netlink_sendmsg+0x805/0xb30
[  643.046991][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  643.048801][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  643.050388][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  643.052104][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  643.053845][   T34]  __sock_sendmsg+0x21c/0x270
[  643.055361][   T34]  __sys_sendto+0x3bd/0x520
[  643.056836][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  643.058715][   T34]  ? count_memcg_event_mm+0x21/0x260
[  643.060673][   T34]  ? exc_page_fault+0x76/0xf0
[  643.062368][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  643.064243][   T34]  __x64_sys_sendto+0xde/0x100
[  643.066069][   T34]  do_syscall_64+0xfa/0x3b0
[  643.067944][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  643.069928][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.072231][   T34]  ? exc_page_fault+0x9f/0xf0
[  643.074032][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.076513][   T34] RIP: 0033:0x7f86eb190a7c
[  643.078748][   T34] RSP: 002b:00007f86ec08eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  643.081941][   T34] RAX: ffffffffffffffda RBX: 00007f86ec08efc0 RCX: 00007f86eb190a7c
[  643.084907][   T34] RDX: 0000000000000020 RSI: 00007f86ec08f010 RDI: 0000000000000003
[  643.088118][   T34] RBP: 0000000000000000 R08: 00007f86ec08ef14 R09: 000000000000000c
[  643.091190][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  643.094223][   T34] R13: 00007f86ec08ef68 R14: 00007f86ec08f010 R15: 0000000000000000
[  643.097362][   T34]  </TASK>
[  643.098861][   T34] INFO: task syz.2.5786:28363 blocked for more than 143 seconds.
[  643.101253][   T34]       Not tainted syzkaller #0
[  643.103393][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  643.106409][   T34] task:syz.2.5786      state:D stack:25896 pid:28363 tgid:28362 ppid:5847   task_flags:0x400140 flags:0x00004004
[  643.112736][   T34] Call Trace:
[  643.113785][   T34]  <TASK>
[  643.114722][   T34]  __schedule+0x1798/0x4cc0
[  643.116170][   T34]  ? __lock_acquire+0xab9/0xd20
[  643.117817][   T34]  ? __lock_acquire+0xab9/0xd20
[  643.119402][   T34]  ? __pfx___schedule+0x10/0x10
[  643.120932][   T34]  ? schedule+0x91/0x360
[  643.122530][   T34]  schedule+0x165/0x360
[  643.124071][   T34]  schedule_preempt_disabled+0x13/0x30
[  643.125776][   T34]  __mutex_lock+0x7e6/0x1360
[  643.127245][   T34]  ? __mutex_lock+0x5b6/0x1360
[  643.128965][   T34]  ? genl_rcv_msg+0x10d/0x790
[  643.130459][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  643.132059][   T34]  ? stack_trace_save+0x9c/0xe0
[  643.133759][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  643.135505][   T34]  ? radix_tree_lookup+0x240/0x290
[  643.137099][   T34]  genl_rcv_msg+0x10d/0x790
[  643.138650][   T34]  ? __lock_acquire+0xab9/0xd20
[  643.140187][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  643.141744][   T34]  netlink_rcv_skb+0x208/0x470
[  643.143263][   T34]  ? __lock_acquire+0xab9/0xd20
[  643.145122][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  643.147340][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  643.149589][   T34]  ? down_read+0x1ad/0x2e0
[  643.151275][   T34]  genl_rcv+0x28/0x40
[  643.152514][   T34]  netlink_unicast+0x82f/0x9e0
[  643.154006][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  643.155666][   T34]  ? netlink_sendmsg+0x642/0xb30
[  643.157379][   T34]  ? skb_put+0x11b/0x210
[  643.158805][   T34]  netlink_sendmsg+0x805/0xb30
[  643.160282][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  643.162242][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  643.164155][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  643.166203][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  643.168349][   T34]  __sock_sendmsg+0x21c/0x270
[  643.170192][   T34]  __sys_sendto+0x3bd/0x520
[  643.171890][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  643.173682][   T34]  ? count_memcg_event_mm+0x21/0x260
[  643.175391][   T34]  ? exc_page_fault+0x76/0xf0
[  643.176808][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  643.178572][   T34]  __x64_sys_sendto+0xde/0x100
[  643.180046][   T34]  do_syscall_64+0xfa/0x3b0
[  643.181440][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  643.183047][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.184951][   T34]  ? exc_page_fault+0x9f/0xf0
[  643.186412][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.188884][   T34] RIP: 0033:0x7f44f2990a7c
[  643.190270][   T34] RSP: 002b:00007f44f37e2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  643.192857][   T34] RAX: ffffffffffffffda RBX: 00007f44f37e2fc0 RCX: 00007f44f2990a7c
[  643.195170][   T34] RDX: 0000000000000020 RSI: 00007f44f37e3010 RDI: 000000000000000c
[  643.197499][   T34] RBP: 0000000000000000 R08: 00007f44f37e2f14 R09: 000000000000000c
[  643.199958][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c
[  643.202385][   T34] R13: 00007f44f37e2f68 R14: 00007f44f37e3010 R15: 0000000000000000
[  643.205282][   T34]  </TASK>
[  643.206281][   T34] INFO: task syz.0.5795:28395 blocked for more than 144 seconds.
[  643.208874][   T34]       Not tainted syzkaller #0
[  643.210412][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  643.213090][   T34] task:syz.0.5795      state:D stack:28328 pid:28395 tgid:28394 ppid:5841   task_flags:0x400140 flags:0x00004004
[  643.216916][   T34] Call Trace:
[  643.218113][   T34]  <TASK>
[  643.219268][   T34]  __schedule+0x1798/0x4cc0
[  643.220672][   T34]  ? __lock_acquire+0xab9/0xd20
[  643.222152][   T34]  ? __lock_acquire+0xab9/0xd20
[  643.223588][   T34]  ? __pfx___schedule+0x10/0x10
[  643.225036][   T34]  ? schedule+0x91/0x360
[  643.226295][   T34]  schedule+0x165/0x360
[  643.227543][   T34]  schedule_preempt_disabled+0x13/0x30
[  643.229311][   T34]  __mutex_lock+0x7e6/0x1360
[  643.230735][   T34]  ? __mutex_lock+0x5b6/0x1360
[  643.232221][   T34]  ? genl_rcv_msg+0x10d/0x790
[  643.233750][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  643.235335][   T34]  ? stack_trace_save+0x9c/0xe0
[  643.236849][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  643.238681][   T34]  ? radix_tree_lookup+0x240/0x290
[  643.240256][   T34]  genl_rcv_msg+0x10d/0x790
[  643.241610][   T34]  ? __lock_acquire+0xab9/0xd20
[  643.243150][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  643.244641][   T34]  netlink_rcv_skb+0x208/0x470
[  643.246072][   T34]  ? __lock_acquire+0xab9/0xd20
[  643.247572][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  643.249248][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  643.250832][   T34]  ? down_read+0x1ad/0x2e0
[  643.252168][   T34]  genl_rcv+0x28/0x40
[  643.253381][   T34]  netlink_unicast+0x82f/0x9e0
[  643.254882][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  643.256514][   T34]  ? netlink_sendmsg+0x642/0xb30
[  643.258159][   T34]  ? skb_put+0x11b/0x210
[  643.259447][   T34]  netlink_sendmsg+0x805/0xb30
[  643.260953][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  643.262633][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  643.264157][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  643.265697][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  643.267328][   T34]  __sock_sendmsg+0x21c/0x270
[  643.269163][   T34]  __sys_sendto+0x3bd/0x520
[  643.270550][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  643.272112][   T34]  ? count_memcg_event_mm+0x21/0x260
[  643.274290][   T34]  ? exc_page_fault+0x76/0xf0
[  643.276202][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  643.278431][   T34]  __x64_sys_sendto+0xde/0x100
[  643.280365][   T34]  do_syscall_64+0xfa/0x3b0
[  643.282208][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  643.284317][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.286773][   T34]  ? exc_page_fault+0x9f/0xf0
[  643.288782][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.291171][   T34] RIP: 0033:0x7fe9f8390a7c
[  643.292895][   T34] RSP: 002b:00007fe9f9255ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  643.295527][   T34] RAX: ffffffffffffffda RBX: 00007fe9f9255fc0 RCX: 00007fe9f8390a7c
[  643.298214][   T34] RDX: 0000000000000028 RSI: 00007fe9f9256010 RDI: 0000000000000004
[  643.300860][   T34] RBP: 0000000000000000 R08: 00007fe9f9255f14 R09: 000000000000000c
[  643.303282][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  643.306084][   T34] R13: 00007fe9f9255f68 R14: 00007fe9f9256010 R15: 0000000000000000
[  643.309069][   T34]  </TASK>
[  643.310275][   T34] 
[  643.310275][   T34] Showing all locks held in the system:
[  643.313068][   T34] 2 locks held by kworker/u8:0/12:
[  643.314934][   T34] 1 lock held by khungtaskd/34:
[  643.316537][   T34]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  643.319769][   T34] 2 locks held by getty/5674:
[  643.321288][   T34]  #0: ffff88810ec6d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  643.324653][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  643.328473][   T34] 2 locks held by kworker/u9:39/8859:
[  643.330141][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  643.333684][   T34]  #1: ffffc90007577bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  643.337572][   T34] 1 lock held by udevd/18091:
[  643.339380][   T34]  #0: ffff88812f3f1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  643.342209][   T34] 1 lock held by udevd/23097:
[  643.343656][   T34]  #0: ffff888021fb3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  643.346459][   T34] 6 locks held by syz.1.5787/28361:
[  643.348409][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  643.350928][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  643.353628][   T34]  #2: ffff888125432230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870
[  643.356825][   T34]  #3: ffff888107d1e928 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0
[  643.359795][   T34]  #4: ffff888107d1e2c8 (&q->q_usage_counter(io)#71){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  643.363385][   T34]  #5: ffff888107d1e300 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  643.367143][   T34] 2 locks held by syz.1.5787/28373:
[  643.368823][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  643.371334][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  643.374141][   T34] 2 locks held by syz.1.5787/28379:
[  643.375749][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  643.378392][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  643.381147][   T34] 2 locks held by syz.2.5786/28363:
[  643.382749][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  643.385288][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  643.388064][   T34] 2 locks held by syz.0.5795/28395:
[  643.389589][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  643.392035][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  643.394826][   T34] 2 locks held by syz-executor/28400:
[  643.396500][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  643.399133][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  643.401881][   T34] 2 locks held by syz-executor/28403:
[  643.403515][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  643.405925][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  643.408862][   T34] 2 locks held by syz-executor/28405:
[  643.410542][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  643.413032][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  643.415761][   T34] 2 locks held by syz-executor/28428:
[  643.417455][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  643.420150][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  643.423478][   T34] 2 locks held by syz-executor/28430:
[  643.425533][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  643.428930][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  643.432459][   T34] 2 locks held by syz-executor/28432:
[  643.434518][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  643.437879][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  643.441524][   T34] 2 locks held by syz-executor/28457:
[  643.443796][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  643.447039][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  643.451011][   T34] 2 locks held by syz-executor/28459:
[  643.453166][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  643.456365][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  643.460160][   T34] 2 locks held by syz-executor/28461:
[  643.462533][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  643.465640][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  643.469337][   T34] 
[  643.470328][   T34] =============================================
[  643.470328][   T34] 
[  643.473604][   T34] NMI backtrace for cpu 0
[  643.473619][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  643.473635][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  643.473644][   T34] Call Trace:
[  643.473652][   T34]  <TASK>
[  643.473660][   T34]  dump_stack_lvl+0x189/0x250
[  643.473685][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  643.473702][   T34]  ? __pfx__printk+0x10/0x10
[  643.473731][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  643.473751][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  643.473770][   T34]  ? __pfx__printk+0x10/0x10
[  643.473793][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  643.473816][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  643.473834][   T34]  watchdog+0xf93/0xfe0
[  643.473859][   T34]  ? watchdog+0x1de/0xfe0
[  643.473883][   T34]  kthread+0x711/0x8a0
[  643.473904][   T34]  ? __pfx_watchdog+0x10/0x10
[  643.473921][   T34]  ? __pfx_kthread+0x10/0x10
[  643.473941][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  643.473959][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  643.473976][   T34]  ? __pfx_kthread+0x10/0x10
[  643.473992][   T34]  ret_from_fork+0x3fc/0x770
[  643.474008][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  643.474027][   T34]  ? __switch_to_asm+0x39/0x70
[  643.474044][   T34]  ? __switch_to_asm+0x33/0x70
[  643.474071][   T34]  ? __pfx_kthread+0x10/0x10
[  643.474087][   T34]  ret_from_fork_asm+0x1a/0x30
[  643.474141][   T34]  </TASK>
[  643.474147][   T34] Sending NMI from CPU 0 to CPUs 1:
[  643.534144][    C1] NMI backtrace for cpu 1
[  643.534157][    C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  643.534166][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  643.534172][    C1] Workqueue: bat_events batadv_nc_worker
[  643.534188][    C1] RIP: 0010:do_raw_spin_unlock+0xfe/0x240
[  643.534200][    C1] Code: 06 ff ff ff ff 42 0f b6 44 25 00 84 c0 0f 85 29 01 00 00 41 c7 07 ff ff ff ff 48 c7 c0 d8 70 fa 8d 48 c1 e8 03 42 80 3c 20 00 <74> 0c 48 c7 c7 d8 70 fa 8d e8 84 10 85 00 48 83 3d d4 6b 5c 0c 00
[  643.534209][    C1] RSP: 0018:ffffc900000f7938 EFLAGS: 00000246
[  643.534215][    C1] RAX: 1ffffffff1bf4e1b RBX: ffff888131d89b00 RCX: 0000000000000001
[  643.534221][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888131d89b00
[  643.534226][    C1] RBP: 1ffff110263b1361 R08: ffff888131d89b03 R09: 1ffff110263b1360
[  643.534232][    C1] R10: dffffc0000000000 R11: ffffed10263b1361 R12: dffffc0000000000
[  643.534238][    C1] R13: 1ffff110263b1362 R14: ffff888131d89b10 R15: ffff888131d89b08
[  643.534243][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  643.534250][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  643.534255][    C1] CR2: 000055ae2f1a6e68 CR3: 000000010add4000 CR4: 00000000000006f0
[  643.534279][    C1] Call Trace:
[  643.534284][    C1]  <TASK>
[  643.534290][    C1]  ? batadv_nc_purge_paths+0x318/0x3b0
[  643.534300][    C1]  _raw_spin_unlock_bh+0x23/0x40
[  643.534311][    C1]  ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10
[  643.534321][    C1]  batadv_nc_purge_paths+0x318/0x3b0
[  643.534334][    C1]  batadv_nc_worker+0x328/0x610
[  643.534343][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  643.534351][    C1]  process_scheduled_works+0xae1/0x17b0
[  643.534365][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  643.534377][    C1]  worker_thread+0x8a0/0xda0
[  643.534391][    C1]  kthread+0x711/0x8a0
[  643.534401][    C1]  ? __pfx_worker_thread+0x10/0x10
[  643.534408][    C1]  ? __pfx_kthread+0x10/0x10
[  643.534417][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  643.534426][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  643.534436][    C1]  ? __pfx_kthread+0x10/0x10
[  643.534445][    C1]  ret_from_fork+0x3fc/0x770
[  643.534454][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  643.534463][    C1]  ? __switch_to_asm+0x39/0x70
[  643.534473][    C1]  ? __switch_to_asm+0x33/0x70
[  643.534482][    C1]  ? __pfx_kthread+0x10/0x10
[  643.534491][    C1]  ret_from_fork_asm+0x1a/0x30
[  643.534504][    C1]  </TASK>
[  643.536959][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  643.633351][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  643.636873][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  643.640887][   T34] Call Trace:
[  643.642254][   T34]  <TASK>
[  643.643485][   T34]  dump_stack_lvl+0x99/0x250
[  643.645371][   T34]  ? __asan_memcpy+0x40/0x70
[  643.647256][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  643.649363][   T34]  ? __pfx__printk+0x10/0x10
[  643.651240][   T34]  vpanic+0x281/0x750
[  643.652850][   T34]  ? __pfx_vpanic+0x10/0x10
[  643.654672][   T34]  ? preempt_schedule+0xae/0xc0
[  643.656641][   T34]  ? preempt_schedule_common+0x83/0xd0
[  643.658681][   T34]  panic+0xb9/0xc0
[  643.660139][   T34]  ? __pfx_panic+0x10/0x10
[  643.661925][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  643.664122][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  643.666525][   T34]  watchdog+0xfd2/0xfe0
[  643.668219][   T34]  ? watchdog+0x1de/0xfe0
[  643.669935][   T34]  kthread+0x711/0x8a0
[  643.671556][   T34]  ? __pfx_watchdog+0x10/0x10
[  643.673453][   T34]  ? __pfx_kthread+0x10/0x10
[  643.675319][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  643.677405][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  643.679110][   T34]  ? __pfx_kthread+0x10/0x10
[  643.680617][   T34]  ret_from_fork+0x3fc/0x770
[  643.682282][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  643.684262][   T34]  ? __switch_to_asm+0x39/0x70
[  643.686135][   T34]  ? __switch_to_asm+0x33/0x70
[  643.688050][   T34]  ? __pfx_kthread+0x10/0x10
[  643.689926][   T34]  ret_from_fork_asm+0x1a/0x30
[  643.691630][   T34]  </TASK>
[  643.693304][   T34] Kernel Offset: disabled
[  643.694921][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:30:56  Registers:
info registers vcpu 0

CPU#0
RAX=a09fc009bbd47400 RBX=ffff888038989ee0 RCX=a09fc009bbd47400 RDX=0000000000000000
RSI=ffffffff8dba5d31 RDI=ffff8880389ef700 RBP=fffffffffffffff8 RSP=ffffc90002dcf9e8
R8 =0000000000000000 R9 =ffffffff8b49ec5b R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff888023943e88 R13=dffffc0000000000 R14=ffff888023943e80 R15=ffff888023943e90
RIP=ffffffff819dffc5 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f77746dbacb CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000251 000036316c53616b
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffff000000000000 XMM09=0000000000000251 003636316c6c696b
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000002818 RBX=ffffc90007720000 RCX=ffff888108fd3980 RDX=0000000000000100
RSI=000000000000008b RDI=0000000000000000 RBP=1ffff110211933d3 RSP=ffffc900001e0828
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=ffffffff86998750
R12=ffff888108c99e98 R13=ffff888108c99eb6 R14=000000000000008a R15=dffffc0000000000
RIP=ffffffff869991b8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8964d00800 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd00eb1c6c CR3=000000010f0de000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
