last executing test programs:

16.092094668s ago: executing program 2 (id=5809):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x4040004) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x4040004)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
socket$netlink(0x10, 0x3, 0xa)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r5, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r5, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4)

16.091705783s ago: executing program 2 (id=5810):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x10001, @mcast1, 0xd}}, 0x7, 0x3, 0xfffffffc, 0x40, 0x8, 0x2b, 0x3}, &(0x7f0000000240)=0x9c)
r1 = socket(0x1, 0x803, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="16424bc3000000000a000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0)
r12 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r12, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket(0x1, 0x803, 0x0)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r15], 0x50}}, 0x2)

16.041848048s ago: executing program 0 (id=5811):
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x200, 0x1000}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000006a000d0e26bd7000fcdbdf25004003000000000008000a000000000004000900080005"], 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
socket(0x10, 0x80002, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, 0x0, 0x4040004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r7, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r6)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000000c0))

15.671047801s ago: executing program 0 (id=5813):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='percpu_create_chunk\x00', r3, 0x0, 0x80000}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0xf810, 0x8, 0xdbc, 0x101, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x23}}}}})
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @multicast2}, &(0x7f0000000200)=0xc)
r6 = accept$ax25(r4, &(0x7f00000005c0)={{0x3, @rose}, [@remote, @netrom, @default, @default, @netrom, @netrom, @bcast, @netrom]}, &(0x7f00000003c0)=0x48)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x505000000)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @empty, @mcast1, [], "8029335287b7a081"}}}}}}}, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'})
socket$xdp(0x2c, 0x3, 0x0)

15.6702065s ago: executing program 2 (id=5814):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000800)={0x2, [0x0, 0x0]}, &(0x7f0000000840)=0xc) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r4, 0x1) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async)
write$tun(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0000001801040704ff001043105d8a2c19f8a27b0f59a1ec1e8c660c9f0e5afe71c9facf72f56254ea3e959bba3fed9d55ee810325685d9162bab4"], 0x24e2) (async)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) (async)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r8=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r8, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r6, 0x0, 0x47, 0x0) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c001e0000af05000000000000000000010000080800034000001000319929e1084137251952827711255202e83bd9f8ee7a5f1f1fbef066604a68994fbfb870d492d125056c7bd170f570aae095e3da1965616e5c254abbfacd877af9c165b0b8b432b79f895535d355088deebac4dd3f4d01e5c33c6b9b7552287eec88b77c95a0bb61067f4b42ec988a27f3cc786e75e0275fc08f08e687b3255fdb39ee785d74ed944facca6f4139e2371ce1d04ab1014fdcab07aa5781f9774943b5fcb6560ba796796c32a382d4bd4920a3db32d68cdc73dc0537ad57dfd2e9270fec09e8e4cd982fca9aedd6ca9ac8a7f34e0f03e300adc16a4fb4b1387da61b9b543192d43e88608960db4a2fbce67a531548f07ef5b99e7400fed9d31f8c1925539c1cab80e116e98d0fe0769f3d7d0766c162980000000000000000000000001c000000fd72a52f361c0e4c38a33266f4c9b5c40f0093e0546e8aba82184cf702f85da3699dcc168c17700a7dddfffbca402d47c3d1e48a02db9d446176916cce8d34cbf827cbb82c9dad988a5c2c90abce6f15c59e086bc9b4aab99480a4d33f49c52f37c8a2ab44cab5696e7d73e88b7bbc915d7f4f35b73149c994a366fdac3de5bebcf5a9fda96e36328320"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000004a0000082bbd7000fcdbdfdc0bfe2315b3a2bb4ea63d337eae739497b4aec9dfd026ff92d3d7031d3e7cbc3437725879aa1b5873ac3ae4462ad6e6a630a0b66ca7706d7583d2b85dd0c55f2824005d0891bc692e4bafbac00a0a4030ac4baa4696c4be3bef4728f818a65a4c5f9fea26a15b8eb4d3f3f6e72234c58033a83b38f94181c993b430122cf3868cee0e40f0f8b9bda713eade11ed4c8c5ced447f1b579ba37bffd79feda637013ce673c9f39522b1ae6359dca129fce73df781da60c6dab1c249d5", @ANYRES32=0x0, @ANYBLOB="0400000014000100000000000000000000000000000000016eff0100fe8000000000000000000000000000bb"], 0x44}, 0x1, 0x0, 0x0, 0x8098}, 0x48804)

15.669896404s ago: executing program 1 (id=5815):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xe8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0xb3}, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x3, 0x9d, 0xc0}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1c1a}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x76, 0x2a, [@link_id={0x65, 0x12, {@random="d778406f7aa6", @device_a, @broadcast}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x48, 0x8}}, @peer_mgmt={0x75, 0x8, {0xfc, 0x8, @val=0x2, @val=0x3, @void}}, @mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x16, {0x0, 0x9, @void, @val=0x22, @val="0b55c02ed0daaf05f2d47dd24e0833e9"}}, @challenge={0x10, 0x1, 0xda}, @peer_mgmt={0x75, 0x16, {0x0, 0x4, @void, @val=0x1, @val="7b7bd41249996bf13407bf8f371bc872"}}, @ibss={0x6, 0x2, 0xa}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x95, 0xc4}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0x74, 0x6}}]}]]}, 0xe8}}, 0x80)

15.540622907s ago: executing program 1 (id=5816):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x98, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x200}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x810)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0)

15.537217312s ago: executing program 0 (id=5817):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863040002"], 0xfce)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r3, &(0x7f0000000340)="07000000010000", 0x7)
r4 = socket(0x9, 0x109ff5373f282e60, 0x9)
setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x2, 0x4)
recvmsg(r4, &(0x7f0000000280)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/179, 0xb3}], 0x1, &(0x7f00000001c0)=""/134, 0x86}, 0x20)

15.536404464s ago: executing program 2 (id=5818):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x4040004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r5, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4)

15.441603548s ago: executing program 2 (id=5819):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x4040004)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1401, 0x4, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r5, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r6)
sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000003c00)={0x24, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804) (async)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async)
socket(0x10, 0x80002, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) (async)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x4040004) (async)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1401, 0x4, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r5, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r6) (async)
sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000003c00)={0x24, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) (async)

15.440853144s ago: executing program 0 (id=5820):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf251900000020040080140002001e0b00d88b78e902bdfb2000010000000800030004000000ef633af6613e08b9b15be5bf93d47d584f8cf5349354e7f56107e56e94267c0724be42bfebce00ba74d6ebbce05de1b6e177f1c0773739080ddcc1ba8ff0ccf1d91de4636cb6d72d6675719ac07151660413710035832e393c1b2bc5edae804d2914cd21725456ad5da42308ac78a22de8186123c3fdf73a79c688e74e92fdaba019a32052e852c85a7f8243bc55957ba3c898a464fc62ce0c4ce03981d1c628af615ed7f5fd6ec8ef22fa02fe"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)

15.391398853s ago: executing program 2 (id=5821):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000040)='GPL\x00'}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0)

15.389936602s ago: executing program 1 (id=5822):
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000000000)=""/187, &(0x7f00000000c0)=0xbb)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}, 0x4}}, 0x10) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff)
r1 = accept4(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000200)=0x80, 0x400)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2c, 0x43}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4048091}, 0x8080) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x14}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x162}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe72}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1239}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000004c0)=0xb5, 0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', <r4=>0x0, 0x29, 0x8, 0x7, 0x3, 0x31, @dev={0xfe, 0x80, '\x00', 0x30}, @empty, 0x7, 0x7800, 0xb, 0x936}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000006c0)={@dev, @multicast1, <r6=>0x0}, &(0x7f0000000700)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6gre0\x00', <r8=>0x0, 0x2f, 0x9, 0xe, 0x7, 0x20, @private0, @remote, 0x1, 0x7800, 0x5, 0x6}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000940)={'syztnl2\x00', &(0x7f0000000900)={'sit0\x00', <r10=>0x0, 0x1, 0x80, 0x5db9, 0x0, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x66, 0x0, 0x6, 0x29, 0x0, @multicast2, @empty, {[@end]}}}}})
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000980)={@empty, @multicast2, <r11=>0x0}, &(0x7f00000009c0)=0xc)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000dc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a00)={0x360, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x120, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5b, 0x5, "026116dc39f38fd8cd4f3e1eb877e809f0cf42c24e32b221764e3a5c59f146694608b33aea212035fa0a7c1d3c309e76e8d6790bda4be7cd3179b142d6b3a10b873d407a11fd55786e6a4baad4b28f6d0fbf1b44421f6b"}, @ETHTOOL_A_BITSET_VALUE={0xbe, 0x4, "f3bdbe15d09f0c3d327cc7be4f8155ee1c94233048b7ac6109f3600656177aa44601c610710af4c83a5ce72c569c6c46cb0343db347b9af24f411903a7176e8aac9cbb211056bae6753adbbef4fe2104bea50799d1ead8857b1c541e34d7f9640fcf0b80d862583922e67b0b61deffeb030f413931b41f987843a84035b7635e8f361948e4da0fc7d81ceee2c96a0b289ebec2fce9f3652c3c021cdaf3414bf7fb730348e4ad8b08cfda38b6d84f2a2b7afc0ba5a9464b502103"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) (async)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000e00)={0x1, 'xfrm0\x00', {}, 0x9b57}) (async)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x40000, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000e80)={'wg0\x00', 0x8000})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x80010, r12, 0x97418000)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'wpan1\x00', <r15=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r13, &(0x7f0000001000)={&(0x7f0000000ec0), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r14, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xa439a66d73300519}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000084}, 0x24008000) (async)
r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r2)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r16, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x10, 0x3f8, 0x8, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8040}, 0x240448c4) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004380)={&(0x7f0000001280)=@proc={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc, &(0x7f0000003c00)=[{&(0x7f00000012c0)={0x134, 0x39, 0x400, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0xf4, 0x0, 0x0, @ipv4=@loopback}, @typed={0x14, 0x14b, 0x0, 0x0, @ipv6=@empty}, @generic="f36de55d32149e838037c729fe490a87671da0ea7784a7c28c22", @generic="f2446333225b9a6f67be96bbd4f66c16d68f49b8ec7e9ee4f2f77d843be8b665064076bbd42a30b479f8289cf29bad32cb812b8fb51c1ed4fdcd2273aa9a9d3c986a473b13534a4a4f9f3cf4c9c12fbdf4a24c4b584a35e8c6997f9a5396b4cf19e33a241b3f0736d8537db926e647c93bd52f576d7119bf5e8caa6afeb4fa05a0ffe1f5633d6d91e97ce224f81de7aa59e820b622185cd27ae7b9215a5cc9af85737ea9c38b5344251fbdc030543dc7a82034be6bd92bc6ea17c194434dd4b6ca08303ab2d4653da1a62a1eb772804c79be0aa7f3e925763dfe5a60", @typed={0xf, 0xd9, 0x0, 0x0, @str='SMC_PNETID\x00'}]}, 0x134}, {&(0x7f0000001400)={0x14, 0x3b, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@generic="deca7f11"]}, 0x14}, {&(0x7f0000001440)={0xfc, 0x32, 0x300, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0xf0, 0x0, 0x0, @u32=0x400}, @generic="ad24643904803cc6c9b7a25859ccc7d199a8d42c7862b31f0764e5fd7ad44667aedbf5798f2f690f24d42e47590a345cd3adeb", @generic="3ff303b688f0c3e0340e4c2d53e2e162ca6b29c5770be47b7f8343f228e739004d5fed0eec5fce48c162624f86ef34e3e3443a4a7ffbdfcdd64adc10d9af4ce8713621759197b9c9591c0b6106df2822d4bc301518bc267cb076ec1abe69e56dd8357e3f950c6c8a012aac7da17b28f72804bdb9b898c77c6821b141f64a1dc32dbd0502af0319a8abff021f70a305aabf87ad689cf2ef188ad6b9a32c9f5be88ca221cbb6c4169b45c5aeab681733e783"]}, 0xfc}, {&(0x7f0000001580)={0x1268, 0x3f, 0x10, 0x70bd2c, 0x25dfdbff, "", [@generic="54023fcdbe9adedf6d01577e67b45f2264260916ef889bc705bfaabcc11ba09da548d7f4f858814f6440fbb906eb3d395489a83f81a726f881e0b6d04540f510228b85bee654dea8e969ec4c289eddbf7310c6aa2170494472af1c89854ba5", @nested={0x15a, 0xe4, 0x0, 0x1, [@nested={0x4, 0x126}, @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x143, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x146}, @generic="2d27efa6a1eb8f10fddeb7853d9876ef099e6b5182999631c8991bdb3cef4cd7d53aac35e5725c12a53e991a3641483aefa65d65907f8c4642f3c271fc704777587c83ca634432dadd30a6ef5872a74c7697f3acc53a72ee96b1d9a8ded9dba65cb36ceca43aa6ce7981fe64fdba6fa673063649e7c6", @generic="3bd2c9a8c093ce9274d35cf63ad7be06a420714a838e2256719816ebd2d4c3ede91012f5ea7d6088b0bc5804a97fcb4786937a1902030d236d6d89ef689461cc699271f209f1189f287f3da4530a8f2071873fb490f0ee8faecf3b7e2cd3b388d96284ba5baa1c73f3c6c46f4395302bf8d05772818424e84809a87641fd72a98c7db88ce49abcbbfe189e65120a3a3ae158b6880eab0d65620ad2ebdb360f0cddac8ecf1aa94f9e", @typed={0x8, 0x40, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @typed={0x8, 0x142, 0x0, 0x0, @pid}, @nested={0x4, 0x9e}]}, @nested={0x101c, 0xc5, 0x0, 0x1, [@nested={0x4, 0x76}, @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0xbc}, @generic="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", @nested={0x4, 0x67}, @nested={0x4, 0x121}]}, @nested={0x7f, 0x21, 0x0, 0x1, [@nested={0x4, 0xbc}, @generic="cee429013448f6a782fedc30dd44e3071dafbd447e92fa35d4e7d70088df3360b97e4153f5aab72eb76d174b36a91bacf01124cd48801e13069d5dc28931cce9545f91d4d52518f5f929d9a9d0c0ee73642280b2182eadf94b3701c242a147868dd38e", @nested={0x4, 0x4}, @typed={0x4, 0xc9}, @nested={0x4, 0xe7}, @nested={0x4, 0x8e}, @nested={0x4, 0x38}]}]}, 0x1268}, {&(0x7f0000002800)={0x38, 0x22, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x28, 0x11f, 0x0, 0x1, [@nested={0x4, 0x52}, @nested={0x4, 0x90}, @generic="9712f432883aa47c17e42a75a5326f0938195918b796afc060eb3b76"]}]}, 0x38}, {&(0x7f0000002880)={0x1370, 0x12, 0x10, 0x70bd2b, 0x25dfdbff, "", [@generic, @generic="b315435dc0b6f447e2676d6400e1a7b4782658387c44071d4a8c8684a866e9b84a1e31d1e45651b85c3ad0b227034931a3cb5c6787a409892add2e118c8b5f08c6c38d546ef266755eed9ceebcd758dc7ce01f3c8433a98ce262ab1f0bf4d389f938204a44e24735d4b794c65af404a50041bcdac152d6a0c0eea6b1234b945fa746a8660dd1ad6b4cc538f24e083023ed31528e7250549d72c9f49aaca9508328da826f5a919f8922c1b8bbdd5dcb69bda970c8fe5fd70b27ed55a42d8fe94016cefa5bd363c0f3a07caa954c5008", @typed={0x8, 0x38, 0x0, 0x0, @pid}, @generic="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", @generic="b1823b8fc5c1ab00f03e1012ace3615854a1840fcb098d26a487ba63a0769b9bedf359910a4231a9e1be19f2d6ff5a9e3a7a483803dea52a1f2f0c09f4897cb612b80cc8d13fe63590f9828deb60cf73daf2575c3c25c5e8eff66f623c002ed2874743f6a96f2b28bc97a7979af4d82e79d1ee0b97cddc4558eef710bad341a7eea32c009c71d14f6d72f5b1ddc12e1064f1ae2af78cec18f0d26a42ff8abada7bddab6cfb9a40818491cb3ded8723060e3a91c25fd4782b9badc8d7be0637e92ed566840f66116cc5cfb761f27a32", @typed={0x8, 0x86, 0x0, 0x0, @fd=r2}, @generic="f4245761d1dd6a284c76f1ea548069c87d48f24e1f168b2fad6c9e7e0991cda7ad433d8ccd6bd58b5026ad660e73108e9b3d6f8e5134d1c6462634011b241336568cade5efc0996f84410f99c0e51e1a99a570e3a15fe68f63a09015ea871a4ebea3261c53c47b878ea62456badc1f511a3d201bc76c657c626e4586f08461b02e631728109ab726600c4d5acc99c0666971ba96dac185e0aaaf6cf93cd03cf5beae736e06073b52c2952150", @generic="f0c02e11238c0a910bc98016cb0e830aa8a68dc96bbfaf52", @generic="6e57df9d205cae3649c5fbfadfb05bb085cba147fa9014e4602f7cbccfa0a9d5083dd8e754160843a8bb0e20ebb44ddad880d65ebe6d3d05417bc09e22da9e7d9a98825965545f72b91ea1582b11070c3b05a94c5e9b7a1605f4bb63c8d5ac42ccff069ae9f55874bf41ef5fe967e90cd2cc721a88fbf0fc5ff01360dd5daca3aac39ce5321dfaa16e2543f0c536358741af03355cd272d92e4b5ccd94e1c878365592aedff8f5f8fe02ff82942c09c935ea1765dd0f902b50cdff28c4b91de77e11907dab0537e9c6b79eac36a41aba9e589cfe42a225836391953560bf5af3e76fd7e1fa5b25cbb868f782be"]}, 0x1370}], 0x6, &(0x7f0000004200)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r1, r1, r12, r12, 0xffffffffffffffff, r2, r2]}}, @rights={{0x18, 0x1, 0x1, [r12, r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r2, r0, r0, r1, r12]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r2, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158, 0x4000880}, 0x10)

15.389105922s ago: executing program 0 (id=5823):
r0 = socket(0xa, 0x3, 0x3a)
close(0x3)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0xc49b, 0x30}, 0xc)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000400)={r4, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f00000002c0)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x9, 0x1, 0x18009, 0x3, 0xeb020004, 0x427e, 0x8, 0x3ff, r4}, &(0x7f0000000240)=0x20)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x114, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0xe5, 0x3, "57e19bad2366361008077141ef2f7de3e07fe1e2f35b4b6e8be254b2e18078c5fa582088b266d2f37b8e7ffc79a04b7c9ec1a9b6c6f3e73d2375f10e95c21d0b3dfa65118fc9c49fa51680b9f9b2414a82bff44dc7c2d417acebdb46fcb4460184eec638948051888394ddef6fcb856a2ac8198ebdb171400efb88ef48a71ddb70b74d0b8d946f0252bedfa6f6fb98747dd26c0f5861e739318d2ed25835b87260c9867d240e72a5a5ea3b60911fe3e8281f18f3a590cff1e4d018dbb89abe4c3dc58fa219c8217de6927e1cc935840b04cf81c79ca1449962bbd71c1c237bdfbb"}, @ETHTOOL_A_WOL_SOPASS={0x15, 0x3, "32c1886d8756e19e6e97c373852480c192"}]}, 0x114}, 0x1, 0x0, 0x0, 0x40010}, 0x4040001)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c010000100001000000000000000000fc020000000000000000000000000000e0000001000000000000000000000000000000000000fffe0000000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000008900010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008020000ca8bdaf566099b58"], 0x17c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800010001000000548e7e3a9cb7b56a80dbac690f70dcf71ee6f68c2832f6b0e1ee6d35808d2224b7d10dc6752bb3f837e5298fec0108c234a4d6b8cb09d9da359203dad8eee6238ce65e1479ff08f795176fd484559b5c057ec4f2e97b4b356f30e2d906c42c6355196a0ff24a38f2172831f617a0f910f35a859870521c43659f8c342409dade77d60f40b7d383efd4c0ce94e041d01710869d0b9348f821825497f831d8"], 0x1c}}, 0x0)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a)
r8 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r8, &(0x7f0000000500)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3961, @remote, 0x6}}, 0x24)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)

15.311425586s ago: executing program 0 (id=5824):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x9c, r4, 0x42f, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\xff'}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x29}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x7}]}}}]}, 0x44}}, 0x8044)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x80002, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async)
bind$alg(0xffffffffffffffff, 0x0, 0x0) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x9c, r4, 0x42f, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\xff'}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) (async)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x29}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x7}]}}}]}, 0x44}}, 0x8044) (async)

15.249111716s ago: executing program 1 (id=5825):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0xb00, 0x40822}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x44000)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
unshare(0x26020480)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r6, 0x29, 0x31, 0x0, 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r7, &(0x7f0000000040)={0x80000000}) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x2b, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r9, 0x0, 0x0}, 0x20) (async)
close(0x3) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async, rerun: 32)
unshare(0xc040400) (async, rerun: 32)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)

15.131930302s ago: executing program 1 (id=5826):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x6, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r4, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r5, @ANYRES16=r4], 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x120500d0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r3, &(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x24e2)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000840)="e26248598fb23f29b5e91518439aba5c8b4b74b0b4badddd6a78ea590014b13c3d3ad31992fe4196c4c9b46b39040257b5a193ca129020848da9d3c6568a54f19b58f02c52d7b62f5d1c34c64f914f23189bc1c33a0ac373d068088dcac04c872852defa68995a8fa2589ba648c3f0d3b481ae503dc92cb6f980285ad586e19405b0e9187bc0c4422a098715e04e39791f214b2390e8afdf4e", 0x99}], 0x2}, 0x40050)
r7 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r9=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000380)={r9, 0x3}, &(0x7f00000003c0)=0x8)
splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x80000000, 0xb)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r10, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c001e0000af05000000000000000000010000080800034000001000319929e1084137251952827711255202e83bd9f8ee7a5f1f1fbef066604a68994fbfb870d492d125056c7bd170f570aae095e3da1965616e5c254abbfacd877af9c165b0b8b432b79f895535d355088deebac4dd3f4d01e5c33c6b9b7552287eec88b77c95a0bb61067f4b42ec988a27f3cc786e75e0275fc08f08e687b3255fdb39ee785d74ed944facca6f4139e2371ce1d04ab1014fdcab07aa5781f9774943b5fcb6560ba796796c32a382d4bd4920a3db32d68cdc73dc0537ad57dfd2e9270fec09e8e4cd982fca9aedd6ca9ac8a7f34e0f03e300adc16a4fb4b1387da61b9b543192d43e88608960db4a2fbce67a531548f07ef5b99e7400fed9d31f8c1925539c1cab80e116e98d0fe0769f3d7d0766c162980000000000000000000000001c000000fd72a52f361c0e4c38a33266f4c9b5c40f0093e0546e8aba82184cf702f85da3699dcc168c17700a7dddfffbca402d47c3d1e48a02db9d446176916cce8d34cbf827cbb82c9dad988a5c2c90abce6f15c59e086bc9b4aab99480a4d33f49c52f37c8a2ab44cab5696e7d73e88b7bbc915d7f4f35b73149c994a366fdac3de5bebcf5a9fda96e36328320"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)

15.04010819s ago: executing program 1 (id=5827):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe90, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0xfffffffffffffd9d}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x24, 0x9, 0x4, 0x200, 0x8}, 0x1, 0x8}, [{0x6, 0x80000000, 0x5, 0x6495, 0xef1, 0x400}, {0x6, 0x6, 0x7fff, 0x7fffffff, 0x1, 0xffffdb16}, {0x9, 0x2, 0x5d, 0xb, 0x8001, 0x8}, {0x80000000, 0x3, 0x7, 0x7ff, 0x6, 0x48000000}, {0x440e, 0x1ff, 0x2, 0x0, 0x40, 0x5}, {0x5, 0x7, 0x1, 0x6, 0x401, 0x401}, {0xcf, 0x2, 0x5, 0xb037, 0x7, 0x101}, {0xa933, 0x80000000, 0x4, 0x58cc, 0x1ff, 0x1}, {0x7, 0x7, 0x7, 0xfdaecfe, 0x8, 0x44}, {0x7, 0x8, 0x800, 0x5, 0x9, 0x5}, {0x4, 0x5, 0x3ff, 0xff, 0x2, 0x7f}, {0x21d6, 0xd7, 0xffffffff, 0x1, 0x6, 0xffffff80}, {0x5, 0x6, 0x7fff, 0x7, 0x3, 0xe00}, {0x10, 0x7eb9, 0x8, 0x7fff, 0x9}, {0x80000001, 0x5, 0x4, 0x8, 0x1b7, 0x1}, {0x1, 0xc0, 0x6, 0x73, 0x9, 0x400}, {0x6, 0x1, 0x3ff, 0x2, 0x2, 0xfffffff8}, {0xd, 0x4, 0x827a, 0x2e7f, 0xfd9, 0xff}, {0x2, 0xffff7f0a, 0x6, 0x400, 0x3683, 0x3}, {0x8, 0x9, 0x78, 0x2, 0x705cdee5, 0xff}, {0x7ff, 0x7, 0x4, 0x400, 0x3, 0x9}, {0x0, 0x10000, 0x9, 0x2, 0x4, 0x94d0}, {0x100, 0x9, 0x9, 0x609, 0xc, 0x1ff}, {0x45, 0x7, 0x7f, 0x4576, 0x7, 0x81}, {0x2, 0xb, 0x9, 0x2, 0x10, 0x1000}, {0x0, 0x10000, 0x1, 0x0, 0x2, 0x9}, {0xfef4, 0xd13, 0x3, 0x2, 0x9, 0x4}, {0x9, 0xb0, 0x9, 0x1, 0x4, 0x9}, {0x0, 0x140000, 0x4, 0x81, 0x4, 0x7f}, {0x7, 0x8, 0x8, 0x1, 0x10000, 0x3c97}, {0xe00, 0x8001, 0x7ff, 0x7fffffff, 0x4, 0x9}, {0xc1df, 0x7, 0x499, 0x1000, 0x8, 0x100}, {0x100, 0x3, 0x1ff, 0x6, 0x1, 0x6}, {0x3262, 0x474a, 0x10, 0x1b, 0x8, 0x7fff}, {0xffffffff, 0xe6, 0x0, 0xfff, 0x2, 0x8}, {0xfffffffe, 0xae7d, 0xbd15, 0x10, 0x5, 0x8}, {0x9, 0x8001, 0x6, 0x1ff, 0x2, 0x1000}, {0x9, 0x1, 0x9, 0x5, 0x75, 0x4}, {0x5, 0x10200000, 0x1, 0x10001, 0x3fb4, 0xb5e}, {0x9, 0xbca9, 0x10001, 0x9, 0x8000, 0x8}, {0x200, 0x5, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x4, 0x3, 0x7, 0x681e96f2}, {0x414, 0x5, 0x401, 0x3, 0xe, 0x37}, {0xb1e, 0x5, 0xfffffff6, 0x7, 0xd, 0x8}, {0x4, 0x929, 0x6b3d, 0x27e020c9, 0x3, 0x800000}, {0x8, 0x700, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x9d, 0x4, 0xd, 0x56d0}, {0x9, 0x77eb, 0x5, 0x6, 0x7fffffff, 0x35}, {0xecea, 0x80000001, 0x2, 0x4, 0x3fb, 0x7}, {0xcb9, 0x3, 0x41f8, 0x8, 0x7, 0x7}, {0xc, 0x3d7b, 0x6, 0x8, 0x3, 0x2}, {0x2, 0x800, 0xe04, 0x0, 0x10, 0x3}, {0x7, 0x6, 0x7fff, 0x9, 0x3, 0xc217}, {0x6, 0x38a8, 0x7, 0x9, 0xd, 0x4}, {0x9, 0x8, 0x2, 0x5, 0x95, 0x7}, {0x200, 0x5, 0x1, 0x3}, {0x401, 0x8000, 0x2522, 0x8, 0x9, 0x1}, {0x9, 0x6, 0x7ff, 0xfffffffb, 0x8, 0x3}, {0x1, 0x2, 0x8f, 0xf3800000, 0x80000000, 0x9}, {0x1, 0x4, 0x9, 0x8, 0x1, 0x2}, {0x10, 0x8, 0xfed, 0x1, 0xcd9, 0xff}, {0x2, 0x6, 0x7, 0x7f, 0xffff, 0xd}, {0xa9f, 0x7, 0x8, 0x8, 0x0, 0x5}, {0x8, 0x2, 0x9, 0x4, 0x2000, 0x9}, {0x100, 0x2, 0x6, 0x40}, {0x0, 0x6, 0x5, 0x1, 0x40, 0x5}, {0x2, 0x1, 0x6, 0x7, 0x1, 0xffffffff}, {0x7, 0x81, 0x8, 0x8, 0xfff, 0x81}, {0x8, 0xf, 0xb, 0x80000000, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x6, 0xa, 0x2}, {0x8, 0x101, 0x400, 0x5, 0x2, 0xf67d}, {0x8, 0x0, 0x6, 0x200000, 0x5, 0x9c66}, {0x800, 0x0, 0x9, 0x7, 0x6, 0x62}, {0x4, 0x7, 0x4, 0xb, 0x8, 0x8}, {0x9, 0x9, 0x1, 0xfff, 0xfffffffa, 0x5}, {0x5, 0x1000, 0x81, 0x80000001, 0x0, 0x80000000}, {0xe, 0x4, 0xff, 0xb757, 0x6, 0x669}, {0x2b, 0x5, 0x6, 0x0, 0x8, 0xe0000}, {0x6, 0xa, 0x8, 0xdc, 0x5, 0xe}, {0xfffffffc, 0x101, 0x6, 0x2, 0xcea3, 0x7fffffff}, {0x816, 0x80, 0xfffff37a, 0x8, 0x2, 0x7}, {0xe7a, 0x9, 0x52, 0x7, 0x100, 0x6}, {0x2, 0x845, 0x76fe, 0x1000, 0x7, 0x4}, {0x7, 0x6, 0x9, 0xfffffff8, 0x1, 0xa479}, {0x738, 0x36, 0x400, 0xd, 0x400}, {0x7, 0x767c, 0x0, 0x81, 0x4, 0x65ec}, {0x6, 0x62d5ed5b, 0xffff, 0x4, 0x6, 0x3ff}, {0x4, 0x7, 0x5, 0xc5c, 0x6, 0x9}, {0x0, 0xbbb, 0xe0d, 0x2, 0x2, 0x3}, {0x3, 0x0, 0x1, 0x1a3, 0x1, 0x6}, {0x7, 0x3, 0x5, 0x7, 0x4, 0x2}, {0x7f, 0x1, 0x4, 0x0, 0xffffffff, 0x6}, {0x7, 0x5d, 0x9, 0x2f1bd1fc, 0x3, 0x2}, {0x1, 0x1, 0x8, 0x4bf, 0xfffffffc, 0xfffffffe}, {0x4, 0x40, 0x2, 0x7f, 0x1, 0xffff}, {0x2, 0x8, 0x1, 0x0, 0x2, 0x3}, {0x0, 0x80000001, 0x6, 0x701, 0x3, 0x5}, {0x9, 0x0, 0x0, 0x3c1, 0xf, 0x2}, {0x4, 0x10, 0x1, 0x1, 0x452, 0x800}, {0x5308, 0x8, 0x9, 0x6, 0xf, 0x4}, {0xb9, 0x0, 0xcde4, 0x9be4, 0x80, 0x8}, {0x7, 0xa, 0x0, 0x7, 0x2, 0x7fffffff}, {0xd6d4, 0x1549, 0xffffffff, 0x0, 0xffffffc0, 0x2}, {0x7, 0x72f0, 0x10, 0x4, 0x1}, {0x5, 0x1, 0x4, 0x58cd, 0x2, 0x9a}, {0x6, 0x8000, 0x6, 0x7, 0x3f1, 0x2}, {0x2, 0xff1, 0x6441, 0x2, 0xb7f, 0xc3}, {0xfffffffc, 0x90, 0x0, 0x0, 0x31b1, 0x8}, {0x800, 0x5, 0x100, 0x0, 0xa, 0x5}, {0x4, 0xac, 0x1, 0x8001, 0x1000, 0x5}, {0x33a9, 0x0, 0xfffffff8, 0x39, 0x400, 0x6}, {0x7, 0x480000, 0x800, 0x1, 0x1, 0x400}, {0x1, 0x7, 0xf, 0xfffffffa, 0x4, 0x6}, {0x101, 0x3, 0x7, 0x47fb, 0x7ffffff7, 0x18b7}, {0xffff7fff, 0x1, 0x3, 0x75bd, 0x7f, 0x36a5}, {0x4, 0x600000, 0x4, 0x9, 0x5c5, 0xe98}, {0x6, 0xc, 0xfff, 0x5, 0x8000}, {0x6, 0xfffffffd, 0x9, 0x3c80, 0xe7, 0x10}, {0x5, 0x6, 0x5f, 0x8, 0xe, 0x2}, {0x7, 0x1, 0x5, 0x6, 0x7f}, {0x7, 0xb5cb, 0xffffffff, 0x0, 0x1ff, 0x180}, {0x8, 0x401, 0x31, 0x6, 0x4, 0x4}, {0xbe1, 0x4d1, 0x7, 0x7f, 0x7, 0xfffffff8}, {0x0, 0x3, 0x8, 0x4, 0x9014, 0x800}, {0x83, 0x7, 0x9, 0xc6, 0xfffffff7, 0x6}, {0x7f, 0x1, 0x380, 0x3, 0x0, 0x8}, {0x80000001, 0x5, 0x5, 0x9, 0x5, 0x3}, {0x4, 0x78, 0x1, 0x68, 0x5d6a, 0x3}], [{}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x473fa55f353b9f8f, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0xdfb49ec46723bfa7}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x7}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x6}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan1\x00'})
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0xf810, 0x8, 0xdbc, 0x101, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x23}}}}})
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @multicast2}, &(0x7f0000000200)=0xc)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @empty, @mcast1, [], "8029335287b7a081"}}}}}}}, 0x0)
recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0)
setsockopt$inet6_tcp_int(r4, 0x11a, 0x19, 0x0, 0x0)
r8 = socket(0x1e, 0x1, 0x0)
sendmmsg$sock(r8, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0)

42.957106ms ago: executing program 32 (id=5824):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x9c, r4, 0x42f, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\xff'}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x29}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x7}]}}}]}, 0x44}}, 0x8044)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x80002, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async)
bind$alg(0xffffffffffffffff, 0x0, 0x0) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x9c, r4, 0x42f, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\xff'}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) (async)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x29}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x7}]}}}]}, 0x44}}, 0x8044) (async)

137.955µs ago: executing program 33 (id=5827):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe90, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0xfffffffffffffd9d}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x24, 0x9, 0x4, 0x200, 0x8}, 0x1, 0x8}, [{0x6, 0x80000000, 0x5, 0x6495, 0xef1, 0x400}, {0x6, 0x6, 0x7fff, 0x7fffffff, 0x1, 0xffffdb16}, {0x9, 0x2, 0x5d, 0xb, 0x8001, 0x8}, {0x80000000, 0x3, 0x7, 0x7ff, 0x6, 0x48000000}, {0x440e, 0x1ff, 0x2, 0x0, 0x40, 0x5}, {0x5, 0x7, 0x1, 0x6, 0x401, 0x401}, {0xcf, 0x2, 0x5, 0xb037, 0x7, 0x101}, {0xa933, 0x80000000, 0x4, 0x58cc, 0x1ff, 0x1}, {0x7, 0x7, 0x7, 0xfdaecfe, 0x8, 0x44}, {0x7, 0x8, 0x800, 0x5, 0x9, 0x5}, {0x4, 0x5, 0x3ff, 0xff, 0x2, 0x7f}, {0x21d6, 0xd7, 0xffffffff, 0x1, 0x6, 0xffffff80}, {0x5, 0x6, 0x7fff, 0x7, 0x3, 0xe00}, {0x10, 0x7eb9, 0x8, 0x7fff, 0x9}, {0x80000001, 0x5, 0x4, 0x8, 0x1b7, 0x1}, {0x1, 0xc0, 0x6, 0x73, 0x9, 0x400}, {0x6, 0x1, 0x3ff, 0x2, 0x2, 0xfffffff8}, {0xd, 0x4, 0x827a, 0x2e7f, 0xfd9, 0xff}, {0x2, 0xffff7f0a, 0x6, 0x400, 0x3683, 0x3}, {0x8, 0x9, 0x78, 0x2, 0x705cdee5, 0xff}, {0x7ff, 0x7, 0x4, 0x400, 0x3, 0x9}, {0x0, 0x10000, 0x9, 0x2, 0x4, 0x94d0}, {0x100, 0x9, 0x9, 0x609, 0xc, 0x1ff}, {0x45, 0x7, 0x7f, 0x4576, 0x7, 0x81}, {0x2, 0xb, 0x9, 0x2, 0x10, 0x1000}, {0x0, 0x10000, 0x1, 0x0, 0x2, 0x9}, {0xfef4, 0xd13, 0x3, 0x2, 0x9, 0x4}, {0x9, 0xb0, 0x9, 0x1, 0x4, 0x9}, {0x0, 0x140000, 0x4, 0x81, 0x4, 0x7f}, {0x7, 0x8, 0x8, 0x1, 0x10000, 0x3c97}, {0xe00, 0x8001, 0x7ff, 0x7fffffff, 0x4, 0x9}, {0xc1df, 0x7, 0x499, 0x1000, 0x8, 0x100}, {0x100, 0x3, 0x1ff, 0x6, 0x1, 0x6}, {0x3262, 0x474a, 0x10, 0x1b, 0x8, 0x7fff}, {0xffffffff, 0xe6, 0x0, 0xfff, 0x2, 0x8}, {0xfffffffe, 0xae7d, 0xbd15, 0x10, 0x5, 0x8}, {0x9, 0x8001, 0x6, 0x1ff, 0x2, 0x1000}, {0x9, 0x1, 0x9, 0x5, 0x75, 0x4}, {0x5, 0x10200000, 0x1, 0x10001, 0x3fb4, 0xb5e}, {0x9, 0xbca9, 0x10001, 0x9, 0x8000, 0x8}, {0x200, 0x5, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x4, 0x3, 0x7, 0x681e96f2}, {0x414, 0x5, 0x401, 0x3, 0xe, 0x37}, {0xb1e, 0x5, 0xfffffff6, 0x7, 0xd, 0x8}, {0x4, 0x929, 0x6b3d, 0x27e020c9, 0x3, 0x800000}, {0x8, 0x700, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x9d, 0x4, 0xd, 0x56d0}, {0x9, 0x77eb, 0x5, 0x6, 0x7fffffff, 0x35}, {0xecea, 0x80000001, 0x2, 0x4, 0x3fb, 0x7}, {0xcb9, 0x3, 0x41f8, 0x8, 0x7, 0x7}, {0xc, 0x3d7b, 0x6, 0x8, 0x3, 0x2}, {0x2, 0x800, 0xe04, 0x0, 0x10, 0x3}, {0x7, 0x6, 0x7fff, 0x9, 0x3, 0xc217}, {0x6, 0x38a8, 0x7, 0x9, 0xd, 0x4}, {0x9, 0x8, 0x2, 0x5, 0x95, 0x7}, {0x200, 0x5, 0x1, 0x3}, {0x401, 0x8000, 0x2522, 0x8, 0x9, 0x1}, {0x9, 0x6, 0x7ff, 0xfffffffb, 0x8, 0x3}, {0x1, 0x2, 0x8f, 0xf3800000, 0x80000000, 0x9}, {0x1, 0x4, 0x9, 0x8, 0x1, 0x2}, {0x10, 0x8, 0xfed, 0x1, 0xcd9, 0xff}, {0x2, 0x6, 0x7, 0x7f, 0xffff, 0xd}, {0xa9f, 0x7, 0x8, 0x8, 0x0, 0x5}, {0x8, 0x2, 0x9, 0x4, 0x2000, 0x9}, {0x100, 0x2, 0x6, 0x40}, {0x0, 0x6, 0x5, 0x1, 0x40, 0x5}, {0x2, 0x1, 0x6, 0x7, 0x1, 0xffffffff}, {0x7, 0x81, 0x8, 0x8, 0xfff, 0x81}, {0x8, 0xf, 0xb, 0x80000000, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x6, 0xa, 0x2}, {0x8, 0x101, 0x400, 0x5, 0x2, 0xf67d}, {0x8, 0x0, 0x6, 0x200000, 0x5, 0x9c66}, {0x800, 0x0, 0x9, 0x7, 0x6, 0x62}, {0x4, 0x7, 0x4, 0xb, 0x8, 0x8}, {0x9, 0x9, 0x1, 0xfff, 0xfffffffa, 0x5}, {0x5, 0x1000, 0x81, 0x80000001, 0x0, 0x80000000}, {0xe, 0x4, 0xff, 0xb757, 0x6, 0x669}, {0x2b, 0x5, 0x6, 0x0, 0x8, 0xe0000}, {0x6, 0xa, 0x8, 0xdc, 0x5, 0xe}, {0xfffffffc, 0x101, 0x6, 0x2, 0xcea3, 0x7fffffff}, {0x816, 0x80, 0xfffff37a, 0x8, 0x2, 0x7}, {0xe7a, 0x9, 0x52, 0x7, 0x100, 0x6}, {0x2, 0x845, 0x76fe, 0x1000, 0x7, 0x4}, {0x7, 0x6, 0x9, 0xfffffff8, 0x1, 0xa479}, {0x738, 0x36, 0x400, 0xd, 0x400}, {0x7, 0x767c, 0x0, 0x81, 0x4, 0x65ec}, {0x6, 0x62d5ed5b, 0xffff, 0x4, 0x6, 0x3ff}, {0x4, 0x7, 0x5, 0xc5c, 0x6, 0x9}, {0x0, 0xbbb, 0xe0d, 0x2, 0x2, 0x3}, {0x3, 0x0, 0x1, 0x1a3, 0x1, 0x6}, {0x7, 0x3, 0x5, 0x7, 0x4, 0x2}, {0x7f, 0x1, 0x4, 0x0, 0xffffffff, 0x6}, {0x7, 0x5d, 0x9, 0x2f1bd1fc, 0x3, 0x2}, {0x1, 0x1, 0x8, 0x4bf, 0xfffffffc, 0xfffffffe}, {0x4, 0x40, 0x2, 0x7f, 0x1, 0xffff}, {0x2, 0x8, 0x1, 0x0, 0x2, 0x3}, {0x0, 0x80000001, 0x6, 0x701, 0x3, 0x5}, {0x9, 0x0, 0x0, 0x3c1, 0xf, 0x2}, {0x4, 0x10, 0x1, 0x1, 0x452, 0x800}, {0x5308, 0x8, 0x9, 0x6, 0xf, 0x4}, {0xb9, 0x0, 0xcde4, 0x9be4, 0x80, 0x8}, {0x7, 0xa, 0x0, 0x7, 0x2, 0x7fffffff}, {0xd6d4, 0x1549, 0xffffffff, 0x0, 0xffffffc0, 0x2}, {0x7, 0x72f0, 0x10, 0x4, 0x1}, {0x5, 0x1, 0x4, 0x58cd, 0x2, 0x9a}, {0x6, 0x8000, 0x6, 0x7, 0x3f1, 0x2}, {0x2, 0xff1, 0x6441, 0x2, 0xb7f, 0xc3}, {0xfffffffc, 0x90, 0x0, 0x0, 0x31b1, 0x8}, {0x800, 0x5, 0x100, 0x0, 0xa, 0x5}, {0x4, 0xac, 0x1, 0x8001, 0x1000, 0x5}, {0x33a9, 0x0, 0xfffffff8, 0x39, 0x400, 0x6}, {0x7, 0x480000, 0x800, 0x1, 0x1, 0x400}, {0x1, 0x7, 0xf, 0xfffffffa, 0x4, 0x6}, {0x101, 0x3, 0x7, 0x47fb, 0x7ffffff7, 0x18b7}, {0xffff7fff, 0x1, 0x3, 0x75bd, 0x7f, 0x36a5}, {0x4, 0x600000, 0x4, 0x9, 0x5c5, 0xe98}, {0x6, 0xc, 0xfff, 0x5, 0x8000}, {0x6, 0xfffffffd, 0x9, 0x3c80, 0xe7, 0x10}, {0x5, 0x6, 0x5f, 0x8, 0xe, 0x2}, {0x7, 0x1, 0x5, 0x6, 0x7f}, {0x7, 0xb5cb, 0xffffffff, 0x0, 0x1ff, 0x180}, {0x8, 0x401, 0x31, 0x6, 0x4, 0x4}, {0xbe1, 0x4d1, 0x7, 0x7f, 0x7, 0xfffffff8}, {0x0, 0x3, 0x8, 0x4, 0x9014, 0x800}, {0x83, 0x7, 0x9, 0xc6, 0xfffffff7, 0x6}, {0x7f, 0x1, 0x380, 0x3, 0x0, 0x8}, {0x80000001, 0x5, 0x5, 0x9, 0x5, 0x3}, {0x4, 0x78, 0x1, 0x68, 0x5d6a, 0x3}], [{}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x473fa55f353b9f8f, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0xdfb49ec46723bfa7}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x7}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x6}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan1\x00'})
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0xf810, 0x8, 0xdbc, 0x101, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x23}}}}})
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @multicast2}, &(0x7f0000000200)=0xc)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @empty, @mcast1, [], "8029335287b7a081"}}}}}}}, 0x0)
recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0)
setsockopt$inet6_tcp_int(r4, 0x11a, 0x19, 0x0, 0x0)
r8 = socket(0x1e, 0x1, 0x0)
sendmmsg$sock(r8, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0)

0s ago: executing program 34 (id=5821):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000040)='GPL\x00'}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

ond3: (slave macvlan11): failed to get link speed/duplex
[  263.983553][T10538] bond3: (slave macvlan11): failed to get link speed/duplex
[  264.003573][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  264.059866][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3947'.
[  264.071591][T18699] netlink: 'syz.0.3948': attribute type 10 has an invalid length.
[  264.076947][T18699] netlink: 'syz.0.3948': attribute type 10 has an invalid length.
[  264.080508][T18696] bond1: (slave macvlan8): Error -98 calling set_mac_address
[  264.087729][T18699] bond3: option mode: unable to set because the bond device has slaves
[  264.094412][T18699] bond3: (slave macvlan12): Error -98 calling set_mac_address
[  264.113745][T10538] bond3: (slave macvlan11): failed to get link speed/duplex
[  264.136529][T18701] netlink: 'syz.1.3949': attribute type 10 has an invalid length.
[  264.206946][T18710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3952'.
[  264.224601][ T8802] bond3: (slave macvlan11): failed to get link speed/duplex
[  264.334331][ T5874] bond3: (slave macvlan11): failed to get link speed/duplex
[  264.365464][T18725] netlink: 'syz.1.3958': attribute type 10 has an invalid length.
[  264.368810][T18725] netlink: 'syz.1.3958': attribute type 10 has an invalid length.
[  264.372318][T18725] bond1: option mode: unable to set because the bond device has slaves
[  264.376448][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3956'.
[  264.381136][T18725] bond1: (slave macvlan8): Error -98 calling set_mac_address
[  264.453894][ T5718] bond3: (slave macvlan11): failed to get link speed/duplex
[  264.461551][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3960'.
[  264.564129][ T8802] bond3: (slave macvlan11): failed to get link speed/duplex
[  264.659253][T18753] openvswitch: netlink: IP tunnel dst address not specified
[  264.675135][ T5874] bond3: (slave macvlan11): failed to get link speed/duplex
[  264.681223][T18757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3969'.
[  264.784957][T18759] macsec1: entered promiscuous mode
[  264.786691][T18759] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  264.790251][T18759] macsec1: entered allmulticast mode
[  264.792423][T18759] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  264.855581][T18769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3970'.
[  264.858761][T18769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3970'.
[  265.075962][T18790] netlink: 'syz.0.3983': attribute type 4 has an invalid length.
[  265.079300][T18790] netlink: 'syz.0.3983': attribute type 4 has an invalid length.
[  265.086718][T18790] netlink: 'syz.0.3983': attribute type 5 has an invalid length.
[  265.089446][T18790] netlink: 'syz.0.3983': attribute type 6 has an invalid length.
[  265.123005][T18798] nbd: socks must be embedded in a SOCK_ITEM attr
[  265.186651][T18803] 8021q: VLANs not supported on ip6gre0
[  265.686387][   T11] block nbd0: Possible stuck request ffff888020a68000: control (read@0,4096B). Runtime 180 seconds
[  266.805546][T18887] bond1: option mode: unable to set because the bond device has slaves
[  266.816104][T18887] bond1: (slave macvlan8): Error -98 calling set_mac_address
[  266.958174][T18902] team0: Device ipvlan1 failed to register rx_handler
[  266.961504][T18902] tipc: Resetting bearer <eth:ipvlan1>
[  267.083240][T18906] bridge20: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  267.104750][T18909] IPVS: Error connecting to the multicast addr
[  267.108930][T18909] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  267.370771][T18935] 8021q: adding VLAN 0 to HW filter on device bond66
[  267.377745][T18935] bond65: (slave bond66): Enslaving as an active interface with an up link
[  267.398905][T18929] bond65 (unregistering): (slave bond66): Releasing backup interface
[  267.402950][T18929] bond65 (unregistering): Released all slaves
[  267.609905][T18954] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.662742][T18954] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.735607][T18954] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.780459][T18954] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.855856][ T8802] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  267.870578][ T8802] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  267.898165][ T8802] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  267.901989][ T8802] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  268.324854][T18985] 8021q: adding VLAN 0 to HW filter on device bond65
[  268.329346][T18987] tipc: Resetting bearer <eth:syzkaller0>
[  268.332186][T18987] syzkaller0: entered allmulticast mode
[  268.446226][T18995] __nla_validate_parse: 17 callbacks suppressed
[  268.446241][T18995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4050'.
[  268.582359][T19016] team0: Device ipvlan1 failed to register rx_handler
[  268.593222][T19016] tipc: Resetting bearer <eth:ipvlan1>
[  268.620129][T19012] 8021q: adding VLAN 0 to HW filter on device bond67
[  268.631699][T19012] vlan3: entered allmulticast mode
[  268.636623][T19012] bond67: (slave vlan3): Opening slave failed
[  268.736157][T19029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4058'.
[  268.898086][T19038] validate_nla: 11 callbacks suppressed
[  268.898132][T19038] netlink: 'syz.2.4061': attribute type 1 has an invalid length.
[  268.907137][T19038] netlink: 'syz.2.4061': attribute type 1 has an invalid length.
[  268.914000][T10538] net_ratelimit: 36 callbacks suppressed
[  268.914015][T10538] bond3: (slave macvlan11): failed to get link speed/duplex
[  268.999538][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4063'.
[  269.003299][T19041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4063'.
[  269.007803][T19041] netlink: 'syz.2.4063': attribute type 19 has an invalid length.
[  269.023998][   T13] bond3: (slave macvlan11): failed to get link speed/duplex
[  269.062627][T19050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4065'.
[  269.113793][T19052] netlink: 'syz.1.4066': attribute type 10 has an invalid length.
[  269.117852][T19052] netlink: 'syz.1.4066': attribute type 10 has an invalid length.
[  269.122295][T19052] bond1: option mode: unable to set because the bond device has slaves
[  269.136578][T19052] bond1: (slave macvlan8): Error -98 calling set_mac_address
[  269.164639][ T5874] bond3: (slave macvlan11): failed to get link speed/duplex
[  269.374363][ T5718] bond3: (slave macvlan11): failed to get link speed/duplex
[  269.484508][T10538] bond3: (slave macvlan11): failed to get link speed/duplex
[  269.596243][T10538] bond3: (slave macvlan11): failed to get link speed/duplex
[  269.626438][T19091] netlink: 'syz.2.4079': attribute type 12 has an invalid length.
[  269.628883][T19091] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4079'.
[  269.716194][T10538] bond3: (slave macvlan11): failed to get link speed/duplex
[  269.740683][T19101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4083'.
[  269.790308][T19105] dvmrp8: entered allmulticast mode
[  269.800706][T19104] dvmrp8: left allmulticast mode
[  269.823667][T10538] bond3: (slave macvlan11): failed to get link speed/duplex
[  269.895069][T19111] netlink: 'syz.1.4088': attribute type 10 has an invalid length.
[  269.934198][T10538] bond3: (slave macvlan11): failed to get link speed/duplex
[  270.002630][T19121] syzkaller1: entered promiscuous mode
[  270.005221][T19121] syzkaller1: entered allmulticast mode
[  270.063614][T10538] bond3: (slave macvlan11): failed to get link speed/duplex
[  270.175391][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4095'.
[  270.262575][T19141] netlink: 'syz.1.4098': attribute type 10 has an invalid length.
[  270.379457][T19152] netlink: 'syz.1.4102': attribute type 10 has an invalid length.
[  270.390321][T19152] netlink: 'syz.1.4102': attribute type 10 has an invalid length.
[  270.415426][T19152] bond1: (slave macvlan8): Error -98 calling set_mac_address
[  270.667771][T19163] netlink: 'syz.1.4104': attribute type 11 has an invalid length.
[  271.239957][T19197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4118'.
[  271.256574][T19201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.276944][T19201] tipc: Disabling bearer <eth:syzkaller0>
[  271.487272][T19220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4126'.
[  271.810878][T19238] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  272.139261][ T5874] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  272.143909][ T5874] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  272.147474][ T5874] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  272.150959][ T5874] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  272.270687][T19268] 8021q: adding VLAN 0 to HW filter on device bond31
[  273.278242][T19302] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.331107][T19302] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.379934][T19310] bridge0 (unregistering): left allmulticast mode
[  273.424818][T19302] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.488359][T19302] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.561787][ T5874] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  273.599199][ T5874] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  273.602577][ T5874] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  273.623536][ T5874] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  273.801105][T19345] __nla_validate_parse: 8 callbacks suppressed
[  273.801115][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4172'.
[  273.905710][T19353] bond68: entered promiscuous mode
[  273.907841][T19353] bond68: entered allmulticast mode
[  273.926417][ T8802] net_ratelimit: 33 callbacks suppressed
[  273.926429][ T8802] bond3: (slave macvlan11): failed to get link speed/duplex
[  274.074489][   T13] bond3: (slave macvlan11): failed to get link speed/duplex
[  274.144193][T19373] vlan3: entered promiscuous mode
[  274.146139][T19373] vlan3: entered allmulticast mode
[  274.148121][T19373] hsr_slave_1: entered allmulticast mode
[  274.194121][   T13] bond3: (slave macvlan11): failed to get link speed/duplex
[  274.206012][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4181'.
[  274.434597][   T13] bond3: (slave macvlan11): failed to get link speed/duplex
[  274.526631][T19391] validate_nla: 6 callbacks suppressed
[  274.526647][T19391] netlink: 'syz.0.4186': attribute type 1 has an invalid length.
[  274.534641][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4186'.
[  274.604592][ T5718] bond3: (slave macvlan11): failed to get link speed/duplex
[  274.677836][T19401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4190'.
[  274.714225][   T13] bond3: (slave macvlan11): failed to get link speed/duplex
[  274.761578][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4191'.
[  274.783293][T19410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4187'.
[  274.802935][T19410] ip6tnl5: entered promiscuous mode
[  274.807935][T19410] ip6tnl5: entered allmulticast mode
[  274.812940][T19410] team0: Device ip6tnl5 is up. Set it down before adding it as a team port
[  274.873853][ T5718] bond3: (slave macvlan11): failed to get link speed/duplex
[  274.919368][T19413] tipc: Resetting bearer <eth:syzkaller0>
[  274.924392][T19413] syzkaller0: left promiscuous mode
[  274.926629][T19413] syzkaller0: left allmulticast mode
[  274.973454][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.976391][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.979397][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.982620][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  275.006193][T19413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4192'.
[  275.010420][T19413] hsr_slave_0: left promiscuous mode
[  275.249492][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4196'.
[  275.451112][T19446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4203'.
[  275.566249][T19453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4205'.
[  275.599648][T19455] veth1_to_bond: entered allmulticast mode
[  275.642152][T19455] veth1_to_bond: left allmulticast mode
[  275.911799][T19468] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  276.678552][T19515] netlink: 'syz.1.4224': attribute type 1 has an invalid length.
[  277.436501][T19553] IPVS: Unknown mcast interface: vcan0
[  277.670727][T19564] netlink: 'syz.2.4241': attribute type 4 has an invalid length.
[  277.898802][T19588] netlink: 'syz.0.4251': attribute type 1 has an invalid length.
[  277.930938][T19588] 8021q: adding VLAN 0 to HW filter on device bond33
[  277.989900][T19602] netlink: 'syz.0.4256': attribute type 15 has an invalid length.
[  278.011332][T19604] syzkaller0: left allmulticast mode
[  278.090038][T19606] netlink: 'syz.1.4258': attribute type 3 has an invalid length.
[  278.090719][T19614] bond3: option mode: unable to set because the bond device has slaves
[  278.537625][T19649] tap0: tun_chr_ioctl cmd 1074025675
[  278.539993][T19649] tap0: persist disabled
[  278.723196][T19658] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:0
[  278.804421][T19660] netlink: 'syz.0.4275': attribute type 21 has an invalid length.
[  278.810930][T19660] ipvlan21: entered promiscuous mode
[  278.815572][T19660] bridge0: port 1(ipvlan21) entered blocking state
[  278.817990][T19660] bridge0: port 1(ipvlan21) entered disabled state
[  278.820303][T19660] ipvlan21: entered allmulticast mode
[  278.822145][T19660] erspan0: entered allmulticast mode
[  278.825556][T19660] ipvlan21: left allmulticast mode
[  278.827406][T19660] erspan0: left allmulticast mode
[  278.992546][T19664] __nla_validate_parse: 16 callbacks suppressed
[  278.992561][T19664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4277'.
[  279.044414][T19666] bridge21: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  279.126256][T19666] batadv_slave_0: entered promiscuous mode
[  279.130673][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4278'.
[  279.138032][T19666] netlink: 428 bytes leftover after parsing attributes in process `syz.0.4278'.
[  279.141772][T19666] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4278'.
[  279.279202][T19677] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  279.283038][T19678] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  279.297738][T19678] netlink: 'syz.1.4283': attribute type 1 has an invalid length.
[  279.301089][T19677] netlink: 'syz.1.4283': attribute type 1 has an invalid length.
[  279.384652][T19692] team0: Unable to change to the same mode the team is in
[  279.388265][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4287'.
[  279.392119][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4287'.
[  279.416385][T19692] macvlan0: entered promiscuous mode
[  279.467312][T19697] _Z`Ԁ@S: entered promiscuous mode
[  279.477439][T19700] netlink: 'syz.2.4290': attribute type 10 has an invalid length.
[  279.582936][T19714] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4294'.
[  279.591180][T19714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4294'.
[  279.723111][T19732] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  279.813057][T19744] openvswitch: netlink: IPv4 tunnel dst address is zero
[  279.829096][T19747] validate_nla: 64 callbacks suppressed
[  279.829110][T19747] netlink: 'syz.0.4301': attribute type 32 has an invalid length.
[  279.882313][T19757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4303'.
[  279.907243][T19757] bond69: (slave vxcan7): The slave device specified does not support setting the MAC address
[  279.912680][T19757] bond69: (slave vxcan7): Error -95 calling set_mac_address
[  279.970659][T19757] macvlan9: entered promiscuous mode
[  279.972668][T19757] macvlan9: entered allmulticast mode
[  279.976010][T19757] bond69: (slave macvlan9): Error -98 calling set_mac_address
[  280.117278][T19773] veth1_to_bond: entered allmulticast mode
[  280.136091][T19773] veth1_to_bond: left allmulticast mode
[  280.268023][T19782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4311'.
[  280.283669][T19782] 8021q: adding VLAN 0 to HW filter on device bond27
[  280.302285][T19782] 8021q: adding VLAN 0 to HW filter on device bond27
[  280.305194][T19782] bond27: (slave wireguard0): The slave device specified does not support setting the MAC address
[  280.309039][T19782] bond27: (slave wireguard0): Error -95 calling set_mac_address
[  280.537164][T19801] syzkaller0: entered promiscuous mode
[  280.539554][T19801] syzkaller0: entered allmulticast mode
[  281.537981][T19875] netlink: 'syz.1.4338': attribute type 1 has an invalid length.
[  281.542221][T19875] netlink: 'syz.1.4338': attribute type 1 has an invalid length.
[  281.779020][T19900] netlink: 'syz.1.4345': attribute type 58 has an invalid length.
[  281.971261][   T33] audit: type=1800 audit(1757434987.122:7): pid=19909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4348" name=CB dev="tmpfs" ino=6899 res=0 errno=0
[  282.258111][T19939] 8021q: adding VLAN 0 to HW filter on device bond70
[  282.832705][T19986] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  282.900351][T19990] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  282.906095][T19990] netlink: 'syz.1.4380': attribute type 1 has an invalid length.
[  282.937789][T19990] 8021q: adding VLAN 0 to HW filter on device bond71
[  282.946428][T19990] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.273045][T20019] netlink: 'syz.0.4391': attribute type 6 has an invalid length.
[  283.280085][T20019] netlink: 'syz.0.4391': attribute type 5 has an invalid length.
[  283.532616][T20036] netlink: 'syz.0.4397': attribute type 12 has an invalid length.
[  283.621214][T20042] syzkaller0: entered promiscuous mode
[  283.626748][T20042] syzkaller0: entered allmulticast mode
[  283.629555][T20042] tipc: Resetting bearer <eth:syzkaller0>
[  283.704490][T20053] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.708288][T20051] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (681207219)
[  283.712623][T20051] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  283.739828][T20057] netlink: 'syz.0.4405': attribute type 1 has an invalid length.
[  283.758691][T20055] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  283.772563][T20057] 8021q: adding VLAN 0 to HW filter on device bond34
[  283.946707][T20081] bond1: option mode: unable to set because the bond device has slaves
[  283.955734][T20081] bond1: (slave macvlan9): Error -98 calling set_mac_address
[  284.006638][T20088] __nla_validate_parse: 22 callbacks suppressed
[  284.006653][T20088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4414'.
[  284.015758][T20087] bond64: (slave erspan0): Releasing active interface
[  284.028432][T20087] bond0: (slave syz_tun): Releasing backup interface
[  284.054312][T20087] bond28: (slave geneve4): Releasing active interface
[  284.069648][T20087] bond0: (slave bond30): Releasing backup interface
[  284.081603][T20087] bond31: (slave bond32): Releasing backup interface
[  284.088854][T20087] bond32: left promiscuous mode
[  284.097321][T20087] bond1: (slave macvlan6): Releasing backup interface
[  284.187947][T20095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4417'.
[  284.388260][T20117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4424'.
[  284.421360][T20117] 8021q: adding VLAN 0 to HW filter on device bond72
[  284.439832][T20117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4424'.
[  284.497638][T20124] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.4425'.
[  284.599840][T20130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4428'.
[  284.801497][T20144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4433'.
[  284.808407][T20144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4433'.
[  284.883673][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  284.915098][T20151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4434'.
[  285.066636][T20163] netlink: 'syz.2.4440': attribute type 2 has an invalid length.
[  285.069852][T20163] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.4440'.
[  285.392501][T20183] netlink: 'syz.0.4446': attribute type 10 has an invalid length.
[  285.400841][T20183] netlink: 'syz.0.4446': attribute type 10 has an invalid length.
[  286.670696][T20199] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.747651][T20199] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.809368][T20199] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.895954][T20221] netlink: 'syz.1.4457': attribute type 3 has an invalid length.
[  286.923052][T20199] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.992401][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  287.012615][T10538] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  287.050102][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  287.059928][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  287.179545][T20248] netlink: 'syz.0.4464': attribute type 1 has an invalid length.
[  287.202280][T20248] 8021q: adding VLAN 0 to HW filter on device bond35
[  287.276238][T20254] _Z`Ԁ@S: entered promiscuous mode
[  287.726062][T20296] netlink: 'syz.0.4478': attribute type 10 has an invalid length.
[  287.764701][T20296] team0: Device ipvlan1 failed to register rx_handler
[  287.767820][T20296] tipc: Resetting bearer <eth:ipvlan1>
[  288.072662][T20327] netlink: 'syz.1.4489': attribute type 11 has an invalid length.
[  288.402512][T20363] netlink: 'syz.2.4498': attribute type 1 has an invalid length.
[  288.408061][T20363] netlink: 'syz.2.4498': attribute type 4 has an invalid length.
[  288.417000][T20349] netlink: 'syz.2.4498': attribute type 1 has an invalid length.
[  288.420992][T20349] netlink: 'syz.2.4498': attribute type 4 has an invalid length.
[  289.086779][T20411] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.158375][T20416] __nla_validate_parse: 20 callbacks suppressed
[  289.158386][T20416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4518'.
[  289.165332][T20416] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  289.198116][T20418] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4519'.
[  289.315755][T20426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4522'.
[  289.480247][T20431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4525'.
[  289.721661][T20452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4532'.
[  289.738912][T20452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4532'.
[  289.819414][T20457] team0: Device ipvlan1 failed to register rx_handler
[  289.825589][T20457] tipc: Resetting bearer <eth:ipvlan1>
[  289.859342][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4537'.
[  289.915606][T20469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4539'.
[  290.255035][T20506] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.4546'.
[  290.426249][T20519] validate_nla: 4 callbacks suppressed
[  290.426259][T20519] netlink: 'syz.2.4548': attribute type 30 has an invalid length.
[  290.431508][T20520] netlink: 'syz.2.4548': attribute type 30 has an invalid length.
[  290.601505][T20535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4552'.
[  291.671251][T20569] syzkaller0: left promiscuous mode
[  291.673026][T20569] syzkaller0: left allmulticast mode
[  291.729019][T20572] team0: Device gtp2 is up. Set it down before adding it as a team port
[  291.905851][T20586] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  291.953548][T20595] openvswitch: netlink: Multiple metadata blocks provided
[  292.018926][T20600] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  292.089067][T20606] erspan0: left allmulticast mode
[  292.112229][T20606] veth0_to_team: left promiscuous mode
[  292.115197][T20606] veth0_to_team: left allmulticast mode
[  292.123084][T20606] bridge1: left allmulticast mode
[  292.164038][T20606] bond7: left promiscuous mode
[  292.177520][T20606] bridge10: left allmulticast mode
[  292.182352][T20606] ip6erspan0: left allmulticast mode
[  292.202401][T20606] macvlan2: left promiscuous mode
[  292.206257][T20606] macvlan2: left allmulticast mode
[  292.212328][T20606] bridge14: left allmulticast mode
[  292.217060][T20606] bridge15: left allmulticast mode
[  292.220167][T20606] ip6gre2: left allmulticast mode
[  292.226934][T20606] bridge17: left promiscuous mode
[  292.231025][T20606] veth0_macvtap: left allmulticast mode
[  292.237292][T20606] macvtap1: left allmulticast mode
[  292.240341][T20606] veth5: left promiscuous mode
[  292.249309][T20606] gretap4: left promiscuous mode
[  292.259104][T20606] vlan2: left allmulticast mode
[  292.262518][T20606] ip6gretap0: left allmulticast mode
[  292.288761][T20606] bridge27: left promiscuous mode
[  292.291048][T20606] bridge27: left allmulticast mode
[  292.301730][T20606] ipvlan3: left allmulticast mode
[  292.304834][T20606] bond29: left allmulticast mode
[  292.317470][T20606] bond31: left promiscuous mode
[  292.382288][T20606] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  292.385632][T20606] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  292.388823][T20606] macsec1: left promiscuous mode
[  292.390975][T20606] macsec1: left allmulticast mode
[  292.413548][T20606] bond68: left promiscuous mode
[  292.415693][T20606] bond68: left allmulticast mode
[  292.423795][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  292.427360][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.430827][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  292.434842][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.447417][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  292.450852][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.455672][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  292.458897][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  293.070218][T20645] netlink: 'syz.1.4584': attribute type 9 has an invalid length.
[  293.107392][T20645] tipc: Enabling of bearer <et:g> rejected, media not registered
[  293.111028][T20645] netlink: 'syz.1.4584': attribute type 11 has an invalid length.
[  293.418283][T20684] lo speed is unknown, defaulting to 1000
[  293.420975][T20684] lo speed is unknown, defaulting to 1000
[  293.433002][T20684] lo speed is unknown, defaulting to 1000
[  293.448301][T20684] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  293.461380][T20684] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  293.511273][T20684] lo speed is unknown, defaulting to 1000
[  293.515319][T20684] lo speed is unknown, defaulting to 1000
[  293.519065][T20684] lo speed is unknown, defaulting to 1000
[  293.770852][T20719] lo speed is unknown, defaulting to 1000
[  293.844854][T10548] IPVS: ip_vs_send_async error -101
[  293.890867][T20730] IPv6: NLM_F_CREATE should be specified when creating new route
[  294.301825][T20770] sock: sock_timestamping_bind_phc: sock not bind to device
[  294.311795][T20766] lo speed is unknown, defaulting to 1000
[  294.421584][T20774] __nla_validate_parse: 14 callbacks suppressed
[  294.421598][T20774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4625'.
[  294.433569][T20774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4625'.
[  295.031844][T20791] netlink: 'syz.0.4629': attribute type 1 has an invalid length.
[  295.035825][T20791] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4629'.
[  295.041697][T20791] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  295.252900][T20797] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.305709][T20802] netlink: 'syz.0.4634': attribute type 1 has an invalid length.
[  295.308965][T20802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4634'.
[  295.315962][T20802] netlink: 'syz.0.4634': attribute type 7 has an invalid length.
[  295.319473][T20802] netlink: 'syz.0.4634': attribute type 8 has an invalid length.
[  295.322146][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4634'.
[  295.322345][T20806] netlink: 'syz.1.4636': attribute type 1 has an invalid length.
[  295.333920][T20804] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  295.334713][T20807] netlink: 'syz.1.4636': attribute type 1 has an invalid length.
[  295.369336][T20806] 8021q: adding VLAN 0 to HW filter on device bond73
[  295.377757][T20807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4636'.
[  295.379285][T20810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4636'.
[  295.385309][T20807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4636'.
[  295.389998][T20810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4636'.
[  295.422506][T20806] vlan3: entered allmulticast mode
[  295.560417][T20816] lo speed is unknown, defaulting to 1000
[  295.591034][T20823] syzkaller1: entered promiscuous mode
[  295.595995][T20823] syzkaller1: entered allmulticast mode
[  295.765881][   T11] block nbd0: Possible stuck request ffff888020a68000: control (read@0,4096B). Runtime 210 seconds
[  295.818486][T20836] lo speed is unknown, defaulting to 1000
[  296.190913][T20856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4649'.
[  296.198019][T20856] netlink: 'syz.2.4649': attribute type 12 has an invalid length.
[  296.203905][T20856] netlink: 'syz.2.4649': attribute type 12 has an invalid length.
[  296.658504][T20901] netlink: 'syz.1.4664': attribute type 1 has an invalid length.
[  296.685776][T20901] 8021q: adding VLAN 0 to HW filter on device bond74
[  296.766150][T20901] bond74: (slave veth13): Enslaving as an active interface with a down link
[  297.352910][T20936] bond0: option all_slaves_active: invalid value (46)
[  297.392519][T20940] netlink: 'syz.1.4679': attribute type 12 has an invalid length.
[  297.506769][T20946] 8021q: adding VLAN 0 to HW filter on device bond75
[  297.511167][T20946] bond0: (slave bond75): Enslaving as an active interface with a down link
[  297.759402][T20958] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  297.829506][T20962] netlink: 'syz.2.4687': attribute type 1 has an invalid length.
[  297.861130][T20962] bond28: entered promiscuous mode
[  297.863152][T20962] bond28: entered allmulticast mode
[  297.866970][T20962] 8021q: adding VLAN 0 to HW filter on device bond28
[  297.891926][T20962] bridge19: entered promiscuous mode
[  297.894872][T20962] bridge19: entered allmulticast mode
[  297.897630][T20962] bond28: (slave bridge19): Enslaving as a backup interface with an up link
[  297.975722][ T5874] bond28: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  298.007572][T20962] tipc: Resetting bearer <eth:syzkaller0>
[  298.042135][T20982] openvswitch: netlink: Tunnel attr 10 has unexpected len 1 expected 2
[  298.074517][T20962] erspan0: left allmulticast mode
[  298.106862][T10538] bond28: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  298.158043][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  298.161723][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  298.173288][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  298.177511][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  298.250529][T20990] netlink: 'syz.2.4694': attribute type 10 has an invalid length.
[  299.487903][T21060] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  299.522249][T21062] __nla_validate_parse: 16 callbacks suppressed
[  299.522265][T21062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4720'.
[  299.530965][T21062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4720'.
[  299.708166][T21072] block nbd2: Receive control failed (result -107)
[  299.723741][T21071] nbd2: detected capacity change from 0 to 32
[  300.097957][T21094] lo speed is unknown, defaulting to 1000
[  300.630933][T21129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4746'.
[  300.641752][T21129] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4746'.
[  300.664850][T21130] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  300.668446][T21130] CPU: 1 UID: 0 PID: 21130 Comm: syz.2.4744 Not tainted syzkaller #0 PREEMPT(full) 
[  300.668464][T21130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  300.668472][T21130] Call Trace:
[  300.668478][T21130]  <TASK>
[  300.668483][T21130]  dump_stack_lvl+0x189/0x250
[  300.668505][T21130]  ? __pfx_dump_stack_lvl+0x10/0x10
[  300.668520][T21130]  ? __pfx__printk+0x10/0x10
[  300.668541][T21130]  ? kernfs_path_from_node+0x2f/0x290
[  300.668563][T21130]  ? kernfs_path_from_node+0x250/0x290
[  300.668575][T21130]  ? kernfs_path_from_node+0x2f/0x290
[  300.668591][T21130]  sysfs_warn_dup+0x8e/0xa0
[  300.668605][T21130]  sysfs_do_create_link_sd+0xc0/0x110
[  300.668619][T21130]  device_add_class_symlinks+0x1cf/0x240
[  300.668637][T21130]  device_add+0x475/0xb50
[  300.668683][T21130]  wiphy_register+0x1ba6/0x28d0
[  300.668714][T21130]  ? __pfx_wiphy_register+0x10/0x10
[  300.668732][T21130]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  300.668753][T21130]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  300.668771][T21130]  ieee80211_register_hw+0x3484/0x4100
[  300.668797][T21130]  ? ieee80211_register_hw+0x1461/0x4100
[  300.668818][T21130]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  300.668835][T21130]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  300.668858][T21130]  ? __hrtimer_setup+0x187/0x210
[  300.668869][T21130]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  300.668888][T21130]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  300.668928][T21130]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  300.668943][T21130]  ? trace_kmalloc+0x1f/0xd0
[  300.668956][T21130]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  300.668972][T21130]  ? kstrndup+0xbf/0x160
[  300.668993][T21130]  hwsim_new_radio_nl+0xea4/0x1b10
[  300.669011][T21130]  ? __pfx___nla_validate_parse+0x10/0x10
[  300.669041][T21130]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  300.669066][T21130]  ? __nla_parse+0x40/0x60
[  300.669085][T21130]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  300.669107][T21130]  genl_family_rcv_msg_doit+0x215/0x300
[  300.669128][T21130]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  300.669152][T21130]  ? bpf_lsm_capable+0x9/0x20
[  300.669167][T21130]  ? security_capable+0x7e/0x2e0
[  300.669190][T21130]  genl_rcv_msg+0x60e/0x790
[  300.669209][T21130]  ? __pfx_genl_rcv_msg+0x10/0x10
[  300.669223][T21130]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  300.669250][T21130]  netlink_rcv_skb+0x208/0x470
[  300.669267][T21130]  ? __lock_acquire+0xab9/0xd20
[  300.669284][T21130]  ? __pfx_genl_rcv_msg+0x10/0x10
[  300.669300][T21130]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  300.669331][T21130]  ? down_read+0x1ad/0x2e0
[  300.669345][T21130]  genl_rcv+0x28/0x40
[  300.669358][T21130]  netlink_unicast+0x82f/0x9e0
[  300.669382][T21130]  ? __pfx_netlink_unicast+0x10/0x10
[  300.669399][T21130]  ? netlink_sendmsg+0x642/0xb30
[  300.669408][T21130]  ? skb_put+0x11b/0x210
[  300.669423][T21130]  netlink_sendmsg+0x805/0xb30
[  300.669443][T21130]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.669457][T21130]  ? aa_sock_msg_perm+0xf1/0x1d0
[  300.669471][T21130]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  300.669483][T21130]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.669495][T21130]  __sock_sendmsg+0x21c/0x270
[  300.669513][T21130]  ____sys_sendmsg+0x505/0x830
[  300.669530][T21130]  ? __pfx_____sys_sendmsg+0x10/0x10
[  300.669557][T21130]  ? import_iovec+0x74/0xa0
[  300.669574][T21130]  ___sys_sendmsg+0x21f/0x2a0
[  300.669588][T21130]  ? __pfx____sys_sendmsg+0x10/0x10
[  300.669624][T21130]  ? __fget_files+0x2a/0x420
[  300.669640][T21130]  ? __fget_files+0x3a0/0x420
[  300.669693][T21130]  __x64_sys_sendmsg+0x19b/0x260
[  300.669708][T21130]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  300.669728][T21130]  ? rcu_is_watching+0x15/0xb0
[  300.669743][T21130]  ? do_syscall_64+0xbe/0x3b0
[  300.669756][T21130]  do_syscall_64+0xfa/0x3b0
[  300.669765][T21130]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.669779][T21130]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.669791][T21130]  ? exc_page_fault+0x9f/0xf0
[  300.669807][T21130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.669819][T21130] RIP: 0033:0x7f5a88f8ebe9
[  300.669831][T21130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.669841][T21130] RSP: 002b:00007f5a89d81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  300.669855][T21130] RAX: ffffffffffffffda RBX: 00007f5a891c6090 RCX: 00007f5a88f8ebe9
[  300.669864][T21130] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  300.669871][T21130] RBP: 00007f5a89011e19 R08: 0000000000000000 R09: 0000000000000000
[  300.669879][T21130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.669886][T21130] R13: 00007f5a891c6128 R14: 00007f5a891c6090 R15: 00007ffe0fd6c4c8
[  300.669906][T21130]  </TASK>
[  300.915018][T21133] netlink: 'syz.0.4747': attribute type 10 has an invalid length.
[  300.919629][T21133] netlink: 'syz.0.4747': attribute type 10 has an invalid length.
[  300.926161][T21133] bond3: option mode: unable to set because the bond device has slaves
[  301.178738][T21154] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  301.348443][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4757'.
[  301.686287][T21191] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4768'.
[  301.753894][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4769'.
[  301.837013][T21201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4769'.
[  301.856302][T21201] bridge33: entered promiscuous mode
[  301.859037][T21201] macsec2: entered promiscuous mode
[  301.861268][T21201] macsec2: entered allmulticast mode
[  301.865195][T21201] bridge33: entered allmulticast mode
[  301.868824][T21201] bridge33: port 1(macsec2) entered blocking state
[  301.871802][T21201] bridge33: port 1(macsec2) entered disabled state
[  301.881027][T21201] bridge33: left allmulticast mode
[  301.883503][T21201] bridge33: left promiscuous mode
[  301.929393][T21207] bond0: (slave team0): Releasing backup interface
[  301.940613][T21207] tipc: Resetting bearer <eth:syzkaller0>
[  301.946882][T21207] bond3: (slave macvlan11): Removing an active aggregator
[  301.950546][T21207] bond3: (slave macvlan11): Releasing backup interface
[  301.964660][T21207] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  302.015041][T21207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4772'.
[  302.028714][T21211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4773'.
[  302.391448][T21228] netlink: 'syz.2.4779': attribute type 10 has an invalid length.
[  302.867568][T21258] lo speed is unknown, defaulting to 1000
[  302.941279][T21263] lo speed is unknown, defaulting to 1000
[  302.999789][T21270] openvswitch: netlink: IP tunnel dst address not specified
[  303.509747][T21314] netlink: 'syz.2.4807': attribute type 6 has an invalid length.
[  304.040923][T21355] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  304.056450][T21355] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  304.166525][T21363] netlink: 'syz.0.4822': attribute type 1 has an invalid length.
[  304.203155][T21363] bond38: (slave vxcan7): The slave device specified does not support setting the MAC address
[  304.210191][T21363] bond38: (slave vxcan7): Error -95 calling set_mac_address
[  304.693272][T21378] __nla_validate_parse: 18 callbacks suppressed
[  304.693285][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4827'.
[  304.789949][T21387] veth12: entered allmulticast mode
[  304.867946][T21393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4831'.
[  304.942279][T21400] lo speed is unknown, defaulting to 1000
[  305.751531][T21425] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  305.756127][T21427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4840'.
[  305.762080][T21425] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4839'.
[  305.773565][T21425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4839'.
[  305.815777][T21431] netlink: 'syz.2.4843': attribute type 10 has an invalid length.
[  305.939740][T21444] geneve0: entered promiscuous mode
[  305.942008][T21444] geneve0: entered allmulticast mode
[  306.047940][T21451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4850'.
[  306.150480][T21465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4856'.
[  306.198065][T21470] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  306.374397][T21486] lo speed is unknown, defaulting to 1000
[  306.410912][T21485] delete_channel: no stack
[  306.442063][T21495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4865'.
[  306.609023][T21506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.614059][T21507] syzkaller0: entered promiscuous mode
[  306.616013][T21507] syzkaller0: entered allmulticast mode
[  306.641080][T21514] 8021q: adding VLAN 0 to HW filter on device macvlan13
[  306.648079][T21514] bond3: (slave macvlan13): Enslaving as a backup interface with a down link
[  306.658719][T21514] tipc: Resetting bearer <eth:syzkaller0>
[  306.670187][T21514] bond3: (slave macvlan13): Releasing backup interface
[  306.689089][T21503] tipc: Resetting bearer <eth:syzkaller0>
[  306.700328][T21503] tipc: Disabling bearer <eth:syzkaller0>
[  306.757914][T21521] netlink: 'syz.2.4873': attribute type 10 has an invalid length.
[  306.792555][T21526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4872'.
[  306.801780][T21519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4872'.
[  307.053687][T21545] Unsupported ieee802154 address type: 0
[  307.550473][T21600] netlink: 'syz.1.4902': attribute type 1 has an invalid length.
[  307.580410][T21600] bond76: entered promiscuous mode
[  307.582640][T21600] bond76: entered allmulticast mode
[  307.587101][T21600] 8021q: adding VLAN 0 to HW filter on device bond76
[  307.602839][T21600] bridge34: entered promiscuous mode
[  307.604983][T21600] bridge34: entered allmulticast mode
[  307.607293][T21600] bond76: (slave bridge34): Enslaving as a backup interface with an up link
[  307.717200][T21608] netlink: 'syz.1.4904': attribute type 9 has an invalid length.
[  307.734847][T21609] netlink: 'syz.1.4904': attribute type 9 has an invalid length.
[  308.437282][T21645] netlink: 'syz.1.4919': attribute type 7 has an invalid length.
[  308.673167][T21655] lo speed is unknown, defaulting to 1000
[  309.449602][T21715] vlan7: entered promiscuous mode
[  309.944628][T21740] netlink: 'syz.0.4950': attribute type 7 has an invalid length.
[  310.116686][T21744] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  310.319709][T21758] __nla_validate_parse: 14 callbacks suppressed
[  310.319724][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4957'.
[  310.394174][T21761] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  310.398383][T21762] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  310.598547][T21777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4964'.
[  310.609603][T21777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4964'.
[  310.626707][T21777] netlink: 'syz.0.4964': attribute type 15 has an invalid length.
[  310.633958][T21777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4964'.
[  310.641188][T21777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4964'.
[  310.649075][T21777] netlink: 'syz.0.4964': attribute type 15 has an invalid length.
[  310.708760][T21789] bond29: entered promiscuous mode
[  310.733976][T21784] lo speed is unknown, defaulting to 1000
[  310.825380][T21793] lo speed is unknown, defaulting to 1000
[  311.042194][T21816] lo speed is unknown, defaulting to 1000
[  311.171003][T21826] lo speed is unknown, defaulting to 1000
[  311.605085][T21870] netlink: 'syz.1.4984': attribute type 1 has an invalid length.
[  311.660158][T21870] 8021q: adding VLAN 0 to HW filter on device bond78
[  311.667124][T21881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4986'.
[  311.679783][T21871] veth15: entered promiscuous mode
[  311.690534][T21871] bond78: (slave veth15): Enslaving as an active interface with a down link
[  311.694799][T21870] erspan0: entered allmulticast mode
[  311.699406][T21870] bond78: (slave erspan0): making interface the new active one
[  311.702992][T21870] erspan0: entered promiscuous mode
[  311.705277][T21870] bond78: (slave erspan0): Enslaving as an active interface with an up link
[  311.761844][T21886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4988'.
[  311.807011][T21896] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.922995][T21906] netlink: 'syz.2.4990': attribute type 2 has an invalid length.
[  311.934075][T21906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  312.138747][T21921] netlink: 'syz.2.4993': attribute type 7 has an invalid length.
[  312.190013][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4995'.
[  312.310573][T21933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4997'.
[  312.551410][T21939] lo speed is unknown, defaulting to 1000
[  313.038740][T21955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5004'.
[  313.100317][T21955] bond79: (slave vxcan9): The slave device specified does not support setting the MAC address
[  313.118928][T21955] bond79: (slave vxcan9): Error -95 calling set_mac_address
[  313.168648][T21963] macvlan10: entered promiscuous mode
[  313.170881][T21963] macvlan10: entered allmulticast mode
[  313.187348][T21963] bond79: (slave macvlan10): Error -98 calling set_mac_address
[  313.224994][T21967] validate_nla: 2 callbacks suppressed
[  313.225008][T21967] netlink: 'syz.0.5006': attribute type 12 has an invalid length.
[  313.318072][T21974] netlink: 'syz.1.5009': attribute type 58 has an invalid length.
[  313.417439][T21980] netlink: 'syz.1.5012': attribute type 1 has an invalid length.
[  314.250696][T22008] veth1_virt_wifi: entered allmulticast mode
[  314.969554][T22034] lo speed is unknown, defaulting to 1000
[  315.033200][T22038] nbd: must specify a size in bytes for the device
[  315.038065][T22038] nbd: must specify an index to disconnect
[  315.149126][T22039] syzkaller1: entered promiscuous mode
[  315.151479][T22039] syzkaller1: entered allmulticast mode
[  315.449642][T22058] __nla_validate_parse: 6 callbacks suppressed
[  315.449659][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5037'.
[  315.457830][T22058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5037'.
[  315.462740][T22058] netlink: 'syz.1.5037': attribute type 15 has an invalid length.
[  315.472727][T22058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5037'.
[  315.505959][T22060] lo speed is unknown, defaulting to 1000
[  315.995948][T22115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5056'.
[  316.059024][T22125] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5059'.
[  316.125163][T22131] @0: renamed from bond_slave_1
[  316.637800][ T5874] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  316.665085][T22158] netlink: 'syz.0.5070': attribute type 9 has an invalid length.
[  316.705441][T22168] netlink: 'syz.0.5071': attribute type 1 has an invalid length.
[  316.794644][T22170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  316.797850][T22170] IPv6: NLM_F_CREATE should be set when creating new route
[  316.800917][T22170] IPv6: NLM_F_CREATE should be set when creating new route
[  316.806608][T22170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  317.312206][T22186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5075'.
[  317.331211][T22187] netlink: 'syz.2.5075': attribute type 4 has an invalid length.
[  317.334887][T22186] netlink: 'syz.2.5075': attribute type 4 has an invalid length.
[  317.426196][T22195] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5078'.
[  317.482149][T22202] sock: sock_timestamping_bind_phc: sock not bind to device
[  317.610332][T22212] netlink: 'syz.1.5084': attribute type 12 has an invalid length.
[  317.613961][T22212] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5084'.
[  317.657602][T22214] lo speed is unknown, defaulting to 1000
[  317.808789][T22214] netlink: 'syz.2.5085': attribute type 2 has an invalid length.
[  318.091429][T22243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5090'.
[  318.323585][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  318.510133][T22274] netlink: 'syz.2.5101': attribute type 1 has an invalid length.
[  318.748004][T22284] lo speed is unknown, defaulting to 1000
[  318.779719][T22288] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5107'.
[  318.796305][T22288] bridge_slave_1: default FDB implementation only supports local addresses
[  318.814148][T22288] lo speed is unknown, defaulting to 1000
[  318.969954][T22301] netlink: 'syz.0.5110': attribute type 5 has an invalid length.
[  319.298486][T22315] syz_tun: refused to change device tx_queue_len
[  319.484846][T22323] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  319.505494][T22323] CPU: 0 UID: 0 PID: 22323 Comm: syz.2.5118 Not tainted syzkaller #0 PREEMPT(full) 
[  319.505517][T22323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  319.505525][T22323] Call Trace:
[  319.505539][T22323]  <TASK>
[  319.505544][T22323]  dump_stack_lvl+0x189/0x250
[  319.505568][T22323]  ? __pfx_dump_stack_lvl+0x10/0x10
[  319.505584][T22323]  ? __pfx__printk+0x10/0x10
[  319.505604][T22323]  ? kernfs_path_from_node+0x2f/0x290
[  319.505616][T22323]  ? kernfs_path_from_node+0x250/0x290
[  319.505627][T22323]  ? kernfs_path_from_node+0x2f/0x290
[  319.505641][T22323]  sysfs_warn_dup+0x8e/0xa0
[  319.505655][T22323]  sysfs_do_create_link_sd+0xc0/0x110
[  319.505670][T22323]  device_add_class_symlinks+0x1cf/0x240
[  319.505687][T22323]  device_add+0x475/0xb50
[  319.505704][T22323]  wiphy_register+0x1ba6/0x28d0
[  319.505734][T22323]  ? __pfx_wiphy_register+0x10/0x10
[  319.505749][T22323]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  319.505767][T22323]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  319.505784][T22323]  ieee80211_register_hw+0x3484/0x4100
[  319.505807][T22323]  ? ieee80211_register_hw+0x1461/0x4100
[  319.505829][T22323]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  319.505845][T22323]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  319.505866][T22323]  ? __hrtimer_setup+0x187/0x210
[  319.505877][T22323]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  319.505894][T22323]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  319.505935][T22323]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  319.505951][T22323]  ? trace_kmalloc+0x1f/0xd0
[  319.505965][T22323]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  319.505980][T22323]  ? kstrndup+0xbf/0x160
[  319.506000][T22323]  hwsim_new_radio_nl+0xea4/0x1b10
[  319.506017][T22323]  ? __pfx___nla_validate_parse+0x10/0x10
[  319.506043][T22323]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  319.506069][T22323]  ? __nla_parse+0x40/0x60
[  319.506088][T22323]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  319.506110][T22323]  genl_family_rcv_msg_doit+0x215/0x300
[  319.506130][T22323]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  319.506154][T22323]  ? bpf_lsm_capable+0x9/0x20
[  319.506169][T22323]  ? security_capable+0x7e/0x2e0
[  319.506189][T22323]  genl_rcv_msg+0x60e/0x790
[  319.506208][T22323]  ? __pfx_genl_rcv_msg+0x10/0x10
[  319.506220][T22323]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  319.506243][T22323]  netlink_rcv_skb+0x208/0x470
[  319.506258][T22323]  ? __lock_acquire+0xab9/0xd20
[  319.506275][T22323]  ? __pfx_genl_rcv_msg+0x10/0x10
[  319.506288][T22323]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  319.506320][T22323]  ? down_read+0x1ad/0x2e0
[  319.506334][T22323]  genl_rcv+0x28/0x40
[  319.506346][T22323]  netlink_unicast+0x82f/0x9e0
[  319.506370][T22323]  ? __pfx_netlink_unicast+0x10/0x10
[  319.506417][T22323]  ? netlink_sendmsg+0x642/0xb30
[  319.506427][T22323]  ? skb_put+0x11b/0x210
[  319.506444][T22323]  netlink_sendmsg+0x805/0xb30
[  319.506463][T22323]  ? __pfx_netlink_sendmsg+0x10/0x10
[  319.506478][T22323]  ? aa_sock_msg_perm+0xf1/0x1d0
[  319.506490][T22323]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  319.506504][T22323]  ? __pfx_netlink_sendmsg+0x10/0x10
[  319.506515][T22323]  __sock_sendmsg+0x21c/0x270
[  319.506541][T22323]  ____sys_sendmsg+0x505/0x830
[  319.506558][T22323]  ? __pfx_____sys_sendmsg+0x10/0x10
[  319.506578][T22323]  ? import_iovec+0x74/0xa0
[  319.506596][T22323]  ___sys_sendmsg+0x21f/0x2a0
[  319.506611][T22323]  ? __pfx____sys_sendmsg+0x10/0x10
[  319.506653][T22323]  ? __fget_files+0x2a/0x420
[  319.506669][T22323]  ? __fget_files+0x3a0/0x420
[  319.506693][T22323]  __x64_sys_sendmsg+0x19b/0x260
[  319.506709][T22323]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  319.506735][T22323]  ? do_syscall_64+0xbe/0x3b0
[  319.506748][T22323]  do_syscall_64+0xfa/0x3b0
[  319.506756][T22323]  ? lockdep_hardirqs_on+0x9c/0x150
[  319.506773][T22323]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.506784][T22323]  ? exc_page_fault+0x9f/0xf0
[  319.506803][T22323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.506814][T22323] RIP: 0033:0x7f5a88f8ebe9
[  319.506827][T22323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.506837][T22323] RSP: 002b:00007f5a89da2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.506850][T22323] RAX: ffffffffffffffda RBX: 00007f5a891c5fa0 RCX: 00007f5a88f8ebe9
[  319.506860][T22323] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  319.506868][T22323] RBP: 00007f5a89011e19 R08: 0000000000000000 R09: 0000000000000000
[  319.506874][T22323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.506881][T22323] R13: 00007f5a891c6038 R14: 00007f5a891c5fa0 R15: 00007ffe0fd6c4c8
[  319.506901][T22323]  </TASK>
[  320.396423][T22368] netlink: 'syz.1.5134': attribute type 10 has an invalid length.
[  320.950822][T22408] __nla_validate_parse: 2 callbacks suppressed
[  320.950837][T22408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5146'.
[  321.009003][T22412] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  321.016590][T22412] bond1: (slave macvlan1): Enslaving as a backup interface with a down link
[  321.024892][T22412] bond1: (slave macvlan6): Releasing backup interface
[  321.027218][T22412] bond1: (slave macvlan6): the permanent HWaddr of slave - ee:0d:ed:b3:4c:85 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  321.035806][T22412] bond28: (slave bridge19): Removing an active aggregator
[  321.038800][T22412] bond28: (slave bridge19): Releasing backup interface
[  321.042099][T22412] bridge19: left promiscuous mode
[  321.045440][T22412] bridge19: left allmulticast mode
[  321.048168][T22412] bond1: (slave macvlan1): Releasing backup interface
[  321.053620][T22412] netlink: 'syz.2.5148': attribute type 1 has an invalid length.
[  321.112927][T22415] netlink: 'syz.1.5149': attribute type 10 has an invalid length.
[  321.127702][T22415] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  321.274338][T22423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5152'.
[  321.278974][T22423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5152'.
[  321.346969][T22426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5153'.
[  321.546413][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5157'.
[  321.590074][T22441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5159'.
[  321.632440][T22442] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.638745][T22442] syzkaller0: entered promiscuous mode
[  321.639848][T22444] netlink: 'syz.0.5160': attribute type 64 has an invalid length.
[  321.641113][T22442] syzkaller0: entered allmulticast mode
[  321.660054][T22442] tipc: Resetting bearer <eth:syzkaller0>
[  321.667695][T22440] tipc: Resetting bearer <eth:syzkaller0>
[  321.679310][T22440] tipc: Disabling bearer <eth:syzkaller0>
[  321.760966][T22446] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  321.772569][T22446] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5161'.
[  321.778614][T22446] netlink: 'syz.2.5161': attribute type 1 has an invalid length.
[  321.799883][T22446] 8021q: adding VLAN 0 to HW filter on device bond32
[  321.882786][T22462] netlink: 'syz.2.5166': attribute type 10 has an invalid length.
[  321.976132][T22466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5169'.
[  322.014658][T22471] lo speed is unknown, defaulting to 1000
[  322.103055][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5170'.
[  322.266999][T22494] netlink: 'syz.0.5173': attribute type 10 has an invalid length.
[  322.271285][T22494] team0: Device ipvlan1 failed to register rx_handler
[  322.279393][T22494] tipc: Resetting bearer <eth:ipvlan1>
[  322.508439][T22504] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  322.529723][T22504] bond39: entered promiscuous mode
[  322.531878][T22504] bond39: entered allmulticast mode
[  322.536211][T22504] 8021q: adding VLAN 0 to HW filter on device bond39
[  322.572023][T22510] netlink: 'syz.0.5180': attribute type 10 has an invalid length.
[  322.578602][T22510] team0: Device ipvlan1 failed to register rx_handler
[  322.581161][T22510] tipc: Resetting bearer <eth:ipvlan1>
[  322.963790][   T13] erspan0: left promiscuous mode
[  322.972689][T22534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5188'.
[  323.777118][T22580] lo speed is unknown, defaulting to 1000
[  324.471865][T22615] netlink: 'syz.2.5214': attribute type 1 has an invalid length.
[  324.481131][T22615] bridge22: entered promiscuous mode
[  324.483934][T22615] bridge22: entered allmulticast mode
[  324.502228][T22618] netlink: 'syz.1.5215': attribute type 13 has an invalid length.
[  324.516696][T22618] netlink: 'syz.1.5215': attribute type 17 has an invalid length.
[  324.540088][T22618] erspan0: left allmulticast mode
[  324.558950][T22618] syz_tun: entered promiscuous mode
[  324.590398][   T13] bond0: (slave dummy0): interface is now down
[  324.596692][T22618] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.605516][T22618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  324.613675][ T5874] bond0: (slave dummy0): interface is now down
[  324.625749][ T5874] bond0: now running without any active interface!
[  324.647736][T22623] lo speed is unknown, defaulting to 1000
[  324.805793][T22630] 8021q: adding VLAN 0 to HW filter on device bond34
[  325.106059][T22641] netlink: 'syz.0.5220': attribute type 12 has an invalid length.
[  325.132137][T22642] lo: entered promiscuous mode
[  325.136902][T22642] tunl0: entered promiscuous mode
[  325.139334][T22642] gre0: entered promiscuous mode
[  325.141500][T22642] gretap0: entered promiscuous mode
[  325.146374][T22642] ip_vti0: entered promiscuous mode
[  325.148628][T22642] ip6_vti0: entered promiscuous mode
[  325.150948][T22642] sit0: entered promiscuous mode
[  325.152939][T22642] ip6tnl0: entered promiscuous mode
[  325.154770][T22642] ip6gre0: entered promiscuous mode
[  325.156505][T22642] ip6gretap0: entered promiscuous mode
[  325.158339][T22642] !: entered promiscuous mode
[  325.159899][T22642] nlmon0: entered promiscuous mode
[  325.161745][T22642] caif0: entered promiscuous mode
[  325.163696][T22642] batadv0: entered promiscuous mode
[  325.165740][T22642] vxcan0: entered promiscuous mode
[  325.167449][T22642] vxcan1: entered promiscuous mode
[  325.169406][T22642] veth0: entered promiscuous mode
[  325.171380][T22642] veth1: entered promiscuous mode
[  325.173464][T22642] wg0: entered promiscuous mode
[  325.175531][T22642] wg1: entered promiscuous mode
[  325.177188][T22642] wg2: entered promiscuous mode
[  325.179170][T22642] veth0_to_bridge: entered promiscuous mode
[  325.181457][T22642] bridge_slave_0: entered promiscuous mode
[  325.184372][T22642] veth1_to_bridge: entered promiscuous mode
[  325.186414][T22642] bridge_slave_1: entered promiscuous mode
[  325.188502][T22642] veth0_to_bond: entered promiscuous mode
[  325.190479][T22642] bond_slave_0: entered promiscuous mode
[  325.192425][T22642] veth1_to_bond: entered promiscuous mode
[  325.195038][T22642] @0: entered promiscuous mode
[  325.196885][T22642] veth0_to_team: left allmulticast mode
[  325.198968][T22642] team_slave_0: entered promiscuous mode
[  325.201068][T22642] veth1_to_team: entered promiscuous mode
[  325.203261][T22642] team_slave_1: entered promiscuous mode
[  325.205984][T22642] veth0_to_batadv: entered promiscuous mode
[  325.208499][T22642] batadv_slave_0: entered promiscuous mode
[  325.210581][T22642] batadv_slave_0: left allmulticast mode
[  325.212896][T22642] veth1_to_batadv: entered promiscuous mode
[  325.215794][T22642] batadv_slave_1: entered promiscuous mode
[  325.217919][T22642] xfrm0: entered promiscuous mode
[  325.220130][T22642] veth0_to_hsr: entered promiscuous mode
[  325.222772][T22642] veth1_to_hsr: entered promiscuous mode
[  325.225538][T22642] hsr0: entered promiscuous mode
[  325.227428][T22642] veth1_virt_wifi: entered promiscuous mode
[  325.229595][T22642] veth0_virt_wifi: entered promiscuous mode
[  325.232238][T22642] macvtap0: entered promiscuous mode
[  325.234555][T22642] macsec0: entered promiscuous mode
[  325.236407][T22642] geneve1: entered promiscuous mode
[  325.238959][T22642] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  325.241953][T22642] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  325.245332][T22642] vlan2: entered promiscuous mode
[  325.247624][T22642] gretap1: entered promiscuous mode
[  325.249792][T22642] bond1: entered promiscuous mode
[  325.251562][T22642] vxcan2: entered promiscuous mode
[  325.254510][T22642] vxcan3: entered promiscuous mode
[  325.256661][T22642] @: entered promiscuous mode
[  325.258702][T22642] bond2: entered promiscuous mode
[  325.261264][T22642] ip6erspan0: entered promiscuous mode
[  325.264514][T22642] bond3: entered promiscuous mode
[  325.266815][T22642] tipc: Resetting bearer <eth:syzkaller0>
[  325.269564][T22642] syzkaller0: left allmulticast mode
[  325.272199][T22642] batadv0.5: entered promiscuous mode
[  325.277075][T22642] pim6reg: entered promiscuous mode
[  325.279882][T22642] bond5: entered promiscuous mode
[  325.282131][T22642] veth2: entered promiscuous mode
[  325.285109][T22642] veth3: entered promiscuous mode
[  325.287413][T22642] ipip0: entered promiscuous mode
[  325.289720][T22642] bridge1: entered promiscuous mode
[  325.291982][T22642] ip6tnl1: entered promiscuous mode
[  325.294599][T22642] ip6erspan1: entered promiscuous mode
[  325.297022][T22642] vlan3: entered promiscuous mode
[  325.299417][T22642] veth4: entered promiscuous mode
[  325.301726][T22642] veth5: entered promiscuous mode
[  325.304745][T22642] vxcan4: entered promiscuous mode
[  325.309154][T22642] vxcan5: entered promiscuous mode
[  325.311913][T22642] bridge2: entered promiscuous mode
[  325.314436][T22642] gtp0: entered promiscuous mode
[  325.316621][T22642] veth1_to_hsr.1: entered promiscuous mode
[  325.319042][T22642] geneve2: left allmulticast mode
[  325.321435][T22642] veth6: entered promiscuous mode
[  325.327244][T22642] veth7: entered promiscuous mode
[  325.329633][T22642] ipip1: entered promiscuous mode
[  325.333687][T22642] dvmrp0: entered promiscuous mode
[  325.335682][T22642] xfrm1: entered promiscuous mode
[  325.337374][T22642] xfrm1: left allmulticast mode
[  325.339370][T22642] veth8: entered promiscuous mode
[  325.341838][T22642] bridge3: entered promiscuous mode
[  325.349274][T22642] bridge3: left allmulticast mode
[  325.351746][T22642] macvlan2: entered promiscuous mode
[  325.354428][T22642] bridge4: entered promiscuous mode
[  325.356889][T22642] geneve3: left allmulticast mode
[  325.358819][T22642] bond6: entered promiscuous mode
[  325.360989][T22642] tun0: entered promiscuous mode
[  325.366470][T22642] bridge5: entered promiscuous mode
[  325.368532][T22642] bridge5: left allmulticast mode
[  325.370671][T22642] vti0: entered promiscuous mode
[  325.372913][T22642] ip6tnl2: entered promiscuous mode
[  325.375460][T22642] bond7: entered promiscuous mode
[  325.377714][T22642] bridge6: entered promiscuous mode
[  325.380640][T22642] team1: left allmulticast mode
[  325.382749][T22642] ip6_vti1: entered promiscuous mode
[  325.386973][T22642] ip6gre1: entered promiscuous mode
[  325.389012][T22642] bond8: entered promiscuous mode
[  325.390922][T22642] gretap2: entered promiscuous mode
[  325.393076][T22642] ip6_vti2: entered promiscuous mode
[  325.395731][T22642] bond9: entered promiscuous mode
[  325.397917][T22642] gre1: entered promiscuous mode
[  325.399976][T22642] bond10: entered promiscuous mode
[  325.402141][T22642] gretap3: entered promiscuous mode
[  325.408095][T22642] gretap3: left allmulticast mode
[  325.410523][T22642] bond11: left allmulticast mode
[  325.412917][T22642] gre2: entered promiscuous mode
[  325.415364][T22642] bond12: entered promiscuous mode
[  325.417779][T22642] ipvlan10: entered promiscuous mode
[  325.420161][T22642] ipvlan10: left allmulticast mode
[  325.422491][T22642] gretap0: left allmulticast mode
[  325.428179][T22642] gretap4: entered promiscuous mode
[  325.430803][T22642] vlan4: left allmulticast mode
[  325.433044][T22642] bond0: left allmulticast mode
[  325.436200][T22642] bond13: entered promiscuous mode
[  325.438565][T22642] geneve4: entered promiscuous mode
[  325.441028][T22642] bond14: entered promiscuous mode
[  325.443459][T22642] macvlan5: entered promiscuous mode
[  325.445938][T22642] bond15: entered promiscuous mode
[  325.448393][T22642] ip6tnl3: entered promiscuous mode
[  325.450863][T22642] macvlan6: entered promiscuous mode
[  325.452974][T22642] mac80211_hwsim hwsim5 nicvf0: entered promiscuous mode
[  325.459136][T22642] veth0_to_bond.2: entered promiscuous mode
[  325.461968][T22642] bond17: entered promiscuous mode
[  325.464391][T22642] ip6tnl4: entered promiscuous mode
[  325.466667][T22642] macsec2: entered promiscuous mode
[  325.469102][T22642] gretap5: entered promiscuous mode
[  325.471511][T22642] bond18: entered promiscuous mode
[  325.477468][T22642] vlan5: left allmulticast mode
[  325.479625][T22642] bond19: left allmulticast mode
[  325.481928][T22642] vxcan6: entered promiscuous mode
[  325.485140][T22642] vxcan7: entered promiscuous mode
[  325.487648][T22642] gre3: entered promiscuous mode
[  325.489990][T22642] bridge8: entered promiscuous mode
[  325.492403][T22642] gre4: entered promiscuous mode
[  325.498139][T22642] macvtap0.4: entered promiscuous mode
[  325.500808][T22642] bond20: entered promiscuous mode
[  325.503244][T22642] vxcan8: entered promiscuous mode
[  325.505728][T22642] vxcan9: entered promiscuous mode
[  325.508152][T22642] mac80211_hwsim hwsim32 wlan2: entered promiscuous mode
[  325.511399][T22642] ip6gre2: entered promiscuous mode
[  325.517257][T22642] erspan1: entered promiscuous mode
[  325.519643][T22642] bridge9: entered promiscuous mode
[  325.522040][T22642] bridge10: entered promiscuous mode
[  325.524694][T22642] macvtap1: left allmulticast mode
[  325.527014][T22642] 9: entered promiscuous mode
[  325.529074][T22642] bridge11: entered promiscuous mode
[  325.531508][T22642] bridge12: entered promiscuous mode
[  325.537084][T22642] bond21: entered promiscuous mode
[  325.539494][T22642] ip6gretap1: entered promiscuous mode
[  325.542042][T22642] bond22: entered promiscuous mode
[  325.546011][T22642] geneve0: entered promiscuous mode
[  325.548830][T22642] bond23: entered promiscuous mode
[  325.551493][T22642] mac80211_hwsim hwsim35 wlan3: entered promiscuous mode
[  325.557969][T22642] pimreg: entered promiscuous mode
[  325.560420][T22642] veth10: entered promiscuous mode
[  325.562820][T22642] veth11: entered promiscuous mode
[  325.565353][T22642] bridge13: entered promiscuous mode
[  325.567725][T22642] bridge14: entered promiscuous mode
[  325.569983][T22642] bridge14: left allmulticast mode
[  325.572362][T22642] gtp1: entered promiscuous mode
[  325.578117][T22642] bridge15: entered promiscuous mode
[  325.580681][T22642] bridge16: entered promiscuous mode
[  325.583115][T22642] bridge17: entered promiscuous mode
[  325.585757][T22642] bond24: entered promiscuous mode
[  325.588168][T22642] syztnl0: entered promiscuous mode
[  325.590541][T22642] bond25: entered promiscuous mode
[  325.592871][T22642] bond26: entered promiscuous mode
[  325.598559][T22642] mac80211_hwsim hwsim37 wlan4: entered promiscuous mode
[  325.601705][T22642] ;: entered promiscuous mode
[  325.604233][T22642] vlan0003: entered promiscuous mode
[  325.606781][T22642] bridge0: entered promiscuous mode
[  325.609125][T22642] ip6gretap2: entered promiscuous mode
[  325.612315][T22642] bridge18: entered promiscuous mode
[  325.617121][T22642] mac80211_hwsim hwsim7 sy: entered promiscuous mode
[  325.620096][T22642] bond27: entered promiscuous mode
[  325.622453][T22642] gtp2: entered promiscuous mode
[  325.625164][T22642] gre5: entered promiscuous mode
[  325.627602][T22642] ip6gre3: entered promiscuous mode
[  325.630037][T22642] bond28: left allmulticast mode
[  325.632379][T22642] bridge19: entered promiscuous mode
[  325.639862][T22642] bridge20: entered promiscuous mode
[  325.644023][T22642] gretap6: entered promiscuous mode
[  325.646285][T22642] vxlan0: entered promiscuous mode
[  325.648418][T22642] bond30: entered promiscuous mode
[  325.650570][T22642] vxcan10: entered promiscuous mode
[  325.652594][T22642] vxcan11: entered promiscuous mode
[  325.656867][T22642] vxcan12: entered promiscuous mode
[  325.658772][T22642] vxcan13: entered promiscuous mode
[  325.660929][T22642] bridge21: entered promiscuous mode
[  325.663064][T22642] B: entered promiscuous mode
[  325.664779][T22642] macvlan1: entered promiscuous mode
[  325.666683][T22642] bond31: entered promiscuous mode
[  325.668536][T22642] ip6tnl5: entered promiscuous mode
[  325.672552][T22642] bond32: entered promiscuous mode
[  325.677547][T22642] netdevsim netdevsim2 eth0: entered promiscuous mode
[  325.679984][T22642] netdevsim netdevsim2 eth1: entered promiscuous mode
[  325.682526][T22642] netdevsim netdevsim2 eth2: entered promiscuous mode
[  325.685746][T22642] netdevsim netdevsim2 eth3: entered promiscuous mode
[  325.688837][T22642] bond33: entered promiscuous mode
[  325.699405][T22642] bond34: entered promiscuous mode
[  325.847998][   T11] block nbd0: Possible stuck request ffff888020a68000: control (read@0,4096B). Runtime 240 seconds
[  325.987506][ T8802] tipc: Subscription rejected, illegal request
[  326.180389][T22680] __nla_validate_parse: 12 callbacks suppressed
[  326.180399][T22680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5231'.
[  326.188519][T22680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5231'.
[  326.408206][T22688] syzkaller1: entered promiscuous mode
[  326.410453][T22688] syzkaller1: entered allmulticast mode
[  326.419002][T22688] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  326.423128][T22688] netlink: 'syz.1.5235': attribute type 21 has an invalid length.
[  326.427337][T22688] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5235'.
[  326.430643][T22688] netlink: 'syz.1.5235': attribute type 5 has an invalid length.
[  326.437321][T22688] netlink: 'syz.1.5235': attribute type 6 has an invalid length.
[  326.440248][T22688] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5235'.
[  326.724478][T22705] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001
[  326.827960][T22708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5243'.
[  326.831158][T22708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5243'.
[  326.898657][T22710] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.917637][T22710] syzkaller0: entered promiscuous mode
[  326.944122][T22710] syzkaller0: entered allmulticast mode
[  326.964766][T22711] tipc: Resetting bearer <eth:syzkaller0>
[  326.980555][T22711] tipc: Disabling bearer <eth:syzkaller0>
[  327.209239][T22731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  327.212362][T22731] syzkaller0: entered promiscuous mode
[  327.214828][T22731] syzkaller0: entered allmulticast mode
[  327.226865][T22731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5250'.
[  327.231639][T22731] tipc: Resetting bearer <eth:syzkaller0>
[  327.240793][T22730] tipc: Resetting bearer <eth:syzkaller0>
[  327.251816][T22730] tipc: Disabling bearer <eth:syzkaller0>
[  327.466848][T22740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5253'.
[  327.757964][T22758] netlink: 'syz.1.5258': attribute type 1 has an invalid length.
[  327.761185][T22758] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5258'.
[  327.837147][T22773] netlink: 'syz.0.5260': attribute type 29 has an invalid length.
[  328.012712][T22793] netlink: 'syz.1.5266': attribute type 2 has an invalid length.
[  328.030550][T22793] k*]: entered promiscuous mode
[  328.050324][T22793] veth0_to_team: entered promiscuous mode
[  328.052346][T22793] veth0_to_team: entered allmulticast mode
[  328.293212][T22812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5274'.
[  328.348966][T22816] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  328.472537][T22818] lo speed is unknown, defaulting to 1000
[  328.550676][T22830] syzkaller1: entered promiscuous mode
[  328.553000][T22830] syzkaller1: entered allmulticast mode
[  328.819376][T22845] lo speed is unknown, defaulting to 1000
[  328.970568][ T8802] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  328.983720][ T8802] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  328.988065][ T8802] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  328.996431][ T8802] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  329.058001][   T33] audit: type=1804 audit(1757435034.212:8): pid=22868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5290" name="/newroot/1678/memory.events" dev="tmpfs" ino=8537 res=1 errno=0
[  329.078272][   T33] audit: type=1800 audit(1757435034.222:9): pid=22868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5290" name="memory.events" dev="tmpfs" ino=8537 res=0 errno=0
[  329.365462][T22891] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  329.368944][T22891] syzkaller0: entered allmulticast mode
[  329.619265][T22910] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  329.635841][T22910] mac80211_hwsim hwsim5 wlan0: Caught tx_queue_len zero misconfig
[  330.036857][T22942] validate_nla: 4 callbacks suppressed
[  330.036872][T22942] netlink: 'syz.2.5319': attribute type 10 has an invalid length.
[  330.150815][T22948] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  330.283669][T22954] lo speed is unknown, defaulting to 1000
[  330.710009][T22963] syzkaller0: entered promiscuous mode
[  330.712350][T22963] syzkaller0: entered allmulticast mode
[  330.717011][T22964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  330.722489][T22962] tipc: Resetting bearer <eth:syzkaller0>
[  332.079235][T22962] tipc: Disabling bearer <eth:syzkaller0>
[  332.160250][T22986] lo speed is unknown, defaulting to 1000
[  332.398378][T23010] __nla_validate_parse: 22 callbacks suppressed
[  332.398392][T23010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5340'.
[  332.512019][T23011] syzkaller1: entered promiscuous mode
[  332.523445][T23011] syzkaller1: entered allmulticast mode
[  332.549029][T23018] netlink: 'syz.0.5342': attribute type 10 has an invalid length.
[  332.579420][T23018] team0: Device ipvlan1 failed to register rx_handler
[  332.581966][T23018] tipc: Resetting bearer <eth:ipvlan1>
[  332.731829][T23035] bond0: (slave dummy0): Releasing backup interface
[  332.742114][T23035] batman_adv: batadv0: Adding interface: dummy0
[  332.750807][T23035] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.762017][T23035] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  332.866982][T23050] netlink: 'syz.0.5352': attribute type 10 has an invalid length.
[  332.962938][T23058] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5354'.
[  332.967122][T23058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5354'.
[  332.971043][T23058] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5354'.
[  332.978145][T23058] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5354'.
[  333.054633][T23062] netlink: 'syz.1.5356': attribute type 7 has an invalid length.
[  333.058003][T23062] netlink: 'syz.1.5356': attribute type 8 has an invalid length.
[  333.061435][T23062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5356'.
[  333.132881][T23064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5357'.
[  333.277788][T23066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5358'.
[  333.371708][T23068] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5359'.
[  333.817394][T23095] lo speed is unknown, defaulting to 1000
[  333.982372][T23109] lo speed is unknown, defaulting to 1000
[  334.026946][T23111] netlink: 'syz.0.5369': attribute type 1 has an invalid length.
[  334.030199][T23111] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5369'.
[  334.833779][T23151] chnl_net:caif_netlink_parms(): no params data found
[  334.989574][T23116] delete_channel: no stack
[  335.163627][T23170] lo speed is unknown, defaulting to 1000
[  335.180964][T23178] lo speed is unknown, defaulting to 1000
[  335.242287][T23183] syzkaller1: entered promiscuous mode
[  335.244913][T23183] syzkaller1: entered allmulticast mode
[  335.858387][T23226] netlink: 'syz.2.5400': attribute type 30 has an invalid length.
[  335.877800][ T5718] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  335.889797][ T5718] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  335.898370][ T5718] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  335.909303][ T5718] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  336.227870][T23260] netlink: 'syz.0.5410': attribute type 58 has an invalid length.
[  336.640740][T23296] dvmrp8: entered allmulticast mode
[  336.647212][T23295] dvmrp8: left allmulticast mode
[  336.874261][T23315] vlan7: entered promiscuous mode
[  336.876157][T23315] syzkaller0: entered promiscuous mode
[  336.887107][T23321] lo speed is unknown, defaulting to 1000
[  336.999810][T23330] netlink: 'syz.0.5430': attribute type 1 has an invalid length.
[  337.032307][T23330] bond42: (slave geneve0): making interface the new active one
[  337.036905][T23330] bond42: (slave geneve0): Enslaving as an active interface with an up link
[  337.039842][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  337.043655][T10538] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  337.047365][T10538] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  337.050658][T10538] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  337.334703][T10538] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  337.338455][T10538] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  337.365238][    T9] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  337.528515][T23354] __nla_validate_parse: 83 callbacks suppressed
[  337.528526][T23354] netlink: 732 bytes leftover after parsing attributes in process `syz.0.5442'.
[  337.534414][T23354] netlink: 732 bytes leftover after parsing attributes in process `syz.0.5442'.
[  337.753158][T23375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5449'.
[  337.885346][    T9] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  338.006946][    T9] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  338.119660][T23399] lo speed is unknown, defaulting to 1000
[  338.138403][T23402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5459'.
[  338.232637][T23406] netlink: 'syz.2.5460': attribute type 3 has an invalid length.
[  338.419988][T23415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5464'.
[  339.067497][T23450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5475'.
[  339.076479][T23452] netlink: 'syz.0.5476': attribute type 1 has an invalid length.
[  339.119796][T23452] 8021q: adding VLAN 0 to HW filter on device bond43
[  339.127331][T23452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5476'.
[  339.169176][T23452] veth31: entered promiscuous mode
[  339.182082][T23452] erspan0: entered allmulticast mode
[  339.252948][T23460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5479'.
[  339.295982][T23460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5479'.
[  339.297712][T23466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5480'.
[  339.307562][T23460] netlink: 'syz.1.5479': attribute type 11 has an invalid length.
[  339.381152][T23460] syzkaller1: entered promiscuous mode
[  339.384187][T23460] syzkaller1: entered allmulticast mode
[  339.655219][T23499] netlink: 'syz.1.5490': attribute type 1 has an invalid length.
[  339.750325][T23502] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6
[  339.755729][T23502] gretap6: entered promiscuous mode
[  339.883036][T23509] netlink: 'syz.0.5496': attribute type 1 has an invalid length.
[  340.067937][T23522] lo speed is unknown, defaulting to 1000
[  340.271557][T23540] netlink: 'syz.1.5504': attribute type 5 has an invalid length.
[  340.286540][T23540] netlink: 'syz.1.5504': attribute type 7 has an invalid length.
[  340.310624][T23540] : entered promiscuous mode
[  340.593947][T23565] lo speed is unknown, defaulting to 1000
[  340.709825][T23581] netlink: 'syz.1.5516': attribute type 1 has an invalid length.
[  340.812921][T23590] syzkaller1: entered promiscuous mode
[  340.817368][T23590] syzkaller1: entered allmulticast mode
[  340.845859][T23587] lo speed is unknown, defaulting to 1000
[  340.963800][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  341.161680][T23612] sock: sock_timestamping_bind_phc: sock not bind to device
[  341.602968][T23647] lo speed is unknown, defaulting to 1000
[  341.818179][T23658] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  341.821624][T23658] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  341.928202][T23658] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  341.932388][T23658] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  342.012241][T23658] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.021533][T23658] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  342.095726][T23658] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.099286][T23658] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  342.210377][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  342.217172][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  342.232701][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  342.239721][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  342.259533][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  342.262640][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  342.281253][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  342.284982][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  342.481726][T23701] netlink: 'syz.0.5553': attribute type 4 has an invalid length.
[  342.599420][T23709] __nla_validate_parse: 29 callbacks suppressed
[  342.599429][T23709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5557'.
[  342.932089][T23731] netlink: 'syz.2.5566': attribute type 3 has an invalid length.
[  342.936971][T23731] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5566'.
[  343.010501][T23736] netlink: 'syz.2.5567': attribute type 21 has an invalid length.
[  343.018030][T23736] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5567'.
[  343.021166][T23736] netlink: 'syz.2.5567': attribute type 5 has an invalid length.
[  343.024399][T23736] netlink: 'syz.2.5567': attribute type 6 has an invalid length.
[  343.027298][T23736] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5567'.
[  343.157360][T23747] netlink: 'syz.1.5571': attribute type 1 has an invalid length.
[  343.160609][T23747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5571'.
[  343.224342][T23751] veth1_to_team: Caught tx_queue_len zero misconfig
[  343.295451][T23758] TCP: TCP_TX_DELAY enabled
[  343.420945][T23770] netlink: 'syz.2.5576': attribute type 1 has an invalid length.
[  343.429201][T23771] netlink: 'syz.2.5576': attribute type 1 has an invalid length.
[  343.456454][T23770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5576'.
[  343.463131][T23770] 8021q: adding VLAN 0 to HW filter on device bond35
[  343.477971][T23777] netlink: 'syz.0.5579': attribute type 30 has an invalid length.
[  343.502130][T23780] netlink: 'syz.2.5580': attribute type 1 has an invalid length.
[  343.507691][T23781] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5578'.
[  343.510721][T23781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5578'.
[  343.519396][T23780] 8021q: adding VLAN 0 to HW filter on device bond36
[  343.533154][T23780] veth13: entered promiscuous mode
[  343.554275][T23780] erspan0: entered allmulticast mode
[  343.563724][T23784] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.570444][T23784] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  343.587948][T23781] lo speed is unknown, defaulting to 1000
[  343.639089][T23784] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.642681][T23784] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  343.688741][T23784] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.692837][T23784] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  343.752094][T23784] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.756307][T23784] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  343.830649][T10538] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.837397][T10538] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  343.850695][ T8802] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.856460][ T8802] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  343.877567][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.886228][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  343.898156][ T8802] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  343.901735][ T8802] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  344.169985][T23821] lo speed is unknown, defaulting to 1000
[  344.236474][T23825] lo speed is unknown, defaulting to 1000
[  344.400366][T23830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5592'.
[  344.550812][T23841] 8021q: adding VLAN 0 to HW filter on device bond84
[  344.590891][T23842] bond84: (slave veth17): Enslaving as an active interface with a down link
[  344.650681][T23854] lo speed is unknown, defaulting to 1000
[  344.651680][T23856] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5599'.
[  344.908057][T23870] lo speed is unknown, defaulting to 1000
[  345.053633][T23886] wg1: Caught tx_queue_len zero misconfig
[  345.615860][T23929] lo speed is unknown, defaulting to 1000
[  345.828611][T23941] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  346.075380][T23957] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:19998
[  346.581546][T23994] 8021q: adding VLAN 0 to HW filter on device bond1
[  346.605672][T23994] bond78: (slave erspan0): Releasing active interface
[  346.616828][T23994] batman_adv: batadv0: Removing interface: dummy0
[  346.621850][T23994] bond74: (slave veth13): Releasing active interface
[  346.627985][T23994] bond0: (slave bond75): Releasing backup interface
[  346.632677][T23994] bond76: (slave bridge34): Releasing backup interface
[  346.639942][T23994] bridge34: left promiscuous mode
[  346.642527][T23994] bridge34: left allmulticast mode
[  346.648620][T23994] bond78: (slave veth15): Releasing active interface
[  346.658214][T23994] bond84: (slave veth17): Releasing active interface
[  346.738465][T24001] 8021q: adding VLAN 0 to HW filter on device bond85
[  346.856445][T24014] lo speed is unknown, defaulting to 1000
[  347.135952][T24027] IPv6: sit1: Disabled Multicast RS
[  347.805034][T24079] validate_nla: 9 callbacks suppressed
[  347.805048][T24079] netlink: 'syz.1.5667': attribute type 1 has an invalid length.
[  347.809720][T24079] netlink: 'syz.1.5667': attribute type 4 has an invalid length.
[  347.812575][T24079] __nla_validate_parse: 18 callbacks suppressed
[  347.812582][T24079] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5667'.
[  347.818655][T24079] netlink: 'syz.1.5667': attribute type 1 has an invalid length.
[  347.847605][T24079] bond86: (slave vxcan9): The slave device specified does not support setting the MAC address
[  347.852196][T24079] bond86: (slave vxcan9): Error -95 calling set_mac_address
[  347.913681][T24061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  347.957101][T24087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5669'.
[  348.132485][T24110] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5676'.
[  348.189018][T24116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5679'.
[  348.193010][T24116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5679'.
[  348.199892][T24116] netlink: 'syz.0.5679': attribute type 15 has an invalid length.
[  348.203144][T24116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5679'.
[  348.210634][T24116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5679'.
[  348.218385][T24116] netlink: 'syz.0.5679': attribute type 15 has an invalid length.
[  348.243596][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  348.325443][T24141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5685'.
[  348.367119][T24143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5686'.
[  348.380069][T24137] lo speed is unknown, defaulting to 1000
[  348.392166][T24145] bond37: entered promiscuous mode
[  348.395162][T24145] 8021q: adding VLAN 0 to HW filter on device bond37
[  348.536902][T24164] netlink: 'syz.2.5691': attribute type 1 has an invalid length.
[  348.539532][T24164] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5691'.
[  348.557579][T24162] vlan9: entered promiscuous mode
[  348.559271][T24162] bridge0: entered promiscuous mode
[  348.781096][T24188] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  348.828724][T24199] netlink: 'syz.2.5701': attribute type 58 has an invalid length.
[  349.270676][T24237] netlink: 'syz.0.5713': attribute type 1 has an invalid length.
[  349.307518][T24237] 8021q: adding VLAN 0 to HW filter on device bond46
[  350.075400][T24257] netlink: 'syz.1.5719': attribute type 32 has an invalid length.
[  350.078718][T24257] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  350.318503][T24276] netlink: 'syz.0.5723': attribute type 21 has an invalid length.
[  350.708316][T24306] sctp: [Deprecated]: syz.1.5733 (pid 24306) Use of struct sctp_assoc_value in delayed_ack socket option.
[  350.708316][T24306] Use struct sctp_sack_info instead
[  350.752863][T24308] ip6gre3: entered allmulticast mode
[  351.039138][T24341] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.144148][ T5894] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  351.354195][ T5894] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  351.557614][T24396] delete_channel: no stack
[  351.872967][T24417] geneve0: entered promiscuous mode
[  351.878297][T24417] geneve0: entered allmulticast mode
[  351.880969][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  351.884328][ T5907] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  351.888817][ T5907] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  351.892445][ T5907] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  352.922974][T24489] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  352.966077][T24489] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  352.971684][T24486] __nla_validate_parse: 27 callbacks suppressed
[  352.971693][T24486] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5786'.
[  353.010136][T24489] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.040814][T24491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5788'.
[  353.046076][T24491] pim6reg: left allmulticast mode
[  353.048397][T24491] bridge0: left allmulticast mode
[  353.068232][T24489] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.132654][T24493] tipc: MTU too low for tipc bearer
[  353.234493][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  353.245478][ T5907] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  353.260962][ T5907] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  353.274887][ T5907] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  353.313651][T24496] netlink: 67 bytes leftover after parsing attributes in process `syz.1.5790'.
[  353.316791][T24496] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5790'.
[  353.360247][T24501] validate_nla: 5 callbacks suppressed
[  353.360262][T24501] netlink: 'syz.1.5793': attribute type 83 has an invalid length.
[  353.481823][T24516] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5797'.
[  353.512557][T24520] netlink: 'syz.1.5798': attribute type 1 has an invalid length.
[  353.542451][T24520] 8021q: adding VLAN 0 to HW filter on device bond88
[  353.550786][T24520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5798'.
[  353.558061][T24525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5800'.
[  353.623100][T24530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5802'.
[  353.743307][T24534] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  353.752097][T24534] macvlan3: entered promiscuous mode
[  353.758219][T24534] bond1: (slave macvlan3): Enslaving as a backup interface with a down link
[  353.768165][T24534] bond1: (slave macvlan3): Releasing backup interface
[  353.774087][T24534] macvlan3: left promiscuous mode
[  353.781506][T24537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5805'.
[  353.788284][T24537] smc: net device bond0 applied user defined pnetid SYZ
[  353.794045][   T47] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  353.798145][T24537] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.5805'.
[  353.818192][T24537] lo speed is unknown, defaulting to 1000
[  354.031385][T24562] netlink: 'syz.2.5810': attribute type 10 has an invalid length.
[  354.178964][T24552] bond1: left promiscuous mode
[  354.181046][T24552] 8021q: adding VLAN 0 to HW filter on device bond1
[  354.202005][T24559] 8021q: adding VLAN 0 to HW filter on device bond1
[  354.206027][T24559] bond1: (slave vxcan17): The slave device specified does not support setting the MAC address
[  354.213085][T24559] bond1: (slave vxcan17): Error -95 calling set_mac_address
[  354.403800][ T5894] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  354.441511][T24579] syzkaller1: entered promiscuous mode
[  354.443840][T24579] syzkaller1: entered allmulticast mode
[  354.650431][T24594] bond38: (slave vxcan17): The slave device specified does not support setting the MAC address
[  354.656363][T24594] bond38: (slave vxcan17): Error -95 calling set_mac_address
[  354.709312][T24608] netlink: 'syz.1.5825': attribute type 1 has an invalid length.
[  354.726924][T24608] 8021q: adding VLAN 0 to HW filter on device bond89
[  354.742944][T24608] bond89: (slave veth21): Enslaving as an active interface with a down link
[  354.757130][T24610] bridge26: the hash_elasticity option has been deprecated and is always 16
[  354.761313][T24610] bridge26: entered allmulticast mode
[  354.778098][T24611] macvlan4: entered promiscuous mode
[  354.780429][T24611] macvlan4: entered allmulticast mode
[  354.783147][T24611] bond38: (slave macvlan4): Error -98 calling set_mac_address
[  355.203949][T10548] IPVS: ip_vs_send_async error -101
[  355.923939][   T11] block nbd0: Possible stuck request ffff888020a68000: control (read@0,4096B). Runtime 270 seconds
[  362.333712][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  370.228279][T24631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  370.238747][T24631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  370.242762][T24631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  370.248004][T24631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  370.264160][T24634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  370.271515][T24637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  370.285964][T24637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  370.301269][T24638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  370.307913][T24638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  370.314809][T24639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  370.320130][T24639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  370.323040][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  370.328414][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  370.334608][T24639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  370.338444][T24631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  370.361410][T24629] lo speed is unknown, defaulting to 1000
[  370.385153][T24633] lo speed is unknown, defaulting to 1000
[  370.411030][T24632] lo speed is unknown, defaulting to 1000
[  370.651961][T24629] chnl_net:caif_netlink_parms(): no params data found
[  370.657251][T24633] chnl_net:caif_netlink_parms(): no params data found
[  370.716140][T24632] chnl_net:caif_netlink_parms(): no params data found
[  370.830512][T24633] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.839356][T24633] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.842460][T24633] bridge_slave_0: entered allmulticast mode
[  370.847141][T24633] bridge_slave_0: entered promiscuous mode
[  370.857492][T24629] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.860479][T24629] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.864536][T24629] bridge_slave_0: entered allmulticast mode
[  370.868583][T24629] bridge_slave_0: entered promiscuous mode
[  370.874142][T24633] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.877385][T24633] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.880497][T24633] bridge_slave_1: entered allmulticast mode
[  370.884839][T24633] bridge_slave_1: entered promiscuous mode
[  370.907980][T24629] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.911016][T24629] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.915219][T24629] bridge_slave_1: entered allmulticast mode
[  370.919178][T24629] bridge_slave_1: entered promiscuous mode
[  370.948094][T24632] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.951107][T24632] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.954757][T24632] bridge_slave_0: entered allmulticast mode
[  370.958735][T24632] bridge_slave_0: entered promiscuous mode
[  370.988526][T24632] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.991512][T24632] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.995111][T24632] bridge_slave_1: entered allmulticast mode
[  370.999040][T24632] bridge_slave_1: entered promiscuous mode
[  371.005290][T24629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.012813][T24633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.044427][T24629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.050481][T24633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.056990][T24632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.089969][T24632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.136221][T24629] team0: Port device team_slave_0 added
[  371.140185][T24632] team0: Port device team_slave_0 added
[  371.144643][T24633] team0: Port device team_slave_0 added
[  371.149772][T24629] team0: Port device team_slave_1 added
[  371.154979][T24633] team0: Port device team_slave_1 added
[  371.159073][T24632] team0: Port device team_slave_1 added
[  371.240629][T24629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.244719][T24629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.255129][T24629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.260673][T24633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.264878][T24633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.273253][T24633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.282642][T24633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.285880][T24633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.295609][T24633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.300336][T24632] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.302777][T24632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.313128][T24632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.318361][T24629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.321207][T24629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.332602][T24629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.344839][T24632] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.347323][T24632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.360220][T24632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.428579][T24633] hsr_slave_0: entered promiscuous mode
[  371.431998][T24633] hsr_slave_1: entered promiscuous mode
[  371.435893][T24633] debugfs: 'hsr0' already exists in 'hsr'
[  371.438358][T24633] Cannot create hsr debugfs directory
[  371.488136][T24629] hsr_slave_0: entered promiscuous mode
[  371.491512][T24629] hsr_slave_1: entered promiscuous mode
[  371.494985][T24629] debugfs: 'hsr0' already exists in 'hsr'
[  371.497478][T24629] Cannot create hsr debugfs directory
[  371.506557][T24632] hsr_slave_0: entered promiscuous mode
[  371.509994][T24632] hsr_slave_1: entered promiscuous mode
[  371.513061][T24632] debugfs: 'hsr0' already exists in 'hsr'
[  371.516036][T24632] Cannot create hsr debugfs directory
[  372.323799][T24639] Bluetooth: hci3: command tx timeout
[  372.403890][T24639] Bluetooth: hci5: command tx timeout
[  372.403962][T24631] Bluetooth: hci4: command tx timeout
[  374.413730][T24631] Bluetooth: hci3: command tx timeout
[  374.483742][T24631] Bluetooth: hci4: command tx timeout
[  374.483818][T24639] Bluetooth: hci5: command tx timeout
[  376.483793][T24639] Bluetooth: hci3: command tx timeout
[  376.563626][T24639] Bluetooth: hci4: command tx timeout
[  376.573826][T24639] Bluetooth: hci5: command tx timeout
[  378.563817][T24639] Bluetooth: hci3: command tx timeout
[  378.643868][T24639] Bluetooth: hci5: command tx timeout
[  378.645700][T24639] Bluetooth: hci4: command tx timeout
[  386.003672][   T11] block nbd0: Possible stuck request ffff888020a68000: control (read@0,4096B). Runtime 300 seconds
[  390.483787][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  414.483638][  T794] page_pool_release_retry() stalled pool shutdown: id 84, 3329 inflight 60 sec
[  416.093704][   T11] block nbd0: Possible stuck request ffff888020a68000: control (read@0,4096B). Runtime 330 seconds
[  430.143298][T24631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  430.148012][T24631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  430.151548][T24631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  430.155592][T24631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  430.158457][T24631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  430.180115][T24660] lo speed is unknown, defaulting to 1000
[  430.262919][T24660] chnl_net:caif_netlink_parms(): no params data found
[  430.306616][T24660] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.309001][T24660] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.311387][T24660] bridge_slave_0: entered allmulticast mode
[  430.314198][T24660] bridge_slave_0: entered promiscuous mode
[  430.317249][T24660] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.319523][T24660] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.321799][T24660] bridge_slave_1: entered allmulticast mode
[  430.324783][T24660] bridge_slave_1: entered promiscuous mode
[  430.345196][T24660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.349915][T24660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.368187][T24660] team0: Port device team_slave_0 added
[  430.371566][T24660] team0: Port device team_slave_1 added
[  430.389551][T24660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.391792][T24660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.400947][T24660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.406522][T24660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.408856][T24660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.417837][T24660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.442965][T24660] hsr_slave_0: entered promiscuous mode
[  430.445711][T24660] hsr_slave_1: entered promiscuous mode
[  430.447939][T24660] debugfs: 'hsr0' already exists in 'hsr'
[  430.449845][T24660] Cannot create hsr debugfs directory
[  431.170441][T24631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  431.174674][T24631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  431.177875][T24631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  431.181617][T24631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  431.184397][T24631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  431.201403][T24639] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  431.206208][T24639] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  431.209783][T24639] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  431.209822][T24670] lo speed is unknown, defaulting to 1000
[  431.222367][T24639] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  431.226983][T24639] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  431.269016][T24672] lo speed is unknown, defaulting to 1000
[  431.327469][T24670] chnl_net:caif_netlink_parms(): no params data found
[  431.391296][T24670] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.394358][T24670] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.396881][T24670] bridge_slave_0: entered allmulticast mode
[  431.399845][T24670] bridge_slave_0: entered promiscuous mode
[  431.415964][T24670] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.418351][T24670] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.420925][T24670] bridge_slave_1: entered allmulticast mode
[  431.425777][T24670] bridge_slave_1: entered promiscuous mode
[  431.482309][T24670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.495344][T24670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.524046][T24670] team0: Port device team_slave_0 added
[  431.527356][T24670] team0: Port device team_slave_1 added
[  431.556669][T24670] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.558970][T24670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.568529][T24670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.573234][T24672] chnl_net:caif_netlink_parms(): no params data found
[  431.579436][T24670] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.582216][T24670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.593248][T24670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.660640][T24670] hsr_slave_0: entered promiscuous mode
[  431.664069][T24670] hsr_slave_1: entered promiscuous mode
[  431.666939][T24670] debugfs: 'hsr0' already exists in 'hsr'
[  431.668857][T24670] Cannot create hsr debugfs directory
[  431.696895][T24672] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.699904][T24672] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.702917][T24672] bridge_slave_0: entered allmulticast mode
[  431.712190][T24672] bridge_slave_0: entered promiscuous mode
[  431.729828][T24672] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.732633][T24672] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.736081][T24672] bridge_slave_1: entered allmulticast mode
[  431.739635][T24672] bridge_slave_1: entered promiscuous mode
[  431.768967][T24672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.777867][T24672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.824014][T24672] team0: Port device team_slave_0 added
[  431.831435][T24672] team0: Port device team_slave_1 added
[  431.871248][T24672] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.873880][T24672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.882215][T24672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.887535][T24672] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.890255][T24672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.900090][T24672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.945562][T24672] hsr_slave_0: entered promiscuous mode
[  431.948833][T24672] hsr_slave_1: entered promiscuous mode
[  431.954664][T24672] debugfs: 'hsr0' already exists in 'hsr'
[  431.957141][T24672] Cannot create hsr debugfs directory
[  432.243752][T24639] Bluetooth: hci6: command tx timeout
[  433.204280][T24639] Bluetooth: hci7: command tx timeout
[  433.283866][T24639] Bluetooth: hci8: command tx timeout
[  434.333610][T24639] Bluetooth: hci6: command tx timeout
[  435.293780][T24639] Bluetooth: hci7: command tx timeout
[  435.363792][T24639] Bluetooth: hci8: command tx timeout
[  436.413575][T24639] Bluetooth: hci6: command tx timeout
[  437.363826][T24639] Bluetooth: hci7: command tx timeout
[  437.443904][T24639] Bluetooth: hci8: command tx timeout
[  438.494514][T24639] Bluetooth: hci6: command tx timeout
[  439.453970][T24639] Bluetooth: hci7: command tx timeout
[  439.524073][T24639] Bluetooth: hci8: command tx timeout
[  446.164217][   T11] block nbd0: Possible stuck request ffff888020a68000: control (read@0,4096B). Runtime 360 seconds
[  450.003572][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  474.803779][  T794] page_pool_release_retry() stalled pool shutdown: id 84, 3329 inflight 120 sec
[  476.244904][   T11] block nbd0: Possible stuck request ffff888020a68000: control (read@0,4096B). Runtime 390 seconds
[  490.157523][T24631] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  490.160944][T24631] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  490.164527][T24631] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  490.167687][T24631] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  490.170347][T24631] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  490.192850][T24691] lo speed is unknown, defaulting to 1000
[  490.290654][T24691] chnl_net:caif_netlink_parms(): no params data found
[  490.346479][T24691] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.348873][T24691] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.351400][T24691] bridge_slave_0: entered allmulticast mode
[  490.354354][T24691] bridge_slave_0: entered promiscuous mode
[  490.358215][T24691] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.360594][T24691] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.363052][T24691] bridge_slave_1: entered allmulticast mode
[  490.366747][T24691] bridge_slave_1: entered promiscuous mode
[  490.394817][T24691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.400731][T24691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.421018][T24691] team0: Port device team_slave_0 added
[  490.426689][T24691] team0: Port device team_slave_1 added
[  490.447942][T24691] batman_adv: batadv0: Adding interface: batadv_slave_0
[  490.450539][T24691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  490.459313][T24691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  490.464678][T24691] batman_adv: batadv0: Adding interface: batadv_slave_1
[  490.467212][T24691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  490.477133][T24691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  490.507654][T24691] hsr_slave_0: entered promiscuous mode
[  490.510600][T24691] hsr_slave_1: entered promiscuous mode
[  490.513798][T24691] debugfs: 'hsr0' already exists in 'hsr'
[  490.516216][T24691] Cannot create hsr debugfs directory
[  492.141719][T24638] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  492.149463][T24638] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  492.152612][T24638] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  492.157074][T24638] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  492.159581][T24638] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  492.178131][T24638] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  492.182349][T24638] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  492.182529][T24701] lo speed is unknown, defaulting to 1000
[  492.189589][T24638] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  492.193029][T24638] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  492.196574][T24638] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  492.244082][T24639] Bluetooth: hci9: command tx timeout
[  492.248803][T24703] lo speed is unknown, defaulting to 1000
[  492.286425][T24701] chnl_net:caif_netlink_parms(): no params data found
[  492.391236][T24701] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.394519][T24701] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.396833][T24701] bridge_slave_0: entered allmulticast mode
[  492.399628][T24701] bridge_slave_0: entered promiscuous mode
[  492.404672][T24701] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.407825][T24701] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.411045][T24701] bridge_slave_1: entered allmulticast mode
[  492.417754][T24701] bridge_slave_1: entered promiscuous mode
[  492.473901][T24701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  492.500844][T24701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  492.548573][T24701] team0: Port device team_slave_0 added
[  492.561166][T24701] team0: Port device team_slave_1 added
[  492.585311][T24701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  492.588187][T24701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  492.597681][T24701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  492.608111][T24701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  492.610426][T24701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  492.619379][T24701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  492.627129][T24703] chnl_net:caif_netlink_parms(): no params data found
[  492.700002][T24701] hsr_slave_0: entered promiscuous mode
[  492.702541][T24701] hsr_slave_1: entered promiscuous mode
[  492.705374][T24701] debugfs: 'hsr0' already exists in 'hsr'
[  492.707325][T24701] Cannot create hsr debugfs directory
[  492.789579][T24703] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.792563][T24703] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.799769][T24703] bridge_slave_0: entered allmulticast mode
[  492.803058][T24703] bridge_slave_0: entered promiscuous mode
[  492.811016][T24703] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.814964][T24703] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.817821][T24703] bridge_slave_1: entered allmulticast mode
[  492.821111][T24703] bridge_slave_1: entered promiscuous mode
[  492.863039][T24703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  492.875166][T24703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  492.941659][T24703] team0: Port device team_slave_0 added
[  492.951097][T24703] team0: Port device team_slave_1 added
[  493.002753][T24703] batman_adv: batadv0: Adding interface: batadv_slave_0
[  493.006223][T24703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  493.014787][T24703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  493.019346][T24703] batman_adv: batadv0: Adding interface: batadv_slave_1
[  493.021767][T24703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  493.030381][T24703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  493.043650][T24639] Bluetooth: hci5: command 0x0406 tx timeout
[  493.046052][T24639] Bluetooth: hci3: command 0x0406 tx timeout
[  493.049026][T24638] Bluetooth: hci4: command 0x0406 tx timeout
[  493.074204][T24703] hsr_slave_0: entered promiscuous mode
[  493.077107][T24703] hsr_slave_1: entered promiscuous mode
[  493.079557][T24703] debugfs: 'hsr0' already exists in 'hsr'
[  493.081419][T24703] Cannot create hsr debugfs directory
[  494.243778][ T5238] Bluetooth: hci11: command tx timeout
[  494.244221][T24631] Bluetooth: hci10: command tx timeout
[  494.324390][T24631] Bluetooth: hci9: command tx timeout
[  496.323649][ T5238] Bluetooth: hci10: command tx timeout
[  496.326285][T24631] Bluetooth: hci11: command tx timeout
[  496.404173][ T5238] Bluetooth: hci9: command tx timeout
[  498.403747][ T5238] Bluetooth: hci10: command tx timeout
[  498.405809][ T5238] Bluetooth: hci11: command tx timeout
[  498.483710][T24631] Bluetooth: hci9: command tx timeout
[  500.493624][T24631] Bluetooth: hci11: command tx timeout
[  500.494016][ T5238] Bluetooth: hci10: command tx timeout
[  500.564267][   T34] INFO: task syz.2.5821:24594 blocked for more than 143 seconds.
[  500.567438][   T34]       Not tainted syzkaller #0
[  500.569604][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  500.574209][   T34] task:syz.2.5821      state:D stack:22568 pid:24594 tgid:24592 ppid:5850   task_flags:0x400140 flags:0x00004004
[  500.578989][   T34] Call Trace:
[  500.580360][   T34]  <TASK>
[  500.581563][   T34]  __schedule+0x1798/0x4cc0
[  500.583769][   T34]  ? __lock_acquire+0xab9/0xd20
[  500.585787][   T34]  ? __lock_acquire+0xab9/0xd20
[  500.587756][   T34]  ? __pfx___schedule+0x10/0x10
[  500.589772][   T34]  ? schedule+0x91/0x360
[  500.591484][   T34]  schedule+0x165/0x360
[  500.593147][   T34]  schedule_preempt_disabled+0x13/0x30
[  500.603205][   T34]  __mutex_lock+0x7e6/0x1350
[  500.617040][   T34]  ? __mutex_lock+0x5bb/0x1350
[  500.619061][   T34]  ? genl_rcv_msg+0x10d/0x790
[  500.621023][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  500.622944][   T34]  ? stack_trace_save+0x9c/0xe0
[  500.631314][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  500.633621][   T34]  ? radix_tree_lookup+0x240/0x290
[  500.635786][   T34]  genl_rcv_msg+0x10d/0x790
[  500.637679][   T34]  ? __lock_acquire+0xab9/0xd20
[  500.639690][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  500.641778][   T34]  netlink_rcv_skb+0x208/0x470
[  500.648116][   T34]  ? __lock_acquire+0xab9/0xd20
[  500.650123][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  500.652159][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  500.654890][   T34]  ? down_read+0x1ad/0x2e0
[  500.656707][   T34]  genl_rcv+0x28/0x40
[  500.658371][   T34]  netlink_unicast+0x82f/0x9e0
[  500.660316][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  500.662466][   T34]  ? netlink_sendmsg+0x642/0xb30
[  500.665013][   T34]  ? skb_put+0x11b/0x210
[  500.666779][   T34]  netlink_sendmsg+0x805/0xb30
[  500.668848][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  500.671035][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  500.673028][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  500.675437][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  500.677632][   T34]  __sock_sendmsg+0x21c/0x270
[  500.679584][   T34]  __sys_sendto+0x3bd/0x520
[  500.681451][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  500.683409][   T34]  ? count_memcg_event_mm+0x21/0x260
[  500.692474][   T34]  ? exc_page_fault+0x76/0xf0
[  500.695037][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  500.697367][   T34]  __x64_sys_sendto+0xde/0x100
[  500.699443][   T34]  do_syscall_64+0xfa/0x3b0
[  500.701339][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  500.703982][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.706530][   T34]  ? exc_page_fault+0x9f/0xf0
[  500.708500][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.710902][   T34] RIP: 0033:0x7f5a88f90a7c
[  500.712757][   T34] RSP: 002b:00007f5a89da0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  500.716363][   T34] RAX: ffffffffffffffda RBX: 00007f5a89da0fc0 RCX: 00007f5a88f90a7c
[  500.719661][   T34] RDX: 0000000000000020 RSI: 00007f5a89da1010 RDI: 0000000000000008
[  500.723029][   T34] RBP: 0000000000000000 R08: 00007f5a89da0f14 R09: 000000000000000c
[  500.726705][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
[  500.730032][   T34] R13: 00007f5a89da0f68 R14: 00007f5a89da1010 R15: 0000000000000000
[  500.733439][   T34]  </TASK>
[  500.734856][   T34] INFO: task syz.0.5824:24604 blocked for more than 143 seconds.
[  500.737988][   T34]       Not tainted syzkaller #0
[  500.740057][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  500.743928][   T34] task:syz.0.5824      state:D stack:26024 pid:24604 tgid:24603 ppid:5855   task_flags:0x480140 flags:0x00004004
[  500.748796][   T34] Call Trace:
[  500.750218][   T34]  <TASK>
[  500.751546][   T34]  __schedule+0x1798/0x4cc0
[  500.754931][   T34]  ? __lock_acquire+0xab9/0xd20
[  500.756703][   T34]  ? __lock_acquire+0xab9/0xd20
[  500.758620][   T34]  ? __pfx___schedule+0x10/0x10
[  500.760512][   T34]  ? schedule+0x91/0x360
[  500.762342][   T34]  schedule+0x165/0x360
[  500.764481][   T34]  blk_mq_freeze_queue_wait+0xf4/0x170
[  500.766754][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  500.769260][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  500.771715][   T34]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  500.774443][   T34]  queue_limits_commit_update_frozen+0x5d/0x3e0
[  500.776957][   T34]  nbd_set_size+0x47e/0x6a0
[  500.778876][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  500.781001][   T34]  ? nla_memcpy+0x5b/0xc0
[  500.782795][   T34]  nbd_genl_size_set+0x2eb/0x3c0
[  500.785296][   T34]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  500.787530][   T34]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  500.789906][   T34]  ? bpf_lsm_capable+0x9/0x20
[  500.791867][   T34]  ? security_capable+0x7e/0x2e0
[  500.793958][   T34]  ? radix_tree_lookup+0x240/0x290
[  500.796062][   T34]  nbd_genl_reconfigure+0x409/0x1870
[  500.798189][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  500.800507][   T34]  ? __nla_parse+0x40/0x60
[  500.802131][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  500.805260][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  500.807520][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  500.809994][   T34]  ? stack_trace_save+0x9c/0xe0
[  500.812003][   T34]  genl_rcv_msg+0x60e/0x790
[  500.814277][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  500.816093][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  500.818048][   T34]  netlink_rcv_skb+0x208/0x470
[  500.819844][   T34]  ? __lock_acquire+0xab9/0xd20
[  500.821404][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  500.823064][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  500.825013][   T34]  ? down_read+0x1ad/0x2e0
[  500.826491][   T34]  genl_rcv+0x28/0x40
[  500.827805][   T34]  netlink_unicast+0x82f/0x9e0
[  500.829401][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  500.831122][   T34]  ? netlink_sendmsg+0x642/0xb30
[  500.832702][   T34]  netlink_sendmsg+0x805/0xb30
[  500.834493][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  500.836454][   T34]  ? __lock_acquire+0xab9/0xd20
[  500.838333][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  500.840183][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  500.842207][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  500.844548][   T34]  __sock_sendmsg+0x21c/0x270
[  500.846267][   T34]  ____sys_sendmsg+0x505/0x830
[  500.847856][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  500.849707][   T34]  ? import_iovec+0x74/0xa0
[  500.851572][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  500.853735][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  500.855970][   T34]  ? __fget_files+0x2a/0x420
[  500.857890][   T34]  ? __fget_files+0x3a0/0x420
[  500.859846][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  500.861877][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  500.864442][   T34]  ? rcu_is_watching+0x15/0xb0
[  500.866432][   T34]  ? do_syscall_64+0xbe/0x3b0
[  500.868436][   T34]  do_syscall_64+0xfa/0x3b0
[  500.870329][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  500.872386][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.874986][   T34]  ? exc_page_fault+0x9f/0xf0
[  500.876737][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.878889][   T34] RIP: 0033:0x7f512498ebe9
[  500.880679][   T34] RSP: 002b:00007f5125776038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  500.884450][   T34] RAX: ffffffffffffffda RBX: 00007f5124bc5fa0 RCX: 00007f512498ebe9
[  500.887333][   T34] RDX: 0000000020000800 RSI: 0000200000000200 RDI: 0000000000000007
[  500.890155][   T34] RBP: 00007f5124a11e19 R08: 0000000000000000 R09: 0000000000000000
[  500.893021][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  500.895717][   T34] R13: 00007f5124bc6038 R14: 00007f5124bc5fa0 R15: 00007ffd6f4fd908
[  500.898332][   T34]  </TASK>
[  500.899451][   T34] INFO: task syz.1.5827:24619 blocked for more than 143 seconds.
[  500.901919][   T34]       Not tainted syzkaller #0
[  500.903952][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  500.906961][   T34] task:syz.1.5827      state:D stack:26536 pid:24619 tgid:24618 ppid:5845   task_flags:0x400140 flags:0x00004004
[  500.911034][   T34] Call Trace:
[  500.912273][   T34]  <TASK>
[  500.913280][   T34]  __schedule+0x1798/0x4cc0
[  500.914900][   T34]  ? __lock_acquire+0xab9/0xd20
[  500.916405][   T34]  ? __lock_acquire+0xab9/0xd20
[  500.917920][   T34]  ? __pfx___schedule+0x10/0x10
[  500.919619][   T34]  ? schedule+0x91/0x360
[  500.921203][   T34]  schedule+0x165/0x360
[  500.922784][   T34]  schedule_preempt_disabled+0x13/0x30
[  500.925184][   T34]  __mutex_lock+0x7e6/0x1350
[  500.926807][   T34]  ? __mutex_lock+0x5bb/0x1350
[  500.928371][   T34]  ? genl_rcv_msg+0x10d/0x790
[  500.929874][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  500.931525][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  500.933592][   T34]  ? radix_tree_lookup+0x240/0x290
[  500.935831][   T34]  genl_rcv_msg+0x10d/0x790
[  500.937726][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  500.939714][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  500.941915][   T34]  ? __asan_memcpy+0x40/0x70
[  500.944225][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  500.946268][   T34]  netlink_rcv_skb+0x208/0x470
[  500.948059][   T34]  ? __lock_acquire+0xab9/0xd20
[  500.949837][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  500.951669][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  500.953914][   T34]  ? down_read+0x1ad/0x2e0
[  500.955496][   T34]  genl_rcv+0x28/0x40
[  500.956839][   T34]  netlink_unicast+0x82f/0x9e0
[  500.958432][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  500.960258][   T34]  ? netlink_sendmsg+0x642/0xb30
[  500.961970][   T34]  ? skb_put+0x11b/0x210
[  500.964256][   T34]  netlink_sendmsg+0x805/0xb30
[  500.966002][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  500.967982][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  500.969807][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  500.971699][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  500.974256][   T34]  __sock_sendmsg+0x21c/0x270
[  500.976311][   T34]  __sys_sendto+0x3bd/0x520
[  500.978146][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  500.980138][   T34]  ? count_memcg_event_mm+0x21/0x260
[  500.982093][   T34]  ? exc_page_fault+0x76/0xf0
[  500.984076][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  500.986190][   T34]  __x64_sys_sendto+0xde/0x100
[  500.988244][   T34]  do_syscall_64+0xfa/0x3b0
[  500.990183][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  500.992420][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.995368][   T34]  ? exc_page_fault+0x9f/0xf0
[  500.997247][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.999517][   T34] RIP: 0033:0x7f2339390a7c
[  501.001090][   T34] RSP: 002b:00007f233a1d9ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  501.004556][   T34] RAX: ffffffffffffffda RBX: 00007f233a1d9fc0 RCX: 00007f2339390a7c
[  501.007771][   T34] RDX: 0000000000000020 RSI: 00007f233a1da010 RDI: 0000000000000004
[  501.011003][   T34] RBP: 0000000000000000 R08: 00007f233a1d9f14 R09: 000000000000000c
[  501.014331][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  501.017562][   T34] R13: 00007f233a1d9f68 R14: 00007f233a1da010 R15: 0000000000000000
[  501.020794][   T34]  </TASK>
[  501.022154][   T34] 
[  501.022154][   T34] Showing all locks held in the system:
[  501.025632][   T34] 1 lock held by rcu_preempt/16:
[  501.027587][   T34]  #0: ffff888136639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  501.030924][   T34] 1 lock held by khungtaskd/34:
[  501.032548][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  501.036472][   T34] 2 locks held by getty/5673:
[  501.038471][   T34]  #0: ffff888025f770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  501.042582][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  501.047103][   T34] 1 lock held by udevd/5846:
[  501.048836][   T34]  #0: ffff888020a21358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  501.052181][   T34] 2 locks held by syz.2.5821/24594:
[  501.054693][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  501.057836][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  501.061510][   T34] 6 locks held by syz.0.5824/24604:
[  501.064721][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  501.068027][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  501.071358][   T34]  #2: ffff8880208fca30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870
[  501.074770][   T34]  #3: ffff888108fb5588 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0
[  501.078323][   T34]  #4: ffff888108fb4f28 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  501.083093][   T34]  #5: ffff888108fb4f60 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  501.088566][   T34] 2 locks held by syz.1.5827/24619:
[  501.090764][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  501.094443][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  501.098114][   T34] 2 locks held by syz-executor/24629:
[  501.100313][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  501.104031][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  501.107709][   T34] 2 locks held by syz-executor/24632:
[  501.109957][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  501.113402][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  501.117082][   T34] 2 locks held by syz-executor/24633:
[  501.119262][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  501.122457][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  501.126607][   T34] 2 locks held by syz-executor/24660:
[  501.128798][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  501.132153][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  501.135903][   T34] 2 locks held by syz-executor/24670:
[  501.137880][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  501.140479][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  501.144038][   T34] 2 locks held by syz-executor/24672:
[  501.146209][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  501.149497][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  501.153171][   T34] 2 locks held by syz-executor/24691:
[  501.155628][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  501.158943][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  501.162451][   T34] 2 locks held by syz-executor/24701:
[  501.164970][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  501.168283][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  501.171989][   T34] 2 locks held by syz-executor/24703:
[  501.174304][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  501.177485][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  501.180440][   T34] 
[  501.181245][   T34] =============================================
[  501.181245][   T34] 
[  501.184721][   T34] NMI backtrace for cpu 0
[  501.184731][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  501.184741][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  501.184747][   T34] Call Trace:
[  501.184751][   T34]  <TASK>
[  501.184756][   T34]  dump_stack_lvl+0x189/0x250
[  501.184771][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  501.184782][   T34]  ? __pfx__printk+0x10/0x10
[  501.184802][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  501.184841][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  501.184854][   T34]  ? __pfx__printk+0x10/0x10
[  501.184868][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  501.184884][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  501.184897][   T34]  watchdog+0xf93/0xfe0
[  501.184913][   T34]  ? watchdog+0x1de/0xfe0
[  501.184928][   T34]  kthread+0x711/0x8a0
[  501.184942][   T34]  ? __pfx_watchdog+0x10/0x10
[  501.184954][   T34]  ? __pfx_kthread+0x10/0x10
[  501.184966][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  501.184978][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  501.184990][   T34]  ? __pfx_kthread+0x10/0x10
[  501.185002][   T34]  ret_from_fork+0x3fc/0x770
[  501.185013][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  501.185025][   T34]  ? __switch_to_asm+0x39/0x70
[  501.185035][   T34]  ? __switch_to_asm+0x33/0x70
[  501.185046][   T34]  ? __pfx_kthread+0x10/0x10
[  501.185056][   T34]  ret_from_fork_asm+0x1a/0x30
[  501.185075][   T34]  </TASK>
[  501.185078][   T34] Sending NMI from CPU 0 to CPUs 1:
[  501.240830][    C1] NMI backtrace for cpu 1
[  501.240845][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  501.240857][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  501.240864][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  501.240884][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  501.240893][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  501.240904][    C1] RAX: 164ef4a5455fbd00 RBX: ffffffff819683c8 RCX: 164ef4a5455fbd00
[  501.240912][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b7ff7 RDI: ffffffff8be33800
[  501.240919][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  501.240927][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38f30
[  501.240941][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001f000
[  501.240948][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  501.240956][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  501.240964][    C1] CR2: 00007fc6b9e87e20 CR3: 000000000df36000 CR4: 00000000000006f0
[  501.240997][    C1] Call Trace:
[  501.241003][    C1]  <TASK>
[  501.241008][    C1]  default_idle+0x13/0x20
[  501.241019][    C1]  default_idle_call+0x74/0xb0
[  501.241031][    C1]  do_idle+0x1e8/0x510
[  501.241045][    C1]  ? __pfx_do_idle+0x10/0x10
[  501.241060][    C1]  cpu_startup_entry+0x44/0x60
[  501.241070][    C1]  start_secondary+0x101/0x110
[  501.241085][    C1]  common_startup_64+0x13e/0x147
[  501.241105][    C1]  </TASK>
[  501.241867][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  501.299944][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  501.302765][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  501.305829][   T34] Call Trace:
[  501.306892][   T34]  <TASK>
[  501.307855][   T34]  dump_stack_lvl+0x99/0x250
[  501.309357][   T34]  ? __asan_memcpy+0x40/0x70
[  501.310824][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  501.312416][   T34]  ? __pfx__printk+0x10/0x10
[  501.313892][   T34]  vpanic+0x281/0x750
[  501.315186][   T34]  ? __pfx_vpanic+0x10/0x10
[  501.316653][   T34]  ? preempt_schedule+0xae/0xc0
[  501.318250][   T34]  ? preempt_schedule_common+0x83/0xd0
[  501.320142][   T34]  panic+0xb9/0xc0
[  501.321342][   T34]  ? __pfx_panic+0x10/0x10
[  501.323012][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  501.325055][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  501.327039][   T34]  watchdog+0xfd2/0xfe0
[  501.328494][   T34]  ? watchdog+0x1de/0xfe0
[  501.330071][   T34]  kthread+0x711/0x8a0
[  501.331377][   T34]  ? __pfx_watchdog+0x10/0x10
[  501.332866][   T34]  ? __pfx_kthread+0x10/0x10
[  501.334495][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  501.336358][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  501.338104][   T34]  ? __pfx_kthread+0x10/0x10
[  501.339730][   T34]  ret_from_fork+0x3fc/0x770
[  501.341313][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  501.343101][   T34]  ? __switch_to_asm+0x39/0x70
[  501.344877][   T34]  ? __switch_to_asm+0x33/0x70
[  501.346411][   T34]  ? __pfx_kthread+0x10/0x10
[  501.347945][   T34]  ret_from_fork_asm+0x1a/0x30
[  501.349747][   T34]  </TASK>
[  501.351829][   T34] Kernel Offset: disabled
[  501.353617][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:26:45  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff88801f3a8237 R9 =1ffff11003e75046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd8d7 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd4c05b8000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000ff00 000000000000ff00 XMM01=0000000000000000 0000000000000000
XMM02=00000000ff000000 0000000000000000 XMM03=00000000000000ff 0000000000000000
XMM04=0000000000ff0000 00000000000000ff XMM05=0000000000000000 00007fe32ee12e53
XMM06=0000000000000000 00007fe32ee12e4d XMM07=0000000000000000 00007fe32ee12e61
XMM08=0000000000000000 00007fe32ee12ee7 XMM09=0000000000000000 00007fe32ee12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1dbcfa00ac0fef17 RBX=0000000000000202 RCX=3a09af2d1ad3db00 RDX=0000000000000003
RSI=ffffffff8e139ee0 RDI=ffffffff8dba74da RBP=ffff88802196a828 RSP=ffffc9000327f498
R8 =ffffffff8fa38f37 R9 =1ffffffff1f471e6 R10=dffffc0000000000 R11=fffffbfff1f471e7
R12=0000000000000003 R13=0000000000000003 R14=ffffffff8e139ee0 R15=ffff888021969cc0
RIP=ffffffff8b79e280 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6a8a4f7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f6a899976c3 00007f6a899976c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=0000000100000017 040273c800000001 XMM07=10ce440800041000 4410000604718801
XMM08=3001010000000806 028004040173e400 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
