last executing test programs:

2m28.877621311s ago: executing program 0 (id=4019):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x2404efff, 0x0, 0x3d)

2m28.851258916s ago: executing program 0 (id=4021):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x811}, 0x40000) (async)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r0 = socket(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000013c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0xbffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0x6}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x12c0, 0x205}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7ff, 0x5, 0xfff, 0x100400}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0xfffffffd, 0x0, 0x1bb, 0x4}}]}}}]}, 0x90}}, 0x0)
syz_emit_ethernet(0xfc1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0) (async)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r5=>0x0}) (async)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async, rerun: 32)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) (async)
bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10) (async)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000180)=0x200004, 0x4) (async, rerun: 64)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r9)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r10, 0xc03, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async, rerun: 64)
sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c001000", @ANYRES16=r12, @ANYBLOB="000229bd7000ffdbd725030000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m28.783348386s ago: executing program 0 (id=4024):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@loopback}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x19}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "b74a27a4f44bd05db8f139a0e0f8147b"}}]}, 0x1b0}}, 0x0)

2m28.732935013s ago: executing program 0 (id=4027):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3}, 0x48)
socket(0x21, 0x3, 0xa)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f00000002c0)="23000000010006", 0x7)
r2 = socket$inet6(0xa, 0x4, 0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r10, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m28.323450397s ago: executing program 0 (id=4036):
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a0000001300000020000000bc"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000010ffe261114d0000e0ffffe9000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001300)=0xffffffffffffffff, 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x1, 0xe0, &(0x7f00000004c0)=""/224, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r0, 0x0, 0x4f, 0x19, &(0x7f0000000100)="231b6330de840b42aecc54880ad43a72eea134606908e40ce503c47dda19f4040c2b165736f5fd527f6c40566a11a4f0960f956d5b34e2f7e301fc6b308b015f0262db087f445d9cac317b819818e9", &(0x7f0000000180)=""/25, 0x0, 0x0, 0x3f, 0x6f, &(0x7f00000001c0)="0348b09c5508728e30e4aa75171f9517f2b96a929e286bc7864e718beaf8b553412bd35558252aca71ac6b52070c48ee44ecd48d8543602eba750cd4f25571", &(0x7f0000001200)="f6fb32ff0e35a9b9c8985155b8b6529f790ead20f471975a31419f3c18fed22c0a089d2dc245417668e7ba3fafe88fe8fe0a6318cbb62d47511951a4f30650887276dc7544eee56fe89a9ddd883e2d311674813f44daaf951e876baa7a40431703defe0dedb75366aaca6c84a519a5", 0x5, 0x0, 0x9}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_int(r3, 0x29, 0x8, 0x0, &(0x7f0000000440))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0)

2m26.811866369s ago: executing program 0 (id=4064):
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040001}, 0x4001)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x83}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

2m26.747825871s ago: executing program 32 (id=4064):
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040001}, 0x4001)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x83}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

17.463183552s ago: executing program 3 (id=7328):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0x0, 0x4, 0x81, 0x81}, 0x3c)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010005000000140000006000000003083200fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

17.341915521s ago: executing program 3 (id=7329):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0x0, 0x4, 0x81, 0x81}, 0x3c)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=@migrate={0xa8, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e21, 0xffff, 0x2, 0xa0, 0xa0, 0x3a}, 0x6e6bb3, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x50, 0x11, [{@in=@empty, @in=@local, @in=@remote, @in6=@empty, 0x32, 0x1, 0x0, 0x3502, 0xa, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x90)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), r4)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x3}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003083200fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

16.590394579s ago: executing program 1 (id=7340):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}}}}, @TCA_RATE={0x6, 0x5, {0xf, 0x8}}]}, 0x90}, 0x1, 0x0, 0x4201}, 0x0)

16.511555357s ago: executing program 1 (id=7341):
socket$key(0xf, 0x3, 0x2) (async)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) (async)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$FICLONE(r2, 0x40049409, r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = socket$kcm(0x2d, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r5, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r7}, 0x99)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r5, &(0x7f0000000280)="aa", &(0x7f0000000400)=@udp=r6}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r5, &(0x7f0000000280)="aa", &(0x7f0000000400)=@udp=r6}, 0x20)
close(0x4)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4})

16.511039049s ago: executing program 2 (id=7342):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b011d08afc99cf6754d4c259d71c7596afc4a76608a319a454412a02a4c229307c4f54d7eb11ae380c7173dff3f093fc", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r4], 0x68}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000180)={'gretap0\x00', <r10=>0x0, 0x700, 0x7800, 0xa91, 0x2, {{0x38, 0x4, 0x2, 0x2, 0xe0, 0x68, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp_prespec={0x44, 0x34, 0x44, 0x3, 0x4, [{@multicast1, 0x817}, {@empty, 0xb5}, {@multicast2, 0x3}, {@broadcast, 0x4}, {@private=0xa010102, 0x4}, {@empty, 0x7}]}, @generic={0x89, 0xe, "ab4886ef2e3f06cc2c3dd635"}, @ssrr={0x89, 0x2b, 0x6b, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x37}, @empty]}, @timestamp={0x44, 0x20, 0xab, 0x0, 0x9, [0x2, 0x7d80, 0x9, 0x8000, 0x7fffffff, 0x3, 0xe]}, @timestamp={0x44, 0x8, 0x55, 0x0, 0xf, [0x7]}, @timestamp_addr={0x44, 0x24, 0xdd, 0x1, 0x3, [{@remote, 0x2}, {@private=0xa010101, 0xd5}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7}, {@remote, 0xc9}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xe0, [@multicast1, @multicast2]}, @end]}}}}})
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002740)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r13, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x1ec, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x184, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x10}, 0x20000840)

16.510690035s ago: executing program 1 (id=7343):
syz_emit_ethernet(0x550, &(0x7f0000000e00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x51a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000007000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x47, "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"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x3fa, 0x400, 0x70bd2a, 0x25dfdbfe, {0x1, 0x0, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x2000080) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$phonet(0x23, 0x2, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x64}}, 0x0)
ioctl$SIOCPNDELRESOURCE(r2, 0x541b, &(0x7f0000000080)=0x8) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.45183216s ago: executing program 3 (id=7344):
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

16.451310274s ago: executing program 1 (id=7345):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
unshare(0x26020480)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$netlink(r0, 0x0, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000440)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x1}, {0x6}]})
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10, 0x0}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0)
close(r4)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={r5, 0x0, 0x8f, 0x2f, &(0x7f0000000dc0)="1f35479ff4899127d978262a8105899eadd804e81df28e2fb80023187651fcedf3410ccc149a25945a0c0ec210019ce13e0cc02eae2f8561de475479b8e648cf011751dfaa043f8c47d78faac33937b5e6747f20b6b428e22395d97b0cee4c382fc8f73e5d01e5b3cd6d173bf6407c31a7a0f0bac1ddfb45fa693a0a0ee20c4ab18c3fb53d5ef35f7a1126aaccbbef", &(0x7f0000000040)=""/47, 0x477d, 0x0, 0xd5, 0x7a, &(0x7f0000000e80)="2191376312cf2cd41f6c02316fff4ea8952bb8b5c1e5f3111c00c5fe9e3ef2c83d866feb7c4ce071a0239e3a810dd9412dc5aff6403b786547ddc7e20c59399d39a2b0ab85effb9deb91d67f33e8111be77814d06ed5c24742f36b4445fccfcbfe9ba37a2a712f1517ad118c92d3bab73e867690c1e98427d60169c6f37fb949ca400a2c060767e5b144fea0eccd075d40ec0bf092e66776c5f29ece56f8522956dd98a26791c115882b63ee3dd96d948beca44854c286e78ada2651c52e0ab5e44b507bbf129a9320c30a4a7e8792bb8509447f90", &(0x7f0000000f80)="d55ad9f440482069c560ec9c94117176ffdf48d6b149a2350173b42983b165e16e2c3b8ad51d39e657260a98b844c8c7e3716ac889745426afb9d0be1727c2da5a43dae2523913f169502a3ad0f9531128b6634ed9c554da46b87d14559e3a2d8ee8c3d6d36145bf57deccb89c37b8d29a9f485c3bce69e0a904", 0x5, 0x0, 0x7324}, 0x50)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r1)

16.448057724s ago: executing program 3 (id=7346):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0x0, 0x4, 0x81, 0x81}, 0x3c)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000200140000006000000003083200fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

16.321157708s ago: executing program 2 (id=7347):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080)=0x2, 0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="ea4b1e8936ac3cc500000000008000000000000016910b49bef794cf4cc5e84fe886c2440a96ef0400470d8336eadfbaf1ca25862a6071470b31a685b657e441abd69624e04b0b2e91c20759c632fbd6a5f08d65860689ad298cf9506b63515f5ff7eccf064c2ca817991277e6acb70ce90f9386c7a42ccc361975214d8220a6fc201a1ffb25105d0300000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00_'], 0x50)

16.319782795s ago: executing program 2 (id=7348):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}}}}, @TCA_RATE={0x6, 0x5, {0xf, 0x8}}]}, 0x90}, 0x1, 0x0, 0x5400}, 0x0)

16.316694918s ago: executing program 1 (id=7349):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d107a", 0x4}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100), 0x4)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={<r1=>0x0, 0xd7, "543f3cfb12307cdcfd584c2124ce3f63b2e4e5b8a77bb2da880287399edd57e570418f5b814b8a0ecac89af88fe82076e7e3d0f90c1af8f181190f871c20fd08a8e0badd316e3c21f09b9d400dbb5fe99f8139294e509c81f108c8ddcba4607f28bf7430a32f6e802cbaf50b804acaf16a91b01afca59916d0da6ca976435d11a9b0a9a11501c2c23f9942077302dd2d472a872e749fe7c921b94c964716b3eb9c4d7bcd6714eefeb380845c5d76f2f217c5a12a99574ac55a233b74ac505140ccd7c47886ab038172ab1dbdce4b719267fbf0583d6a95"}, &(0x7f0000000040)=0xdf)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r1, 0xfff8, 0x5, [0x0, 0x5, 0x1fb3, 0x2, 0x7a6]}, 0x12)

16.250357107s ago: executing program 3 (id=7350):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d000600000007000000250000000d0016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1)

16.249590853s ago: executing program 1 (id=7351):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100000000002c0004800500030000000000ae3db15df2b2e353096c5890050003000b00000005000300070000520500030007000000050003000600000008000200"], 0x58}}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x4, 0x6d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000a40], 0x0, &(0x7f0000000000), &(0x7f0000000a40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x24, 0x88be, 'syzkaller0\x00', '\x00', 'hsr0\x00', 'hsr0\x00', @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x19e, 0x1ee, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:etc_t:s0\x00'}}}], @common=@log={'log\x00', 0x28, {{0x6, "a38331723747d65e915e2d16b591376ddbffd201fc72b725e15141769b05", 0x5}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x9, 0x4a, 0x10, 'geneve1\x00', 'netpci0\x00', 'ip6gretap0\x00', 'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0xff], 0xbe, 0xbe, 0xee, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'RAS\x00'}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}, {0x5, 0x16, 0x88e5, 'pim6reg\x00', 'nicvf0\x00', 'dvmrp1\x00', 'veth0_to_bond\x00', @broadcast, [0x0, 0xff, 0x0, 0xff], @multicast, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x12e, 0x17e, 0x1ae, [@arp={{'arp\x00', 0x0, 0x38}, {{0x337, 0x8914, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, @multicast2, 0xff000000, @broadcast, [0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x83, 0x40}}}, @arp={{'arp\x00', 0x0, 0x38}, {{0x616, 0xfdb001a17d8909b7, 0xa, @multicast1, 0xff000000, @multicast1, 0xffffff00, @local, [0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x11, 0x30}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz1\x00', {0xffffffffffffffff}}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x11, 0x77, 0x88f7, 'veth1_vlan\x00', 'vlan1\x00', 'batadv_slave_0\x00', 'syzkaller0\x00', @local, [0xff, 0x0, 0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0x0, 0xff], 0xe6, 0x136, 0x186, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x400, 0x1}}}, @limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0x6, 0x9, 0x6, 0x50, 0xfffffffa}}}], [@common=@log={'log\x00', 0x28, {{0x7, "3ae299184c1e198d863d947fd1289020daa0f765b48fb79301f37c50c6a8"}}}], @common=@log={'log\x00', 0x28, {{0x9, "5eef142b60688c683f4ccf7ab62815f01ad119692e0292d86a7d0b4d0aa6", 0x3}}}}]}]}, 0x748)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000040)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f00000008c0)="39fe6bb35e8b5644f0d7c67619dacd3bb267d49d480adfc723c40213c0e92e6807de50e80e7cae62ff1500bcb37013aacb7aced4372cb682d4504c4e", 0x3c}], 0x2)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r13 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000280), r13)
getsockname$packet(r13, &(0x7f00000004c0)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
write$tun(r5, &(0x7f0000001140)={@val={0x0, 0xdada}, @val={0x1, 0x80, 0xc, 0x4, 0x0, 0x7}, @ipv6=@gre_packet={0x3, 0x6, "00ffe8", 0x290, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[@dstopts={0xb2, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0xd5}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x1, [0x0]}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xa8, 0x1, [], "eb5d8812d48bb1753fd1ee8b455621fc9a44d80a205835e0ea96464b015a4f8ec7b7b8101173eeadccfc8b79f3c3694fb398564123e6552b56bcb1a28dc3b74793ffa22dda3340620285307772ea7a2ff35682da04282dd1c031945551decda0d67fe996008b7622a97ca4c7e81f8aded85af99585e60c29415bfcb487b970fdc9958651de66b673bd0e36e26d605c9bc6630298667b01a75b55bee2876f8917d7cc42fb06372d72"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x6], "704d7e8f53430b244ad12434a643c596ecf57be575e39cde2f4df567569adc5c3ae1303652e0c8062cb2a31159e6aba34128e2e9b8ef89bfd78490a7182ffba798804bbb457dc8db25dc52f1"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x6], "ad4df0a3737f41b2703aac39a4d466b6151ae4686d67d2252ee9718557399b129cc4d75180bd35640cdb1f2b1a2949294ed4890922e6a1ce63552e1213a4ce8b6b30b5118d6ecff81eb6b30f55b0667de2fea740cee59e26b81e781625cd6a70431eb3e0b25fb6267c63e0f69f4b10e0e722fd6508e156cb948fcb63d7df4f4c9c63ef7330e00ee6712242bf456d6c9b6c7d27a22043d3dc625a198255430d0417e76a4c396e24056907d583d9"}, {0x8, 0x88be, 0x0, {{0xf, 0x1, 0xef, 0x3, 0x0, 0x0, 0x3, 0x9}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0xb, 0x2, 0x0, 0x3, 0x0, 0x1, 0x6}, 0x2, {0x6, 0xf, 0x0, 0x3, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "17bd4cb1f7c0e79234ba2d7fd89400009fe925ac68caf9ea978f272effa04956a0b1c0cd71c55ef9def6111466eb75a29fc02eda92d24c36f4839c7ba7ba9ca841d8d3972eb6fd0735bb8a0cf69151934f523ac7cb5646f60ae5371442e274549abf4b680c54a78cb7445f52850396271d2b2d8ef6bfc4"}}}}}, 0x2c6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r12, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r14}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newtclass={0x64, 0x28, 0x700, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0xb, 0xffe0}, {0xfff2, 0xffff}, {0x3}}, [@tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x1c}}, @tclass_kind_options=@c_prio={0x9}]}, 0x64}}, 0x20004084)

16.19304294s ago: executing program 2 (id=7352):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r0=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf13000000000000850000002a000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666"], 0x0, 0xc1a, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x9}, 0x94)
close(0x4)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040)
socket$inet6(0xa, 0x3, 0x5)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x40000)
socket$l2tp(0x2, 0x2, 0x73)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r3, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17", 0x3}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240))
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000003c0)=""/82, 0x0, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x11e, 0x488, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)

16.192732576s ago: executing program 3 (id=7353):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43ef}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async)
r2 = socket(0x2b, 0x80801, 0x1)
sendmmsg(r2, 0x0, 0x0, 0x20000090)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0}) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async)
connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
close(0x3)
r5 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64)
r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
sendmsg$can_raw(r5, &(0x7f00000002c0)={&(0x7f0000000140), 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{0x2, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "c58b8d224bef9eea"}, 0x10}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 32)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x5) (rerun: 32)
connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000}, 0x20) (async, rerun: 32)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300)='wg1\x00', 0x10) (async)
syz_init_net_socket$ax25(0x3, 0x5, 0x1)
socket$igmp(0x2, 0x3, 0x2) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000)

15.34277033s ago: executing program 2 (id=7354):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001af90000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f030000000000002e100200000000002604fdffff02000014010000030000001d140000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
socket$rxrpc(0x21, 0x2, 0xa) (async)
socket$rxrpc(0x21, 0x2, 0xa)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0x10, 0x2, 0x0) (async)
r0 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x8, 0xffefffff}, {0x16, 0x10, 0x1c, 0x53}]}, 0x10)
sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x1d, 0x0, 0xee01}, {0xffffffffffffffff}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x1}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$unix(0x1, 0x2, 0x0) (async)
r4 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
listen(r1, 0x7fff)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)
pipe(&(0x7f0000000000)) (async)
pipe(&(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000f80)) (async)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000f80))
r5 = socket$rxrpc(0x21, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001000), r2)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001280)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001480)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6, @ANYBLOB="000427bd7000ffdbdf2510000000080001007063690011000200303030303a30303a31302e300000000008000b00ffff00000600110006000000080013000008000005001400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000200000006001100fbff0000080013000400000005001400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ffffff7f060011000010000008001300010100000500140000000000080001007063690011000200303030303a30303a31302e300000000008000b00ffffffff060011000300000008001300060000000500140000000000080001007063690011000200303030303a30303a31302e300000000008000b00bfeef35f060011000500000008001300010400000500140000000000080001007063690011000200303030303a30303a31302e300000000008000b000000000006001100030000000800130000000080050014000000000072195897722b95f66b73f86d0f53e0c5d744967910547058702c25ef8fce27bada9d98e6f950f37eab55d44e95d9285df401107179f07dba31c29a018521e0461cafb5f18c5ca704b0ce10d40e674791d440154a842b899d40ea795b6bcbd346135ee4ade16055a02efd58b11a6f620e1fe0e3da3deddbc213586664f3be28a16f0d694b5e6406833559f80f9f860e76097020db7019b08efca262ee0307d86e3ba3c9b0b9c21479ba0734a20d055fa539d71567d0435d9383ad3853a8b9f5e3236880b849d5a53a98ec1af42229dc5048b00412da1ed09db90b4a26478fe9"], 0x184}, 0x1, 0x0, 0x0, 0x4805}, 0xc0)
bind$rxrpc(r5, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r7, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r7, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)

15.34185327s ago: executing program 2 (id=7355):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000015c0)={0x440, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x42f, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xa, 0xcb, 0x0, 0x0, @str='wlan0\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x4}, @typed={0x4}, @generic="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", @nested={0x310, 0x7f, 0x0, 0x1, [@typed={0x8, 0x112, 0x0, 0x0, @uid}, @nested={0x301, 0x24, 0x0, 0x1, [@typed={0x8, 0x146, 0x0, 0x0, @uid}, @generic="90539e0af04ba43af0fe1eb762235b875092f7477f617c760429036d7a124ab6e774bd9b10a5191978b50168e1bb0af5ecf309310d509a86d4b3b53cfad98201ffa4d36f939f20ae1422a53a2b8d43bfb7df22759ab5a50f183db90e9e6ba7c8d7395b70fb55082f478bc71e21b7839c04ded60d6570b7dc9a3b80bbf88af886476e10d2e79a0868b7f765891e6d9332ea4a49005739c7c4f8087a96e5907c96fd0cc2fd5b7f6a4d60", @generic="8ac08cc98c3d9d609dac4f08ddf82e3312a893c03030996300321f7e88dac98ef397c2f1660ecf1883d0de4bb09b1a610120ea39f2501be83d890c8e12b0f1adef1d36daf33f2de877ceeddc", @generic="32999860b72e6a6e8e1aa72167d4bfd36d6c77b8a3b7f4b60bdb3ed171e2657081d84b5831281a8a63b21e683fe6d674574d01ab12549ef63863e95b028c88a6442b34db476bccb14869c25e216bcfd56e2d6ef1de6ae25d41b1bac80bb01e65c18d3afa2fc846b3b65309de481185e3bde78ca0385e1a5c0a62cf02841c14bb260a", @typed={0x8, 0x3, 0x0, 0x0, @u32}, @generic="349eaea23dd7700cee52d232b32e3d420ee4ccfa98c9d5ffe202c97bbb9d3864fe4fb4a94f1e91e60b76cf4719875f6f232a1e6ec634a0f63466d00641d3dc0272bf5b97192d4c148eb7", @generic="ebcaa4706378e172952156b0f79eb045d2b5ccd8c9c795a4d2f5cfa136e54324eca2f9abfa820a7e82b80acc70a4ed9bc3494db5ea130170f1aaadd31cb059c669ed435c53e2d7aaaed99e5139abd1dcca086e9ac0d0612e12134ea0c654cfbdeaaa27b19e1ad155ea478a081960", @generic="1fc14ba9d47413c9e5d4a1cd8da45017813209ec4d8d55f5b809cfd5c8e4e8c24bc1bf8d3218d080e27214f35dcf314387ad1bb56caf7ce97a3a1e7c9ce114cb9364d98f923a9aa40d17072d4e431e81cb6b1ea4324ec2ebec92b2297d5f7672e61c64837e819fa8e212b9f0a0347e651cae2a97a3cedc77f05f5bffc71a4a1344a6f5a081e5437a18d6d8e4a1d514ee71bbb2a8378e29d046dc2e2ddbd0c28fd5244600f133100cedc1a5d0ed79df970b982f5a8760b039ff824c805bf3"]}]}]}]}, 0x440}], 0x1}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000100)=@framed={{}, [@jmp={0x5, 0x1, 0xc, 0x5, 0x8, 0x0, 0x8}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
r3 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000000c0)="08001497733f5d3e", 0x8}, {0x0}], 0x3}}], 0x1, 0x8000)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000380)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x28, {0x2, 0x4e22, @rand_addr=0x64010100}, 'bridge0\x00'})
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x8000)
sendmmsg$inet(r5, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0xffa6}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}], 0x1}}], 0x2, 0x4008440)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000000c0)={0x7, {{0xa, 0x4e21, 0xc8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}, 0x88)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="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"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0))
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)

1.043160542s ago: executing program 33 (id=7353):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43ef}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async)
r2 = socket(0x2b, 0x80801, 0x1)
sendmmsg(r2, 0x0, 0x0, 0x20000090)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0}) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async)
connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
close(0x3)
r5 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64)
r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
sendmsg$can_raw(r5, &(0x7f00000002c0)={&(0x7f0000000140), 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{0x2, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "c58b8d224bef9eea"}, 0x10}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 32)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x5) (rerun: 32)
connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000}, 0x20) (async, rerun: 32)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300)='wg1\x00', 0x10) (async)
syz_init_net_socket$ax25(0x3, 0x5, 0x1)
socket$igmp(0x2, 0x3, 0x2) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000)

1.002670194s ago: executing program 34 (id=7351):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100000000002c0004800500030000000000ae3db15df2b2e353096c5890050003000b00000005000300070000520500030007000000050003000600000008000200"], 0x58}}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x4, 0x6d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000a40], 0x0, &(0x7f0000000000), &(0x7f0000000a40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x24, 0x88be, 'syzkaller0\x00', '\x00', 'hsr0\x00', 'hsr0\x00', @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x19e, 0x1ee, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:etc_t:s0\x00'}}}], @common=@log={'log\x00', 0x28, {{0x6, "a38331723747d65e915e2d16b591376ddbffd201fc72b725e15141769b05", 0x5}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x9, 0x4a, 0x10, 'geneve1\x00', 'netpci0\x00', 'ip6gretap0\x00', 'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0xff], 0xbe, 0xbe, 0xee, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'RAS\x00'}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}, {0x5, 0x16, 0x88e5, 'pim6reg\x00', 'nicvf0\x00', 'dvmrp1\x00', 'veth0_to_bond\x00', @broadcast, [0x0, 0xff, 0x0, 0xff], @multicast, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x12e, 0x17e, 0x1ae, [@arp={{'arp\x00', 0x0, 0x38}, {{0x337, 0x8914, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, @multicast2, 0xff000000, @broadcast, [0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x83, 0x40}}}, @arp={{'arp\x00', 0x0, 0x38}, {{0x616, 0xfdb001a17d8909b7, 0xa, @multicast1, 0xff000000, @multicast1, 0xffffff00, @local, [0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x11, 0x30}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz1\x00', {0xffffffffffffffff}}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x11, 0x77, 0x88f7, 'veth1_vlan\x00', 'vlan1\x00', 'batadv_slave_0\x00', 'syzkaller0\x00', @local, [0xff, 0x0, 0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0x0, 0xff], 0xe6, 0x136, 0x186, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x400, 0x1}}}, @limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0x6, 0x9, 0x6, 0x50, 0xfffffffa}}}], [@common=@log={'log\x00', 0x28, {{0x7, "3ae299184c1e198d863d947fd1289020daa0f765b48fb79301f37c50c6a8"}}}], @common=@log={'log\x00', 0x28, {{0x9, "5eef142b60688c683f4ccf7ab62815f01ad119692e0292d86a7d0b4d0aa6", 0x3}}}}]}]}, 0x748)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000040)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f00000008c0)="39fe6bb35e8b5644f0d7c67619dacd3bb267d49d480adfc723c40213c0e92e6807de50e80e7cae62ff1500bcb37013aacb7aced4372cb682d4504c4e", 0x3c}], 0x2)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r13 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000280), r13)
getsockname$packet(r13, &(0x7f00000004c0)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
write$tun(r5, &(0x7f0000001140)={@val={0x0, 0xdada}, @val={0x1, 0x80, 0xc, 0x4, 0x0, 0x7}, @ipv6=@gre_packet={0x3, 0x6, "00ffe8", 0x290, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[@dstopts={0xb2, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0xd5}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x1, [0x0]}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xa8, 0x1, [], "eb5d8812d48bb1753fd1ee8b455621fc9a44d80a205835e0ea96464b015a4f8ec7b7b8101173eeadccfc8b79f3c3694fb398564123e6552b56bcb1a28dc3b74793ffa22dda3340620285307772ea7a2ff35682da04282dd1c031945551decda0d67fe996008b7622a97ca4c7e81f8aded85af99585e60c29415bfcb487b970fdc9958651de66b673bd0e36e26d605c9bc6630298667b01a75b55bee2876f8917d7cc42fb06372d72"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x6], "704d7e8f53430b244ad12434a643c596ecf57be575e39cde2f4df567569adc5c3ae1303652e0c8062cb2a31159e6aba34128e2e9b8ef89bfd78490a7182ffba798804bbb457dc8db25dc52f1"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x6], "ad4df0a3737f41b2703aac39a4d466b6151ae4686d67d2252ee9718557399b129cc4d75180bd35640cdb1f2b1a2949294ed4890922e6a1ce63552e1213a4ce8b6b30b5118d6ecff81eb6b30f55b0667de2fea740cee59e26b81e781625cd6a70431eb3e0b25fb6267c63e0f69f4b10e0e722fd6508e156cb948fcb63d7df4f4c9c63ef7330e00ee6712242bf456d6c9b6c7d27a22043d3dc625a198255430d0417e76a4c396e24056907d583d9"}, {0x8, 0x88be, 0x0, {{0xf, 0x1, 0xef, 0x3, 0x0, 0x0, 0x3, 0x9}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0xb, 0x2, 0x0, 0x3, 0x0, 0x1, 0x6}, 0x2, {0x6, 0xf, 0x0, 0x3, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "17bd4cb1f7c0e79234ba2d7fd89400009fe925ac68caf9ea978f272effa04956a0b1c0cd71c55ef9def6111466eb75a29fc02eda92d24c36f4839c7ba7ba9ca841d8d3972eb6fd0735bb8a0cf69151934f523ac7cb5646f60ae5371442e274549abf4b680c54a78cb7445f52850396271d2b2d8ef6bfc4"}}}}}, 0x2c6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r12, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r14}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newtclass={0x64, 0x28, 0x700, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0xb, 0xffe0}, {0xfff2, 0xffff}, {0x3}}, [@tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x1c}}, @tclass_kind_options=@c_prio={0x9}]}, 0x64}}, 0x20004084)

0s ago: executing program 35 (id=7355):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000015c0)={0x440, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x42f, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xa, 0xcb, 0x0, 0x0, @str='wlan0\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x4}, @typed={0x4}, @generic="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", @nested={0x310, 0x7f, 0x0, 0x1, [@typed={0x8, 0x112, 0x0, 0x0, @uid}, @nested={0x301, 0x24, 0x0, 0x1, [@typed={0x8, 0x146, 0x0, 0x0, @uid}, @generic="90539e0af04ba43af0fe1eb762235b875092f7477f617c760429036d7a124ab6e774bd9b10a5191978b50168e1bb0af5ecf309310d509a86d4b3b53cfad98201ffa4d36f939f20ae1422a53a2b8d43bfb7df22759ab5a50f183db90e9e6ba7c8d7395b70fb55082f478bc71e21b7839c04ded60d6570b7dc9a3b80bbf88af886476e10d2e79a0868b7f765891e6d9332ea4a49005739c7c4f8087a96e5907c96fd0cc2fd5b7f6a4d60", @generic="8ac08cc98c3d9d609dac4f08ddf82e3312a893c03030996300321f7e88dac98ef397c2f1660ecf1883d0de4bb09b1a610120ea39f2501be83d890c8e12b0f1adef1d36daf33f2de877ceeddc", @generic="32999860b72e6a6e8e1aa72167d4bfd36d6c77b8a3b7f4b60bdb3ed171e2657081d84b5831281a8a63b21e683fe6d674574d01ab12549ef63863e95b028c88a6442b34db476bccb14869c25e216bcfd56e2d6ef1de6ae25d41b1bac80bb01e65c18d3afa2fc846b3b65309de481185e3bde78ca0385e1a5c0a62cf02841c14bb260a", @typed={0x8, 0x3, 0x0, 0x0, @u32}, @generic="349eaea23dd7700cee52d232b32e3d420ee4ccfa98c9d5ffe202c97bbb9d3864fe4fb4a94f1e91e60b76cf4719875f6f232a1e6ec634a0f63466d00641d3dc0272bf5b97192d4c148eb7", @generic="ebcaa4706378e172952156b0f79eb045d2b5ccd8c9c795a4d2f5cfa136e54324eca2f9abfa820a7e82b80acc70a4ed9bc3494db5ea130170f1aaadd31cb059c669ed435c53e2d7aaaed99e5139abd1dcca086e9ac0d0612e12134ea0c654cfbdeaaa27b19e1ad155ea478a081960", @generic="1fc14ba9d47413c9e5d4a1cd8da45017813209ec4d8d55f5b809cfd5c8e4e8c24bc1bf8d3218d080e27214f35dcf314387ad1bb56caf7ce97a3a1e7c9ce114cb9364d98f923a9aa40d17072d4e431e81cb6b1ea4324ec2ebec92b2297d5f7672e61c64837e819fa8e212b9f0a0347e651cae2a97a3cedc77f05f5bffc71a4a1344a6f5a081e5437a18d6d8e4a1d514ee71bbb2a8378e29d046dc2e2ddbd0c28fd5244600f133100cedc1a5d0ed79df970b982f5a8760b039ff824c805bf3"]}]}]}]}, 0x440}], 0x1}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000100)=@framed={{}, [@jmp={0x5, 0x1, 0xc, 0x5, 0x8, 0x0, 0x8}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
r3 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000000c0)="08001497733f5d3e", 0x8}, {0x0}], 0x3}}], 0x1, 0x8000)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000380)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x28, {0x2, 0x4e22, @rand_addr=0x64010100}, 'bridge0\x00'})
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x8000)
sendmmsg$inet(r5, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0xffa6}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}], 0x1}}], 0x2, 0x4008440)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000000c0)={0x7, {{0xa, 0x4e21, 0xc8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}, 0x88)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="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"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0))
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0)

kernel console output (not intermixed with test programs):

e 6 has an invalid length.
[  260.118312][T19315] netlink: 'syz.3.4809': attribute type 4 has an invalid length.
[  260.465470][T19340] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.468759][T19341] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  260.472479][T19341] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  260.475438][T19341] tipc: Resetting bearer <eth:syzkaller0>
[  261.270015][T19382] bond0: entered promiscuous mode
[  261.274885][T19382] bond_slave_0: entered promiscuous mode
[  261.277086][T19382] bond_slave_1: entered promiscuous mode
[  261.280166][T19382] batadv0: entered promiscuous mode
[  261.284537][T19382] debugfs: 'hsr1' already exists in 'hsr'
[  261.286811][T19382] Cannot create hsr debugfs directory
[  261.288745][T19382] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  261.293031][T19382] hsr1: entered allmulticast mode
[  261.300221][T19382] 8021q: adding VLAN 0 to HW filter on device hsr1
[  261.306083][T19382] bond0: left promiscuous mode
[  261.307930][T19382] bond_slave_0: left promiscuous mode
[  261.310007][T19382] bond_slave_1: left promiscuous mode
[  261.313602][T19382] batadv0: left promiscuous mode
[  261.414224][T19387] sctp: [Deprecated]: syz.2.4838 (pid 19387) Use of int in maxseg socket option.
[  261.414224][T19387] Use struct sctp_assoc_value instead
[  261.694231][T19417] bond0: entered promiscuous mode
[  261.696365][T19417] bond_slave_0: entered promiscuous mode
[  261.698588][T19417] bond_slave_1: entered promiscuous mode
[  261.704953][T19417] batadv0: entered promiscuous mode
[  261.707591][T19417] debugfs: 'hsr1' already exists in 'hsr'
[  261.709779][T19417] Cannot create hsr debugfs directory
[  261.712934][T19417] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  261.716871][T19417] hsr1: entered allmulticast mode
[  261.719206][T19417] 8021q: adding VLAN 0 to HW filter on device hsr1
[  261.731103][T19417] bond0: left promiscuous mode
[  261.733645][T19417] bond_slave_0: left promiscuous mode
[  261.736643][T19417] bond_slave_1: left promiscuous mode
[  261.739434][T19417] batadv0: left promiscuous mode
[  262.461955][T19496] netlink: 'syz.2.4868': attribute type 11 has an invalid length.
[  262.905724][T19550] bond0: Error: Cannot enslave bond to itself.
[  263.084517][T19567] __nla_validate_parse: 15 callbacks suppressed
[  263.084531][T19567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4888'.
[  263.094392][T19568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4888'.
[  263.274359][T19585] netlink: 264 bytes leftover after parsing attributes in process `syz.2.4895'.
[  263.340238][T19593] bond11: entered promiscuous mode
[  263.449688][T19601] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4901'.
[  263.455036][T19601] netlink: 'syz.3.4901': attribute type 15 has an invalid length.
[  263.458039][T19601] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4901'.
[  263.527060][T19605] ipip0: entered promiscuous mode
[  263.730427][T19615] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  263.735140][T19615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4908'.
[  263.738629][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4908'.
[  263.742383][T19615] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  263.844838][T19631] netlink: 'syz.1.4913': attribute type 2 has an invalid length.
[  263.980412][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4920'.
[  263.985199][T19646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4920'.
[  263.988141][T19646] tipc: Invalid UDP bearer configuration
[  263.988166][T19646] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  264.140127][T19656] netlink: 'syz.3.4923': attribute type 2 has an invalid length.
[  264.242275][T19670] bond0: entered promiscuous mode
[  264.244040][T19670] bond_slave_0: entered promiscuous mode
[  264.245967][T19670] bond_slave_1: entered promiscuous mode
[  264.248410][T19670] batadv0: entered promiscuous mode
[  264.250418][T19670] debugfs: 'hsr1' already exists in 'hsr'
[  264.252482][T19670] Cannot create hsr debugfs directory
[  264.254369][T19670] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  264.257657][T19670] hsr1: entered allmulticast mode
[  264.262637][T19670] 8021q: adding VLAN 0 to HW filter on device hsr1
[  264.268955][T19670] bond0: left promiscuous mode
[  264.271684][T19670] bond_slave_0: left promiscuous mode
[  264.274068][T19670] bond_slave_1: left promiscuous mode
[  264.287710][T19670] batadv0: left promiscuous mode
[  264.435471][T19677] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  264.596759][T19697] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.605239][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4940'.
[  264.787725][T19717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.157358][T19754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.160004][T19754] syzkaller0: entered promiscuous mode
[  265.162486][T19754] syzkaller0: entered allmulticast mode
[  265.182523][T19754] tipc: Resetting bearer <eth:syzkaller0>
[  265.185230][T19753] tipc: Resetting bearer <eth:syzkaller0>
[  265.193725][T19753] tipc: Disabling bearer <eth:syzkaller0>
[  265.219190][T19756] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  265.319396][T19766] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  265.440054][T19782] netlink: 'syz.3.4968': attribute type 1 has an invalid length.
[  265.508041][T19785] netlink: 'syz.2.4970': attribute type 4 has an invalid length.
[  266.057118][T19840] tap0: tun_chr_ioctl cmd 1074025676
[  266.058866][T19840] tap0: owner set to 0
[  266.093994][T19844] erspan0: entered allmulticast mode
[  266.100735][T19843] erspan0: left allmulticast mode
[  266.256751][T19863] batadv_slave_1: entered promiscuous mode
[  266.264339][T19862] batadv_slave_1: left promiscuous mode
[  266.449152][T19875] delete_channel: no stack
[  266.666788][T19885] pimreg: entered allmulticast mode
[  266.680576][T19885] pimreg: left allmulticast mode
[  267.640435][T19951] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.643121][T19951] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.687533][T19951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.694333][T19951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.751002][   T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.756573][   T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.759455][   T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.764140][   T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.796431][T19971] netlink: 'syz.1.5037': attribute type 1 has an invalid length.
[  267.812289][T19971] 8021q: adding VLAN 0 to HW filter on device bond11
[  267.842946][T19971] netlink: 'syz.1.5037': attribute type 16 has an invalid length.
[  267.850369][T19971] netlink: 'syz.1.5037': attribute type 17 has an invalid length.
[  268.028749][T20004] netlink: 'syz.3.5048': attribute type 10 has an invalid length.
[  268.033352][T20004] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  268.174624][T20020] __nla_validate_parse: 17 callbacks suppressed
[  268.174633][T20020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5054'.
[  268.308638][T20028] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5058'.
[  268.921776][T20050] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5063'.
[  268.927047][T20050] ieee802154 phy0 wpan0: encryption failed: -22
[  269.331113][T20066] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5068'.
[  269.383038][T20068] netlink: 'syz.2.5069': attribute type 1 has an invalid length.
[  269.422379][T20068] 8021q: adding VLAN 0 to HW filter on device bond12
[  269.441709][T20068] netlink: 'syz.2.5069': attribute type 16 has an invalid length.
[  269.445293][T20068] netlink: 'syz.2.5069': attribute type 17 has an invalid length.
[  269.458803][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5069'.
[  269.482547][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5069'.
[  269.608992][T20084] bond0: entered promiscuous mode
[  269.614039][T20084] bond0: left promiscuous mode
[  269.914795][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.918937][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.923763][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.926872][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.013743][T20101] syzkaller1: entered promiscuous mode
[  270.015678][T20101] syzkaller1: entered allmulticast mode
[  270.159905][T20112] netlink: 'syz.3.5085': attribute type 3 has an invalid length.
[  270.237995][T20120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5088'.
[  270.314691][T20128] netlink: 212936 bytes leftover after parsing attributes in process `syz.1.5091'.
[  270.365145][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5091'.
[  270.369521][T20128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5091'.
[  270.457397][T20138] bond0: entered promiscuous mode
[  270.459070][T20138] bond_slave_0: entered promiscuous mode
[  270.464662][T20138] bond_slave_1: entered promiscuous mode
[  270.467729][T20138] batadv0: entered promiscuous mode
[  270.470296][T20138] debugfs: 'hsr1' already exists in 'hsr'
[  270.472689][T20138] Cannot create hsr debugfs directory
[  270.474663][T20138] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  270.477905][T20138] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  270.481123][T20138] hsr1: entered allmulticast mode
[  270.483551][T20138] 8021q: adding VLAN 0 to HW filter on device hsr1
[  270.486778][T20138] bond0: left promiscuous mode
[  270.491183][T20138] bond_slave_0: left promiscuous mode
[  270.495748][T20138] bond_slave_1: left promiscuous mode
[  270.499706][T20138] batadv0: left promiscuous mode
[  270.883745][T20167] syzkaller1: entered promiscuous mode
[  270.887929][T20167] syzkaller1: entered allmulticast mode
[  271.345813][T20206] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.348832][T20206] 8021q: adding VLAN 0 to HW filter on device team0
[  271.354107][T20206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  271.365899][T20206] veth0_to_team: entered promiscuous mode
[  271.367784][T20206] veth0_to_team: entered allmulticast mode
[  272.245834][T20259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  272.417966][T20274] tap0: tun_chr_ioctl cmd 1074025680
[  272.420070][T20276] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  272.423971][T20274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.432363][T20274] D: renamed from syzkaller0
[  272.436937][T20274] tipc: Disabling bearer <eth:syzkaller0>
[  272.884735][T20298] validate_nla: 2 callbacks suppressed
[  272.884749][T20298] netlink: 'syz.3.5145': attribute type 9 has an invalid length.
[  273.271451][T20320] __nla_validate_parse: 10 callbacks suppressed
[  273.271466][T20320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5152'.
[  273.324107][T20320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5152'.
[  273.375953][T20328] netlink: 'syz.1.5154': attribute type 1 has an invalid length.
[  273.404391][T20328] 8021q: adding VLAN 0 to HW filter on device bond12
[  273.435700][T20328] 8021q: adding VLAN 0 to HW filter on device bond12
[  273.438088][T20328] bond12: (slave vcan0): The slave device specified does not support setting the MAC address
[  273.444712][T20328] bond12: (slave vcan0): Error -95 calling set_mac_address
[  273.447389][T20334] netlink: 'syz.3.5156': attribute type 11 has an invalid length.
[  273.468780][T20334] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.473788][T20334] syzkaller0: entered promiscuous mode
[  273.478086][T20334] syzkaller0: entered allmulticast mode
[  273.498827][T20334] tipc: Resetting bearer <eth:syzkaller0>
[  273.505120][T20341] gretap3: entered promiscuous mode
[  273.514646][T20333] tipc: Resetting bearer <eth:syzkaller0>
[  273.529526][T20333] tipc: Disabling bearer <eth:syzkaller0>
[  273.621121][T20355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5161'.
[  273.635081][T20355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5161'.
[  274.435759][T20391] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5174'.
[  274.439518][T20391] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5174'.
[  274.449675][T20391] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5174'.
[  274.468431][T20391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5174'.
[  274.484565][T20394] netlink: 'syz.1.5175': attribute type 1 has an invalid length.
[  274.500680][T20394] 8021q: adding VLAN 0 to HW filter on device bond13
[  274.521092][T20394] 8021q: adding VLAN 0 to HW filter on device bond13
[  274.524678][T20394] bond13: (slave vcan0): The slave device specified does not support setting the MAC address
[  274.531866][T20394] bond13: (slave vcan0): Error -95 calling set_mac_address
[  274.687856][T20409] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5179'.
[  274.697162][T20409] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5179'.
[  274.839730][T20425] syzkaller0: entered promiscuous mode
[  274.846202][T20425] syzkaller0: entered allmulticast mode
[  275.114433][T20453] netlink: 'syz.3.5196': attribute type 1 has an invalid length.
[  275.228572][T20466] netlink: 'syz.3.5202': attribute type 7 has an invalid length.
[  275.236592][T20466] netlink: 'syz.3.5202': attribute type 8 has an invalid length.
[  275.335737][T20480] netlink: 'syz.1.5209': attribute type 1 has an invalid length.
[  275.445199][T20480] veth11: entered allmulticast mode
[  275.550753][T20501] gtp1: entered promiscuous mode
[  275.558502][T20501] team0: Port device gtp1 added
[  275.565149][T20502] gtp2: entered promiscuous mode
[  275.567627][T20502] team0: Port device gtp2 added
[  275.699768][T20514] bond0: Device is already in use.
[  275.818980][T20530] nft_compat: unsupported protocol 0
[  275.879304][T20528] netlink: ct family unspecified
[  275.881620][T20528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.890281][T20531] syzkaller1: entered promiscuous mode
[  275.892911][T20531] syzkaller1: entered allmulticast mode
[  276.230432][T20568] netlink: 'syz.1.5242': attribute type 1 has an invalid length.
[  276.250137][T20568] 8021q: adding VLAN 0 to HW filter on device bond14
[  276.264681][T20568] 8021q: adding VLAN 0 to HW filter on device bond14
[  276.267924][T20568] bond14: (slave vcan0): The slave device specified does not support setting the MAC address
[  276.272624][T20568] bond14: (slave vcan0): Error -95 calling set_mac_address
[  276.382516][ T5235] Bluetooth: hci2: link tx timeout
[  276.384836][ T5235] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  276.434911][T20582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.691612][T20602] nbd1: detected capacity change from 0 to 549764202496
[  276.716692][   T55] block nbd1: Receive control failed (result -104)
[  276.761051][T20623] netlink: 'syz.3.5261': attribute type 1 has an invalid length.
[  276.886277][T20639] netlink: 'syz.2.5268': attribute type 1 has an invalid length.
[  276.955059][T20639] 8021q: adding VLAN 0 to HW filter on device bond14
[  277.006005][T20642] 8021q: adding VLAN 0 to HW filter on device bond14
[  277.008961][T20642] bond14: (slave vcan0): The slave device specified does not support setting the MAC address
[  277.017862][T20642] bond14: (slave vcan0): Error -95 calling set_mac_address
[  277.030554][T20646] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.326350][T20666] sctp: [Deprecated]: syz.2.5278 (pid 20666) Use of int in max_burst socket option deprecated.
[  277.326350][T20666] Use struct sctp_assoc_value instead
[  277.844015][T20712] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  277.846831][T15046] IPVS: starting estimator thread 0...
[  277.932741][T20718] IPVS: using max 78 ests per chain, 187200 per kthread
[  278.210714][T20746] validate_nla: 1 callbacks suppressed
[  278.210726][T20746] netlink: 'syz.2.5308': attribute type 1 has an invalid length.
[  278.218300][T20746] netlink: 'syz.2.5308': attribute type 2 has an invalid length.
[  278.220749][T20740] "syz.1.5306" (20740) uses obsolete ecb(arc4) skcipher
[  278.224275][T20746] netlink: 'syz.2.5308': attribute type 1 has an invalid length.
[  278.227130][T20746] netlink: 'syz.2.5308': attribute type 2 has an invalid length.
[  278.280349][T20740] batadv0: left promiscuous mode
[  278.283173][T20740] veth0_to_team: left promiscuous mode
[  278.284939][T20740] veth0_to_team: left allmulticast mode
[  278.287639][T20740] vlan0: left promiscuous mode
[  278.289377][T20740] macvlan0: left allmulticast mode
[  278.295571][T20740] ip6erspan0: left promiscuous mode
[  278.299266][T20740] geneve2: left promiscuous mode
[  278.301849][T20740] tipc: Resetting bearer <eth:syzkaller0>
[  278.304538][T20740] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  278.307198][T20740] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  278.311387][T20740] geneve3: left promiscuous mode
[  278.313132][T20740] macvlan3: left promiscuous mode
[  278.314793][T20740] macvlan3: left allmulticast mode
[  278.330306][T20740] veth11: left allmulticast mode
[  278.338187][ T5714] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.341721][ T5714] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.346976][ T5714] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.350749][T20746] __nla_validate_parse: 18 callbacks suppressed
[  278.350757][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5308'.
[  278.356322][ T5714] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.405386][T20754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.414339][T20754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5310'.
[  278.431701][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  278.527897][T20769] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.5315'.
[  278.532196][T20769] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.5315'.
[  278.542013][T20769] openvswitch: netlink: Message has 4 unknown bytes.
[  278.544197][T20769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.557402][T20762] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5312'.
[  278.601038][T20773] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5317'.
[  278.645087][T20775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5318'.
[  278.839085][T20800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.917627][T20806] netlink: 'syz.2.5331': attribute type 1 has an invalid length.
[  279.097957][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5339'.
[  279.114163][T20823] siw: device registration error -23
[  279.226955][T20829] !: renamed from dummy0
[  279.284971][T20761] delete_channel: no stack
[  279.436095][T20838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  279.510395][T20844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5342'.
[  279.621894][T20857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5346'.
[  280.128075][T20873] ip6tnl3: entered promiscuous mode
[  280.130293][T20873] ip6tnl3: entered allmulticast mode
[  280.199451][T20886] netlink: 'syz.1.5356': attribute type 1 has an invalid length.
[  280.224545][T20886] 8021q: adding VLAN 0 to HW filter on device bond15
[  280.246229][T20886] 8021q: adding VLAN 0 to HW filter on device bond15
[  280.249090][T20886] bond15: (slave vcan0): The slave device specified does not support setting the MAC address
[  280.255350][T20886] bond15: (slave vcan0): Error -95 calling set_mac_address
[  280.285970][T20893] Bluetooth: hci1: Opcode 0x080f failed: -22
[  280.468883][T20918] netlink: 'syz.1.5368': attribute type 1 has an invalid length.
[  280.492525][T20918] 8021q: adding VLAN 0 to HW filter on device bond16
[  280.516356][T20918] 8021q: adding VLAN 0 to HW filter on device bond16
[  280.518877][T20918] bond16: (slave vcan0): The slave device specified does not support setting the MAC address
[  280.523835][T20918] bond16: (slave vcan0): Error -95 calling set_mac_address
[  280.564364][T20932] netlink: 'syz.3.5372': attribute type 1 has an invalid length.
[  280.585180][T20932] 8021q: adding VLAN 0 to HW filter on device bond4
[  280.688892][T20940] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.726132][T20947] netlink: 'syz.2.5379': attribute type 13 has an invalid length.
[  280.796684][T20952] netlink: 'syz.2.5381': attribute type 1 has an invalid length.
[  281.391761][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  281.579307][T21001] syzkaller1: entered promiscuous mode
[  281.583393][T21001] syzkaller1: entered allmulticast mode
[  281.587890][T21001] syzkaller1: left promiscuous mode
[  281.589670][T21001] syzkaller1: left allmulticast mode
[  282.183641][T21055] syzkaller0: entered promiscuous mode
[  282.185656][T21055] syzkaller0: entered allmulticast mode
[  282.353174][ T5235] Bluetooth: hci1: command tx timeout
[  282.420567][T21087] openvswitch: netlink: Missing key (keys=40, expected=100)
[  282.427939][T21087] xfrm2: entered promiscuous mode
[  282.429655][T21087] xfrm2: entered allmulticast mode
[  282.432882][T21087] openvswitch: netlink: Missing key (keys=40, expected=100)
[  283.197631][T21165] 8021q: adding VLAN 0 to HW filter on device bond5
[  283.215836][T21165] 8021q: adding VLAN 0 to HW filter on device bond5
[  283.219144][T21165] bond5: (slave vcan0): The slave device specified does not support setting the MAC address
[  283.230229][T21165] bond5: (slave vcan0): Error -95 calling set_mac_address
[  283.394342][T21176] pim6reg9: entered allmulticast mode
[  283.666449][T21207] __nla_validate_parse: 28 callbacks suppressed
[  283.666460][T21207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5474'.
[  283.701734][T21214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5475'.
[  283.754322][T21218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5477'.
[  283.873768][T21234] validate_nla: 9 callbacks suppressed
[  283.873778][T21234] netlink: 'syz.1.5482': attribute type 10 has an invalid length.
[  283.878274][T21234] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5482'.
[  283.917218][T21246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5486'.
[  284.360793][T21272] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5493'.
[  284.782436][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5496'.
[  284.855884][T21282] netlink: 'syz.3.5496': attribute type 30 has an invalid length.
[  284.957395][T21291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5499'.
[  284.995781][T21293] xt_policy: neither incoming nor outgoing policy selected
[  285.214214][T21310] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5507'.
[  285.281558][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5509'.
[  285.307022][T21314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.309629][T21314] syzkaller0: entered promiscuous mode
[  285.316507][T21314] syzkaller0: entered allmulticast mode
[  285.365902][T21314] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  285.382747][T21314] tipc: Resetting bearer <eth:syzkaller0>
[  285.386679][T21313] tipc: Resetting bearer <eth:syzkaller0>
[  285.402447][T21313] tipc: Disabling bearer <eth:syzkaller0>
[  285.720786][T21371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.823839][T21405] netlink: 'syz.3.5542': attribute type 1 has an invalid length.
[  286.827344][T21404] netlink: 'syz.3.5542': attribute type 1 has an invalid length.
[  287.139218][T21427] chnl_net:caif_netlink_parms(): no params data found
[  287.410998][T21448] IPv6: sit4: Disabled Multicast RS
[  287.616030][T21473] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  287.619269][T21473] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  287.639204][T21477] netlink: 'syz.2.5572': attribute type 1 has an invalid length.
[  287.734793][T21485] 8021q: adding VLAN 0 to HW filter on device bond15
[  288.405044][T21519] syz_tun: entered allmulticast mode
[  288.419022][T21518] syz_tun: left allmulticast mode
[  288.490663][T21522] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  288.730160][T21538] __nla_validate_parse: 22 callbacks suppressed
[  288.730193][T21538] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5592'.
[  288.745439][T21540] netlink: 'syz.1.5593': attribute type 25 has an invalid length.
[  288.749356][T21540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5593'.
[  288.866903][T21556] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  288.870378][T21556] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  288.875595][T21556] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  288.903947][T21559] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5602'.
[  288.964258][T21563] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5604'.
[  289.066005][T21576] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5608'.
[  289.075794][T21571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5605'.
[  289.079735][T21569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5605'.
[  289.165249][T21586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5610'.
[  289.218400][T21592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5611'.
[  289.240133][T21592] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5611'.
[  289.265993][T21592] netlink: 'syz.3.5611': attribute type 14 has an invalid length.
[  289.293700][T21592] netlink: 'syz.3.5611': attribute type 14 has an invalid length.
[  289.316016][T21603] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  290.659119][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.666691][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.855273][T21671] netlink: 'syz.1.5634': attribute type 3 has an invalid length.
[  291.013819][T21673] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  291.248087][T21682] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  292.116614][T21749] IPVS: Unknown mcast interface: macvtap0
[  292.539147][T21805] netlink: 'syz.2.5685': attribute type 2 has an invalid length.
[  292.752647][T21830] pim6reg1: entered allmulticast mode
[  292.964250][T21856] tap0: tun_chr_ioctl cmd 1074025677
[  292.966580][T21856] tap0: linktype set to 0
[  293.077807][T21867] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  293.191391][T21881] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.194960][T21881] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  293.322224][T21891] IPv6: sit5: Disabled Multicast RS
[  293.325454][T21891] sit5: entered allmulticast mode
[  293.527818][T21910] netlink: 'syz.1.5720': attribute type 1 has an invalid length.
[  293.539508][T21910] netlink: 'syz.1.5720': attribute type 9 has an invalid length.
[  293.642618][T21920] netlink: 'syz.1.5725': attribute type 11 has an invalid length.
[  293.645732][T21920] netlink: 'syz.1.5725': attribute type 11 has an invalid length.
[  294.008387][T21941] __nla_validate_parse: 54 callbacks suppressed
[  294.008404][T21941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5731'.
[  294.076905][T21945] netlink: 'syz.2.5733': attribute type 1 has an invalid length.
[  294.179939][T21958] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  294.337791][T21969] tap0: tun_chr_ioctl cmd 1074025677
[  294.340105][T21969] tap0: linktype set to 776
[  294.432107][ T1092] wlan0: Trigger new scan to find an IBSS to join
[  294.541214][T21981] netlink: 'syz.3.5748': attribute type 1 has an invalid length.
[  294.578152][T21989] netlink: 308 bytes leftover after parsing attributes in process `syz.2.5751'.
[  294.581139][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5751'.
[  294.584551][T21981] bond8: (slave geneve2): making interface the new active one
[  294.587373][T21981] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  294.590570][ T5714] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  294.600657][ T5714] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  294.611389][ T5714] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  294.617032][ T5714] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  294.788391][T22017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.794985][T22018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.825706][T22025] netlink: 'syz.2.5764': attribute type 2 has an invalid length.
[  294.834935][T22025] k*]: entered promiscuous mode
[  295.217547][T22068] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5778'.
[  295.378338][T22091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5786'.
[  295.540969][T22112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5795'.
[  295.726855][T22128] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  295.884810][T22139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5806'.
[  295.887838][T22139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5806'.
[  295.898809][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5807'.
[  295.902836][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5807'.
[  297.472797][   T27] wlan0: Trigger new scan to find an IBSS to join
[  298.289189][T22208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.293008][T22208] syzkaller0: entered promiscuous mode
[  298.296312][T22208] syzkaller0: entered allmulticast mode
[  298.331807][T22208] tipc: Resetting bearer <eth:syzkaller0>
[  298.337691][T22208] netlink: 'syz.3.5832': attribute type 2 has an invalid length.
[  298.345485][T22206] tipc: Resetting bearer <eth:syzkaller0>
[  298.373460][T22206] tipc: Disabling bearer <eth:syzkaller0>
[  299.020968][T22256] __nla_validate_parse: 7 callbacks suppressed
[  299.020981][T22256] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5852'.
[  299.199823][T22271] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  299.208852][T22271] bond4: (slave bridge4): Releasing active interface
[  299.219101][T22271] netlink: 'syz.2.5856': attribute type 10 has an invalid length.
[  299.221990][T22271] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  299.266230][T22275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5858'.
[  299.917392][T22297] netlink: 'syz.3.5863': attribute type 12 has an invalid length.
[  300.384818][T22327] IPVS: Unknown mcast interface: macvtap0
[  300.499530][T22343] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5880'.
[  300.511710][  T183] wlan0: Trigger new scan to find an IBSS to join
[  300.582393][T22349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5883'.
[  300.647603][T22354] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  300.704528][T20760] udevd[20760]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  300.790718][T22370] netlink: 536 bytes leftover after parsing attributes in process `syz.2.5892'.
[  300.833922][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5893'.
[  300.878609][T22383] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5897'.
[  301.036880][T22397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5903'.
[  301.040608][T22399] netlink: 'syz.1.5904': attribute type 1 has an invalid length.
[  301.054606][T22397] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  301.057689][T22397] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  301.104590][T22405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5907'.
[  301.110527][T22407] netlink: 'syz.3.5908': attribute type 11 has an invalid length.
[  301.124398][T22407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5908'.
[  301.127820][T22407] netlink: 'syz.3.5908': attribute type 29 has an invalid length.
[  301.166024][T22405] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  301.437957][  T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.487957][T22436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.110116][T22506] netlink: 'syz.3.5945': attribute type 1 has an invalid length.
[  302.143652][T22511] netlink: 'syz.1.5948': attribute type 39 has an invalid length.
[  302.330367][T22512] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  302.441070][T22540] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  303.429083][T22597] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  303.607293][T22609] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  303.608260][T22607] netlink: 'syz.2.5981': attribute type 13 has an invalid length.
[  303.636428][T22611] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  303.639089][T22611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.859788][T22634] netlink: 'syz.2.5994': attribute type 9 has an invalid length.
[  304.046068][T22653] netlink: 'syz.1.6003': attribute type 4 has an invalid length.
[  304.074198][T22659] ieee802154 phy0 wpan0: encryption failed: -22
[  304.082605][T22658] __nla_validate_parse: 25 callbacks suppressed
[  304.082618][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6004'.
[  304.164945][T22666] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6007'.
[  304.226694][T22680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6010'.
[  304.235538][T22676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6006'.
[  304.276573][T22684] lo: entered allmulticast mode
[  304.281743][T22684] pim6reg: left allmulticast mode
[  304.283837][T22684] lo: left allmulticast mode
[  304.374104][T22689] netlink: 'syz.3.6013': attribute type 12 has an invalid length.
[  304.593807][T22714] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  304.633616][T22714] 8021q: adding VLAN 0 to HW filter on device bond16
[  304.736112][T22723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6026'.
[  305.022668][T22743] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6033'.
[  305.346683][T22750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6035'.
[  305.957501][T22783] validate_nla: 2 callbacks suppressed
[  305.957519][T22783] netlink: 'syz.2.6044': attribute type 1 has an invalid length.
[  306.000261][T22786] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6047'.
[  306.016288][T22783] bond17: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  306.024566][   T12] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  306.025645][T22783] 8021q: adding VLAN 0 to HW filter on device bond17
[  306.111453][T22783] bond17 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  306.115861][T22783] bond17 (unregistering): (slave ip6gretap1): Releasing backup interface
[  306.120870][T22783] bond17 (unregistering): Released all slaves
[  306.449259][T22821] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  306.486702][T22825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6060'.
[  306.508309][T22825] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6060'.
[  306.778960][T22844] syzkaller1: entered promiscuous mode
[  306.780981][T22844] syzkaller1: entered allmulticast mode
[  306.790105][T22844] syzkaller1: left promiscuous mode
[  306.795078][T22844] syzkaller1: left allmulticast mode
[  306.905690][T22860] bond0: invalid ARP target 0.0.0.0 specified for addition
[  306.908140][T22860] bond0: option arp_ip_target: invalid value (0)
[  307.174722][   T60] block nbd1: Possible stuck request ffff888022059000: control (read@0,4096B). Runtime 30 seconds
[  307.586142][T22932] openvswitch: netlink: Flow key attr not present in new flow.
[  308.303997][T22962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.454223][T22968] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  308.457001][T22968] tipc: Enabled bearer <udp:syz2>, priority 10
[  308.563219][T22982] netlink: 'syz.2.6114': attribute type 39 has an invalid length.
[  308.591569][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  308.722712][T22980] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  308.861515][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  309.127548][T23007] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  309.227950][T23009] delete_channel: no stack
[  309.377993][T23018] __nla_validate_parse: 11 callbacks suppressed
[  309.378010][T23018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6126'.
[  309.391569][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  309.640594][T23041] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  309.688025][T23051] netlink: 'syz.2.6141': attribute type 10 has an invalid length.
[  309.920425][T23071] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  309.930850][T23075] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  309.937333][T23075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6150'.
[  310.050816][T23088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6155'.
[  310.067364][T23090] ieee802154 phy0 wpan0: encryption failed: -22
[  310.184456][T23099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6160'.
[  310.305455][T23111] veth22: entered allmulticast mode
[  310.431424][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  310.524250][T23123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6168'.
[  310.534089][T23122] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.580386][T23123] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6168'.
[  310.580386][T23124] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6168'.
[  310.721802][T23140] sctp: [Deprecated]: syz.3.6173 (pid 23140) Use of struct sctp_assoc_value in delayed_ack socket option.
[  310.721802][T23140] Use struct sctp_sack_info instead
[  310.873264][T23160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6180'.
[  310.934397][T23168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6183'.
[  310.937975][T23168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6183'.
[  311.100505][T23185] netlink: 'syz.2.6190': attribute type 4 has an invalid length.
[  311.122565][T23183] tipc: New replicast peer: 255.255.255.255
[  311.125407][T23183] tipc: Enabled bearer <udp:s>, priority 10
[  311.226729][T23200] IPv6: NLM_F_CREATE should be specified when creating new route
[  311.327718][T23206] netlink: 'syz.3.6196': attribute type 9 has an invalid length.
[  311.389211][T23214] netlink: 'syz.2.6200': attribute type 18 has an invalid length.
[  311.481548][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  311.774642][T23265] bridge_slave_1: left allmulticast mode
[  311.776545][T23265] bridge_slave_1: left promiscuous mode
[  311.779079][T23265] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.783240][T23265] bridge_slave_0: left allmulticast mode
[  311.785218][T23265] bridge_slave_0: left promiscuous mode
[  311.787230][T23265] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.127087][T23285] tipc: Can't bind to reserved service type 2
[  312.460267][T23324] netlink: 'syz.2.6239': attribute type 1 has an invalid length.
[  312.474193][   T33] audit: type=1107 audit(1755559798.680:4): pid=23325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  312.622896][ T5869] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  312.664051][ T5869] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  312.668000][ T5869] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  312.684393][ T5869] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  312.785351][T23343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.839029][T23343] syzkaller0: entered promiscuous mode
[  312.843095][T23343] syzkaller0: entered allmulticast mode
[  312.845265][T23343] tipc: Resetting bearer <eth:syzkaller0>
[  312.867610][T23342] tipc: Resetting bearer <eth:syzkaller0>
[  313.561550][    C1] net_ratelimit: 4 callbacks suppressed
[  313.561564][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  313.939326][T23342] tipc: Disabling bearer <eth:syzkaller0>
[  314.169551][T23384] netlink: 'syz.2.6262': attribute type 1 has an invalid length.
[  314.277704][T23395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.591515][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  314.758837][T23442] netlink: 'syz.2.6280': attribute type 1 has an invalid length.
[  314.764913][T23443] __nla_validate_parse: 24 callbacks suppressed
[  314.764927][T23443] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6281'.
[  315.631488][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  315.757517][T23468] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6288'.
[  315.824464][T23472] wg1 speed is unknown, defaulting to 1000
[  315.827127][T23472] lo speed is unknown, defaulting to 1000
[  315.829155][T23470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6289'.
[  315.833187][T23470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6289'.
[  315.850373][T23470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6289'.
[  315.853629][T23470] tipc: Bearer <udp:sy{>: already 2 bearers with priority 10
[  315.856411][T23470] tipc: Bearer <udp:sy{>: trying with adjusted priority
[  315.859122][T23470] tipc: Enabling of bearer <udp:sy{> rejected, max 3 bearers permitted
[  315.993740][T23482] netlink: 'syz.2.6294': attribute type 11 has an invalid length.
[  316.018188][T23486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6295'.
[  316.029349][T23486] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6295'.
[  316.172037][T23506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6302'.
[  316.296453][T23518] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6306'.
[  316.479333][T23531] netlink: 'syz.1.6310': attribute type 1 has an invalid length.
[  316.501810][T23531] 8021q: adding VLAN 0 to HW filter on device bond20
[  316.525435][T23531] bond20: (slave geneve5): making interface the new active one
[  316.530026][T23531] bond20: (slave geneve5): Enslaving as an active interface with an up link
[  316.537165][ T5879] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.540057][T23531] netlink: 'syz.1.6310': attribute type 1 has an invalid length.
[  316.546518][ T5879] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.549438][ T5879] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.562563][ T5879] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.671339][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  316.720653][T23553] netlink: 'syz.2.6317': attribute type 31 has an invalid length.
[  316.754502][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.758039][T23559] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6319'.
[  317.217813][T23594] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  317.220687][T23594] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  317.225953][T23594] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  317.445408][T23614] netlink: 'syz.1.6341': attribute type 21 has an invalid length.
[  317.553597][T23643] netlink: 'syz.2.6352': attribute type 1 has an invalid length.
[  317.569733][T23643] 8021q: adding VLAN 0 to HW filter on device bond17
[  317.615629][T23653] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  317.618591][T23653] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  317.621203][T23653] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  317.626702][T23655] netlink: 'syz.1.6357': attribute type 30 has an invalid length.
[  317.642744][T23657] netlink: zone id is out of range
[  317.644600][T23657] netlink: zone id is out of range
[  317.646667][T23657] netlink: zone id is out of range
[  317.648714][T23657] netlink: zone id is out of range
[  317.652505][T23657] netlink: zone id is out of range
[  317.768842][T23677] wg1 speed is unknown, defaulting to 1000
[  317.776321][T23677] lo speed is unknown, defaulting to 1000
[  318.064398][T23720] netlink: 'syz.1.6376': attribute type 6 has an invalid length.
[  318.078834][T23723] netlink: 'syz.2.6377': attribute type 1 has an invalid length.
[  318.277606][T23736] bond21: entered promiscuous mode
[  318.280331][T23736] 8021q: adding VLAN 0 to HW filter on device bond21
[  318.357698][T23763] ieee802154 phy0 wpan0: encryption failed: -22
[  318.358301][T23766] Bluetooth: MGMT ver 1.23
[  318.549807][T23789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  318.554633][T23792] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  318.557367][T23792] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  318.688041][T23812] netlink: 'syz.2.6402': attribute type 5 has an invalid length.
[  318.751360][    C1] net_ratelimit: 20 callbacks suppressed
[  318.751371][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  318.930847][T23844] netlink: 'syz.3.6414': attribute type 30 has an invalid length.
[  319.020630][T23858] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  319.024447][T23858] unknown channel width for channel at 909000KHz?
[  319.026821][T23858] unknown channel width for channel at 909000KHz?
[  319.057945][T23862] bridge9: entered allmulticast mode
[  319.083210][T23866] bridge10: entered allmulticast mode
[  319.392732][T23896] wg1 speed is unknown, defaulting to 1000
[  319.395699][T23896] lo speed is unknown, defaulting to 1000
[  319.755713][T23931] bond18: entered promiscuous mode
[  319.757846][T23931] 8021q: adding VLAN 0 to HW filter on device bond18
[  319.801531][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  320.147606][T23938] __nla_validate_parse: 21 callbacks suppressed
[  320.147619][T23938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6444'.
[  320.327314][T23954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6450'.
[  320.377008][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6451'.
[  320.398726][T23956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6451'.
[  320.606802][T23970] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  320.648696][T23974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6458'.
[  320.761019][T23990] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6463'.
[  320.841399][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  320.959391][T24009] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6469'.
[  320.963721][T24009] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6469'.
[  320.987025][T24011] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6470'.
[  321.009198][T24013] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6472'.
[  321.195976][T24030] 8021q: adding VLAN 0 to HW filter on device bond19
[  321.463613][T24046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.498133][T24057] bond0: entered promiscuous mode
[  321.500399][T24057] bond0: left promiscuous mode
[  321.873188][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  321.978238][T24096] validate_nla: 6 callbacks suppressed
[  321.978253][T24096] netlink: 'syz.1.6498': attribute type 1 has an invalid length.
[  322.001111][T24096] 8021q: adding VLAN 0 to HW filter on device bond22
[  322.068281][T24099] netlink: 'syz.1.6499': attribute type 83 has an invalid length.
[  322.082987][T24099] wg1 speed is unknown, defaulting to 1000
[  322.087125][T24099] lo speed is unknown, defaulting to 1000
[  322.164557][T24103] netlink: 'syz.1.6500': attribute type 9 has an invalid length.
[  322.441418][T24119] veth1_to_team: entered allmulticast mode
[  322.443672][T24119] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  322.466990][T24122] netlink: 'syz.1.6508': attribute type 29 has an invalid length.
[  322.597632][T24129] 8021q: VLANs not supported on nlmon0
[  322.873953][T24170] netlink: 'syz.1.6526': attribute type 27 has an invalid length.
[  322.911367][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  322.937316][T24179] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.015039][T24190] netlink: 'syz.3.6534': attribute type 27 has an invalid length.
[  323.282697][T24211] netlink: 'syz.3.6541': attribute type 27 has an invalid length.
[  323.340917][T24216] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  323.360700][T24213] wg1 speed is unknown, defaulting to 1000
[  323.368775][T24213] lo speed is unknown, defaulting to 1000
[  323.680677][T24234] syzkaller1: entered promiscuous mode
[  323.683494][T24234] syzkaller1: entered allmulticast mode
[  323.951949][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  324.099586][T24256] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  324.385555][T24273] netlink: 'syz.2.6562': attribute type 13 has an invalid length.
[  324.489806][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  324.493107][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  324.495887][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  324.498663][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  324.914613][T24316] veth0_to_team: entered promiscuous mode
[  325.001508][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  325.030876][T24325] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  325.053924][T24327] bond0: entered promiscuous mode
[  325.055654][T24327] bond_slave_0: entered promiscuous mode
[  325.057650][T24327] bond_slave_1: entered promiscuous mode
[  325.060164][T24327] batadv0: entered promiscuous mode
[  325.065044][T24327] debugfs: 'hsr1' already exists in 'hsr'
[  325.067407][T24327] Cannot create hsr debugfs directory
[  325.070021][T24327] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  325.075060][T24327] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  325.080115][T24327] hsr1: entered allmulticast mode
[  325.083093][T24327] 8021q: adding VLAN 0 to HW filter on device hsr1
[  325.086763][T24327] bond0: left promiscuous mode
[  325.088648][T24327] bond_slave_0: left promiscuous mode
[  325.090910][T24327] bond_slave_1: left promiscuous mode
[  325.094210][T24327] batadv0: left promiscuous mode
[  325.179227][T24333] tc_dump_action: action bad kind
[  325.225810][T24343] __nla_validate_parse: 17 callbacks suppressed
[  325.225828][T24343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6588'.
[  325.231832][T24338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6587'.
[  325.258323][T24345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6589'.
[  325.407535][T24362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6596'.
[  325.413976][T24362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6596'.
[  325.497352][T24367] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6598'.
[  325.512457][T24362] block nbd3: server does not support multiple connections per device.
[  325.520393][T24362] block nbd3: shutting down sockets
[  325.598966][T24372] netlink: 'syz.2.6601': attribute type 1 has an invalid length.
[  325.603022][T24372] netlink: 'syz.2.6601': attribute type 11 has an invalid length.
[  325.607582][T24372] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6601'.
[  325.688805][T24383] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6604'.
[  325.695504][T24383] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  325.773407][T24391] vti0: entered promiscuous mode
[  326.041487][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  326.066470][T24419] tap0: tun_chr_ioctl cmd 1074025677
[  326.068677][T24419] tap0: linktype set to 0
[  326.075189][T24420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6613'.
[  326.133280][T24426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6617'.
[  326.136662][T24426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.307901][T24442] IPVS: Unknown mcast interface: team0
[  326.483118][T24467] openvswitch: netlink: EtherType 0 is less than min 600
[  326.559489][T24472] bond20: (slave bridge11): making interface the new active one
[  326.564138][T24472] bond20: (slave bridge11): Enslaving as an active interface with an up link
[  326.579571][T24475] pimreg: entered allmulticast mode
[  326.888924][T24496] bond0: entered promiscuous mode
[  326.890766][T24496] bond_slave_0: entered promiscuous mode
[  326.893011][T24496] bond_slave_1: entered promiscuous mode
[  326.895901][T24496] batadv0: entered promiscuous mode
[  326.898078][T24496] debugfs: 'hsr1' already exists in 'hsr'
[  326.899989][T24496] Cannot create hsr debugfs directory
[  326.901985][T24496] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  326.905179][T24496] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  326.908430][T24496] hsr1: entered allmulticast mode
[  326.910456][T24496] 8021q: adding VLAN 0 to HW filter on device hsr1
[  326.913928][T24496] bond0: left promiscuous mode
[  326.915828][T24496] bond_slave_0: left promiscuous mode
[  326.917758][T24496] bond_slave_1: left promiscuous mode
[  326.920232][T24496] batadv0: left promiscuous mode
[  326.938507][T24497] 8021q: VLANs not supported on ip6_vti0
[  327.071419][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  327.190149][T24521] bond0: entered promiscuous mode
[  327.193638][T24521] bond_slave_0: entered promiscuous mode
[  327.196455][T24521] bond_slave_1: entered promiscuous mode
[  327.199951][T24521] batadv0: entered promiscuous mode
[  327.206751][T24521] debugfs: 'hsr1' already exists in 'hsr'
[  327.209317][T24521] Cannot create hsr debugfs directory
[  327.212737][T24521] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  327.221469][T24521] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  327.229524][T24521] hsr1: entered allmulticast mode
[  327.237661][T24521] 8021q: adding VLAN 0 to HW filter on device hsr1
[  327.247107][T24521] bond0: left promiscuous mode
[  327.249361][T24521] bond_slave_0: left promiscuous mode
[  327.256144][T24521] bond_slave_1: left promiscuous mode
[  327.259467][T24521] batadv0: left promiscuous mode
[  327.687619][T24530] validate_nla: 4 callbacks suppressed
[  327.687638][T24530] netlink: 'syz.2.6657': attribute type 1 has an invalid length.
[  327.778732][T24540] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  327.782197][T24540] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  327.785146][T24540] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  327.790781][T24538] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  327.798761][T24538] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  327.801130][T24538] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  327.909521][T24558] syzkaller1: entered promiscuous mode
[  327.912207][T24558] syzkaller1: entered allmulticast mode
[  328.041088][T24568] netlink: 'syz.1.6668': attribute type 4 has an invalid length.
[  328.111574][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  328.118192][T24575] netlink: 'syz.1.6671': attribute type 21 has an invalid length.
[  328.484268][T24613] 8021q: adding VLAN 0 to HW filter on device bond23
[  328.695545][T24623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.704452][T24626] ieee802154 phy0 wpan0: encryption failed: -22
[  328.719212][T24623] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode
[  328.722858][T24623] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode
[  328.740954][T24623] tipc: Resetting bearer <eth:syzkaller0>
[  328.756867][T24626] IPVS: persistence engine module ip_vs_pe_ not found
[  329.151440][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  329.538226][T24672] bond0: entered promiscuous mode
[  329.540439][T24672] bond_slave_0: entered promiscuous mode
[  329.543865][T24672] bond_slave_1: entered promiscuous mode
[  329.547337][T24672] batadv0: entered promiscuous mode
[  329.552611][T24672] debugfs: 'hsr1' already exists in 'hsr'
[  329.555142][T24672] Cannot create hsr debugfs directory
[  329.557731][T24672] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  329.563818][T24672] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  329.568196][T24672] hsr1: entered allmulticast mode
[  329.570441][T24672] 8021q: adding VLAN 0 to HW filter on device hsr1
[  329.574731][T24672] bond0: left promiscuous mode
[  329.576413][T24672] bond_slave_0: left promiscuous mode
[  329.578423][T24672] bond_slave_1: left promiscuous mode
[  329.580884][T24672] batadv0: left promiscuous mode
[  329.785840][T24682] gtp0: entered promiscuous mode
[  330.191498][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  330.548454][T24689] macvlan5: entered allmulticast mode
[  330.550243][T24689] veth1_vlan: entered allmulticast mode
[  330.555387][T24689] veth1_vlan: left allmulticast mode
[  330.579210][T24690] macvlan5: entered allmulticast mode
[  330.580957][T24690] veth1_vlan: entered allmulticast mode
[  330.585618][T24690] veth1_vlan: left allmulticast mode
[  330.661702][T24704] __nla_validate_parse: 24 callbacks suppressed
[  330.661714][T24704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6719'.
[  330.667262][T24704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6719'.
[  330.670294][T24704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6719'.
[  330.673415][T24704] netlink: 'syz.2.6719': attribute type 14 has an invalid length.
[  330.796470][T24713] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6722'.
[  330.820000][T24713] netlink: 356 bytes leftover after parsing attributes in process `syz.1.6722'.
[  330.985871][   T56] block nbd3: Receive control failed (result -32)
[  330.990682][ T6617] block nbd4: Receive control failed (result -32)
[  331.050019][T24743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6731'.
[  331.133862][T24747] wg1 speed is unknown, defaulting to 1000
[  331.137663][T24747] lo speed is unknown, defaulting to 1000
[  331.231369][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  331.403440][T24774] netlink: 'syz.1.6740': attribute type 3 has an invalid length.
[  331.465814][T24774] netlink: 'syz.1.6740': attribute type 1 has an invalid length.
[  331.470656][T24774] netlink: 'syz.1.6740': attribute type 2 has an invalid length.
[  331.498513][T24780] bond0: entered promiscuous mode
[  331.500790][T24780] bond_slave_0: entered promiscuous mode
[  331.503441][T24780] bond_slave_1: entered promiscuous mode
[  331.506882][T24780] batadv0: entered promiscuous mode
[  331.509757][T24780] debugfs: 'hsr1' already exists in 'hsr'
[  331.512411][T24780] Cannot create hsr debugfs directory
[  331.514858][T24780] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  331.519142][T24780] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  331.523067][T24780] hsr1: entered allmulticast mode
[  331.525087][T24780] 8021q: adding VLAN 0 to HW filter on device hsr1
[  331.527795][T24780] bond0: left promiscuous mode
[  331.529713][T24780] bond_slave_0: left promiscuous mode
[  331.534087][T24780] bond_slave_1: left promiscuous mode
[  331.536793][T24780] batadv0: left promiscuous mode
[  331.637483][T24787] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.637483][T24786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.005442][T24822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6758'.
[  332.008979][T24822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6758'.
[  332.183782][T24842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.271554][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  332.277302][T24842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6765'.
[  332.416927][T24864] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  332.526490][T24871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6774'.
[  332.763534][T24892] GUP no longer grows the stack in syz.1.6783 (24892): 200000006000-20000000a000 (200000005000)
[  332.768017][T24892] CPU: 0 UID: 0 PID: 24892 Comm: syz.1.6783 Not tainted syzkaller #0 PREEMPT(full) 
[  332.768034][T24892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  332.768065][T24892] Call Trace:
[  332.768071][T24892]  <TASK>
[  332.768077][T24892]  dump_stack_lvl+0x189/0x250
[  332.768101][T24892]  ? __pfx_dump_stack_lvl+0x10/0x10
[  332.768115][T24892]  ? __pfx__printk+0x10/0x10
[  332.768129][T24892]  ? find_vma+0xe7/0x160
[  332.768156][T24892]  __get_user_pages+0x24d0/0x2ce0
[  332.768169][T24892]  ? __lock_acquire+0xab9/0xd20
[  332.768198][T24892]  ? __gup_longterm_locked+0xc68/0x1660
[  332.768217][T24892]  __gup_longterm_locked+0xde9/0x1660
[  332.768237][T24892]  ? try_grab_folio_fast+0x1be/0x4f0
[  332.768260][T24892]  ? gup_fast_fallback+0x195f/0x2010
[  332.768277][T24892]  gup_fast_fallback+0x1e6a/0x2010
[  332.768309][T24892]  ? __pfx_gup_fast_fallback+0x10/0x10
[  332.768321][T24892]  ? __mutex_lock+0x335/0x1360
[  332.768341][T24892]  ? futex_unqueue+0x22/0x240
[  332.768355][T24892]  ? futex_unqueue+0x22/0x240
[  332.768366][T24892]  ? futex_unqueue+0x22/0x240
[  332.768377][T24892]  ? is_valid_gup_args+0x11f/0x200
[  332.768393][T24892]  ? get_user_pages_fast+0x4d/0xb0
[  332.768410][T24892]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  332.768432][T24892]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  332.768445][T24892]  ? wait_for_space+0x24d/0x2d0
[  332.768464][T24892]  iov_iter_get_pages2+0x5e/0xa0
[  332.768480][T24892]  __se_sys_vmsplice+0x548/0x10d0
[  332.768513][T24892]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  332.768530][T24892]  ? __pfx_futex_wait+0x10/0x10
[  332.768555][T24892]  ? __lock_acquire+0xab9/0xd20
[  332.768588][T24892]  ? do_pipe2+0xf7/0x170
[  332.768614][T24892]  ? do_syscall_64+0xbe/0x3b0
[  332.768634][T24892]  do_syscall_64+0xfa/0x3b0
[  332.768648][T24892]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.768663][T24892]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.768675][T24892]  ? exc_page_fault+0x9f/0xf0
[  332.768691][T24892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.768710][T24892] RIP: 0033:0x7f76dcb8ebe9
[  332.768718][T24892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  332.768730][T24892] RSP: 002b:00007f76dda82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  332.768745][T24892] RAX: ffffffffffffffda RBX: 00007f76dcdb5fa0 RCX: 00007f76dcb8ebe9
[  332.768754][T24892] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000011
[  332.768763][T24892] RBP: 00007f76dcc11e19 R08: 0000000000000000 R09: 0000000000000000
[  332.768771][T24892] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  332.768778][T24892] R13: 00007f76dcdb6038 R14: 00007f76dcdb5fa0 R15: 00007ffeb858aac8
[  332.768801][T24892]  </TASK>
[  333.185728][T24917] netlink: 'syz.3.6793': attribute type 6 has an invalid length.
[  333.288012][T24927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  333.311440][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  333.540695][T24960] netlink: 'syz.3.6804': attribute type 1 has an invalid length.
[  333.688601][T24977] netlink: 'syz.3.6810': attribute type 4 has an invalid length.
[  333.696583][T24977] netlink: 'syz.3.6810': attribute type 4 has an invalid length.
[  333.798072][T24985] bond0: entered promiscuous mode
[  333.801213][T24985] bond0: left promiscuous mode
[  334.043888][   T28] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  334.353267][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  334.483819][T25040] bond0: entered promiscuous mode
[  334.486372][T25040] bond0: left promiscuous mode
[  334.596804][T25044] syzkaller1: entered promiscuous mode
[  334.598674][T25044] syzkaller1: entered allmulticast mode
[  334.690725][T25049] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  334.925077][T25087] syzkaller1: entered promiscuous mode
[  334.929717][T25087] syzkaller1: entered allmulticast mode
[  335.129813][T25109] 8021q: adding VLAN 0 to HW filter on device bond10
[  335.139880][T25109] bond10: (slave ip6gretap4): Enslaving as a backup interface with an up link
[  335.241421][   T13] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  335.276356][T25116] netlink: 'syz.3.6855': attribute type 21 has an invalid length.
[  335.314219][T25118] bond0: entered promiscuous mode
[  335.316116][T25118] bond_slave_0: entered promiscuous mode
[  335.318166][T25118] bond_slave_1: entered promiscuous mode
[  335.320672][T25118] batadv0: entered promiscuous mode
[  335.323394][T25118] debugfs: 'hsr1' already exists in 'hsr'
[  335.325385][T25118] Cannot create hsr debugfs directory
[  335.327331][T25118] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  335.330665][T25118] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  335.334290][T25118] hsr1: entered allmulticast mode
[  335.336272][T25118] 8021q: adding VLAN 0 to HW filter on device hsr1
[  335.339141][T25118] bond0: left promiscuous mode
[  335.340813][T25118] bond_slave_0: left promiscuous mode
[  335.346518][T25118] bond_slave_1: left promiscuous mode
[  335.349057][T25118] batadv0: left promiscuous mode
[  335.361836][ T5879] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  335.391401][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  335.855704][T25156] netlink: 'syz.3.6868': attribute type 10 has an invalid length.
[  335.858387][T25156] __nla_validate_parse: 15 callbacks suppressed
[  335.858394][T25156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6868'.
[  336.037509][T25173] netlink: 'syz.1.6873': attribute type 1 has an invalid length.
[  336.281202][T25182] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6877'.
[  336.309808][T25182] netlink: 'syz.2.6877': attribute type 9 has an invalid length.
[  336.359305][T25184] pimreg3: entered allmulticast mode
[  336.366790][T25184] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6878'.
[  336.370124][T25184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6878'.
[  336.394907][T25184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6878'.
[  336.431492][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  336.604428][T25193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6882'.
[  336.607445][T25193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6882'.
[  336.610398][T25193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6882'.
[  336.616013][T25193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6882'.
[  336.775126][T25211] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.869955][T25219] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6894'.
[  336.992625][T25235] gretap0: entered promiscuous mode
[  336.998297][T25235] 0{X: renamed from gretap0
[  337.004112][T25235] 0{X: left promiscuous mode
[  337.020564][T25235] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  337.242098][   T60] block nbd1: Possible stuck request ffff888022059000: control (read@0,4096B). Runtime 60 seconds
[  337.471394][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  337.758605][T25282] wg1 speed is unknown, defaulting to 1000
[  337.766376][T25282] lo speed is unknown, defaulting to 1000
[  338.511500][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  338.779991][T25303] bond24: entered allmulticast mode
[  338.843703][T25316] openvswitch: netlink: IP tunnel dst address not specified
[  338.996484][T25324] netlink: 'syz.1.6928': attribute type 14 has an invalid length.
[  339.024639][T25326] netlink: 'syz.3.6929': attribute type 1 has an invalid length.
[  339.551380][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  339.623912][T25355] 8021q: adding VLAN 0 to HW filter on device bond21
[  339.627907][T25355] bond0: (slave bond21): Enslaving as an active interface with a down link
[  339.660608][T25364] netlink: 'syz.3.6942': attribute type 6 has an invalid length.
[  339.664993][T25364] IPv6: NLM_F_CREATE should be specified when creating new route
[  339.697333][T25370] bridge0: port 1(ipvlan0) entered blocking state
[  339.699594][T25370] bridge0: port 1(ipvlan0) entered disabled state
[  339.702427][T25370] ipvlan0: entered allmulticast mode
[  339.704375][T25370] bridge0: entered allmulticast mode
[  339.707092][T25370] ipvlan0: left allmulticast mode
[  339.708774][T25370] bridge0: left allmulticast mode
[  339.819733][T25380] netlink: 'syz.3.6948': attribute type 14 has an invalid length.
[  339.841217][T25380] netlink: 'syz.3.6948': attribute type 14 has an invalid length.
[  339.971205][T25393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  340.002169][T25402] netlink: zone id is out of range
[  340.003912][T25402] netlink: zone id is out of range
[  340.005821][T25402] netlink: zone id is out of range
[  340.007738][T25402] netlink: get zone limit has 8 unknown bytes
[  340.040472][T25399] netlink: 'syz.2.6954': attribute type 2 has an invalid length.
[  340.096663][T25412] netlink: 'syz.2.6960': attribute type 1 has an invalid length.
[  340.470355][T25430] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  340.547450][T25435] netlink: 'syz.1.6967': attribute type 11 has an invalid length.
[  340.591391][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  340.622972][T25448] IPv6: sit2: Disabled Multicast RS
[  340.653087][T25452] IPv6: sit3: Disabled Multicast RS
[  340.919439][T25481] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  340.929592][T25481] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  341.142257][T25505] batman_adv: batadv0: Removing interface: batadv_slave_0
[  341.399245][T25523] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  341.525452][T25528] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  341.631384][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  341.755957][T25543] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  341.840514][T25549] __nla_validate_parse: 30 callbacks suppressed
[  341.840532][T25549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6992'.
[  341.932902][T25562] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  341.957920][T25564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6997'.
[  341.961047][T25564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6997'.
[  342.048900][T25575] netlink: 'syz.3.7000': attribute type 2 has an invalid length.
[  342.052560][T25575] netlink: 'syz.3.7000': attribute type 1 has an invalid length.
[  342.086953][T25579] delete_channel: no stack
[  342.146337][T25588] wg1 speed is unknown, defaulting to 1000
[  342.152096][T25588] lo speed is unknown, defaulting to 1000
[  342.213257][T25593] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  342.219839][T25593] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  342.229703][T25593] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  342.245914][T25593] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  342.257200][T25593] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  342.267718][T25593] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  342.347769][T25602] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7007'.
[  342.451165][T25617] netlink: 1360 bytes leftover after parsing attributes in process `syz.1.7011'.
[  342.455137][T25617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7011'.
[  342.505632][T25621] bond0: entered promiscuous mode
[  342.507981][T25621] bond0: left promiscuous mode
[  342.640823][T25627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7015'.
[  342.947433][T25650] netlink: 'syz.1.7023': attribute type 1 has an invalid length.
[  342.963222][T25650] 8021q: adding VLAN 0 to HW filter on device bond25
[  343.165481][T25665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7029'.
[  343.184517][T25667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7030'.
[  343.864424][T25696] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  344.108848][T25711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7045'.
[  344.562933][T25755] net_ratelimit: 2 callbacks suppressed
[  344.562948][T25755] openvswitch: netlink: IP tunnel dst address not specified
[  344.570445][T25755] openvswitch: netlink: IP tunnel dst address not specified
[  344.647631][T25763] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  344.751580][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  345.125512][T25767] tipc: Enabling of bearer <et:g> rejected, media not registered
[  345.488683][ T5294] udevd[5294]: worker [20609] /devices/virtual/block/nbd1 is taking a long time
[  345.628795][T25797] netlink: 'syz.2.7072': attribute type 1 has an invalid length.
[  345.791338][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  346.080957][T25838] ieee802154 phy0 wpan0: encryption failed: -126
[  346.119787][T25838] wg1 speed is unknown, defaulting to 1000
[  346.124718][T25838] lo speed is unknown, defaulting to 1000
[  346.773476][T25872] netlink: 'syz.2.7101': attribute type 3 has an invalid length.
[  346.794752][T25874] wg1 speed is unknown, defaulting to 1000
[  346.797401][T25874] lo speed is unknown, defaulting to 1000
[  346.831456][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  347.008712][T25904] __nla_validate_parse: 11 callbacks suppressed
[  347.008722][T25904] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7113'.
[  347.015674][T25905] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7113'.
[  347.225119][T25928] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.265257][T25935] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7123'.
[  347.432124][T25955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7130'.
[  347.435865][T25955] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7130'.
[  347.498606][T25962] netlink: 'syz.2.7134': attribute type 12 has an invalid length.
[  347.503932][T25962] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.7134'.
[  347.674112][T25979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7140'.
[  347.881613][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  347.976314][T26007] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7150'.
[  348.038133][T26021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7154'.
[  348.042286][T26021] netlink: 'syz.3.7154': attribute type 5 has an invalid length.
[  348.045116][T26021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7154'.
[  348.064732][T26021] geneve3: entered promiscuous mode
[  348.066828][T26021] geneve3: entered allmulticast mode
[  348.069826][ T5714] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  348.076363][ T5714] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  348.079953][ T5714] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  348.083839][ T5714] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  348.295169][T26056] netlink: 'syz.3.7166': attribute type 2 has an invalid length.
[  348.307036][T26056] `: entered promiscuous mode
[  348.639104][T26092] block nbd2: NBD_DISCONNECT
[  348.921460][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  349.347164][T26155] netlink: 'syz.3.7188': attribute type 30 has an invalid length.
[  349.376961][T26157] bond0: entered promiscuous mode
[  349.380564][T26157] bond0: left promiscuous mode
[  349.949396][T26214] tipc: Resetting bearer <eth:syzkaller0>
[  349.951713][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  349.954954][T26214] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  349.957602][T26214] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  349.970430][T26214] bond21: left promiscuous mode
[  349.975633][T26214] bridge9: left allmulticast mode
[  349.978781][T26214] bridge10: left allmulticast mode
[  349.985802][T26214] bond24: left allmulticast mode
[  349.996137][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  349.999021][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.003290][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  350.006296][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.009273][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  350.012862][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.016200][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  350.019456][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.130378][T26228] netlink: 'syz.3.7211': attribute type 1 has an invalid length.
[  350.182395][T26232] netlink: 'syz.3.7213': attribute type 4 has an invalid length.
[  350.991381][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  351.126285][T26274] bond0: entered promiscuous mode
[  351.128877][T26274] bond0: left promiscuous mode
[  351.296360][T26292] openvswitch: netlink: IPv4 tun info is not correct
[  351.318916][T26295] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  351.337070][T26292] netlink: 'syz.3.7222': attribute type 1 has an invalid length.
[  351.465796][T26315] netlink: 'syz.1.7230': attribute type 7 has an invalid length.
[  351.475779][T26315] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  351.675813][T26335] netlink: 'syz.3.7238': attribute type 7 has an invalid length.
[  351.678907][T26335] netlink: 'syz.3.7238': attribute type 8 has an invalid length.
[  351.748036][T26340] netlink: 'syz.3.7240': attribute type 1 has an invalid length.
[  351.760253][T26340] netlink: 'syz.3.7240': attribute type 3 has an invalid length.
[  351.771577][T26340] NCSI netlink: No device for ifindex 246
[  352.031525][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  352.151648][T26364] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  352.690789][T26380] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  352.999542][T26392] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  353.005254][T26392] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  353.081701][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  353.092576][T26392] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  353.096668][T26392] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  353.117682][T26398] sctp: [Deprecated]: syz.2.7260 (pid 26398) Use of int in max_burst socket option.
[  353.117682][T26398] Use struct sctp_assoc_value instead
[  353.138021][T26392] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  353.144184][T26392] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  353.196220][T26392] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  353.201614][T26392] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  353.214199][T26405] __nla_validate_parse: 16 callbacks suppressed
[  353.214208][T26405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7263'.
[  353.215410][T26406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7263'.
[  353.228330][T26405] netlink: 'syz.2.7263': attribute type 10 has an invalid length.
[  353.228351][T26406] netlink: 'syz.2.7263': attribute type 10 has an invalid length.
[  353.233108][T26405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7263'.
[  353.236100][T26406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7263'.
[  353.237382][T26405] bond0: option arp_all_targets: invalid value (196616)
[  353.244495][T26406] bond0: option arp_all_targets: invalid value (196616)
[  353.290257][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  353.295012][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  353.303540][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  353.306449][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  353.320301][ T5714] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  353.323749][ T5714] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  353.326566][ T5714] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  353.329305][ T5714] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  353.389607][T26412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7264'.
[  353.492048][ T5714] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  353.495416][ T5714] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  353.498936][ T5714] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  353.516825][ T5714] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  353.523250][ T5714] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  353.526706][ T5714] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  353.530301][ T5714] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  353.536306][ T5714] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  353.735760][T26439] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  353.933916][T26441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7275'.
[  354.003703][T26452] netlink: 'syz.1.7277': attribute type 49 has an invalid length.
[  354.009969][T26452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7277'.
[  354.015343][T26452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7277'.
[  354.043098][T26454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7278'.
[  354.090178][T26458] bridge0: failed insert local address into bridge forwarding table
[  354.126189][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  354.329766][T26471] bond0: entered promiscuous mode
[  354.333141][T26471] bond0: left promiscuous mode
[  354.431167][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.435041][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.488214][T26485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7292'.
[  354.499766][T26485] vlan0: entered promiscuous mode
[  354.504122][T26485] bond0: entered promiscuous mode
[  354.506626][T26485] vlan0: entered allmulticast mode
[  354.746143][T26519] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  355.151366][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  355.174814][T26548] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  355.201779][T26550] netlink: 'syz.1.7315': attribute type 10 has an invalid length.
[  355.204695][T26550] bond0: (slave team0): refused to change device type
[  356.191451][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  356.455576][T26604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  356.884538][T26653] sctp: [Deprecated]: syz.1.7349 (pid 26653) Use of int in maxseg socket option.
[  356.884538][T26653] Use struct sctp_assoc_value instead
[  357.231440][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  358.281392][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  359.321433][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  360.351447][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  361.391430][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  362.441556][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  363.471640][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  364.511345][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  365.551372][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  366.591547][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  367.311599][   T60] block nbd1: Possible stuck request ffff888022059000: control (read@0,4096B). Runtime 90 seconds
[  367.631422][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  368.671495][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  369.711398][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  370.751326][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  371.791380][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  372.272884][T26682] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  372.276601][T26682] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  372.280355][T26682] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  372.292104][T26682] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  372.295806][T26682] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  372.321821][T26682] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  372.325286][T26682] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  372.328917][T26680] wg1 speed is unknown, defaulting to 1000
[  372.332072][T26682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  372.333949][T26680] lo speed is unknown, defaulting to 1000
[  372.335607][T26682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  372.339840][T26682] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  372.388510][T26683] wg1 speed is unknown, defaulting to 1000
[  372.394669][T26683] lo speed is unknown, defaulting to 1000
[  372.492358][T26680] chnl_net:caif_netlink_parms(): no params data found
[  372.575299][T26680] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.577686][T26680] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.580088][T26680] bridge_slave_0: entered allmulticast mode
[  372.582866][T26680] bridge_slave_0: entered promiscuous mode
[  372.594689][T26680] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.597108][T26680] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.599568][T26680] bridge_slave_1: entered allmulticast mode
[  372.602648][T26680] bridge_slave_1: entered promiscuous mode
[  372.644467][T26680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  372.649129][T26680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  372.670838][T26680] team0: Port device team_slave_0 added
[  372.674133][T26683] chnl_net:caif_netlink_parms(): no params data found
[  372.679763][T26680] team0: Port device team_slave_1 added
[  372.707984][T26680] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.710318][T26680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.719083][T26680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.731095][T26680] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.734003][T26680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.743668][T26680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.792008][T26683] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.796027][T26683] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.798350][T26683] bridge_slave_0: entered allmulticast mode
[  372.801092][T26683] bridge_slave_0: entered promiscuous mode
[  372.805056][T26683] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.807876][T26683] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.810946][T26683] bridge_slave_1: entered allmulticast mode
[  372.815400][T26683] bridge_slave_1: entered promiscuous mode
[  372.831325][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  372.850310][T26680] hsr_slave_0: entered promiscuous mode
[  372.857773][T26680] hsr_slave_1: entered promiscuous mode
[  372.860898][T26680] debugfs: 'hsr0' already exists in 'hsr'
[  372.863987][T26680] Cannot create hsr debugfs directory
[  372.867875][T26683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  372.886488][T26683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  372.929368][T26683] team0: Port device team_slave_0 added
[  372.934308][T26683] team0: Port device team_slave_1 added
[  372.960891][T26683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.963504][T26683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.972538][T26683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.982263][T26683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.985113][T26683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.993893][T26683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.064898][T26683] hsr_slave_0: entered promiscuous mode
[  373.067343][T26683] hsr_slave_1: entered promiscuous mode
[  373.069576][T26683] debugfs: 'hsr0' already exists in 'hsr'
[  373.072292][T26683] Cannot create hsr debugfs directory
[  373.294887][T26682] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  373.299335][T26682] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  373.303471][T26682] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  373.307806][T26682] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  373.311441][T26682] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  373.346049][T26698] wg1 speed is unknown, defaulting to 1000
[  373.349820][T26698] lo speed is unknown, defaulting to 1000
[  373.452564][T26698] chnl_net:caif_netlink_parms(): no params data found
[  373.506568][T26698] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.508996][T26698] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.511557][T26698] bridge_slave_0: entered allmulticast mode
[  373.514402][T26698] bridge_slave_0: entered promiscuous mode
[  373.517709][T26698] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.520120][T26698] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.523029][T26698] bridge_slave_1: entered allmulticast mode
[  373.526821][T26698] bridge_slave_1: entered promiscuous mode
[  373.547495][T26698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  373.552327][T26698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  373.570692][T26698] team0: Port device team_slave_0 added
[  373.574539][T26698] team0: Port device team_slave_1 added
[  373.590341][T26698] batman_adv: batadv0: Adding interface: batadv_slave_0
[  373.593187][T26698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.603136][T26698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  373.607703][T26698] batman_adv: batadv0: Adding interface: batadv_slave_1
[  373.609983][T26698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.618322][T26698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.642171][T26698] hsr_slave_0: entered promiscuous mode
[  373.644722][T26698] hsr_slave_1: entered promiscuous mode
[  373.647249][T26698] debugfs: 'hsr0' already exists in 'hsr'
[  373.649401][T26698] Cannot create hsr debugfs directory
[  373.871468][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  374.351612][   T54] Bluetooth: hci4: command tx timeout
[  374.354010][   T54] Bluetooth: hci3: command tx timeout
[  374.911490][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  375.391621][T26682] Bluetooth: hci5: command tx timeout
[  375.951472][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  376.431396][T26682] Bluetooth: hci3: command tx timeout
[  376.431460][ T5235] Bluetooth: hci4: command tx timeout
[  376.991359][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  377.471493][ T5235] Bluetooth: hci5: command tx timeout
[  378.031476][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  378.194963][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.511408][ T5235] Bluetooth: hci4: command tx timeout
[  378.511608][T26682] Bluetooth: hci3: command tx timeout
[  379.071384][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  379.561592][T26682] Bluetooth: hci5: command tx timeout
[  380.111498][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  380.591412][T26682] Bluetooth: hci4: command tx timeout
[  380.601407][T26682] Bluetooth: hci3: command tx timeout
[  381.151377][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  381.631501][T26682] Bluetooth: hci5: command tx timeout
[  382.201419][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  383.231360][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  384.281354][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  385.311347][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  386.351455][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  387.391451][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  388.431485][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  389.471423][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  390.511391][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  391.551482][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  392.591435][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  393.631413][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  394.681452][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  395.721348][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  396.751435][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  397.392282][   T60] block nbd1: Possible stuck request ffff888022059000: control (read@0,4096B). Runtime 120 seconds
[  397.791402][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  398.831403][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  399.871386][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  400.911365][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  401.961379][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  402.991661][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  404.031340][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  405.071526][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  406.111439][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  407.161405][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  408.201360][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  409.231666][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  410.271388][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  411.311455][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  412.351364][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  413.391434][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  414.431464][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  415.471546][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  416.511474][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  417.551370][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  418.591345][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  419.641361][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  420.681363][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  421.721532][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  422.751530][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  423.801366][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  424.841415][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  425.871340][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  426.911495][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  427.476870][   T60] block nbd1: Possible stuck request ffff888022059000: control (read@0,4096B). Runtime 150 seconds
[  427.951362][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  429.001351][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  430.041337][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  431.071370][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  432.111396][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  433.151350][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  433.271799][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  433.275945][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  433.279707][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  433.284367][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  433.287057][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  433.317983][T26709] wg1 speed is unknown, defaulting to 1000
[  433.321104][T26709] lo speed is unknown, defaulting to 1000
[  433.345245][T26682] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  433.348491][T26682] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  433.353410][T26682] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  433.356440][T26682] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  433.359666][T26682] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  433.419477][T26711] wg1 speed is unknown, defaulting to 1000
[  433.430778][T26711] lo speed is unknown, defaulting to 1000
[  433.454460][T26709] chnl_net:caif_netlink_parms(): no params data found
[  433.517600][T26709] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.519999][T26709] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.522698][T26709] bridge_slave_0: entered allmulticast mode
[  433.525449][T26709] bridge_slave_0: entered promiscuous mode
[  433.529710][T26709] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.532358][T26709] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.534708][T26709] bridge_slave_1: entered allmulticast mode
[  433.537470][T26709] bridge_slave_1: entered promiscuous mode
[  433.571489][T26709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  433.594051][T26709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  433.633596][T26709] team0: Port device team_slave_0 added
[  433.636933][T26709] team0: Port device team_slave_1 added
[  433.653497][T26709] batman_adv: batadv0: Adding interface: batadv_slave_0
[  433.655801][T26709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  433.664544][T26709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  433.674014][T26709] batman_adv: batadv0: Adding interface: batadv_slave_1
[  433.676292][T26709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  433.684898][T26709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.689233][T26711] chnl_net:caif_netlink_parms(): no params data found
[  433.762189][T26709] hsr_slave_0: entered promiscuous mode
[  433.765568][T26709] hsr_slave_1: entered promiscuous mode
[  433.768590][T26709] debugfs: 'hsr0' already exists in 'hsr'
[  433.771124][T26709] Cannot create hsr debugfs directory
[  433.817596][T26711] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.820710][T26711] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.829507][T26711] bridge_slave_0: entered allmulticast mode
[  433.833952][T26711] bridge_slave_0: entered promiscuous mode
[  433.849251][T26711] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.855116][T26711] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.857506][T26711] bridge_slave_1: entered allmulticast mode
[  433.861207][T26711] bridge_slave_1: entered promiscuous mode
[  433.903729][T26711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  433.919785][T26711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  433.967409][T26711] team0: Port device team_slave_0 added
[  433.980863][T26711] team0: Port device team_slave_1 added
[  434.015284][T26711] batman_adv: batadv0: Adding interface: batadv_slave_0
[  434.018146][T26711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.028260][T26711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  434.039109][T26711] batman_adv: batadv0: Adding interface: batadv_slave_1
[  434.041844][T26711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.050526][T26711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  434.099438][T26711] hsr_slave_0: entered promiscuous mode
[  434.102175][T26711] hsr_slave_1: entered promiscuous mode
[  434.104417][T26711] debugfs: 'hsr0' already exists in 'hsr'
[  434.106311][T26711] Cannot create hsr debugfs directory
[  434.191462][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  434.295078][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  434.298685][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  434.301584][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  434.304590][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  434.307289][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  434.368931][T26726] wg1 speed is unknown, defaulting to 1000
[  434.394313][T26726] lo speed is unknown, defaulting to 1000
[  434.515560][T26726] chnl_net:caif_netlink_parms(): no params data found
[  434.567518][T26726] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.569954][T26726] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.572658][T26726] bridge_slave_0: entered allmulticast mode
[  434.575502][T26726] bridge_slave_0: entered promiscuous mode
[  434.578700][T26726] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.581049][T26726] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.583520][T26726] bridge_slave_1: entered allmulticast mode
[  434.586267][T26726] bridge_slave_1: entered promiscuous mode
[  434.611770][T26726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.616628][T26726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  434.661689][T26726] team0: Port device team_slave_0 added
[  434.671959][T26726] team0: Port device team_slave_1 added
[  434.711011][T26726] batman_adv: batadv0: Adding interface: batadv_slave_0
[  434.713422][T26726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.722314][T26726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  434.726921][T26726] batman_adv: batadv0: Adding interface: batadv_slave_1
[  434.729299][T26726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.739725][T26726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  434.785328][T26726] hsr_slave_0: entered promiscuous mode
[  434.788285][T26726] hsr_slave_1: entered promiscuous mode
[  434.790477][T26726] debugfs: 'hsr0' already exists in 'hsr'
[  434.792968][T26726] Cannot create hsr debugfs directory
[  435.231385][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  435.311870][ T5235] Bluetooth: hci6: command tx timeout
[  435.391673][ T5235] Bluetooth: hci7: command tx timeout
[  436.271443][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  436.361507][ T5235] Bluetooth: hci8: command tx timeout
[  437.311514][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  437.391414][ T5235] Bluetooth: hci6: command tx timeout
[  437.471665][ T5235] Bluetooth: hci7: command tx timeout
[  438.351473][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  438.431512][ T5235] Bluetooth: hci8: command tx timeout
[  439.391459][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  439.471467][ T5235] Bluetooth: hci6: command tx timeout
[  439.551534][ T5235] Bluetooth: hci7: command tx timeout
[  439.644379][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  440.431467][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  440.511425][ T5235] Bluetooth: hci8: command tx timeout
[  441.471670][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  441.561572][ T5235] Bluetooth: hci6: command tx timeout
[  441.631562][ T5235] Bluetooth: hci7: command tx timeout
[  442.511472][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  442.591399][ T5235] Bluetooth: hci8: command tx timeout
[  443.551510][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  444.591473][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  445.631463][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  446.681679][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  447.711411][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  448.761390][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  449.801452][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  450.831400][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  451.871428][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  452.911398][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  453.951397][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  454.991421][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  456.031446][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  457.071502][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  457.551734][   T60] block nbd1: Possible stuck request ffff888022059000: control (read@0,4096B). Runtime 180 seconds
[  458.111357][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  459.145077][ T5294] udevd[5294]: worker [20609] /devices/virtual/block/nbd1 timeout; kill it
[  459.148875][ T5294] udevd[5294]: seq 18185 '/devices/virtual/block/nbd1' killed
[  459.152274][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  460.191463][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  461.231696][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  462.271350][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  463.321477][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  464.351326][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  465.391376][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  466.431394][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  467.481396][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  468.511353][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  469.551412][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  470.591450][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  471.641425][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  472.431431][T26682] Bluetooth: hci2: command 0x0406 tx timeout
[  472.671340][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  473.711530][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  474.761398][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  475.791738][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  476.831379][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  477.871432][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  478.911339][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  479.951378][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  480.991470][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  482.041395][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  483.071408][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  484.111717][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  485.151473][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  486.201417][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  487.231414][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  487.639529][   T11] block nbd1: Possible stuck request ffff888022059000: control (read@0,4096B). Runtime 210 seconds
[  488.271855][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  489.311370][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  490.351347][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  491.391489][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  492.431454][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  493.471770][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  494.368075][T26682] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  494.374686][T26682] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  494.381512][T26740] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  494.385855][T26740] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  494.390450][T26740] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  494.394222][T26740] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  494.398269][T26740] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  494.403070][T26740] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  494.406753][T26740] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  494.438087][T26741] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  494.446380][T26738] wg1 speed is unknown, defaulting to 1000
[  494.450327][T26738] lo speed is unknown, defaulting to 1000
[  494.521412][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  494.536900][T26736] wg1 speed is unknown, defaulting to 1000
[  494.548052][T26736] lo speed is unknown, defaulting to 1000
[  494.640035][T26738] chnl_net:caif_netlink_parms(): no params data found
[  494.696590][T26738] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.699261][T26738] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.702491][T26738] bridge_slave_0: entered allmulticast mode
[  494.705220][T26738] bridge_slave_0: entered promiscuous mode
[  494.713728][T26738] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.716686][T26738] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.719085][T26738] bridge_slave_1: entered allmulticast mode
[  494.721955][T26738] bridge_slave_1: entered promiscuous mode
[  494.752680][T26738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  494.760858][T26738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  494.806242][T26738] team0: Port device team_slave_0 added
[  494.814761][T26738] team0: Port device team_slave_1 added
[  494.846073][T26738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  494.848711][T26738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.858330][T26738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  494.862914][T26736] chnl_net:caif_netlink_parms(): no params data found
[  494.869711][T26738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  494.872740][T26738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.882373][T26738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  494.969750][T26738] hsr_slave_0: entered promiscuous mode
[  494.973130][T26738] hsr_slave_1: entered promiscuous mode
[  494.975904][T26738] debugfs: 'hsr0' already exists in 'hsr'
[  494.978122][T26738] Cannot create hsr debugfs directory
[  495.067243][T26736] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.070342][T26736] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.073905][T26736] bridge_slave_0: entered allmulticast mode
[  495.077973][T26736] bridge_slave_0: entered promiscuous mode
[  495.090488][T26736] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.094133][T26736] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.097099][T26736] bridge_slave_1: entered allmulticast mode
[  495.100991][T26736] bridge_slave_1: entered promiscuous mode
[  495.137671][T26736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.148624][T26736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  495.241931][T26736] team0: Port device team_slave_0 added
[  495.254507][T26736] team0: Port device team_slave_1 added
[  495.357602][T26736] batman_adv: batadv0: Adding interface: batadv_slave_0
[  495.360598][T26736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.372271][T26736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  495.378458][T26736] batman_adv: batadv0: Adding interface: batadv_slave_1
[  495.381576][T26736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.393922][T26736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  495.456442][ T5235] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  495.460844][ T5235] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  495.464696][ T5235] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  495.471680][ T5235] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  495.476242][ T5235] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  495.482724][T26736] hsr_slave_0: entered promiscuous mode
[  495.489196][T26736] hsr_slave_1: entered promiscuous mode
[  495.499849][T26736] debugfs: 'hsr0' already exists in 'hsr'
[  495.503099][T26736] Cannot create hsr debugfs directory
[  495.522165][T26755] wg1 speed is unknown, defaulting to 1000
[  495.541936][T26755] lo speed is unknown, defaulting to 1000
[  495.551437][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  495.863361][T26755] chnl_net:caif_netlink_parms(): no params data found
[  495.937417][T26755] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.940043][T26755] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.942756][T26755] bridge_slave_0: entered allmulticast mode
[  495.945927][T26755] bridge_slave_0: entered promiscuous mode
[  495.950113][T26755] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.961202][T26755] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.965733][T26755] bridge_slave_1: entered allmulticast mode
[  495.969091][T26755] bridge_slave_1: entered promiscuous mode
[  495.998097][T26755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.003256][T26755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.026717][T26755] team0: Port device team_slave_0 added
[  496.030166][T26755] team0: Port device team_slave_1 added
[  496.072850][T26755] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.075614][T26755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.085302][T26755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  496.099090][T26755] batman_adv: batadv0: Adding interface: batadv_slave_1
[  496.102170][T26755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.110608][T26755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  496.146886][T26755] hsr_slave_0: entered promiscuous mode
[  496.149755][T26755] hsr_slave_1: entered promiscuous mode
[  496.152849][T26755] debugfs: 'hsr0' already exists in 'hsr'
[  496.154831][T26755] Cannot create hsr debugfs directory
[  496.442512][   T54] Bluetooth: hci10: command tx timeout
[  496.512068][   T54] Bluetooth: hci9: command tx timeout
[  496.591525][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  497.551786][   T54] Bluetooth: hci11: command tx timeout
[  497.631412][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  498.031624][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  498.036196][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  498.038922][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  498.511733][ T5235] Bluetooth: hci10: command tx timeout
[  498.601759][ T5235] Bluetooth: hci9: command tx timeout
[  498.671472][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  499.642025][ T5235] Bluetooth: hci11: command tx timeout
[  499.711465][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  500.591576][ T5235] Bluetooth: hci10: command tx timeout
[  500.671823][ T5235] Bluetooth: hci9: command tx timeout
[  500.751632][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  501.073762][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  501.712211][ T5235] Bluetooth: hci11: command tx timeout
[  501.791406][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  502.671698][ T5235] Bluetooth: hci10: command tx timeout
[  502.751923][ T5235] Bluetooth: hci9: command tx timeout
[  502.831387][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  503.801725][ T5235] Bluetooth: hci11: command tx timeout
[  503.871369][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  504.911426][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  505.951351][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  507.001339][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  508.031356][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  509.071464][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  510.111598][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  511.151433][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  512.201441][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  513.231382][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  514.271334][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  515.321332][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  516.351366][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  517.391395][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  517.719214][   T11] block nbd1: Possible stuck request ffff888022059000: control (read@0,4096B). Runtime 240 seconds
[  518.431542][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  518.991954][   T34] INFO: task syz.1.7351:26660 blocked for more than 143 seconds.
[  518.994769][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  519.000743][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  519.004336][   T34] task:syz.1.7351      state:D stack:25216 pid:26660 tgid:26659 ppid:5843   task_flags:0x480140 flags:0x00004004
[  519.008848][   T34] Call Trace:
[  519.010181][   T34]  <TASK>
[  519.017856][   T34]  __schedule+0x1798/0x4cc0
[  519.019657][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.021818][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.023724][   T34]  ? __pfx___schedule+0x10/0x10
[  519.025622][   T34]  ? schedule+0x91/0x360
[  519.027271][   T34]  schedule+0x165/0x360
[  519.028884][   T34]  blk_mq_freeze_queue_wait+0xf4/0x170
[  519.030956][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  519.033600][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  519.035920][   T34]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  519.038204][   T34]  queue_limits_commit_update_frozen+0x5d/0x3e0
[  519.040674][   T34]  nbd_set_size+0x47e/0x6a0
[  519.048706][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  519.050724][   T34]  ? nla_memcpy+0x5b/0xc0
[  519.052674][   T34]  nbd_genl_size_set+0x2eb/0x3c0
[  519.054631][   T34]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  519.056744][   T34]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  519.059069][   T34]  ? bpf_lsm_capable+0x9/0x20
[  519.060919][   T34]  ? security_capable+0x7e/0x2e0
[  519.069289][   T34]  ? radix_tree_lookup+0x240/0x290
[  519.071476][   T34]  nbd_genl_reconfigure+0x409/0x1870
[  519.073547][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  519.075742][   T34]  ? __nla_parse+0x40/0x60
[  519.077462][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  519.079911][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  519.089181][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  519.091759][   T34]  ? stack_trace_save+0x9c/0xe0
[  519.093599][   T34]  genl_rcv_msg+0x60e/0x790
[  519.095322][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.097236][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  519.099377][   T34]  netlink_rcv_skb+0x208/0x470
[  519.101192][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.109640][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.111708][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  519.113800][   T34]  ? down_read+0x1ad/0x2e0
[  519.115600][   T34]  genl_rcv+0x28/0x40
[  519.117171][   T34]  netlink_unicast+0x82f/0x9e0
[  519.119053][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  519.121092][   T34]  ? netlink_sendmsg+0x642/0xb30
[  519.129850][   T34]  netlink_sendmsg+0x805/0xb30
[  519.131847][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.133881][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.135784][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  519.137752][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  519.139827][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.158363][   T34]  __sock_sendmsg+0x21c/0x270
[  519.160257][   T34]  ____sys_sendmsg+0x505/0x830
[  519.170074][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  519.172280][   T34]  ? import_iovec+0x74/0xa0
[  519.174064][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  519.175910][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  519.177953][   T34]  ? __fget_files+0x2a/0x420
[  519.179742][   T34]  ? __fget_files+0x3a0/0x420
[  519.181952][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  519.183861][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  519.186004][   T34]  ? do_syscall_64+0xbe/0x3b0
[  519.187834][   T34]  do_syscall_64+0xfa/0x3b0
[  519.189644][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.191832][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.194205][   T34]  ? exc_page_fault+0x9f/0xf0
[  519.196083][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.198858][   T34] RIP: 0033:0x7f76dcb8ebe9
[  519.200761][   T34] RSP: 002b:00007f76dda82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  519.204162][   T34] RAX: ffffffffffffffda RBX: 00007f76dcdb5fa0 RCX: 00007f76dcb8ebe9
[  519.207257][   T34] RDX: 0000000000000800 RSI: 0000200000000540 RDI: 000000000000000b
[  519.210659][   T34] RBP: 00007f76dcc11e19 R08: 0000000000000000 R09: 0000000000000000
[  519.213899][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  519.216927][   T34] R13: 00007f76dcdb6038 R14: 00007f76dcdb5fa0 R15: 00007ffeb858aac8
[  519.219946][   T34]  </TASK>
[  519.221211][   T34] INFO: task syz.1.7351:26666 blocked for more than 143 seconds.
[  519.224250][   T34]       Not tainted syzkaller #0
[  519.226180][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  519.229468][   T34] task:syz.1.7351      state:D stack:28616 pid:26666 tgid:26659 ppid:5843   task_flags:0x400040 flags:0x00004004
[  519.234275][   T34] Call Trace:
[  519.235652][   T34]  <TASK>
[  519.236822][   T34]  __schedule+0x1798/0x4cc0
[  519.238565][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.240400][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.242443][   T34]  ? __pfx___schedule+0x10/0x10
[  519.244397][   T34]  ? schedule+0x91/0x360
[  519.246094][   T34]  schedule+0x165/0x360
[  519.247737][   T34]  schedule_preempt_disabled+0x13/0x30
[  519.249882][   T34]  __mutex_lock+0x7e6/0x1360
[  519.253048][   T34]  ? __mutex_lock+0x5b6/0x1360
[  519.254962][   T34]  ? genl_rcv_msg+0x10d/0x790
[  519.256824][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  519.258782][   T34]  ? stack_trace_save+0x9c/0xe0
[  519.260683][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  519.262853][   T34]  ? radix_tree_lookup+0x240/0x290
[  519.264869][   T34]  genl_rcv_msg+0x10d/0x790
[  519.266621][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.268512][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.270442][   T34]  netlink_rcv_skb+0x208/0x470
[  519.272540][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.274429][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.276405][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  519.278475][   T34]  ? down_read+0x1ad/0x2e0
[  519.280239][   T34]  genl_rcv+0x28/0x40
[  519.281879][   T34]  netlink_unicast+0x82f/0x9e0
[  519.283765][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  519.285861][   T34]  ? netlink_sendmsg+0x642/0xb30
[  519.287765][   T34]  ? skb_put+0x11b/0x210
[  519.289416][   T34]  netlink_sendmsg+0x805/0xb30
[  519.291463][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.293614][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  519.295632][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  519.297698][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.299745][   T34]  __sock_sendmsg+0x21c/0x270
[  519.301722][   T34]  __sys_sendto+0x3bd/0x520
[  519.303509][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  519.305624][   T34]  ? fd_install+0x97/0x540
[  519.307183][   T34]  ? fd_install+0x30d/0x540
[  519.308689][   T34]  __x64_sys_sendto+0xde/0x100
[  519.310311][   T34]  do_syscall_64+0xfa/0x3b0
[  519.312066][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.313807][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.315790][   T34]  ? exc_page_fault+0x9f/0xf0
[  519.317351][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.319386][   T34] RIP: 0033:0x7f76dcb90a7c
[  519.321072][   T34] RSP: 002b:00007f76dda5fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  519.324123][   T34] RAX: ffffffffffffffda RBX: 00007f76dda5ffc0 RCX: 00007f76dcb90a7c
[  519.327082][   T34] RDX: 0000000000000020 RSI: 00007f76dda60010 RDI: 000000000000000c
[  519.329796][   T34] RBP: 0000000000000000 R08: 00007f76dda5ff14 R09: 000000000000000c
[  519.332541][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c
[  519.335152][   T34] R13: 00007f76dda5ff68 R14: 00007f76dda60010 R15: 0000000000000000
[  519.337854][   T34]  </TASK>
[  519.338903][   T34] INFO: task syz.1.7351:26669 blocked for more than 143 seconds.
[  519.341476][   T34]       Not tainted syzkaller #0
[  519.343137][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  519.345930][   T34] task:syz.1.7351      state:D stack:28232 pid:26669 tgid:26659 ppid:5843   task_flags:0x400040 flags:0x00004004
[  519.349841][   T34] Call Trace:
[  519.350968][   T34]  <TASK>
[  519.352050][   T34]  __schedule+0x1798/0x4cc0
[  519.353573][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.355117][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.356698][   T34]  ? __pfx___schedule+0x10/0x10
[  519.358351][   T34]  ? schedule+0x91/0x360
[  519.359937][   T34]  schedule+0x165/0x360
[  519.361428][   T34]  schedule_preempt_disabled+0x13/0x30
[  519.363333][   T34]  __mutex_lock+0x7e6/0x1360
[  519.364879][   T34]  ? __mutex_lock+0x5b6/0x1360
[  519.366438][   T34]  ? genl_rcv_msg+0x10d/0x790
[  519.368137][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  519.369869][   T34]  ? stack_trace_save+0x9c/0xe0
[  519.371658][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  519.373628][   T34]  ? radix_tree_lookup+0x240/0x290
[  519.375399][   T34]  genl_rcv_msg+0x10d/0x790
[  519.377052][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.378906][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.380598][   T34]  netlink_rcv_skb+0x208/0x470
[  519.382345][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.383970][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.385644][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  519.387414][   T34]  ? down_read+0x1ad/0x2e0
[  519.388897][   T34]  genl_rcv+0x28/0x40
[  519.390237][   T34]  netlink_unicast+0x82f/0x9e0
[  519.392983][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  519.394753][   T34]  ? netlink_sendmsg+0x642/0xb30
[  519.396436][   T34]  ? skb_put+0x11b/0x210
[  519.398076][   T34]  netlink_sendmsg+0x805/0xb30
[  519.399983][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.405284][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  519.407044][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  519.409062][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.411023][   T34]  __sock_sendmsg+0x21c/0x270
[  519.413177][   T34]  __sys_sendto+0x3bd/0x520
[  519.414873][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  519.416740][   T34]  ? fd_install+0x97/0x540
[  519.418344][   T34]  ? fd_install+0x30d/0x540
[  519.420064][   T34]  __x64_sys_sendto+0xde/0x100
[  519.421871][   T34]  do_syscall_64+0xfa/0x3b0
[  519.423373][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.425381][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.427995][   T34]  ? exc_page_fault+0x9f/0xf0
[  519.430073][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.432808][   T34] RIP: 0033:0x7f76dcb90a7c
[  519.434747][   T34] RSP: 002b:00007f76dda3eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  519.437582][   T34] RAX: ffffffffffffffda RBX: 00007f76dda3efc0 RCX: 00007f76dcb90a7c
[  519.440561][   T34] RDX: 000000000000001c RSI: 00007f76dda3f010 RDI: 000000000000000e
[  519.443527][   T34] RBP: 0000000000000000 R08: 00007f76dda3ef14 R09: 000000000000000c
[  519.446732][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000e
[  519.449528][   T34] R13: 00007f76dda3ef68 R14: 00007f76dda3f010 R15: 0000000000000000
[  519.452639][   T34]  </TASK>
[  519.453722][   T34] INFO: task syz.3.7353:26665 blocked for more than 143 seconds.
[  519.456230][   T34]       Not tainted syzkaller #0
[  519.457849][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  519.460669][   T34] task:syz.3.7353      state:D stack:28616 pid:26665 tgid:26663 ppid:17101  task_flags:0x400040 flags:0x00004004
[  519.464690][   T34] Call Trace:
[  519.465936][   T34]  <TASK>
[  519.466931][   T34]  __schedule+0x1798/0x4cc0
[  519.468432][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.470035][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.472552][   T34]  ? __pfx___schedule+0x10/0x10
[  519.474228][   T34]  ? schedule+0x91/0x360
[  519.475640][   T34]  schedule+0x165/0x360
[  519.477099][   T34]  schedule_preempt_disabled+0x13/0x30
[  519.479228][   T34]  __mutex_lock+0x7e6/0x1360
[  519.481206][   T34]  ? __mutex_lock+0x5b6/0x1360
[  519.481374][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  519.483384][   T34]  ? genl_rcv_msg+0x10d/0x790
[  519.487887][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  519.489567][   T34]  ? stack_trace_save+0x9c/0xe0
[  519.491190][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  519.493157][   T34]  ? radix_tree_lookup+0x240/0x290
[  519.494843][   T34]  genl_rcv_msg+0x10d/0x790
[  519.496323][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.497939][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.499577][   T34]  netlink_rcv_skb+0x208/0x470
[  519.501113][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.502829][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.504504][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  519.506215][   T34]  ? down_read+0x1ad/0x2e0
[  519.507662][   T34]  genl_rcv+0x28/0x40
[  519.509018][   T34]  netlink_unicast+0x82f/0x9e0
[  519.510627][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  519.512677][   T34]  ? netlink_sendmsg+0x642/0xb30
[  519.514550][   T34]  ? skb_put+0x11b/0x210
[  519.516127][   T34]  netlink_sendmsg+0x805/0xb30
[  519.517725][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.519604][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  519.521958][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  519.523973][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.526243][   T34]  __sock_sendmsg+0x21c/0x270
[  519.528280][   T34]  __sys_sendto+0x3bd/0x520
[  519.530242][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  519.532680][   T34]  ? count_memcg_event_mm+0x21/0x260
[  519.535047][   T34]  ? exc_page_fault+0x76/0xf0
[  519.537086][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  519.539299][   T34]  __x64_sys_sendto+0xde/0x100
[  519.541433][   T34]  do_syscall_64+0xfa/0x3b0
[  519.543436][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.545704][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.548273][   T34]  ? exc_page_fault+0x9f/0xf0
[  519.550290][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.552938][   T34] RIP: 0033:0x7f29ccd90a7c
[  519.554824][   T34] RSP: 002b:00007f29cdc95ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  519.557563][   T34] RAX: ffffffffffffffda RBX: 00007f29cdc95fc0 RCX: 00007f29ccd90a7c
[  519.560184][   T34] RDX: 0000000000000020 RSI: 00007f29cdc96010 RDI: 0000000000000004
[  519.562863][   T34] RBP: 0000000000000000 R08: 00007f29cdc95f14 R09: 000000000000000c
[  519.565504][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  519.568801][   T34] R13: 00007f29cdc95f68 R14: 00007f29cdc96010 R15: 0000000000000000
[  519.572267][   T34]  </TASK>
[  519.573634][   T34] INFO: task syz.2.7355:26676 blocked for more than 143 seconds.
[  519.576301][   T34]       Not tainted syzkaller #0
[  519.578379][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  519.582121][   T34] task:syz.2.7355      state:D stack:26624 pid:26676 tgid:26675 ppid:5847   task_flags:0x400140 flags:0x00004004
[  519.586991][   T34] Call Trace:
[  519.588358][   T34]  <TASK>
[  519.589649][   T34]  __schedule+0x1798/0x4cc0
[  519.591739][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.593875][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.595970][   T34]  ? __pfx___schedule+0x10/0x10
[  519.598063][   T34]  ? schedule+0x91/0x360
[  519.599863][   T34]  schedule+0x165/0x360
[  519.601679][   T34]  schedule_preempt_disabled+0x13/0x30
[  519.603800][   T34]  __mutex_lock+0x7e6/0x1360
[  519.605567][   T34]  ? __mutex_lock+0x5b6/0x1360
[  519.607568][   T34]  ? genl_rcv_msg+0x10d/0x790
[  519.609589][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  519.611918][   T34]  ? stack_trace_save+0x9c/0xe0
[  519.614015][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  519.616150][   T34]  ? radix_tree_lookup+0x240/0x290
[  519.618322][   T34]  genl_rcv_msg+0x10d/0x790
[  519.620250][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.622214][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.624381][   T34]  netlink_rcv_skb+0x208/0x470
[  519.626430][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.628543][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.630692][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  519.633256][   T34]  ? down_read+0x1ad/0x2e0
[  519.635063][   T34]  genl_rcv+0x28/0x40
[  519.636761][   T34]  netlink_unicast+0x82f/0x9e0
[  519.638824][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  519.641032][   T34]  ? netlink_sendmsg+0x642/0xb30
[  519.643311][   T34]  ? skb_put+0x11b/0x210
[  519.644733][   T34]  netlink_sendmsg+0x805/0xb30
[  519.646393][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.648641][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  519.650796][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  519.653211][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.655466][   T34]  __sock_sendmsg+0x21c/0x270
[  519.657113][   T34]  ____sys_sendmsg+0x505/0x830
[  519.659092][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  519.661449][   T34]  ? import_iovec+0x74/0xa0
[  519.663178][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  519.665224][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  519.667204][   T34]  ? __fget_files+0x2a/0x420
[  519.668896][   T34]  ? __fget_files+0x3a0/0x420
[  519.670916][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  519.673121][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  519.675398][   T34]  ? rcu_is_watching+0x15/0xb0
[  519.677415][   T34]  ? do_syscall_64+0xbe/0x3b0
[  519.679415][   T34]  do_syscall_64+0xfa/0x3b0
[  519.681594][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.683884][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.685861][   T34]  ? exc_page_fault+0x9f/0xf0
[  519.687859][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.690404][   T34] RIP: 0033:0x7f5cd8b8ebe9
[  519.692535][   T34] RSP: 002b:00007f5cd9a6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  519.696056][   T34] RAX: ffffffffffffffda RBX: 00007f5cd8db5fa0 RCX: 00007f5cd8b8ebe9
[  519.699402][   T34] RDX: 0000000000000000 RSI: 00002000000023c0 RDI: 0000000000000005
[  519.702344][   T34] RBP: 00007f5cd8c11e19 R08: 0000000000000000 R09: 0000000000000000
[  519.705433][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  519.708822][   T34] R13: 00007f5cd8db6038 R14: 00007f5cd8db5fa0 R15: 00007ffd6a17e198
[  519.711740][   T34]  </TASK>
[  519.712837][   T34] INFO: task syz-executor:26680 blocked for more than 144 seconds.
[  519.715843][   T34]       Not tainted syzkaller #0
[  519.717542][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  519.720324][   T34] task:syz-executor    state:D stack:22632 pid:26680 tgid:26680 ppid:1      task_flags:0x400140 flags:0x00004004
[  519.724335][   T34] Call Trace:
[  519.725724][   T34]  <TASK>
[  519.726942][   T34]  __schedule+0x1798/0x4cc0
[  519.728713][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.730316][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.732131][   T34]  ? __pfx___schedule+0x10/0x10
[  519.734079][   T34]  ? schedule+0x91/0x360
[  519.735905][   T34]  schedule+0x165/0x360
[  519.737695][   T34]  schedule_preempt_disabled+0x13/0x30
[  519.740016][   T34]  __mutex_lock+0x7e6/0x1360
[  519.741793][   T34]  ? __mutex_lock+0x5b6/0x1360
[  519.743340][   T34]  ? genl_rcv_msg+0x10d/0x790
[  519.744949][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  519.746631][   T34]  ? stack_trace_save+0x9c/0xe0
[  519.748332][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  519.750082][   T34]  ? radix_tree_lookup+0x240/0x290
[  519.751888][   T34]  genl_rcv_msg+0x10d/0x790
[  519.753420][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.755242][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.757069][   T34]  netlink_rcv_skb+0x208/0x470
[  519.758793][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.760380][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.762100][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  519.763816][   T34]  ? down_read+0x1ad/0x2e0
[  519.765257][   T34]  genl_rcv+0x28/0x40
[  519.766570][   T34]  netlink_unicast+0x82f/0x9e0
[  519.768156][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  519.769867][   T34]  ? netlink_sendmsg+0x642/0xb30
[  519.771589][   T34]  ? skb_put+0x11b/0x210
[  519.772973][   T34]  netlink_sendmsg+0x805/0xb30
[  519.774576][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.776474][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  519.778239][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  519.780060][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.782036][   T34]  __sock_sendmsg+0x21c/0x270
[  519.783697][   T34]  __sys_sendto+0x3bd/0x520
[  519.785207][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  519.787016][   T34]  ? fd_install+0x97/0x540
[  519.788724][   T34]  ? fd_install+0x30d/0x540
[  519.790351][   T34]  __x64_sys_sendto+0xde/0x100
[  519.792446][   T34]  do_syscall_64+0xfa/0x3b0
[  519.794231][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.796345][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.798730][   T34]  ? exc_page_fault+0x9f/0xf0
[  519.800583][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.802972][   T34] RIP: 0033:0x7efc46790a7c
[  519.804563][   T34] RSP: 002b:00007ffe41c33400 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  519.807239][   T34] RAX: ffffffffffffffda RBX: 00007efc474e4620 RCX: 00007efc46790a7c
[  519.809794][   T34] RDX: 0000000000000020 RSI: 00007efc474e4670 RDI: 0000000000000005
[  519.812443][   T34] RBP: 0000000000000000 R08: 00007ffe41c33454 R09: 000000000000000c
[  519.815006][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  519.817564][   T34] R13: 00007ffe41c334a8 R14: 00007efc474e4670 R15: 0000000000000000
[  519.820127][   T34]  </TASK>
[  519.821162][   T34] INFO: task syz-executor:26683 blocked for more than 144 seconds.
[  519.823886][   T34]       Not tainted syzkaller #0
[  519.825495][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  519.828458][   T34] task:syz-executor    state:D stack:22552 pid:26683 tgid:26683 ppid:1      task_flags:0x400140 flags:0x00004004
[  519.832325][   T34] Call Trace:
[  519.833426][   T34]  <TASK>
[  519.834418][   T34]  __schedule+0x1798/0x4cc0
[  519.835963][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.837621][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.839237][   T34]  ? __pfx___schedule+0x10/0x10
[  519.840850][   T34]  ? schedule+0x91/0x360
[  519.842296][   T34]  schedule+0x165/0x360
[  519.843695][   T34]  schedule_preempt_disabled+0x13/0x30
[  519.845521][   T34]  __mutex_lock+0x7e6/0x1360
[  519.847049][   T34]  ? __mutex_lock+0x5b6/0x1360
[  519.848656][   T34]  ? genl_rcv_msg+0x10d/0x790
[  519.850259][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  519.852295][   T34]  ? stack_trace_save+0x9c/0xe0
[  519.853968][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  519.855719][   T34]  ? radix_tree_lookup+0x240/0x290
[  519.857421][   T34]  genl_rcv_msg+0x10d/0x790
[  519.858933][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.860505][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.862406][   T34]  netlink_rcv_skb+0x208/0x470
[  519.863991][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.865620][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.867262][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  519.869058][   T34]  ? down_read+0x1ad/0x2e0
[  519.870555][   T34]  genl_rcv+0x28/0x40
[  519.872023][   T34]  netlink_unicast+0x82f/0x9e0
[  519.873705][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  519.875688][   T34]  ? netlink_sendmsg+0x642/0xb30
[  519.877400][   T34]  ? skb_put+0x11b/0x210
[  519.878955][   T34]  netlink_sendmsg+0x805/0xb30
[  519.880702][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.882783][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  519.884551][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  519.886367][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.888229][   T34]  __sock_sendmsg+0x21c/0x270
[  519.889915][   T34]  __sys_sendto+0x3bd/0x520
[  519.891595][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  519.893259][   T34]  ? fd_install+0x97/0x540
[  519.894751][   T34]  ? fd_install+0x30d/0x540
[  519.896263][   T34]  __x64_sys_sendto+0xde/0x100
[  519.897876][   T34]  do_syscall_64+0xfa/0x3b0
[  519.899366][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.901056][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.903274][   T34]  ? exc_page_fault+0x9f/0xf0
[  519.904832][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.906781][   T34] RIP: 0033:0x7fa75cd90a7c
[  519.908316][   T34] RSP: 002b:00007ffc3c2c5580 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  519.911071][   T34] RAX: ffffffffffffffda RBX: 00007fa75dae4620 RCX: 00007fa75cd90a7c
[  519.914028][   T34] RDX: 0000000000000020 RSI: 00007fa75dae4670 RDI: 0000000000000005
[  519.916726][   T34] RBP: 0000000000000000 R08: 00007ffc3c2c55d4 R09: 000000000000000c
[  519.919391][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  519.922403][   T34] R13: 00007ffc3c2c5628 R14: 00007fa75dae4670 R15: 0000000000000000
[  519.925435][   T34]  </TASK>
[  519.926703][   T34] INFO: task syz-executor:26698 blocked for more than 144 seconds.
[  519.929528][   T34]       Not tainted syzkaller #0
[  519.931553][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  519.934785][   T34] task:syz-executor    state:D stack:22632 pid:26698 tgid:26698 ppid:1      task_flags:0x400140 flags:0x00004004
[  519.938932][   T34] Call Trace:
[  519.940022][   T34]  <TASK>
[  519.941109][   T34]  __schedule+0x1798/0x4cc0
[  519.943106][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.944803][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.946413][   T34]  ? __pfx___schedule+0x10/0x10
[  519.947986][   T34]  ? schedule+0x91/0x360
[  519.949367][   T34]  schedule+0x165/0x360
[  519.950915][   T34]  schedule_preempt_disabled+0x13/0x30
[  519.953075][   T34]  __mutex_lock+0x7e6/0x1360
[  519.954626][   T34]  ? __mutex_lock+0x5b6/0x1360
[  519.956324][   T34]  ? genl_rcv_msg+0x10d/0x790
[  519.958143][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  519.959833][   T34]  ? stack_trace_save+0x9c/0xe0
[  519.961850][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  519.963842][   T34]  ? radix_tree_lookup+0x240/0x290
[  519.965948][   T34]  genl_rcv_msg+0x10d/0x790
[  519.967900][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.970000][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.972375][   T34]  netlink_rcv_skb+0x208/0x470
[  519.974441][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.976537][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.978703][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  519.980986][   T34]  ? down_read+0x1ad/0x2e0
[  519.983015][   T34]  genl_rcv+0x28/0x40
[  519.984759][   T34]  netlink_unicast+0x82f/0x9e0
[  519.986805][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  519.989001][   T34]  ? netlink_sendmsg+0x642/0xb30
[  519.991122][   T34]  ? skb_put+0x11b/0x210
[  519.993154][   T34]  netlink_sendmsg+0x805/0xb30
[  519.995229][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.997469][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  519.999605][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  520.001859][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  520.003956][   T34]  __sock_sendmsg+0x21c/0x270
[  520.006025][   T34]  __sys_sendto+0x3bd/0x520
[  520.008025][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  520.010270][   T34]  ? fd_install+0x97/0x540
[  520.012281][   T34]  ? fd_install+0x30d/0x540
[  520.014241][   T34]  __x64_sys_sendto+0xde/0x100
[  520.016309][   T34]  do_syscall_64+0xfa/0x3b0
[  520.018279][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  520.020544][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.023275][   T34]  ? exc_page_fault+0x9f/0xf0
[  520.025340][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.027879][   T34] RIP: 0033:0x7f4a5ef90a7c
[  520.029818][   T34] RSP: 002b:00007ffcfab374c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  520.033787][   T34] RAX: ffffffffffffffda RBX: 00007f4a5fce4620 RCX: 00007f4a5ef90a7c
[  520.037096][   T34] RDX: 0000000000000020 RSI: 00007f4a5fce4670 RDI: 0000000000000005
[  520.040446][   T34] RBP: 0000000000000000 R08: 00007ffcfab37514 R09: 000000000000000c
[  520.044052][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  520.047373][   T34] R13: 00007ffcfab37568 R14: 00007f4a5fce4670 R15: 0000000000000000
[  520.050717][   T34]  </TASK>
[  520.052141][   T34] 
[  520.052141][   T34] Showing all locks held in the system:
[  520.055365][   T34] 1 lock held by khungtaskd/34:
[  520.057430][   T34]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  520.061724][   T34] 2 locks held by getty/5673:
[  520.063695][   T34]  #0: ffff8880296af0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  520.067790][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  520.072186][   T34] 3 locks held by kworker/u8:5/5879:
[  520.074381][   T34]  #0: ffff888136639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  520.078520][   T34]  #1: ffff888136624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  520.081693][   T34]  #2: ffff888136639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  520.085724][   T34] 1 lock held by udevd/20609:
[  520.087784][   T34]  #0: ffff888021f23358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  520.091850][   T34] 6 locks held by syz.1.7351/26660:
[  520.094039][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  520.097461][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  520.101380][   T34]  #2: ffff888021f0ea30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870
[  520.105723][   T34]  #3: ffff888107bee928 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0
[  520.109143][   T34]  #4: ffff888107bee2c8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  520.113814][   T34]  #5: ffff888107bee300 (&q->q_usage_counter(queue)#2){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  520.118873][   T34] 2 locks held by syz.1.7351/26666:
[  520.120944][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  520.124440][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  520.128305][   T34] 2 locks held by syz.1.7351/26669:
[  520.130469][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  520.134043][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  520.137861][   T34] 2 locks held by syz.3.7353/26665:
[  520.140056][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  520.143597][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  520.147459][   T34] 2 locks held by syz.2.7355/26676:
[  520.149730][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  520.153585][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  520.157448][   T34] 2 locks held by syz-executor/26680:
[  520.159809][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  520.163431][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  520.167176][   T34] 2 locks held by syz-executor/26683:
[  520.169505][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  520.173118][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  520.176928][   T34] 2 locks held by syz-executor/26698:
[  520.179204][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  520.182885][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  520.186739][   T34] 2 locks held by syz-executor/26709:
[  520.189055][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  520.192797][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  520.196565][   T34] 2 locks held by syz-executor/26711:
[  520.198735][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  520.201792][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  520.204740][   T34] 2 locks held by syz-executor/26726:
[  520.206528][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  520.209896][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  520.213107][   T34] 2 locks held by syz-executor/26736:
[  520.214877][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  520.218043][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  520.221836][   T34] 2 locks held by syz-executor/26738:
[  520.224069][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  520.227571][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  520.231522][   T34] 2 locks held by syz-executor/26755:
[  520.233821][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  520.237170][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  520.240642][   T34] 
[  520.241778][   T34] =============================================
[  520.241778][   T34] 
[  520.245294][   T34] NMI backtrace for cpu 0
[  520.245305][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  520.245319][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  520.245326][   T34] Call Trace:
[  520.245331][   T34]  <TASK>
[  520.245338][   T34]  dump_stack_lvl+0x189/0x250
[  520.245358][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  520.245373][   T34]  ? __pfx__printk+0x10/0x10
[  520.245398][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  520.245415][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  520.245430][   T34]  ? __pfx__printk+0x10/0x10
[  520.245449][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  520.245469][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  520.245510][   T34]  watchdog+0xf93/0xfe0
[  520.245531][   T34]  ? watchdog+0x1de/0xfe0
[  520.245551][   T34]  kthread+0x711/0x8a0
[  520.245569][   T34]  ? __pfx_watchdog+0x10/0x10
[  520.245584][   T34]  ? __pfx_kthread+0x10/0x10
[  520.245599][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  520.245615][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  520.245629][   T34]  ? __pfx_kthread+0x10/0x10
[  520.245644][   T34]  ret_from_fork+0x3fc/0x770
[  520.245659][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  520.245676][   T34]  ? __switch_to_asm+0x39/0x70
[  520.245690][   T34]  ? __switch_to_asm+0x33/0x70
[  520.245703][   T34]  ? __pfx_kthread+0x10/0x10
[  520.245718][   T34]  ret_from_fork_asm+0x1a/0x30
[  520.245743][   T34]  </TASK>
[  520.245748][   T34] Sending NMI from CPU 0 to CPUs 1:
[  520.306140][    C1] NMI backtrace for cpu 1
[  520.306155][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  520.306167][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  520.306174][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  520.306191][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 d6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  520.306201][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  520.306213][    C1] RAX: a6a84607e9d75700 RBX: ffffffff819683a8 RCX: a6a84607e9d75700
[  520.306221][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b69f6 RDI: ffffffff8be33300
[  520.306227][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  520.306234][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa37e30
[  520.306242][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001f000
[  520.306248][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  520.306257][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  520.306264][    C1] CR2: 00007ffe5de77f98 CR3: 000000000df36000 CR4: 00000000000006f0
[  520.306304][    C1] Call Trace:
[  520.306311][    C1]  <TASK>
[  520.306315][    C1]  default_idle+0x13/0x20
[  520.306324][    C1]  default_idle_call+0x74/0xb0
[  520.306335][    C1]  do_idle+0x1e8/0x510
[  520.306347][    C1]  ? __pfx_do_idle+0x10/0x10
[  520.306364][    C1]  cpu_startup_entry+0x44/0x60
[  520.306375][    C1]  start_secondary+0x101/0x110
[  520.306391][    C1]  common_startup_64+0x13e/0x147
[  520.306410][    C1]  </TASK>
[  520.307181][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  520.373227][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  520.376172][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  520.379546][   T34] Call Trace:
[  520.380677][   T34]  <TASK>
[  520.381694][   T34]  dump_stack_lvl+0x99/0x250
[  520.383315][   T34]  ? __asan_memcpy+0x40/0x70
[  520.384952][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  520.386694][   T34]  ? __pfx__printk+0x10/0x10
[  520.388398][   T34]  vpanic+0x281/0x750
[  520.389698][   T34]  ? __pfx_vpanic+0x10/0x10
[  520.391192][   T34]  ? preempt_schedule+0xae/0xc0
[  520.392771][   T34]  ? preempt_schedule_common+0x83/0xd0
[  520.394526][   T34]  panic+0xb9/0xc0
[  520.395746][   T34]  ? __pfx_panic+0x10/0x10
[  520.397171][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  520.398960][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  520.400940][   T34]  watchdog+0xfd2/0xfe0
[  520.402294][   T34]  ? watchdog+0x1de/0xfe0
[  520.403927][   T34]  kthread+0x711/0x8a0
[  520.405361][   T34]  ? __pfx_watchdog+0x10/0x10
[  520.406913][   T34]  ? __pfx_kthread+0x10/0x10
[  520.408562][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  520.410367][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  520.412092][   T34]  ? __pfx_kthread+0x10/0x10
[  520.413627][   T34]  ret_from_fork+0x3fc/0x770
[  520.415180][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  520.416869][   T34]  ? __switch_to_asm+0x39/0x70
[  520.418546][   T34]  ? __switch_to_asm+0x33/0x70
[  520.420362][   T34]  ? __pfx_kthread+0x10/0x10
[  520.421910][   T34]  ret_from_fork_asm+0x1a/0x30
[  520.423663][   T34]  </TASK>
[  520.425580][   T34] Kernel Offset: disabled
[  520.427217][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:33:25  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff93490888 RBX=0000000000000002 RCX=12c35786aa5e1709 RDX=0000000000000000
RSI=ffff888020486180 RDI=ffff888020485640 RBP=0000000000000000 RSP=ffffc900034ff7d8
R8 =0000000000000000 R9 =ffffffff8b46e302 R10=dffffc0000000000 R11=ffffffff8b46e230
R12=000000002428d305 R13=ffff888020486130 R14=ffff888020486180 R15=12c35786aa5e1709
RIP=ffffffff819da241 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f97f00e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=000000000000002f 0000003930316c6c
XMM06=ffffffffffffff00 ffffff0000000000 XMM07=00000000000000ff 0000000000000000
XMM08=ffffffffffffff00 ffffff0000000000 XMM09=0000000000000051 0000003930316c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff110214be912 RBX=ffff88810a5f4890 RCX=ffffffff819e043d RDX=0000000000000000
RSI=0000000000000004 RDI=ffff88810a5f4890 RBP=ffffc9000336f7e8 RSP=ffffc9000336f728
R8 =ffff88810a5f4893 R9 =1ffff110214be912 R10=dffffc0000000000 R11=ffffed10214be913
R12=dffffc0000000000 R13=ffffffff82397a40 R14=ffff88810a5f4894 R15=1ffff9200066deec
RIP=ffffffff819e0444 RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fac6e73c800 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562e6c877000 CR3=000000010e8fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
