last executing test programs:

27m45.974051316s ago: executing program 2 (id=9287):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000))
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
read$alg(r1, &(0x7f0000000500)=""/4096, 0x1000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=ANY=[@ANYBLOB="00010000036d0b"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0)

27m45.065620578s ago: executing program 2 (id=9298):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2a, 0x1, 0x100, 0x4, {0x2}}, 0x14}}, 0x0)
write(r0, &(0x7f0000000000)="01", 0xf)

27m44.535057283s ago: executing program 2 (id=9300):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)={0x2c, 0x0, 0x1, 0x4, 0x2, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c890}, 0x14)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9}}, 0x5)
write$nci(r0, 0x0, 0x0)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x40000234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8a}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)
socket$netlink(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x48011}, 0x40008090)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x37, 0x1, 0x2, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r6, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
shutdown(r7, 0x2)

27m41.48547551s ago: executing program 2 (id=9303):
r0 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac1414aa, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0)

27m41.425605005s ago: executing program 2 (id=9306):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2a, 0x1, 0x100, 0x4, {0x2}}, 0x14}}, 0x0)
write(r0, &(0x7f0000000000)="01", 0xf)

27m41.425338809s ago: executing program 2 (id=9307):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3, 0x800}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000190a01020000000000000000000000000900010073797a30000000005d17000000000000000000006d22910ea669b9eefe188c5ef9a83870b809c6bf3d1cc4665ef3431237bf137cdd611abb65dd8ad3f35daa9f"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8004)
write$cgroup_pid(r3, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200)='THAWED\x00', 0x7)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000300))
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={r8, 0x3}, &(0x7f0000000140)=0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vxcan1\x00'})
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf10000000000000150002000000f0ff3d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f0670200000f00000014030000e433fe1fbf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic={0x1, 0xfffffffffffffff8, 0x5})

27m25.792246278s ago: executing program 32 (id=9307):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3, 0x800}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000190a01020000000000000000000000000900010073797a30000000005d17000000000000000000006d22910ea669b9eefe188c5ef9a83870b809c6bf3d1cc4665ef3431237bf137cdd611abb65dd8ad3f35daa9f"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8004)
write$cgroup_pid(r3, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200)='THAWED\x00', 0x7)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000300))
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={r8, 0x3}, &(0x7f0000000140)=0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vxcan1\x00'})
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic={0x1, 0xfffffffffffffff8, 0x5})

19m15.704561535s ago: executing program 0 (id=16217):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x1bc, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x4e22, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x4d4, 0x2b}, 0xa, @in=@multicast2, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x0, 0x2, 0x48, 0x3, 0xffff, 0x5}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x1, 0x1, 0x3, 0x0, 0x2, 0x6}, {{@in=@multicast2, 0x4d4, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1, 0x0, 0x3, 0xfffffff9, 0x8, 0xd9}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

19m15.025559109s ago: executing program 0 (id=16220):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000008c0)=@assoc_value={r3, 0x10000}, &(0x7f0000000840)=0x8)

19m14.506472831s ago: executing program 0 (id=16223):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3000000000001c0000060a010400000000000000000100000008000b4000000000d81b04"], 0x1c74}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000001c001a80180002801400018008001700010000000800"], 0x44}}, 0x0)

19m10.408317332s ago: executing program 3 (id=16232):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
close(0x3)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4)

19m9.377545229s ago: executing program 3 (id=16233):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x5223a, 0xa}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x70bd25, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0xfffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES32=r2, @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002340)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff0000e5b0130e97d63feb0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
pipe(0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r7, 0x0, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x10001, 0x12)
sendfile(r7, r6, 0x0, 0xf03a0005)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r10, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}})
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

19m8.527284866s ago: executing program 0 (id=16234):
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
pipe(&(0x7f00000004c0))

19m7.399420803s ago: executing program 3 (id=16236):
r0 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)

19m6.778637279s ago: executing program 3 (id=16237):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x8d, 0x800, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x48}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)

19m6.5517293s ago: executing program 3 (id=16238):
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={<r0=>0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r0, 0x9, 0x101, 0x3094e04a, 0x3, 0x3}, 0x14)

19m6.405295518s ago: executing program 0 (id=16240):
syz_emit_ethernet(0x3f, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0xc, 0x67, 0x0, @rand_addr, @empty}, @echo={0x8, 0x0, 0x0, 0x9, 0xc000, "e32e94680984e2c19e4dfc08445c89675436337632"}}}}}, 0x0)

19m6.016667646s ago: executing program 3 (id=16241):
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000180)={0x1, 0x100, 0xe1, 0xbf1e, 0x1, 0x5})
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002b00), 0x400000000000358, 0x40844)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x5, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = socket$inet(0x2, 0x4000000000000005, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a41, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0xc0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="1400000030000103000000000000000001"], 0x114}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f00000065c0)=[{{0x0, 0xfffffffffffffcbd, 0x0}, 0x1}], 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0xd0}, 0x1, 0x0, 0x0, 0x1b2470e4700932a8}, 0x20004044)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000001640)=""/197, 0xc5}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000280)=""/168, 0xa8}, {&(0x7f0000002740)=""/4076, 0xfec}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2002}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd59}, 0x1}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x100003}], 0x7, 0x100, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

19m5.840832568s ago: executing program 1 (id=16242):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

19m5.658525914s ago: executing program 0 (id=16243):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000190000)={0x0, 0x0, &(0x7f0000190040)={&(0x7f0000180000)=ANY=[@ANYBLOB="300e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000e80d08001c0001000000000000000000000000000000000000000000e2060000c80d0200"], 0xe30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00001a0000)={0x0, 0x0, &(0x7f00001a0040)={&(0x7f00001a0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00001b0000)={0x0, 0x0, &(0x7f00001b0040)={&(0x7f00001b0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000090000)={0x0, 0x0, &(0x7f0000090040)={&(0x7f0000080000)=ANY=[@ANYBLOB="380e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000f00d08001c0001000000000000000000000000000000000000000000e6060000d00d0200"], 0xe38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000a0000)={0x0, 0x0, &(0x7f00000a0040)={&(0x7f00000a0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000b0000)={0x0, 0x0, &(0x7f00000b0040)={&(0x7f00000b0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000010000)={0x0, 0x0, &(0x7f0000010040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000f80d08001c0001000000000000000000000000000000000000000000ea060000d80d0200"], 0xe40}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000020000)={0x0, 0x0, &(0x7f0000020040)={&(0x7f0000020080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000d0000)={0x0, 0x0, &(0x7f00000d0040)={&(0x7f00000c0000)=ANY=[@ANYBLOB="480e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000000e08001c0001000000000000000000000000000000000000000000ee060000e00d0200"], 0xe48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000e0000)={0x0, 0x0, &(0x7f00000e0040)={&(0x7f00000e0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000f0000)={0x0, 0x0, &(0x7f00000f0040)={&(0x7f00000f0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000110000)={0x0, 0x0, &(0x7f0000110040)={&(0x7f0000100000)=ANY=[@ANYBLOB="f80e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000b00e08001c000100000000000000000000000000000000000000000046070000900e0200"], 0xef8}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000120000)={0x0, 0x0, &(0x7f0000120040)={&(0x7f0000120080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000130000)={0x0, 0x0, &(0x7f0000130040)={&(0x7f0000130080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0)

19m5.479621476s ago: executing program 1 (id=16244):
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e21, 0x1, @private2, 0xfffffff9}}, 0xfff, 0x8}, &(0x7f0000000140)=0x90)

19m5.045297799s ago: executing program 1 (id=16245):
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000004a00010200000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000010)

19m3.760270199s ago: executing program 1 (id=16246):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x80004}, 0x1c)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)

19m2.598462798s ago: executing program 1 (id=16247):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x6a, 0x1, 0x0, 0xc)

19m1.718436334s ago: executing program 1 (id=16248):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000840), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)

18m50.479093265s ago: executing program 33 (id=16243):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000190000)={0x0, 0x0, &(0x7f0000190040)={&(0x7f0000180000)=ANY=[@ANYBLOB="300e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000e80d08001c0001000000000000000000000000000000000000000000e2060000c80d0200"], 0xe30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00001a0000)={0x0, 0x0, &(0x7f00001a0040)={&(0x7f00001a0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00001b0000)={0x0, 0x0, &(0x7f00001b0040)={&(0x7f00001b0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000090000)={0x0, 0x0, &(0x7f0000090040)={&(0x7f0000080000)=ANY=[@ANYBLOB="380e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000f00d08001c0001000000000000000000000000000000000000000000e6060000d00d0200"], 0xe38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000a0000)={0x0, 0x0, &(0x7f00000a0040)={&(0x7f00000a0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000b0000)={0x0, 0x0, &(0x7f00000b0040)={&(0x7f00000b0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000010000)={0x0, 0x0, &(0x7f0000010040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000f80d08001c0001000000000000000000000000000000000000000000ea060000d80d0200"], 0xe40}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000020000)={0x0, 0x0, &(0x7f0000020040)={&(0x7f0000020080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000d0000)={0x0, 0x0, &(0x7f00000d0040)={&(0x7f00000c0000)=ANY=[@ANYBLOB="480e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000000e08001c0001000000000000000000000000000000000000000000ee060000e00d0200"], 0xe48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000e0000)={0x0, 0x0, &(0x7f00000e0040)={&(0x7f00000e0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000f0000)={0x0, 0x0, &(0x7f00000f0040)={&(0x7f00000f0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000110000)={0x0, 0x0, &(0x7f0000110040)={&(0x7f0000100000)=ANY=[@ANYBLOB="f80e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000b00e08001c000100000000000000000000000000000000000000000046070000900e0200"], 0xef8}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000120000)={0x0, 0x0, &(0x7f0000120040)={&(0x7f0000120080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000130000)={0x0, 0x0, &(0x7f0000130040)={&(0x7f0000130080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0)

18m50.41930022s ago: executing program 34 (id=16241):
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000180)={0x1, 0x100, 0xe1, 0xbf1e, 0x1, 0x5})
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002b00), 0x400000000000358, 0x40844)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x5, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = socket$inet(0x2, 0x4000000000000005, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a41, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0xc0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="1400000030000103000000000000000001"], 0x114}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f00000065c0)=[{{0x0, 0xfffffffffffffcbd, 0x0}, 0x1}], 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0xd0}, 0x1, 0x0, 0x0, 0x1b2470e4700932a8}, 0x20004044)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000001640)=""/197, 0xc5}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000280)=""/168, 0xa8}, {&(0x7f0000002740)=""/4076, 0xfec}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2002}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd59}, 0x1}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x100003}], 0x7, 0x100, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

18m46.462251113s ago: executing program 35 (id=16248):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000840), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)

18.268232834s ago: executing program 4 (id=29401):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))

17.99631415s ago: executing program 4 (id=29402):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002a00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, &(0x7f0000000100), &(0x7f00000001c0)=""/5}, 0x20)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d)
setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4)
recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x4)
recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
close(0x4)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x2, 0x5, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x80000001, @remote, 0x3}}, @sadb_sa={0x2, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1}]}, 0x60}, 0x1, 0x7}, 0x20000030)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x22, &(0x7f0000000140)=@raw=[@exit, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x1, 0x1, 0x2, 0x5, 0x8, 0x6}], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
socket(0xf, 0x800, 0x3ff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0xa, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', <r8=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

17.228563102s ago: executing program 5 (id=29408):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x3f799000)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1)
writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

17.0673496s ago: executing program 4 (id=29409):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=<r2=>0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b01000001000000feffffff", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x48}}, 0x20000000)

16.861591718s ago: executing program 4 (id=29410):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x96}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

16.612390293s ago: executing program 4 (id=29415):
unshare(0x600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0, 0x4}, 0x20)

16.611974432s ago: executing program 5 (id=29416):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
write$cgroup_devices(r0, 0x0, 0x0)

16.516541535s ago: executing program 4 (id=29418):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41)
ioctl$SIOCSIFHWADDR(r4, 0x8905, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r3, 0xd19, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004090}, 0x4000080)

16.51628331s ago: executing program 5 (id=29419):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltaction={0x14, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
r1 = socket$inet6(0xa, 0x3, 0x3)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0xfffc, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0)

16.425756923s ago: executing program 5 (id=29420):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x15e}, 0x1c)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r1, 0x200204)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

16.425192157s ago: executing program 5 (id=29422):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x96}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

16.31714522s ago: executing program 5 (id=29423):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x2, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x1c, 0x0, @opaque="571818d3e222532f03de8fba932ff0e0f5d52380"}}}}}, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000040)={0x38, r4, 0x1, 0x9, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x7, 0x0, @l2={'eth', 0x3a, 'macvtap0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f00000002c0)="2000000012005f0214f9f4070000fbe60a0000000000c5c61f33ad512e9cfc31", 0x20)
recvmmsg(r5, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1)
socket$nl_generic(0x10, 0x3, 0x10)

16.316778671s ago: executing program 6 (id=29424):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r5, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)

16.188318427s ago: executing program 6 (id=29425):
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000ffffff640000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.187918577s ago: executing program 6 (id=29426):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc1400e8034788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

16.078924511s ago: executing program 6 (id=29427):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500e4, 0x40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8841}, 0x8000)

16.070084217s ago: executing program 6 (id=29428):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10)

16.007852366s ago: executing program 6 (id=29429):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @loopback}, 0x486, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x2, 0x20e7})
ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000280)={'bond0\x00', {0x2, 0x0, @local}})
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="1400000016000b63d25a80648c2566e506bce1e800294babfba15711165402766999a96cd6e87ed97285a92e15264fa882afe0c31be8eca4ea2a536b20ff15193bb574f9baef8e6e4fe50199e16ca5f9c3a094135eac97a8fb78f2eee1f9942b33e63735d3b025aa19a00ec0eb9623234589d9138f9a28346ee0a03ea4ecc0f1fe410620a18cd94edbd4b34aab417f647afb668a59cc2410b9bd37c21ad98913be9d000000", 0xa5}], 0x1}, 0x840)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x1, 0x0, 0x2, 0x6, 0x3fbc}, 0x20)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20082000)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x6, 0x2, 0x4246}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='gretap0 8', @ANYRESOCT=r8], 0x6e)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fcdbdf2517000000440006803d00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x806}, 0x0)

1.034232666s ago: executing program 36 (id=29418):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41)
ioctl$SIOCSIFHWADDR(r4, 0x8905, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r3, 0xd19, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004090}, 0x4000080)

988.771888ms ago: executing program 37 (id=29423):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x2, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x1c, 0x0, @opaque="571818d3e222532f03de8fba932ff0e0f5d52380"}}}}}, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000040)={0x38, r4, 0x1, 0x9, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x7, 0x0, @l2={'eth', 0x3a, 'macvtap0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f00000002c0)="2000000012005f0214f9f4070000fbe60a0000000000c5c61f33ad512e9cfc31", 0x20)
recvmmsg(r5, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1)
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 38 (id=29429):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @loopback}, 0x486, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x2, 0x20e7})
ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000280)={'bond0\x00', {0x2, 0x0, @local}})
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="1400000016000b63d25a80648c2566e506bce1e800294babfba15711165402766999a96cd6e87ed97285a92e15264fa882afe0c31be8eca4ea2a536b20ff15193bb574f9baef8e6e4fe50199e16ca5f9c3a094135eac97a8fb78f2eee1f9942b33e63735d3b025aa19a00ec0eb9623234589d9138f9a28346ee0a03ea4ecc0f1fe410620a18cd94edbd4b34aab417f647afb668a59cc2410b9bd37c21ad98913be9d000000", 0xa5}], 0x1}, 0x840)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x1, 0x0, 0x2, 0x6, 0x3fbc}, 0x20)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20082000)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x6, 0x2, 0x4246}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='gretap0 8', @ANYRESOCT=r8], 0x6e)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fcdbdf2517000000440006803d00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x806}, 0x0)

kernel console output (not intermixed with test programs):

ctive: invalid value (5)
[ 1936.479603][ T8352] bond33 (unregistering): Released all slaves
[ 1936.598848][ T8358] netlink: 'syz.5.27065': attribute type 1 has an invalid length.
[ 1936.653394][ T8358] bond33: entered promiscuous mode
[ 1936.655522][ T8358] 8021q: adding VLAN 0 to HW filter on device bond33
[ 1936.708537][ T8358] 8021q: adding VLAN 0 to HW filter on device bond33
[ 1936.708701][ T8358] bond33: (slave ip6gre4): The slave device specified does not support setting the MAC address
[ 1936.708711][ T8358] bond33: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode
[ 1936.728543][ T8358] bond33: (slave ip6gre4): making interface the new active one
[ 1936.728558][ T8358] ip6gre4: entered promiscuous mode
[ 1936.729511][ T8358] bond33: (slave ip6gre4): Enslaving as an active interface with an up link
[ 1936.995820][ T8365] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1937.252758][ T8396] sctp: [Deprecated]: syz.5.27080 (pid 8396) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1937.252758][ T8396] Use struct sctp_sack_info instead
[ 1937.432090][ T8390] syzkaller0: entered promiscuous mode
[ 1937.432644][ T8390] syzkaller0: entered allmulticast mode
[ 1937.552112][ T8404] netlink: 'syz.5.27081': attribute type 16 has an invalid length.
[ 1937.552125][ T8404] netlink: 'syz.5.27081': attribute type 17 has an invalid length.
[ 1940.413819][ T8404] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1940.876312][ T8437] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1940.876395][ T8437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1940.876404][ T8437] IPv6: NLM_F_CREATE should be set when creating new route
[ 1941.073153][ T8444] syzkaller0: entered promiscuous mode
[ 1941.073166][ T8444] syzkaller0: entered allmulticast mode
[ 1941.193638][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27104'.
[ 1941.193657][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27104'.
[ 1941.277594][ T8456] 8021q: adding VLAN 0 to HW filter on device 
[ 1941.278984][ T8456] 8021q: adding VLAN 0 to HW filter on device team0
[ 1941.318798][ T8456] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1941.324382][T32062] bridge0: port 1(veth0) entered blocking state
[ 1941.324427][T32062] bridge0: port 1(veth0) entered forwarding state
[ 1941.360872][T22757] syz2: Port: 1 Link ACTIVE
[ 1941.590808][ T8464] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1941.841119][ T8485] tipc: Disabling bearer <udp:syz2>
[ 1942.062825][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27114'.
[ 1942.216565][ T8500] netlink: 'syz.6.27116': attribute type 7 has an invalid length.
[ 1942.216580][ T8500] netlink: 'syz.6.27116': attribute type 8 has an invalid length.
[ 1943.773528][ T8548] ip_tables: iptables: counters copy to user failed while replacing table
[ 1943.960065][ T8554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27134'.
[ 1944.078058][ T8558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1944.078072][ T8558] IPv6: NLM_F_CREATE should be set when creating new route
[ 1944.082518][ T8558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1944.827515][ T8591] netlink: 'syz.5.27151': attribute type 1 has an invalid length.
[ 1944.857898][ T8591] bond34: entered promiscuous mode
[ 1944.858326][ T8591] 8021q: adding VLAN 0 to HW filter on device bond34
[ 1945.800837][ T8608] netlink: 'syz.6.27159': attribute type 1 has an invalid length.
[ 1945.912462][ T8608] bond0: entered promiscuous mode
[ 1945.928575][ T8608] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1946.062542][ T8621] syzkaller0: entered promiscuous mode
[ 1946.062558][ T8621] syzkaller0: entered allmulticast mode
[ 1946.110251][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27165'.
[ 1947.289429][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27176'.
[ 1947.459830][ T8655] netlink: 56 bytes leftover after parsing attributes in process `syz.5.27177'.
[ 1947.514589][ T8656] netlink: 56 bytes leftover after parsing attributes in process `syz.5.27177'.
[ 1949.358071][ T8627] workqueue: Failed to create a rescuer kthread for wq "bond36": -EINTR
[ 1949.586039][ T8678] ip_tables: iptables: counters copy to user failed while replacing table
[ 1949.588163][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27185'.
[ 1949.609561][ T8677] bond35: option lacp_active: invalid value (5)
[ 1949.610965][ T8677] bond35 (unregistering): Released all slaves
[ 1949.758427][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27188'.
[ 1950.050070][ T8681] netlink: 'syz.4.27184': attribute type 16 has an invalid length.
[ 1950.050083][ T8681] netlink: 'syz.4.27184': attribute type 17 has an invalid length.
[ 1950.063551][ T8681] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1950.701696][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27199'.
[ 1950.728297][ T8715] bond36: option lacp_active: invalid value (5)
[ 1950.729597][ T8715] bond36 (unregistering): Released all slaves
[ 1950.947526][ T8726] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1951.215206][ T8747] syzkaller0: left promiscuous mode
[ 1951.215219][ T8747] syzkaller0: left allmulticast mode
[ 1952.263231][ T8776] syzkaller0: entered promiscuous mode
[ 1952.263244][ T8776] syzkaller0: entered allmulticast mode
[ 1952.481912][ T8785] netlink: 68 bytes leftover after parsing attributes in process `syz.4.27230'.
[ 1952.530722][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27230'.
[ 1952.531000][ T8785] veth0: left allmulticast mode
[ 1952.531150][ T8785] bridge0: port 1(veth0) entered disabled state
[ 1952.565540][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27229'.
[ 1952.610658][ T8789] bond35: option lacp_active: invalid value (5)
[ 1952.630262][ T8780] netlink: 'syz.6.27227': attribute type 16 has an invalid length.
[ 1952.630281][ T8780] netlink: 'syz.6.27227': attribute type 17 has an invalid length.
[ 1952.747420][ T8789] bond35 (unregistering): Released all slaves
[ 1952.798126][ T8780] lo: left promiscuous mode
[ 1952.801107][ T8780] tunl0: left promiscuous mode
[ 1952.827814][ T8780] erspan0: left promiscuous mode
[ 1952.830936][ T8780] ip_vti0: left promiscuous mode
[ 1952.845975][ T8780] ip6_vti0: left promiscuous mode
[ 1952.854557][ T8780] sit0: left promiscuous mode
[ 1952.871703][ T8780] ip6tnl0: left promiscuous mode
[ 1952.874604][ T8780] ip6gre0: left promiscuous mode
[ 1952.881823][ T8780] ip6gretap0: left promiscuous mode
[ 1952.888047][ T8780] vcan0: left promiscuous mode
[ 1952.889954][ T8780] team0: left promiscuous mode
[ 1952.890996][ T8780] 8021q: adding VLAN 0 to HW filter on device team0
[ 1952.891319][ T8780] nlmon0: left promiscuous mode
[ 1952.894142][ T8780] veth1: left promiscuous mode
[ 1952.912558][ T8780] wg0: left promiscuous mode
[ 1952.923028][ T8780] wg2: left promiscuous mode
[ 1952.923740][ T8780] veth0_to_bridge: left promiscuous mode
[ 1952.933736][ T8780] bridge_slave_0: left promiscuous mode
[ 1952.934135][ T8780] veth1_to_bridge: left promiscuous mode
[ 1952.943743][ T8780] bridge_slave_1: left promiscuous mode
[ 1952.944135][ T8780] veth1_to_bond: left promiscuous mode
[ 1952.949385][ T8780] bond_slave_1: left promiscuous mode
[ 1952.949710][ T8780] veth0_to_team: left promiscuous mode
[ 1952.950442][ T8780] team_slave_0: left promiscuous mode
[ 1952.950741][ T8780] C: left promiscuous mode
[ 1952.951516][ T8780] team_slave_1: left promiscuous mode
[ 1952.951850][ T8780] veth0_to_batadv: left promiscuous mode
[ 1952.952373][ T8780] batadv_slave_0: left promiscuous mode
[ 1952.953008][ T8780] veth1_to_batadv: left promiscuous mode
[ 1952.953674][ T8780] batadv_slave_1: left promiscuous mode
[ 1952.954872][ T8780] xfrm0: left promiscuous mode
[ 1952.977192][ T8780] veth1_to_hsr: left promiscuous mode
[ 1952.978168][ T8780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1952.978211][ T8780] hsr0: left promiscuous mode
[ 1952.979121][ T8780] veth1_virt_wifi: left promiscuous mode
[ 1952.980537][ T8780] virt_wifi0: left promiscuous mode
[ 1952.980552][ T8780] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1952.985618][ T7615] bridge0: port 1(veth0) entered blocking state
[ 1952.985664][ T7615] bridge0: port 1(veth0) entered listening state
[ 1953.019378][ T7615] bridge0: port 4(veth0_virt_wifi) entered blocking state
[ 1953.019432][ T7615] bridge0: port 4(veth0_virt_wifi) entered listening state
[ 1953.376934][ T8822] syzkaller0: entered promiscuous mode
[ 1953.376951][ T8822] syzkaller0: entered allmulticast mode
[ 1953.461934][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27246'.
[ 1955.044156][ T8859] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1957.683522][ T8887] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1957.861285][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27268'.
[ 1958.116483][ T8912] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1959.400165][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27287'.
[ 1959.563167][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27288'.
[ 1959.768935][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27289'.
[ 1959.792132][ T8950] bond36: option lacp_active: invalid value (5)
[ 1959.793091][ T8950] bond36 (unregistering): Released all slaves
[ 1960.235579][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27295'.
[ 1960.250973][ T8967] ipt_REJECT: TCP_RESET invalid for non-tcp
[ 1960.628824][ T8988] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1960.708355][ T8993] netlink: 56 bytes leftover after parsing attributes in process `syz.5.27307'.
[ 1960.993551][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27317'.
[ 1960.993591][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27317'.
[ 1961.019086][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27317'.
[ 1961.019152][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27317'.
[ 1961.109187][ T9024] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1961.529509][ T9045] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1961.805891][ T9060] pimreg: left allmulticast mode
[ 1962.152879][ T9082] syzkaller0: left promiscuous mode
[ 1962.152891][ T9082] syzkaller0: left allmulticast mode
[ 1962.374552][ T9104] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1963.006509][ T9086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1963.654344][ T9149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1963.659475][  T190] block nbd4: Possible stuck request ffff88810a888000: control (read@0,1024B). Runtime 150 seconds
[ 1963.810275][ T9158] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1964.439015][ T9177] netlink: 'syz.4.27377': attribute type 1 has an invalid length.
[ 1964.861429][ T9203] __nla_validate_parse: 2 callbacks suppressed
[ 1964.861441][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27388'.
[ 1964.861516][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27388'.
[ 1964.897474][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27388'.
[ 1964.897561][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27388'.
[ 1964.952552][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27388'.
[ 1964.952644][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27388'.
[ 1965.641870][ T9198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1965.900972][ T9231] netlink: 72 bytes leftover after parsing attributes in process `syz.6.27398'.
[ 1965.900986][ T9231] netlink: 72 bytes leftover after parsing attributes in process `syz.6.27398'.
[ 1966.870199][ T9238] syzkaller0: entered promiscuous mode
[ 1966.870218][ T9238] syzkaller0: entered allmulticast mode
[ 1966.952839][ T9244] openvswitch: netlink: Multiple metadata blocks provided
[ 1967.423818][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27413'.
[ 1967.463469][ T7264] smc: removing ib device syz2
[ 1967.483742][T22760] syz2: Port: 1 Link DOWN
[ 1967.531830][ T7264] smbdirect: ib_dev[syz2] removed
[ 1968.140040][    C1] bridge0: port 4(veth0_virt_wifi) entered learning state
[ 1968.140122][    C1] bridge0: port 1(veth0) entered learning state
[ 1969.471173][ T9357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27453'.
[ 1969.873026][ T9366] __nla_validate_parse: 3 callbacks suppressed
[ 1969.873046][ T9366] netlink: 140 bytes leftover after parsing attributes in process `syz.6.27457'.
[ 1970.916870][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27482'.
[ 1970.916918][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27482'.
[ 1970.917237][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27482'.
[ 1970.917248][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27482'.
[ 1971.009315][ T9428] netlink: 140 bytes leftover after parsing attributes in process `syz.6.27484'.
[ 1971.731151][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27495'.
[ 1972.514413][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27514'.
[ 1972.676183][ T9519] wg2 speed is unknown, defaulting to 1000
[ 1972.676230][ T9519] wg2 speed is unknown, defaulting to 1000
[ 1972.676917][ T9519] wg2 speed is unknown, defaulting to 1000
[ 1972.680383][ T9519] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 1972.680408][ T9519] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 1972.680435][ T9519] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 1972.722916][ T9519] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1972.741187][ T9519] wg2 speed is unknown, defaulting to 1000
[ 1972.743778][ T9519] wg2 speed is unknown, defaulting to 1000
[ 1972.752456][ T9519] wg2 speed is unknown, defaulting to 1000
[ 1972.753201][ T9519] wg2 speed is unknown, defaulting to 1000
[ 1972.754234][ T9519] wg2 speed is unknown, defaulting to 1000
[ 1972.761961][ T9519] wg2 speed is unknown, defaulting to 1000
[ 1974.156112][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27536'.
[ 1974.241783][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27540'.
[ 1974.698969][ T9592] ip_tables: iptables: counters copy to user failed while replacing table
[ 1975.684116][ T9647] __nla_validate_parse: 1 callbacks suppressed
[ 1975.684128][ T9647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27570'.
[ 1975.803501][ T9651] ip_tables: iptables: counters copy to user failed while replacing table
[ 1975.990708][ T9665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1976.286962][ T9685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.27585'.
[ 1976.304399][ T9685] IPVS: Error connecting to the multicast addr
[ 1976.488126][ T9695] netlink: 64 bytes leftover after parsing attributes in process `syz.5.27590'.
[ 1976.541315][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27591'.
[ 1976.935108][ T4993] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1977.282292][ T9721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27597'.
[ 1979.667064][ T9707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1979.695953][ T9741] netlink: 'syz.5.27606': attribute type 1 has an invalid length.
[ 1979.699181][ T9749] netlink: 'syz.4.27609': attribute type 4 has an invalid length.
[ 1979.699200][ T9749] netlink: 224 bytes leftover after parsing attributes in process `syz.4.27609'.
[ 1979.878551][ T9754] macsec2: entered promiscuous mode
[ 1980.500355][ T9790] netlink: 'syz.6.27628': attribute type 3 has an invalid length.
[ 1980.500369][ T9790] netlink: 224 bytes leftover after parsing attributes in process `syz.6.27628'.
[ 1980.582270][ T9800] netlink: 64 bytes leftover after parsing attributes in process `syz.4.27632'.
[ 1980.739499][ T9813] ip_tables: iptables: counters copy to user failed while replacing table
[ 1980.882001][ T9815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27637'.
[ 1981.399924][ T9831] netlink: 'syz.5.27644': attribute type 23 has an invalid length.
[ 1981.399938][ T9831] netlink: 'syz.5.27644': attribute type 11 has an invalid length.
[ 1981.575070][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1981.646606][ T9843] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 1981.730202][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27649'.
[ 1981.751074][ T9843] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1982.789542][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27667'.
[ 1983.495493][    C1] bridge0: port 1(veth0) entered forwarding state
[ 1983.495506][    C1] bridge0: topology change detected, propagating
[ 1983.495627][    C1] bridge0: port 4(veth0_virt_wifi) entered forwarding state
[ 1983.495633][    C1] bridge0: topology change detected, propagating
[ 1983.546866][ T9917] syzkaller0: entered promiscuous mode
[ 1983.546881][ T9917] syzkaller0: entered allmulticast mode
[ 1983.724411][ T9923] netlink: 7 bytes leftover after parsing attributes in process `syz.5.27679'.
[ 1986.717550][ T9942] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1986.779920][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27685'.
[ 1987.048958][ T9962] netlink: 56 bytes leftover after parsing attributes in process `syz.5.27693'.
[ 1987.051595][ T9960] syzkaller0: entered promiscuous mode
[ 1987.051607][ T9960] syzkaller0: entered allmulticast mode
[ 1987.063196][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27692'.
[ 1988.822185][T10001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1989.026294][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27715'.
[ 1989.491578][T10030] vlan7: entered promiscuous mode
[ 1989.763951][T10034] netlink: 'syz.4.27723': attribute type 1 has an invalid length.
[ 1989.784807][T10034] bond30: (slave ip6gretap0): Enslaving as a backup interface with an up link
[ 1989.793739][T10034] veth25: entered promiscuous mode
[ 1989.795687][T10034] bond30: (slave veth25): Enslaving as a backup interface with a down link
[ 1990.223933][T10052] netlink: 'syz.5.27730': attribute type 1 has an invalid length.
[ 1990.289990][T10052] veth23: entered promiscuous mode
[ 1990.424744][T10055] netlink: 56 bytes leftover after parsing attributes in process `syz.5.27731'.
[ 1992.331520][T10116] syzkaller0: entered promiscuous mode
[ 1992.331532][T10116] syzkaller0: entered allmulticast mode
[ 1993.372866][T10123] netlink: 'syz.6.27753': attribute type 1 has an invalid length.
[ 1993.419314][T10123] bond36: (slave ip6gretap1): Enslaving as a backup interface with an up link
[ 1993.433619][T10123] veth25: entered promiscuous mode
[ 1993.622816][T10134] syzkaller0: entered promiscuous mode
[ 1993.622836][T10134] syzkaller0: entered allmulticast mode
[ 1993.632441][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27756'.
[ 1993.741245][  T190] block nbd4: Possible stuck request ffff88810a888000: control (read@0,1024B). Runtime 180 seconds
[ 1993.848782][T10142] netlink: 'syz.6.27760': attribute type 1 has an invalid length.
[ 1993.899961][T10142] veth25: entered promiscuous mode
[ 1993.941998][T10144] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27760'.
[ 1993.956400][T10144] 8021q: adding VLAN 0 to HW filter on device bond37
[ 1994.228980][T10091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1994.289122][T10151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1994.362598][T10153] netlink: 7 bytes leftover after parsing attributes in process `syz.5.27764'.
[ 1994.506440][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27765'.
[ 1994.514241][T10163] netlink: 'syz.5.27767': attribute type 1 has an invalid length.
[ 1994.607859][T10163] veth23: entered promiscuous mode
[ 1994.610827][T10163] bond36: (slave veth23): Enslaving as a backup interface with a down link
[ 1994.841735][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27773'.
[ 1997.711737][T10177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2000.102992][T10262] netlink: 'syz.4.27801': attribute type 1 has an invalid length.
[ 2000.130327][T10262] veth27: entered promiscuous mode
[ 2000.725840][ T5044] udevd[5044]: worker [4010] /devices/virtual/block/nbd4 timeout; kill it
[ 2000.725889][ T5044] udevd[5044]: seq 48204 '/devices/virtual/block/nbd4' killed
[ 2000.738533][T10295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27814'.
[ 2000.748116][T10288] veth27: entered promiscuous mode
[ 2002.312849][T10378] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 2003.108286][T10429] netlink: 'syz.4.27869': attribute type 1 has an invalid length.
[ 2003.536572][T10446] syzkaller0: entered promiscuous mode
[ 2003.536595][T10446] syzkaller0: entered allmulticast mode
[ 2004.103007][T10456] ip_tables: iptables: counters copy to user failed while replacing table
[ 2004.143864][T10462] netlink: 'syz.5.27879': attribute type 1 has an invalid length.
[ 2004.921855][T10499] nbd5: detected capacity change from 0 to 63
[ 2004.923065][T10499] block nbd4: NBD_DISCONNECT
[ 2004.923078][T10499] block nbd4: Send disconnect failed -32
[ 2004.925773][    C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 2004.925811][    C1] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 2004.928844][  T190] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 2004.928864][  T190] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 2004.928872][  T190] Buffer I/O error on dev nbd4, logical block 1, async page read
[ 2004.928878][  T190] Buffer I/O error on dev nbd4, logical block 2, async page read
[ 2004.928884][  T190] Buffer I/O error on dev nbd4, logical block 3, async page read
[ 2004.928984][  T190] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 2004.928995][  T190] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 2004.929009][  T190] Buffer I/O error on dev nbd4, logical block 1, async page read
[ 2004.929014][  T190] Buffer I/O error on dev nbd4, logical block 2, async page read
[ 2004.929020][  T190] Buffer I/O error on dev nbd4, logical block 3, async page read
[ 2004.929079][  T190] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 2004.929090][  T190] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 2004.929159][  T190] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 2004.929232][  T190] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 2004.929299][  T190] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 2004.929382][ T4010] ldm_validate_partition_table(): Disk read failed.
[ 2004.929412][  T190] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 2004.929505][  T190] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 2004.929601][  T190] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 2004.929710][ T4010] Dev nbd4: unable to read RDB block 0
[ 2004.930131][ T4010]  nbd4: unable to read partition table
[ 2004.947855][   T58] block nbd5: Receive control failed (result -104)
[ 2004.968720][ T5044] udevd[5044]: worker [4010] terminated by signal 9 (Killed)
[ 2004.968746][ T5044] udevd[5044]: worker [4010] failed while handling '/devices/virtual/block/nbd4'
[ 2005.154645][T10505] syzkaller0: entered promiscuous mode
[ 2005.154662][T10505] syzkaller0: entered allmulticast mode
[ 2008.632939][T10524] nbd4: detected capacity change from 0 to 63
[ 2008.635749][T10524] block nbd4: NBD_DISCONNECT
[ 2008.635912][T10524] block nbd4: Disconnected due to user request.
[ 2008.635924][T10524] block nbd4: shutting down sockets
[ 2008.666855][ T4060] ldm_validate_partition_table(): Disk read failed.
[ 2008.667088][ T4060] Dev nbd4: unable to read RDB block 0
[ 2008.667375][ T4060]  nbd4: unable to read partition table
[ 2008.671093][ T4060] ldm_validate_partition_table(): Disk read failed.
[ 2008.672114][ T4060] Dev nbd4: unable to read RDB block 0
[ 2008.683662][ T4060]  nbd4: unable to read partition table
[ 2008.898624][T10536] syzkaller0: entered promiscuous mode
[ 2008.898640][T10536] syzkaller0: entered allmulticast mode
[ 2009.311605][T10554] netlink: 52 bytes leftover after parsing attributes in process `syz.6.27917'.
[ 2009.311636][T10554] netlink: 'syz.6.27917': attribute type 8 has an invalid length.
[ 2009.396196][T10556] nbd4: detected capacity change from 0 to 63
[ 2009.396791][T10556] block nbd5: NBD_DISCONNECT
[ 2009.396810][T10556] block nbd5: Send disconnect failed -32
[ 2009.396822][T10556] block nbd5: shutting down sockets
[ 2009.399786][ T4059] ldm_validate_partition_table(): Disk read failed.
[ 2009.405124][ T4059] Dev nbd5: unable to read RDB block 0
[ 2009.406760][ T4059]  nbd5: unable to read partition table
[ 2009.413452][ T4059] ldm_validate_partition_table(): Disk read failed.
[ 2009.423867][ T4059] Dev nbd5: unable to read RDB block 0
[ 2009.424582][ T4059]  nbd5: unable to read partition table
[ 2010.188607][   T58] block nbd4: Receive control failed (result -104)
[ 2012.407861][T10554] bridge25: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 2012.407878][T10554] bridge25: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 2012.777337][T10575] dvmrp0: entered allmulticast mode
[ 2012.777505][T10576] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 2013.114763][T10599] xt_HMARK: spi-set and port-set can't be combined
[ 2013.630113][T10631] dvmrp0: entered allmulticast mode
[ 2013.677763][T10634] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 2013.683920][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27952'.
[ 2013.776682][T10639] nbd5: detected capacity change from 0 to 63
[ 2013.778312][   T58] block nbd5: Receive control failed (result -104)
[ 2014.121302][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27962'.
[ 2014.320508][T10667] syzkaller0: entered promiscuous mode
[ 2014.320521][T10667] syzkaller0: entered allmulticast mode
[ 2014.494873][T10674] syzkaller0: entered promiscuous mode
[ 2014.494891][T10674] syzkaller0: entered allmulticast mode
[ 2014.500574][T10683] netlink: 20 bytes leftover after parsing attributes in process `syz.5.27975'.
[ 2014.586094][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27975'.
[ 2014.987088][T10711] syzkaller0: entered promiscuous mode
[ 2014.987102][T10711] syzkaller0: entered allmulticast mode
[ 2015.470374][T10749] syzkaller0: left promiscuous mode
[ 2015.470387][T10749] syzkaller0: left allmulticast mode
[ 2016.339216][T10787] SET target dimension over the limit!
[ 2016.665175][T10797] netlink: 'syz.6.28027': attribute type 1 has an invalid length.
[ 2018.058936][T10859] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2018.058950][T10859] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2018.230005][T10865] netlink: 76 bytes leftover after parsing attributes in process `syz.4.28054'.
[ 2018.448723][T10885] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2018.533736][T10889] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2018.583381][T10891] syzkaller0: entered promiscuous mode
[ 2018.583420][T10891] syzkaller0: entered allmulticast mode
[ 2018.598944][T10891] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[ 2018.743888][T10893] netlink: zone id is out of range
[ 2018.743948][T10893] netlink: zone id is out of range
[ 2018.744058][T10893] netlink: zone id is out of range
[ 2018.744097][T10893] netlink: zone id is out of range
[ 2018.744103][T10893] netlink: zone id is out of range
[ 2018.744108][T10893] netlink: zone id is out of range
[ 2018.744113][T10893] netlink: zone id is out of range
[ 2018.744118][T10893] netlink: zone id is out of range
[ 2018.744123][T10893] netlink: zone id is out of range
[ 2018.744129][T10893] netlink: zone id is out of range
[ 2018.851116][T10896] syzkaller0: left promiscuous mode
[ 2018.851133][T10896] syzkaller0: left allmulticast mode
[ 2022.431160][T10930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2022.987134][T11000] syzkaller0: entered promiscuous mode
[ 2022.987147][T11000] syzkaller0: entered allmulticast mode
[ 2023.450631][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28112'.
[ 2023.864781][T11059] syzkaller0: entered promiscuous mode
[ 2023.864799][T11059] syzkaller0: entered allmulticast mode
[ 2023.876555][T11059] net_ratelimit: 62 callbacks suppressed
[ 2023.876573][T11059] 0: reclassify loop, rule prio 0, protocol 800
[ 2023.974089][T11062] 0: reclassify loop, rule prio 0, protocol 800
[ 2024.038511][T11064] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 2024.041681][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28127'.
[ 2024.367877][T11077] syzkaller0: entered promiscuous mode
[ 2024.367891][T11077] syzkaller0: entered allmulticast mode
[ 2027.696356][T11099] syzkaller0: entered promiscuous mode
[ 2027.696866][T11099] syzkaller0: entered allmulticast mode
[ 2027.733220][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.28139'.
[ 2027.937941][T11113] xt_bpf: check failed: parse error
[ 2027.994451][T11113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2028.721879][T11160] syzkaller0: entered promiscuous mode
[ 2028.721902][T11160] syzkaller0: entered allmulticast mode
[ 2028.925984][T11164] sock: sock_timestamping_bind_phc: sock not bind to device
[ 2031.828835][T11167] syzkaller1: entered promiscuous mode
[ 2031.829446][T11167] syzkaller1: entered allmulticast mode
[ 2032.192613][T11188] syzkaller0: entered promiscuous mode
[ 2032.192633][T11188] syzkaller0: entered allmulticast mode
[ 2036.372835][T11236] netlink: 660 bytes leftover after parsing attributes in process `syz.4.28183'.
[ 2036.603872][T11246] openvswitch: netlink: IP tunnel attribute has 5377 unknown bytes.
[ 2036.694659][T11252] netlink: 660 bytes leftover after parsing attributes in process `syz.6.28191'.
[ 2036.891039][T11258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2036.956453][T11261] tc action pedit offset must be on 32 bit boundaries
[ 2036.956469][T11261] tc action pedit offset must be on 32 bit boundaries
[ 2036.956477][T11261] tc action pedit offset must be on 32 bit boundaries
[ 2036.956483][T11261] tc action pedit offset must be on 32 bit boundaries
[ 2036.956489][T11261] tc action pedit offset must be on 32 bit boundaries
[ 2036.956495][T11261] tc action pedit offset must be on 32 bit boundaries
[ 2036.956501][T11261] tc action pedit offset must be on 32 bit boundaries
[ 2036.956507][T11261] tc action pedit offset must be on 32 bit boundaries
[ 2036.956513][T11261] tc action pedit offset must be on 32 bit boundaries
[ 2036.956519][T11261] tc action pedit offset must be on 32 bit boundaries
[ 2036.956533][T11261] 0: reclassify loop, rule prio 0, protocol 800
[ 2037.067717][T11265] openvswitch: netlink: IP tunnel attribute has 5377 unknown bytes.
[ 2037.350257][T11275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2037.448438][T11282] syzkaller0: entered promiscuous mode
[ 2037.448453][T11282] syzkaller0: entered allmulticast mode
[ 2037.733050][T11299] syzkaller0: entered promiscuous mode
[ 2037.733080][T11299] syzkaller0: entered allmulticast mode
[ 2038.054461][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28221'.
[ 2038.138160][T11322] netlink: 24 bytes leftover after parsing attributes in process `syz.5.28224'.
[ 2038.138515][T11322] netlink: 24 bytes leftover after parsing attributes in process `syz.5.28224'.
[ 2038.202262][T11318] syzkaller0: entered promiscuous mode
[ 2038.202282][T11318] syzkaller0: entered allmulticast mode
[ 2038.212865][T11324] syzkaller0: left promiscuous mode
[ 2038.212883][T11324] syzkaller0: left allmulticast mode
[ 2039.829964][  T190] block nbd4: Possible stuck request ffff88810a88d600: control (read@0,1024B). Runtime 30 seconds
[ 2039.837060][  T190] block nbd4: Possible stuck request ffff88810a88d800: control (read@1024,1024B). Runtime 30 seconds
[ 2039.837152][  T190] block nbd4: Possible stuck request ffff88810a88da00: control (read@2048,1024B). Runtime 30 seconds
[ 2039.837195][  T190] block nbd4: Possible stuck request ffff88810a88dc00: control (read@3072,1024B). Runtime 30 seconds
[ 2041.738283][T11348] Bluetooth: hci0: unsupported parameter 1280
[ 2041.738297][T11348] Bluetooth: hci0: invalid length 0, exp 4 for type 32
[ 2041.910025][T11356] Bluetooth: hci0: invalid length 0, exp 2 for type 23
[ 2041.976279][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28236'.
[ 2042.609290][T11375] netlink: 'syz.4.28244': attribute type 2 has an invalid length.
[ 2042.850971][T11395] syzkaller0: entered promiscuous mode
[ 2042.850985][T11395] syzkaller0: entered allmulticast mode
[ 2043.286245][T11430] netlink: 'syz.5.28270': attribute type 1 has an invalid length.
[ 2043.286258][T11430] netlink: 1368 bytes leftover after parsing attributes in process `syz.5.28270'.
[ 2043.402953][T11435] syzkaller0: entered promiscuous mode
[ 2043.402966][T11435] syzkaller0: entered allmulticast mode
[ 2043.416697][T11440] syzkaller0: entered promiscuous mode
[ 2043.416711][T11440] syzkaller0: entered allmulticast mode
[ 2043.754741][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28286'.
[ 2043.769713][T11464] syzkaller0: entered promiscuous mode
[ 2043.769726][T11464] syzkaller0: entered allmulticast mode
[ 2043.930747][T11472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.28292'.
[ 2043.930769][T11472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28292'.
[ 2044.222448][T11484] netlink: 14 bytes leftover after parsing attributes in process `syz.4.28296'.
[ 2044.302036][  T190] block nbd5: Possible stuck request ffff88810a8e5200: control (read@0,1024B). Runtime 30 seconds
[ 2044.302066][  T190] block nbd5: Possible stuck request ffff88810a8e5400: control (read@1024,1024B). Runtime 30 seconds
[ 2044.302078][  T190] block nbd5: Possible stuck request ffff88810a8e5600: control (read@2048,1024B). Runtime 30 seconds
[ 2044.302088][  T190] block nbd5: Possible stuck request ffff88810a8e5800: control (read@3072,1024B). Runtime 30 seconds
[ 2044.624039][T11514] netlink: 'syz.4.28308': attribute type 21 has an invalid length.
[ 2044.624054][T11514] netlink: 128 bytes leftover after parsing attributes in process `syz.4.28308'.
[ 2044.624095][T11514] netlink: 'syz.4.28308': attribute type 4 has an invalid length.
[ 2044.624101][T11514] netlink: 'syz.4.28308': attribute type 5 has an invalid length.
[ 2044.624106][T11514] netlink: 3 bytes leftover after parsing attributes in process `syz.4.28308'.
[ 2044.950981][T11529] netlink: 'syz.5.28313': attribute type 1 has an invalid length.
[ 2044.992618][T11529] 8021q: adding VLAN 0 to HW filter on device bond39
[ 2045.711322][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28332'.
[ 2045.714194][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28332'.
[ 2046.218412][T11597] netlink: 'syz.4.28345': attribute type 1 has an invalid length.
[ 2046.237772][T11597] 8021q: adding VLAN 0 to HW filter on device bond32
[ 2046.250860][T11597] bond32: entered promiscuous mode
[ 2046.250877][T11597] bond32: entered allmulticast mode
[ 2046.272250][T11597] macvlan3: entered promiscuous mode
[ 2046.272271][T11597] macvlan3: entered allmulticast mode
[ 2046.280372][T11597] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 2046.416832][T12945] nci: nci_ntf_packet: unknown ntf opcode 0x123
[ 2047.375382][T11644] __nla_validate_parse: 1 callbacks suppressed
[ 2047.375394][T11644] netlink: 14 bytes leftover after parsing attributes in process `syz.4.28364'.
[ 2049.341550][T11606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2049.537033][T11665] netlink: 'syz.5.28373': attribute type 1 has an invalid length.
[ 2049.925510][T11686] netlink: 13 bytes leftover after parsing attributes in process `syz.5.28383'.
[ 2049.925961][T11686] netlink: 24 bytes leftover after parsing attributes in process `syz.5.28383'.
[ 2050.030888][T11692] gretap2: entered allmulticast mode
[ 2050.054277][T11694] netlink: 'syz.6.28385': attribute type 21 has an invalid length.
[ 2050.054301][T11694] IPv6: NLM_F_CREATE should be specified when creating new route
[ 2050.161835][T11696] netlink: 14 bytes leftover after parsing attributes in process `syz.5.28388'.
[ 2050.373558][T11707] netlink: 516 bytes leftover after parsing attributes in process `syz.5.28393'.
[ 2050.499215][T11718] netlink: 14 bytes leftover after parsing attributes in process `syz.5.28395'.
[ 2050.840371][T11746] netlink: 28 bytes leftover after parsing attributes in process `syz.6.28408'.
[ 2051.010186][T11757] bridge0: port 1(wlan1) entered blocking state
[ 2051.010304][T11757] bridge0: port 1(wlan1) entered disabled state
[ 2051.010442][T11757] mac80211_hwsim hwsim110 wlan1: entered allmulticast mode
[ 2051.011796][T11757] mac80211_hwsim hwsim110 wlan1: entered promiscuous mode
[ 2051.032112][T11757] mac80211_hwsim hwsim110 wlan1 (unregistering): left allmulticast mode
[ 2051.032137][T11757] mac80211_hwsim hwsim110 wlan1 (unregistering): left promiscuous mode
[ 2051.036032][T11757] bridge0: port 1(wlan1) entered disabled state
[ 2051.126415][T11763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2051.235465][T11770] netlink: 'syz.5.28416': attribute type 4 has an invalid length.
[ 2051.235485][T11770] netlink: 17 bytes leftover after parsing attributes in process `syz.5.28416'.
[ 2051.810131][T11804] netlink: 'syz.6.28431': attribute type 1 has an invalid length.
[ 2051.822105][T11804] gretap6: entered allmulticast mode
[ 2051.887162][T11809] netlink: 'syz.4.28433': attribute type 4 has an invalid length.
[ 2051.887180][T11809] netlink: 17 bytes leftover after parsing attributes in process `syz.4.28433'.
[ 2052.469205][T11843] netlink: 36 bytes leftover after parsing attributes in process `syz.4.28446'.
[ 2054.052648][T11912] netlink: 52 bytes leftover after parsing attributes in process `syz.6.28466'.
[ 2054.052884][T11912] netlink: 52 bytes leftover after parsing attributes in process `syz.6.28466'.
[ 2054.107422][T11915] veth0: left allmulticast mode
[ 2054.107439][T11915] veth0: left promiscuous mode
[ 2054.107537][T11915] bridge0: port 1(veth0) entered disabled state
[ 2054.124002][T11915] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 2054.193400][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.28469'.
[ 2055.977056][T11869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2056.093196][T11930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2056.123194][T11932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2056.336422][T11943] netlink: 'syz.4.28478': attribute type 4 has an invalid length.
[ 2056.341292][T11943] netlink: 'syz.4.28478': attribute type 4 has an invalid length.
[ 2056.448605][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28481'.
[ 2056.489159][T11951] gretap2: entered allmulticast mode
[ 2056.517116][T11953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2057.199777][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28488'.
[ 2057.199793][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28488'.
[ 2058.632532][T12005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.28505'.
[ 2058.668638][T12007] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 2059.426180][T12041] netlink: 'syz.6.28518': attribute type 2 has an invalid length.
[ 2059.594225][T12007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2059.628287][T12041] debugfs: '.P'G!DES' already exists in 'ieee80211'
[ 2060.111458][T12054] netlink: 36 bytes leftover after parsing attributes in process `syz.4.28522'.
[ 2060.399660][T12064] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 2062.753505][T12049] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2062.830811][T12078] netlink: 28 bytes leftover after parsing attributes in process `syz.5.28529'.
[ 2063.023719][T12082] netlink: 'syz.6.28531': attribute type 2 has an invalid length.
[ 2063.045137][T12081] syzkaller1: entered promiscuous mode
[ 2063.045779][T12081] syzkaller1: entered allmulticast mode
[ 2063.069613][T12082] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[ 2063.069624][T12082] CPU: 0 UID: 0 PID: 12082 Comm: syz.6.28531 Not tainted syzkaller #0 PREEMPT(full) 
[ 2063.069634][T12082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2063.069639][T12082] Call Trace:
[ 2063.069643][T12082]  <TASK>
[ 2063.069647][T12082]  dump_stack_lvl+0xe8/0x150
[ 2063.069664][T12082]  sysfs_warn_dup+0x8e/0xa0
[ 2063.069679][T12082]  sysfs_do_create_link_sd+0xc0/0x110
[ 2063.069699][T12082]  device_add_class_symlinks+0x1cf/0x240
[ 2063.069716][T12082]  device_add+0x467/0xb80
[ 2063.069731][T12082]  wiphy_register+0x1fc8/0x2ff0
[ 2063.069763][T12082]  ? __pfx_wiphy_register+0x10/0x10
[ 2063.069786][T12082]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2063.069805][T12082]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 2063.069830][T12082]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 2063.069855][T12082]  ieee80211_register_hw+0x3d3d/0x4a50
[ 2063.069874][T12082]  ? ieee80211_register_hw+0x1971/0x4a50
[ 2063.069892][T12082]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 2063.069902][T12082]  ? __asan_memset+0x22/0x50
[ 2063.069914][T12082]  ? __hrtimer_setup+0x1b7/0x260
[ 2063.069925][T12082]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2063.069973][T12082]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 2063.070012][T12082]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 2063.070026][T12082]  ? kstrndup+0xbd/0x160
[ 2063.070046][T12082]  ? kstrndup+0xbd/0x160
[ 2063.070060][T12082]  hwsim_new_radio_nl+0xd8b/0xf90
[ 2063.070089][T12082]  genl_family_rcv_msg_doit+0x233/0x340
[ 2063.070114][T12082]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2063.070138][T12082]  ? bpf_lsm_capable+0x9/0x20
[ 2063.070149][T12082]  ? security_capable+0x7e/0x2c0
[ 2063.070171][T12082]  genl_rcv_msg+0x614/0x7a0
[ 2063.070185][T12082]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2063.070194][T12082]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2063.070208][T12082]  netlink_rcv_skb+0x226/0x4a0
[ 2063.070221][T12082]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2063.070230][T12082]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2063.070248][T12082]  ? down_read+0x2be/0x330
[ 2063.070260][T12082]  genl_rcv+0x28/0x40
[ 2063.070269][T12082]  netlink_unicast+0x7bd/0x940
[ 2063.070285][T12082]  netlink_sendmsg+0x813/0xb40
[ 2063.070302][T12082]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2063.070325][T12082]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2063.070348][T12082]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2063.070368][T12082]  sock_sendmsg_nosec+0x13a/0x180
[ 2063.070394][T12082]  ____sys_sendmsg+0x54e/0x850
[ 2063.070416][T12082]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2063.070441][T12082]  ? import_iovec+0x73/0xa0
[ 2063.070460][T12082]  ___sys_sendmsg+0x2a5/0x360
[ 2063.070476][T12082]  ? __lock_acquire+0x747/0x2de0
[ 2063.070498][T12082]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2063.070521][T12082]  ? futex_wait+0x2a2/0x390
[ 2063.070563][T12082]  ? __fget_files+0x2a/0x420
[ 2063.070578][T12082]  ? __fget_files+0x3a2/0x420
[ 2063.070595][T12082]  __x64_sys_sendmsg+0x1b1/0x290
[ 2063.070607][T12082]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2063.070627][T12082]  do_syscall_64+0x166/0x520
[ 2063.070640][T12082]  ? trace_irq_disable+0x3b/0x140
[ 2063.070652][T12082]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2063.070670][T12082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2063.070683][T12082] RIP: 0033:0x7ffa0999e159
[ 2063.070698][T12082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2063.070711][T12082] RSP: 002b:00007ffa0a79f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2063.070727][T12082] RAX: ffffffffffffffda RBX: 00007ffa09c25fa0 RCX: 00007ffa0999e159
[ 2063.070737][T12082] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[ 2063.070745][T12082] RBP: 00007ffa09a3506b R08: 0000000000000000 R09: 0000000000000000
[ 2063.070754][T12082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2063.070762][T12082] R13: 00007ffa09c26038 R14: 00007ffa09c25fa0 R15: 00007fffd62e5e08
[ 2063.070784][T12082]  </TASK>
[ 2063.193668][T12087] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2063.508703][T12095] netlink: 'syz.5.28536': attribute type 4 has an invalid length.
[ 2063.553209][T12097] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 2064.382406][T12097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2064.847936][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28547'.
[ 2064.855810][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28547'.
[ 2065.377336][T12164] netlink: 'syz.4.28559': attribute type 1 has an invalid length.
[ 2066.094892][T12213] netlink: 'syz.5.28575': attribute type 1 has an invalid length.
[ 2066.158790][T12213] gretap2: entered allmulticast mode
[ 2066.172058][T12213] bond40: (slave gretap2): making interface the new active one
[ 2066.172727][T12213] bond40: (slave gretap2): Enslaving as an active interface with an up link
[ 2066.216002][T12219] netlink: 64 bytes leftover after parsing attributes in process `syz.6.28577'.
[ 2066.223651][T12219] syzkaller1: entered promiscuous mode
[ 2066.223661][T12219] syzkaller1: entered allmulticast mode
[ 2066.283703][T12224] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 2066.283807][T22760] wg2 speed is unknown, defaulting to 1000
[ 2066.461182][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28583'.
[ 2066.581553][T12242] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 2066.621021][T12247] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2067.217952][T12259] netlink: 52 bytes leftover after parsing attributes in process `syz.6.28592'.
[ 2067.218134][T12259] netlink: 52 bytes leftover after parsing attributes in process `syz.6.28592'.
[ 2067.274758][T12260] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 2067.407490][T12242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2067.606154][T12269] netlink: 132 bytes leftover after parsing attributes in process `syz.5.28594'.
[ 2067.611427][T12269] netlink: 64 bytes leftover after parsing attributes in process `syz.5.28594'.
[ 2067.737755][T12277] netlink: 'syz.4.28597': attribute type 4 has an invalid length.
[ 2067.798060][T12282] xt_cluster: node mask cannot exceed total number of nodes
[ 2067.853614][T12284] netlink: ct family unspecified
[ 2067.853630][T12284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2068.075317][T12294] netlink: 52 bytes leftover after parsing attributes in process `syz.4.28605'.
[ 2068.130561][T12295] netlink: 52 bytes leftover after parsing attributes in process `syz.4.28605'.
[ 2068.361781][T12295] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 2068.639016][T12313] lo: entered promiscuous mode
[ 2068.640848][T12313] tunl0: entered promiscuous mode
[ 2068.641858][T12313] gre0: entered promiscuous mode
[ 2068.658437][T12313] erspan0: entered promiscuous mode
[ 2068.659739][T12313] ip_vti0: entered promiscuous mode
[ 2068.662706][T12313] ip6_vti0: entered promiscuous mode
[ 2068.663927][T12313] sit0: entered promiscuous mode
[ 2068.681110][T12313] ip6tnl0: entered promiscuous mode
[ 2068.682829][T12313] ip6gre0: entered promiscuous mode
[ 2068.778230][T12313] ip6gretap0: entered promiscuous mode
[ 2068.780680][T12313] .`: entered promiscuous mode
[ 2068.782021][T12313] nlmon0: entered promiscuous mode
[ 2068.783170][T12313] veth0: entered promiscuous mode
[ 2068.800693][T12313] veth1: entered promiscuous mode
[ 2068.809388][T12313] wg0: entered promiscuous mode
[ 2068.812604][T12313] wg2: entered promiscuous mode
[ 2068.814021][T12313] veth0_to_bridge: entered promiscuous mode
[ 2068.825607][T12313] bridge_slave_0: entered promiscuous mode
[ 2068.828140][T12313] veth1_to_bridge: entered promiscuous mode
[ 2068.830621][T12313] : entered promiscuous mode
[ 2068.832947][T12313] veth0_to_bond: entered promiscuous mode
[ 2068.845252][T12313] bond_slave_0: entered promiscuous mode
[ 2068.847060][T12313] veth0_to_team: entered promiscuous mode
[ 2068.849388][T12313] team_slave_0: entered promiscuous mode
[ 2068.850772][T12313] C: entered promiscuous mode
[ 2068.852792][T12313] team_slave_1: entered promiscuous mode
[ 2068.854583][T12313] veth0_to_batadv: entered promiscuous mode
[ 2068.872119][T12313] batadv_slave_0: entered promiscuous mode
[ 2068.890851][T12313] xfrm0: entered promiscuous mode
[ 2068.996116][T12313] veth1_to_hsr: entered promiscuous mode
[ 2068.999246][T12313] hsr0: entered promiscuous mode
[ 2068.999839][T12313] veth1_virt_wifi: entered promiscuous mode
[ 2069.001039][T12313] veth0_virt_wifi: entered promiscuous mode
[ 2069.002173][T12313] virt_wifi0: entered promiscuous mode
[ 2069.003106][T12313] ipvlan0: entered promiscuous mode
[ 2069.004323][T12313] bond0: entered promiscuous mode
[ 2069.024118][T12313] ip6gre3: entered promiscuous mode
[ 2069.024392][T12313] @: entered promiscuous mode
[ 2069.031265][T12313] tipc: Resetting bearer <eth:syzkaller0>
[ 2069.031359][T12313] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 2069.033298][T12313] vlan6: entered promiscuous mode
[ 2069.046855][T12313] veth20: entered promiscuous mode
[ 2069.046983][T12313] veth21: entered promiscuous mode
[ 2069.047559][T12313] bridge22: entered promiscuous mode
[ 2069.048781][T12313] macvlan6: entered promiscuous mode
[ 2069.051349][T12313] bridge23: entered promiscuous mode
[ 2069.053492][T12313] sit5: entered promiscuous mode
[ 2069.077941][T12313] bond35: entered promiscuous mode
[ 2069.078070][T12313] bond36: entered promiscuous mode
[ 2069.078289][T12313] veth22: entered promiscuous mode
[ 2069.079858][T12313] bond37: entered promiscuous mode
[ 2069.079991][T12313] wireguard0: entered promiscuous mode
[ 2069.080098][T12313] bond38: entered promiscuous mode
[ 2069.080839][T12313] bridge24: entered promiscuous mode
[ 2069.082999][T12313] bareudp0: entered promiscuous mode
[ 2069.104704][T12313] bond39: entered promiscuous mode
[ 2069.109944][T12313] bond40: entered promiscuous mode
[ 2069.109964][T12313] gretap2: entered promiscuous mode
[ 2069.114471][T12313] macvlan7: entered promiscuous mode
[ 2069.130755][T12324] batman_adv: batadv0: Interface activated: syzkaller0
[ 2069.223322][   T13] netdevsim netdevsim5 : unset [0, 0] type 1 family 0 port 8472 - 0
[ 2069.223347][   T13] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2069.223361][   T13] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2069.223377][   T13] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2069.305241][T12337] netlink: ct family unspecified
[ 2069.305258][T12337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2069.433661][T12342] syzkaller0: left promiscuous mode
[ 2069.433674][T12342] syzkaller0: left allmulticast mode
[ 2069.481142][T12344] 8021q: VLANs not supported on syzkaller0
[ 2069.744447][T12359] syzkaller1: entered promiscuous mode
[ 2069.744467][T12359] syzkaller1: entered allmulticast mode
[ 2069.902555][  T190] block nbd4: Possible stuck request ffff88810a88d600: control (read@0,1024B). Runtime 60 seconds
[ 2069.902580][  T190] block nbd4: Possible stuck request ffff88810a88d800: control (read@1024,1024B). Runtime 60 seconds
[ 2069.902591][  T190] block nbd4: Possible stuck request ffff88810a88da00: control (read@2048,1024B). Runtime 60 seconds
[ 2069.902601][  T190] block nbd4: Possible stuck request ffff88810a88dc00: control (read@3072,1024B). Runtime 60 seconds
[ 2070.473223][T12394] openvswitch: netlink: IP tunnel dst address not specified
[ 2070.473240][T12394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2070.489125][T12390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2070.697168][T19970] IPVS: ip_vs_send_async error -101
[ 2072.514397][T12348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2072.805548][T12425] __nla_validate_parse: 1 callbacks suppressed
[ 2072.805559][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28658'.
[ 2072.814078][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28658'.
[ 2072.890523][T12435] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 2072.993467][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.28662'.
[ 2073.312700][T12472] geneve6: entered promiscuous mode
[ 2073.325262][ T1893] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 32899 - 0
[ 2073.325287][ T1893] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 32899 - 0
[ 2073.325300][ T1893] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 32899 - 0
[ 2073.702462][T12435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2073.992981][T12486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28677'.
[ 2074.373913][T12504] netlink: 52 bytes leftover after parsing attributes in process `syz.4.28686'.
[ 2074.374195][T12504] netlink: 52 bytes leftover after parsing attributes in process `syz.4.28686'.
[ 2074.379218][  T190] block nbd5: Possible stuck request ffff88810a8e5200: control (read@0,1024B). Runtime 60 seconds
[ 2074.379250][  T190] block nbd5: Possible stuck request ffff88810a8e5400: control (read@1024,1024B). Runtime 60 seconds
[ 2074.379267][  T190] block nbd5: Possible stuck request ffff88810a8e5600: control (read@2048,1024B). Runtime 60 seconds
[ 2074.379283][  T190] block nbd5: Possible stuck request ffff88810a8e5800: control (read@3072,1024B). Runtime 60 seconds
[ 2074.472017][T12504] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 2074.518473][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.28685'.
[ 2074.916062][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28702'.
[ 2074.982502][T12547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2075.349959][T12568] netlink: 'syz.5.28714': attribute type 2 has an invalid length.
[ 2075.349974][T12568] netlink: 'syz.5.28714': attribute type 11 has an invalid length.
[ 2075.349983][T12568] netlink: 132 bytes leftover after parsing attributes in process `syz.5.28714'.
[ 2075.453221][T12575] 8021q: VLANs not supported on syzkaller0
[ 2075.526908][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28718'.
[ 2076.076627][T12606] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 2076.084284][T12613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2076.434489][T12624] geneve4: entered promiscuous mode
[ 2076.611044][T12632] netlink: 'syz.4.28742': attribute type 1 has an invalid length.
[ 2076.611066][T12632] netlink: 'syz.4.28742': attribute type 7 has an invalid length.
[ 2076.611076][T12632] netlink: 'syz.4.28742': attribute type 8 has an invalid length.
[ 2076.611084][T12632] netlink: 'syz.4.28742': attribute type 1 has an invalid length.
[ 2077.209755][T12669] netlink: 'syz.5.28759': attribute type 1 has an invalid length.
[ 2077.489321][T12683] syzkaller0: entered promiscuous mode
[ 2077.489960][T12683] syzkaller0: entered allmulticast mode
[ 2077.575495][T12689] syzkaller0: left promiscuous mode
[ 2077.575508][T12689] syzkaller0: left allmulticast mode
[ 2077.958314][T12714] netlink: 'syz.4.28777': attribute type 2 has an invalid length.
[ 2078.183706][T12728] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 2078.448365][T12748] netlink: 'syz.5.28789': attribute type 1 has an invalid length.
[ 2078.939403][T12757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2079.012828][T12728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2079.407188][T12759] bridge17: entered promiscuous mode
[ 2079.407263][T12759] bridge18: entered promiscuous mode
[ 2079.410248][T12759] bridge19: entered promiscuous mode
[ 2079.430518][T12759] bridge20: entered promiscuous mode
[ 2079.438945][T12759] gre5: entered promiscuous mode
[ 2079.453014][T12759] bond29: entered promiscuous mode
[ 2079.453101][T12759] veth20: entered promiscuous mode
[ 2079.453178][T12759] veth21: entered promiscuous mode
[ 2079.453237][T12759] veth22: entered promiscuous mode
[ 2079.453320][T12759] veth23: entered promiscuous mode
[ 2079.471398][T12759] ip6tnl2: entered promiscuous mode
[ 2079.484695][T12759] bond30: entered promiscuous mode
[ 2079.484708][T12759] ip6gretap0: entered promiscuous mode
[ 2079.504474][T12759] veth24: entered promiscuous mode
[ 2079.510407][T12759] bond31: entered promiscuous mode
[ 2079.510525][T12759] dvmrp0: entered promiscuous mode
[ 2079.513992][T12759] syzkaller0: entered promiscuous mode
[ 2079.543254][T12759] mac80211_hwsim hwsim115 wlan1: entered promiscuous mode
[ 2079.543395][T12759] mac80211_hwsim hwsim116 wlan7: entered promiscuous mode
[ 2079.543460][T12759] mac80211_hwsim hwsim117 wlan8: entered promiscuous mode
[ 2079.568512][T28623] wg2 speed is unknown, defaulting to 1000
[ 2079.568525][T28623] syz2: Port: 1 Link DOWN
[ 2079.699415][T12782] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 2080.532833][T12782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2080.643485][T12812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2080.643586][T12812] hsr0: left promiscuous mode
[ 2081.042643][T12834] __nla_validate_parse: 7 callbacks suppressed
[ 2081.042657][T12834] netlink: 236 bytes leftover after parsing attributes in process `syz.5.28820'.
[ 2081.236017][T12846] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2081.364277][T12853] syzkaller0: entered allmulticast mode
[ 2081.596725][T12865] tc action pedit unable to extract header offset for header type (0x4)
[ 2081.596770][T12865] tc action pedit unable to extract header offset for header type (0x4)
[ 2081.596777][T12865] tc action pedit unable to extract header offset for header type (0x4)
[ 2081.596781][T12865] tc action pedit unable to extract header offset for header type (0x4)
[ 2081.596786][T12865] tc action pedit unable to extract header offset for header type (0x4)
[ 2081.596790][T12865] tc action pedit unable to extract header offset for header type (0x4)
[ 2081.596794][T12865] tc action pedit unable to extract header offset for header type (0x4)
[ 2081.596799][T12865] tc action pedit unable to extract header offset for header type (0x4)
[ 2081.596803][T12865] tc action pedit unable to extract header offset for header type (0x4)
[ 2081.596808][T12865] tc action pedit unable to extract header offset for header type (0x4)
[ 2081.596817][T12865] 0: reclassify loop, rule prio 0, protocol 800
[ 2081.689033][T12873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.28837'.
[ 2081.689054][T12873] openvswitch: netlink: Missing key (keys=c0, expected=480)
[ 2081.943119][T12884] netlink: 'syz.4.28843': attribute type 1 has an invalid length.
[ 2081.943131][T12884] netlink: 'syz.4.28843': attribute type 7 has an invalid length.
[ 2081.943136][T12884] netlink: 'syz.4.28843': attribute type 8 has an invalid length.
[ 2081.943141][T12884] netlink: 208 bytes leftover after parsing attributes in process `syz.4.28843'.
[ 2081.943147][T12884] NCSI netlink: No device for ifindex 1073545264
[ 2082.202476][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28844'.
[ 2082.447091][T12907] xt_socket: unknown flags 0x8
[ 2083.023273][T12944] syzkaller0: entered promiscuous mode
[ 2083.023286][T12944] syzkaller0: entered allmulticast mode
[ 2083.158153][T12957] netlink: 52 bytes leftover after parsing attributes in process `syz.5.28869'.
[ 2083.158265][T12957] netlink: 52 bytes leftover after parsing attributes in process `syz.5.28869'.
[ 2083.205214][T12957] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 2083.239510][T12961] netlink: 56 bytes leftover after parsing attributes in process `syz.5.28871'.
[ 2083.337243][T12964] Bluetooth: hci1: too big key_count value 29096
[ 2083.477151][T12972] netlink: 16 bytes leftover after parsing attributes in process `syz.6.28876'.
[ 2083.523528][T12974] netlink: 'syz.6.28877': attribute type 178 has an invalid length.
[ 2083.772693][T13005] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 2084.019759][T13016] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[ 2084.019781][T13016] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[ 2084.019789][T13016] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[ 2084.608200][T13005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2084.808253][T13046] netlink: 'syz.4.28898': attribute type 4 has an invalid length.
[ 2084.808268][T13046] netlink: 17 bytes leftover after parsing attributes in process `syz.4.28898'.
[ 2085.193677][T13092] netlink: 32 bytes leftover after parsing attributes in process `syz.4.28917'.
[ 2085.463817][T13116] netlink: ct family unspecified
[ 2085.463834][T13116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2085.520607][T13121] netlink: 'syz.5.28930': attribute type 10 has an invalid length.
[ 2085.520630][T13121] .`: left promiscuous mode
[ 2085.708053][T13143] syzkaller0: left promiscuous mode
[ 2085.708065][T13143] syzkaller0: left allmulticast mode
[ 2085.930662][T13170] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 2085.973406][T13175] geneve0: entered promiscuous mode
[ 2085.995546][ T1893] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 36392 - 0
[ 2085.995570][ T1893] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 36392 - 0
[ 2085.995583][ T1893] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 36392 - 0
[ 2085.995597][ T1893] netdevsim netdevsim5 : set [1, 0] type 2 family 0 port 36392 - 0
[ 2086.753282][T13170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2086.978230][T13193] __nla_validate_parse: 1 callbacks suppressed
[ 2086.978243][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28957'.
[ 2086.978249][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28957'.
[ 2087.002757][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28957'.
[ 2087.002770][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28957'.
[ 2087.306020][T13219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2087.508466][T13225] netlink: 'syz.5.28971': attribute type 1 has an invalid length.
[ 2087.508481][T13225] netlink: 62751 bytes leftover after parsing attributes in process `syz.5.28971'.
[ 2088.132854][T13260] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2091.060637][T13262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2091.274888][T13278] hsr0: entered promiscuous mode
[ 2091.313126][T13278] vxlan1: entered promiscuous mode
[ 2091.731142][T13303] ip_tables: iptables: counters copy to user failed while replacing table
[ 2091.819999][T13307] netlink: 'syz.4.29008': attribute type 16 has an invalid length.
[ 2091.820020][T13307] netlink: 'syz.4.29008': attribute type 17 has an invalid length.
[ 2091.820096][T13307] lo: left promiscuous mode
[ 2091.838234][T13307] tunl0: left promiscuous mode
[ 2091.842493][T13307] gre0: left promiscuous mode
[ 2091.842505][T13307] gre0: left allmulticast mode
[ 2091.843620][T13307] gretap0: left promiscuous mode
[ 2091.861057][T13307] erspan0: left promiscuous mode
[ 2091.862546][T13307] ip_vti0: left promiscuous mode
[ 2091.871177][T13307] ip6_vti0: left promiscuous mode
[ 2091.871964][T13307] sit0: left promiscuous mode
[ 2091.874036][T13307] ip6tnl0: left promiscuous mode
[ 2091.874738][T13307] ip6gre0: left promiscuous mode
[ 2091.886801][T13307] : left promiscuous mode
[ 2091.887156][T13307] 8021q: adding VLAN 0 to HW filter on device 
[ 2091.887493][T13307] team0: left promiscuous mode
[ 2091.887993][T13307] 8021q: adding VLAN 0 to HW filter on device team0
[ 2091.888433][T13307] nlmon0: left promiscuous mode
[ 2091.888986][T13307] veth0: left promiscuous mode
[ 2091.889586][T13307] veth1: left promiscuous mode
[ 2091.890789][T13307] wg0: left promiscuous mode
[ 2091.894194][T13307] wg2: left promiscuous mode
[ 2091.912629][T13307] veth0_to_bridge: left promiscuous mode
[ 2091.913395][T13307] bridge_slave_0: left promiscuous mode
[ 2091.913992][T13307] veth1_to_bridge: left promiscuous mode
[ 2091.914808][T13307] bridge_slave_1: left promiscuous mode
[ 2091.923200][T13307] C: left promiscuous mode
[ 2091.923837][T13307] team_slave_1: left promiscuous mode
[ 2091.924139][T13307] veth1_to_batadv: left promiscuous mode
[ 2091.924848][T13307] batadv_slave_1: left promiscuous mode
[ 2091.934462][T13307] xfrm0: left promiscuous mode
[ 2091.937273][T13307] veth1_to_hsr: left promiscuous mode
[ 2091.938256][T13307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2091.940203][T13307] hsr0: left promiscuous mode
[ 2091.941588][T13307] veth0_macvtap: left promiscuous mode
[ 2091.942594][T13307] veth0_macvtap: entered promiscuous mode
[ 2091.942709][T13307] macvtap0: left promiscuous mode
[ 2091.943436][T13307] macsec0: left promiscuous mode
[ 2091.944207][T13307] geneve1: left promiscuous mode
[ 2091.968040][T13307] syztnl1: left promiscuous mode
[ 2091.968564][T13307] gtp0: left promiscuous mode
[ 2091.969324][T13307] >: left promiscuous mode
[ 2091.970112][T13307] mac80211_hwsim hwsim87 wlan2: left promiscuous mode
[ 2091.970122][T13307] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 2092.082522][T22760] wg2 speed is unknown, defaulting to 1000
[ 2092.082537][T22760] syz2: Port: 1 Link ACTIVE
[ 2092.174379][T13319] tcf_pedit_act: 7 callbacks suppressed
[ 2092.174397][T13319] tc action pedit offset must be on 32 bit boundaries
[ 2092.233077][T13324] batman_adv: batadv0: Adding interface: veth0
[ 2092.233092][T13324] batman_adv: batadv0: The MTU of interface veth0 is too small (1282) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[ 2092.233110][T13324] batman_adv: batadv0: Interface activated: veth0
[ 2092.251207][T13324] batman_adv: batadv0: Removing interface: macvtap1
[ 2092.313324][T13324] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 2092.313344][T13324] batman_adv: batadv0: Removing interface: syzkaller0
[ 2092.314614][T13324] batman_adv: batadv0: Interface deactivated: veth0
[ 2092.314712][T13324] batman_adv: batadv0: Removing interface: veth0
[ 2092.642255][T13336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2093.042906][T13367] ip_tables: iptables: counters copy to user failed while replacing table
[ 2093.073559][T13369] netlink: 'syz.5.29036': attribute type 1 has an invalid length.
[ 2093.145924][T13369] bond41: entered promiscuous mode
[ 2093.146163][T13369] 8021q: adding VLAN 0 to HW filter on device bond41
[ 2093.190225][T13369] 8021q: adding VLAN 0 to HW filter on device bond41
[ 2093.191495][T13369] bond41: (slave xfrm1): The slave device specified does not support setting the MAC address
[ 2093.191506][T13369] bond41: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[ 2093.205512][T13369] bond41: (slave xfrm1): making interface the new active one
[ 2093.205525][T13369] xfrm1: entered promiscuous mode
[ 2093.208656][T13369] xfrm1: left promiscuous mode
[ 2093.397586][T13386] IPv6: Can't replace route, no match found
[ 2093.422985][T13387] netlink: 'syz.6.29041': attribute type 10 has an invalid length.
[ 2093.897176][T13414] netlink: 52 bytes leftover after parsing attributes in process `syz.5.29054'.
[ 2094.137270][T13428] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 2094.170324][T13424] netlink: 44 bytes leftover after parsing attributes in process `syz.4.29059'.
[ 2094.346291][T13438] syzkaller1: entered promiscuous mode
[ 2094.346305][T13438] syzkaller1: entered allmulticast mode
[ 2094.483306][T13442] netlink: 52 bytes leftover after parsing attributes in process `syz.4.29066'.
[ 2094.485906][T13442] netlink: 52 bytes leftover after parsing attributes in process `syz.4.29066'.
[ 2094.561368][T13442] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 2094.836063][T13458] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058)
[ 2094.891074][T13460] ip_tables: iptables: counters copy to user failed while replacing table
[ 2094.967754][T13460] netlink: 'syz.6.29072': attribute type 16 has an invalid length.
[ 2094.967766][T13460] netlink: 'syz.6.29072': attribute type 17 has an invalid length.
[ 2094.971460][T13460] 8021q: adding VLAN 0 to HW filter on device team0
[ 2094.984744][T13460] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 2097.533091][ T5044] udevd[5044]: worker [4059] /devices/virtual/block/nbd5 is taking a long time
[ 2097.533126][ T5044] udevd[5044]: worker [4060] /devices/virtual/block/nbd4 is taking a long time
[ 2098.307892][T13473] syzkaller0: entered promiscuous mode
[ 2098.308509][T13473] syzkaller0: entered allmulticast mode
[ 2098.333602][T13481] lo: entered promiscuous mode
[ 2098.495008][T13481] tunl0: entered promiscuous mode
[ 2098.635536][T13481] gre0: entered promiscuous mode
[ 2098.793712][T13481] gretap0: entered promiscuous mode
[ 2098.801748][T13481] erspan0: entered promiscuous mode
[ 2098.804271][T13481] ip_vti0: entered promiscuous mode
[ 2098.812289][T13481] ip6_vti0: entered promiscuous mode
[ 2098.834066][T13481] sit0: entered promiscuous mode
[ 2098.864445][T13481] ip6tnl0: entered promiscuous mode
[ 2098.903669][T13481] ip6gre0: entered promiscuous mode
[ 2098.922698][T13481] : entered promiscuous mode
[ 2098.924501][T13481] team0: entered promiscuous mode
[ 2098.933318][T13481] nlmon0: entered promiscuous mode
[ 2098.944493][T13481] veth0: entered promiscuous mode
[ 2098.947892][T13481] veth1: entered promiscuous mode
[ 2098.958651][T13481] wg0: entered promiscuous mode
[ 2098.964322][T13481] wg2: entered promiscuous mode
[ 2098.974255][T13481] veth0_to_bridge: entered promiscuous mode
[ 2098.999706][T13481] bridge_slave_0: entered promiscuous mode
[ 2099.001599][T13481] veth1_to_bridge: entered promiscuous mode
[ 2099.003528][T13481] bridge_slave_1: entered promiscuous mode
[ 2099.008403][T13481] C: entered promiscuous mode
[ 2099.021253][T13481] team_slave_1: entered promiscuous mode
[ 2099.048480][T13481] veth1_to_batadv: entered promiscuous mode
[ 2099.052677][T13481] batadv_slave_1: entered promiscuous mode
[ 2099.061070][T13481] xfrm0: entered promiscuous mode
[ 2099.067585][T13481] veth1_to_hsr: entered promiscuous mode
[ 2099.083856][T13481] hsr0: entered promiscuous mode
[ 2099.101768][T13481] macvtap0: entered promiscuous mode
[ 2099.115683][T13481] macsec0: entered promiscuous mode
[ 2099.130994][T13481] geneve1: entered promiscuous mode
[ 2099.144725][T13481] syztnl1: entered promiscuous mode
[ 2099.155841][T13481] gtp0: entered promiscuous mode
[ 2099.164546][T13481] >: entered promiscuous mode
[ 2099.182941][T13481] mac80211_hwsim hwsim87 wlan2: entered promiscuous mode
[ 2099.196346][T13481] bridge0.257: entered promiscuous mode
[ 2099.196497][T13481] mac80211_hwsim hwsim119 wlan9: entered promiscuous mode
[ 2099.202981][T13492] wg2 speed is unknown, defaulting to 1000
[ 2099.203000][T13492] syz2: Port: 1 Link DOWN
[ 2099.298533][T13500] netlink: 'syz.5.29082': attribute type 1 has an invalid length.
[ 2099.430885][T13500] bond42: entered promiscuous mode
[ 2099.431068][T13500] 8021q: adding VLAN 0 to HW filter on device bond42
[ 2099.458336][T13501] 8021q: adding VLAN 0 to HW filter on device bond42
[ 2099.458489][T13501] bond42: (slave xfrm1): The slave device specified does not support setting the MAC address
[ 2099.458499][T13501] bond42: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[ 2099.465657][T13501] bond42: (slave xfrm1): making interface the new active one
[ 2099.465678][T13501] xfrm1: entered promiscuous mode
[ 2099.466672][T13501] bond42: (slave xfrm1): Enslaving as an active interface with an up link
[ 2099.584987][T13510] netlink: 165 bytes leftover after parsing attributes in process `syz.6.29087'.
[ 2099.783621][T13530] netlink: 'syz.5.29097': attribute type 1 has an invalid length.
[ 2099.963989][T13535] syzkaller0: left promiscuous mode
[ 2099.964001][T13535] syzkaller0: left allmulticast mode
[ 2099.971379][T13535] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 2099.997541][  T190] block nbd4: Possible stuck request ffff88810a88d600: control (read@0,1024B). Runtime 90 seconds
[ 2099.997592][  T190] block nbd4: Possible stuck request ffff88810a88d800: control (read@1024,1024B). Runtime 90 seconds
[ 2099.997603][  T190] block nbd4: Possible stuck request ffff88810a88da00: control (read@2048,1024B). Runtime 90 seconds
[ 2099.997614][  T190] block nbd4: Possible stuck request ffff88810a88dc00: control (read@3072,1024B). Runtime 90 seconds
[ 2100.139261][T13546] syzkaller0: entered promiscuous mode
[ 2100.139273][T13546] syzkaller0: entered allmulticast mode
[ 2100.354099][T13563] syzkaller0: left promiscuous mode
[ 2100.354130][T13563] syzkaller0: left allmulticast mode
[ 2100.359764][T13563] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 2100.544625][T13578] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 2101.374696][T13578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2101.465215][T13601] ip6t_srh: unknown srh invflags 4000
[ 2101.593118][T13603] wg2 speed is unknown, defaulting to 1000
[ 2101.610820][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29124'.
[ 2101.732288][T13613] syzkaller0: entered promiscuous mode
[ 2101.732301][T13613] syzkaller0: entered allmulticast mode
[ 2102.080722][T13627] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 2102.556748][T13632] syzkaller0: entered promiscuous mode
[ 2102.557267][T13632] syzkaller0: entered allmulticast mode
[ 2103.172244][T13682] ip_tables: iptables: counters copy to user failed while replacing table
[ 2103.187232][T13682] tipc: Resetting bearer <eth:syzkaller0>
[ 2103.187688][T13682] tipc: Resetting bearer <eth:syzkaller0>
[ 2103.192986][T13682] netlink: 'syz.5.29157': attribute type 16 has an invalid length.
[ 2103.192999][T13682] netlink: 'syz.5.29157': attribute type 17 has an invalid length.
[ 2103.193039][T13682] lo: left promiscuous mode
[ 2103.212161][T13682] tunl0: left promiscuous mode
[ 2103.213755][T13682] gre0: left promiscuous mode
[ 2103.224154][T13682] erspan0: left promiscuous mode
[ 2103.230233][T13682] ip_vti0: left promiscuous mode
[ 2103.235139][T13682] ip6_vti0: left promiscuous mode
[ 2103.235909][T13682] sit0: left promiscuous mode
[ 2103.247957][T13682] ip6tnl0: left promiscuous mode
[ 2103.249940][T13682] ip6gre0: left promiscuous mode
[ 2103.250670][T13682] ip6gretap0: left promiscuous mode
[ 2103.262809][T13682] 8021q: adding VLAN 0 to HW filter on device .`
[ 2103.263266][T13682] nlmon0: left promiscuous mode
[ 2103.264473][T13682] veth0: left promiscuous mode
[ 2103.264809][T13682] veth1: left promiscuous mode
[ 2103.276424][T13682] wg0: left promiscuous mode
[ 2103.280028][T13682] wg2: left promiscuous mode
[ 2103.280783][T13682] veth0_to_bridge: left promiscuous mode
[ 2103.281303][T13682] bridge_slave_0: left promiscuous mode
[ 2103.284748][T13682] veth1_to_bridge: left promiscuous mode
[ 2103.297732][T13682] : left promiscuous mode
[ 2103.299319][T13682] veth0_to_bond: left promiscuous mode
[ 2103.301542][T13682] bond_slave_0: left promiscuous mode
[ 2103.302119][T13682] veth0_to_team: left promiscuous mode
[ 2103.313600][T13682] team_slave_0: left promiscuous mode
[ 2103.314711][T13682] C: left promiscuous mode
[ 2103.323079][T13682] team_slave_1: left promiscuous mode
[ 2103.323390][T13682] veth0_to_batadv: left promiscuous mode
[ 2103.324746][T13682] batadv_slave_0: left promiscuous mode
[ 2103.331918][T13682] xfrm0: left promiscuous mode
[ 2103.333924][T13682] veth1_to_hsr: left promiscuous mode
[ 2103.339341][T13682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2103.339372][T13682] hsr0: left promiscuous mode
[ 2103.340230][T13682] veth1_virt_wifi: left promiscuous mode
[ 2103.342110][T13682] veth0_virt_wifi: left promiscuous mode
[ 2103.343156][T13682] virt_wifi0: left promiscuous mode
[ 2103.343169][T13682] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 2104.014703][T13728] syzkaller0: entered promiscuous mode
[ 2104.014716][T13728] syzkaller0: entered allmulticast mode
[ 2104.014868][T13728] tipc: Resetting bearer <eth:syzkaller0>
[ 2104.041339][T13732] netlink: 'syz.5.29180': attribute type 1 has an invalid length.
[ 2104.155455][T13741] netlink: 20 bytes leftover after parsing attributes in process `syz.5.29184'.
[ 2104.251703][T13749] Unsupported ieee802154 address type: 0
[ 2104.476218][  T190] block nbd5: Possible stuck request ffff88810a8e5200: control (read@0,1024B). Runtime 90 seconds
[ 2104.476241][  T190] block nbd5: Possible stuck request ffff88810a8e5400: control (read@1024,1024B). Runtime 90 seconds
[ 2104.476251][  T190] block nbd5: Possible stuck request ffff88810a8e5600: control (read@2048,1024B). Runtime 90 seconds
[ 2104.476267][  T190] block nbd5: Possible stuck request ffff88810a8e5800: control (read@3072,1024B). Runtime 90 seconds
[ 2104.611775][T13770] netlink: 16 bytes leftover after parsing attributes in process `syz.6.29198'.
[ 2104.681258][T13776] syzkaller0: left promiscuous mode
[ 2104.681270][T13776] syzkaller0: left allmulticast mode
[ 2104.681426][T13776] tipc: Resetting bearer <eth:syzkaller0>
[ 2104.797373][T13786] netlink: 52 bytes leftover after parsing attributes in process `syz.6.29206'.
[ 2105.149134][T13806] netlink: 112 bytes leftover after parsing attributes in process `syz.4.29217'.
[ 2105.342433][T13818] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 2105.448618][T13830] netlink: 52 bytes leftover after parsing attributes in process `syz.6.29225'.
[ 2105.520455][T13836] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 2105.611859][T13841] ip_tables: iptables: counters copy to user failed while replacing table
[ 2106.167468][T13818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2106.606808][T13881] vlan0: entered promiscuous mode
[ 2106.744784][T13889] tipc: Enabled bearer <eth:ip6gre0>, priority 2
[ 2106.797080][T13892] netlink: 27 bytes leftover after parsing attributes in process `syz.5.29254'.
[ 2106.938508][T13898] netlink: 'syz.5.29257': attribute type 3 has an invalid length.
[ 2107.653118][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.29268'.
[ 2107.683599][T13926] syzkaller0: entered promiscuous mode
[ 2107.683610][T13926] syzkaller0: entered allmulticast mode
[ 2108.501136][T13947] netlink: 52 bytes leftover after parsing attributes in process `syz.4.29278'.
[ 2108.558006][T13947] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 2108.873486][T13956] syzkaller0: left promiscuous mode
[ 2108.873500][T13956] syzkaller0: left allmulticast mode
[ 2109.118095][T13969] netlink: 10 bytes leftover after parsing attributes in process `syz.4.29287'.
[ 2110.156243][T13995] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2110.452790][T14013] tipc: Resetting bearer <eth:syzkaller0>
[ 2110.456711][T14013] netlink: 'syz.5.29304': attribute type 16 has an invalid length.
[ 2110.456729][T14013] netlink: 'syz.5.29304': attribute type 17 has an invalid length.
[ 2110.494475][T14013] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 2110.864303][T14033] netlink: 'syz.5.29313': attribute type 1 has an invalid length.
[ 2110.889002][T14033] bond43: entered promiscuous mode
[ 2110.889224][T14033] 8021q: adding VLAN 0 to HW filter on device bond43
[ 2110.931905][T14036] netlink: 112 bytes leftover after parsing attributes in process `syz.5.29314'.
[ 2113.323434][T14003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2113.569846][T14051] netlink: 3 bytes leftover after parsing attributes in process `syz.4.29319'.
[ 2113.569866][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29319'.
[ 2113.569879][T14051] netlink: 3 bytes leftover after parsing attributes in process `syz.4.29319'.
[ 2113.569888][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29319'.
[ 2113.569898][T14051] netlink: 3 bytes leftover after parsing attributes in process `syz.4.29319'.
[ 2113.769376][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.29322'.
[ 2113.769396][T14067] macvlan0: left promiscuous mode
[ 2113.769515][T14067] netlink: 'syz.6.29322': attribute type 1 has an invalid length.
[ 2113.769523][T14067] netlink: 'syz.6.29322': attribute type 2 has an invalid length.
[ 2113.954738][T14081] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2114.052539][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29337'.
[ 2114.297700][T14113] netlink: 48 bytes leftover after parsing attributes in process `syz.6.29347'.
[ 2114.725631][T14140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29360'.
[ 2114.847226][   T34] audit: type=1107 audit(1791191572.012:21): pid=14145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 2115.000175][T14155] lo: entered promiscuous mode
[ 2115.194833][T14155] tunl0: entered promiscuous mode
[ 2115.315994][T14155] gre0: entered promiscuous mode
[ 2115.630941][T14155] erspan0: entered promiscuous mode
[ 2115.786456][T14155] ip_vti0: entered promiscuous mode
[ 2115.927362][T14155] ip6_vti0: entered promiscuous mode
[ 2115.932220][T14155] sit0: entered promiscuous mode
[ 2116.047646][T14155] ip6tnl0: entered promiscuous mode
[ 2116.049252][T14155] ip6gre0: entered promiscuous mode
[ 2116.050978][T14155] ip6gretap0: entered promiscuous mode
[ 2116.052494][T14155] .`: entered promiscuous mode
[ 2116.053278][T14155] nlmon0: entered promiscuous mode
[ 2116.054234][T14155] veth0: entered promiscuous mode
[ 2116.189159][T14155] veth1: entered promiscuous mode
[ 2116.305563][T14155] wg0: entered promiscuous mode
[ 2116.448214][T14155] wg2: entered promiscuous mode
[ 2116.456544][T14155] veth0_to_bridge: entered promiscuous mode
[ 2116.463751][T14155] bridge_slave_0: entered promiscuous mode
[ 2116.469231][T14155] veth1_to_bridge: entered promiscuous mode
[ 2116.472547][T14155] : entered promiscuous mode
[ 2116.481093][T14155] veth0_to_bond: entered promiscuous mode
[ 2116.482970][T14155] bond_slave_0: entered promiscuous mode
[ 2116.484326][T14155] veth0_to_team: entered promiscuous mode
[ 2116.493514][T14155] team_slave_0: entered promiscuous mode
[ 2116.494689][T14155] C: entered promiscuous mode
[ 2116.500740][T14155] team_slave_1: entered promiscuous mode
[ 2116.501978][T14155] veth0_to_batadv: entered promiscuous mode
[ 2116.504313][T14155] batadv_slave_0: entered promiscuous mode
[ 2116.514025][T14155] xfrm0: entered promiscuous mode
[ 2116.518458][T14155] veth1_to_hsr: entered promiscuous mode
[ 2116.522479][T14155] hsr0: entered promiscuous mode
[ 2116.523315][T14155] veth1_virt_wifi: entered promiscuous mode
[ 2116.524336][T14155] veth0_virt_wifi: entered promiscuous mode
[ 2116.533645][T14155] virt_wifi0: entered promiscuous mode
[ 2116.533990][T14155] tipc: Resetting bearer <eth:syzkaller0>
[ 2116.542971][T14155] syzkaller0: entered promiscuous mode
[ 2116.544465][T14155] mac80211_hwsim hwsim118 wlan1: entered promiscuous mode
[ 2116.552595][T14155] ip6tnl4: entered promiscuous mode
[ 2116.553354][T14155] vlan257: entered promiscuous mode
[ 2116.556126][ T1892] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 36392 - 0
[ 2116.556450][ T1892] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 36392 - 0
[ 2116.556553][ T1892] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 36392 - 0
[ 2116.556567][ T1892] netdevsim netdevsim5 : unset [1, 0] type 2 family 0 port 36392 - 0
[ 2116.576550][T14162] syzkaller0: entered allmulticast mode
[ 2116.577335][T14162] tipc: Resetting bearer <eth:syzkaller0>
[ 2116.714437][T14181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.29370'.
[ 2116.774168][T14186] netlink: 'syz.6.29377': attribute type 1 has an invalid length.
[ 2116.774181][T14186] netlink: 244 bytes leftover after parsing attributes in process `syz.6.29377'.
[ 2116.865993][T14189] lo: entered promiscuous mode
[ 2116.869088][T14189] tunl0: entered promiscuous mode
[ 2116.890021][T14189] gre0: entered promiscuous mode
[ 2116.923495][T14189] erspan0: entered promiscuous mode
[ 2116.931088][T14189] ip_vti0: entered promiscuous mode
[ 2116.943245][T14189] ip6_vti0: entered promiscuous mode
[ 2116.950625][T14189] sit0: entered promiscuous mode
[ 2116.999622][T14189] ip6tnl0: entered promiscuous mode
[ 2117.034637][T14189] ip6gre0: entered promiscuous mode
[ 2117.060063][T14189] ip6gretap0: entered promiscuous mode
[ 2117.062287][T14189] bridge0: port 4(veth0_virt_wifi) entered disabled state
[ 2117.083464][T14189] vcan0: entered promiscuous mode
[ 2117.102698][T14189] team0: entered promiscuous mode
[ 2117.110577][T14189] nlmon0: entered promiscuous mode
[ 2117.117885][T14189] veth0: entered promiscuous mode
[ 2117.123203][T14189] veth1: entered promiscuous mode
[ 2117.139304][T14189] wg0: entered promiscuous mode
[ 2117.166076][T14189] wg2: entered promiscuous mode
[ 2117.167297][T14189] veth0_to_bridge: entered promiscuous mode
[ 2117.169121][T14189] bridge_slave_0: entered promiscuous mode
[ 2117.170739][T14189] veth1_to_bridge: entered promiscuous mode
[ 2117.172732][T14189] bridge_slave_1: entered promiscuous mode
[ 2117.222530][T14189] veth0_to_team: entered promiscuous mode
[ 2117.230842][T14189] team_slave_0: entered promiscuous mode
[ 2117.242795][T14189] C: entered promiscuous mode
[ 2117.252042][T14189] team_slave_1: entered promiscuous mode
[ 2117.261466][T14189] veth0_to_batadv: entered promiscuous mode
[ 2117.272081][T14189] batadv_slave_0: entered promiscuous mode
[ 2117.281926][T14189] veth1_to_batadv: entered promiscuous mode
[ 2117.292678][T14189] batadv_slave_1: entered promiscuous mode
[ 2117.300627][T14189] xfrm0: entered promiscuous mode
[ 2117.308810][T14189] veth1_to_hsr: entered promiscuous mode
[ 2117.326412][T14189] hsr0: entered promiscuous mode
[ 2117.330700][T14189] veth1_virt_wifi: entered promiscuous mode
[ 2117.350100][T14189] virt_wifi0: entered promiscuous mode
[ 2117.350193][T14189] macvlan0: entered promiscuous mode
[ 2117.362052][T14189] bridge22: entered promiscuous mode
[ 2117.364596][T14189] veth20: entered promiscuous mode
[ 2117.364666][T14189] veth21: entered promiscuous mode
[ 2117.364750][T14189] veth22: entered promiscuous mode
[ 2117.364821][T14189] veth23: entered promiscuous mode
[ 2117.376584][T14189] bridge23: entered promiscuous mode
[ 2117.378310][T14189] bridge24: entered promiscuous mode
[ 2117.380589][T14189] ip6gre3: entered promiscuous mode
[ 2117.380651][T14189] bond36: entered promiscuous mode
[ 2117.380658][T14189] ip6gretap1: entered promiscuous mode
[ 2117.382172][T14189] bond37: entered promiscuous mode
[ 2117.382780][T14189] bridge25: entered promiscuous mode
[ 2117.382865][T14189] dvmrp0: entered promiscuous mode
[ 2117.383439][T14189] bond38: entered promiscuous mode
[ 2117.383496][T14189] gretap6: entered promiscuous mode
[ 2117.383546][T14189] mac80211_hwsim hwsim111 wlan1: entered promiscuous mode
[ 2117.383610][T14189] mac80211_hwsim hwsim112 wlan8: entered promiscuous mode
[ 2117.383665][T14189] gtp6: entered promiscuous mode
[ 2117.383723][T14189] mac80211_hwsim hwsim114 wlan9: entered promiscuous mode
[ 2117.384521][T14189] bridge0.257: entered promiscuous mode
[ 2117.384646][T14189] mac80211_hwsim hwsim121 wlan10: entered promiscuous mode
[ 2117.384734][T14189] syzkaller0: entered promiscuous mode
[ 2117.422970][T14192] tipc: Enabled bearer <eth:macvtap0>, priority 7
[ 2117.475675][T14196] syzkaller0: entered allmulticast mode
[ 2120.247523][T14194] syzkaller1: entered promiscuous mode
[ 2120.247780][T14194] syzkaller1: entered allmulticast mode
[ 2120.425134][   T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 32899 - 0
[ 2120.429897][ T1893] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 32899 - 0
[ 2120.429933][ T1893] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 32899 - 0
[ 2120.512115][T14210] netlink: 280 bytes leftover after parsing attributes in process `syz.6.29381'.
[ 2120.512408][T14210] netlink: 'syz.6.29381': attribute type 27 has an invalid length.
[ 2120.930158][T14232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29390'.
[ 2121.062561][T14237] tipc: Resetting bearer <eth:syzkaller0>
[ 2121.062611][T14237] tipc: Resetting bearer <eth:syzkaller0>
[ 2121.063704][T14235] netlink: 'syz.5.29391': attribute type 16 has an invalid length.
[ 2121.063714][T14235] netlink: 'syz.5.29391': attribute type 17 has an invalid length.
[ 2121.063756][T14235] lo: left promiscuous mode
[ 2121.078421][T14235] tunl0: left promiscuous mode
[ 2121.080530][T14235] gre0: left promiscuous mode
[ 2121.089538][T14235] erspan0: left promiscuous mode
[ 2121.091644][T14235] ip_vti0: left promiscuous mode
[ 2121.092208][T14235] ip6_vti0: left promiscuous mode
[ 2121.094192][T14235] sit0: left promiscuous mode
[ 2121.135921][T14235] ip6tnl0: left promiscuous mode
[ 2121.136868][T14235] ip6gre0: left promiscuous mode
[ 2121.137566][T14235] ip6gretap0: left promiscuous mode
[ 2121.138555][T14235] .`: left promiscuous mode
[ 2121.139015][T14235] 8021q: adding VLAN 0 to HW filter on device .`
[ 2121.139295][T14235] nlmon0: left promiscuous mode
[ 2121.139830][T14235] veth0: left promiscuous mode
[ 2121.140492][T14235] veth1: left promiscuous mode
[ 2121.141408][T14235] wg0: left promiscuous mode
[ 2121.143515][T14235] wg2: left promiscuous mode
[ 2121.144655][T14235] veth0_to_bridge: left promiscuous mode
[ 2121.170250][T14235] bridge_slave_0: left promiscuous mode
[ 2121.170819][T14235] veth1_to_bridge: left promiscuous mode
[ 2121.171786][T14235] : left promiscuous mode
[ 2121.172062][T14235] veth0_to_bond: left promiscuous mode
[ 2121.172657][T14235] bond_slave_0: left promiscuous mode
[ 2121.173299][T14235] veth0_to_team: left promiscuous mode
[ 2121.174055][T14235] team_slave_0: left promiscuous mode
[ 2121.174367][T14235] C: left promiscuous mode
[ 2121.191500][T14235] team_slave_1: left promiscuous mode
[ 2121.191833][T14235] veth0_to_batadv: left promiscuous mode
[ 2121.192421][T14235] batadv_slave_0: left promiscuous mode
[ 2121.193058][T14235] xfrm0: left promiscuous mode
[ 2121.194384][T14235] veth1_to_hsr: left promiscuous mode
[ 2121.204350][T14235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2121.204383][T14235] hsr0: left promiscuous mode
[ 2121.204879][T14235] veth1_virt_wifi: left promiscuous mode
[ 2121.212592][T14235] veth0_virt_wifi: left promiscuous mode
[ 2121.213003][T14235] virt_wifi0: left promiscuous mode
[ 2121.213011][T14235] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 2121.667559][T14253] netlink: 'syz.4.29397': attribute type 2 has an invalid length.
[ 2121.708295][T14253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.29397'.
[ 2121.813237][T14263] netlink: 'syz.6.29398': attribute type 1 has an invalid length.
[ 2121.813251][T14263] netlink: 116 bytes leftover after parsing attributes in process `syz.6.29398'.
[ 2121.813259][T14263] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 2122.054773][ T5340] 8021q: adding VLAN 0 to HW filter on device eth11
[ 2122.188692][T14270] netlink: 'syz.4.29402': attribute type 10 has an invalid length.
[ 2122.188808][T14270] team0: left promiscuous mode
[ 2122.212993][T14270] 8021q: adding VLAN 0 to HW filter on device team0
[ 2122.214742][T14270] team0: entered promiscuous mode
[ 2122.244267][T14270] : (slave team0): Enslaving as an active interface with an up link
[ 2122.402035][T14280] netlink: 24 bytes leftover after parsing attributes in process `syz.5.29404'.
[ 2122.525976][ T5340] 8021q: adding VLAN 0 to HW filter on device eth12
[ 2122.937506][ T5340] 8021q: adding VLAN 0 to HW filter on device eth13
[ 2123.252528][T14308] netlink: 12 bytes leftover after parsing attributes in process `syz.6.29411'.
[ 2123.349242][ T5340] 8021q: adding VLAN 0 to HW filter on device eth14
[ 2123.371604][T14316] netlink: 16 bytes leftover after parsing attributes in process `syz.6.29413'.
[ 2123.760222][T14341] netlink: 16 bytes leftover after parsing attributes in process `syz.6.29424'.
[ 2130.056815][  T190] block nbd4: Possible stuck request ffff88810a88d600: control (read@0,1024B). Runtime 120 seconds
[ 2130.056851][  T190] block nbd4: Possible stuck request ffff88810a88d800: control (read@1024,1024B). Runtime 120 seconds
[ 2130.056870][  T190] block nbd4: Possible stuck request ffff88810a88da00: control (read@2048,1024B). Runtime 120 seconds
[ 2130.056889][  T190] block nbd4: Possible stuck request ffff88810a88dc00: control (read@3072,1024B). Runtime 120 seconds
[ 2132.055622][T19970] IPVS: ip_vs_send_async error -101
[ 2134.537676][  T190] block nbd5: Possible stuck request ffff88810a8e5200: control (read@0,1024B). Runtime 120 seconds
[ 2134.537710][  T190] block nbd5: Possible stuck request ffff88810a8e5400: control (read@1024,1024B). Runtime 120 seconds
[ 2134.537728][  T190] block nbd5: Possible stuck request ffff88810a8e5600: control (read@2048,1024B). Runtime 120 seconds
[ 2134.537745][  T190] block nbd5: Possible stuck request ffff88810a8e5800: control (read@3072,1024B). Runtime 120 seconds
[ 2139.160786][ T7206] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2139.171537][ T7206] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2139.173994][ T7206] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2139.174400][ T7206] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2139.174681][ T7206] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2139.217076][ T7206] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2139.218940][T14404] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2139.224482][T14404] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2139.232693][T14404] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2139.243253][T14404] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2139.402282][T14398] wg2 speed is unknown, defaulting to 1000
[ 2139.552200][T14400] wg2 speed is unknown, defaulting to 1000
[ 2139.706366][T14398] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2139.706411][T14398] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2139.706477][T14398] bridge_slave_0: entered allmulticast mode
[ 2139.707203][T14398] bridge_slave_0: entered promiscuous mode
[ 2139.731746][T14398] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2139.732059][T14398] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2139.732208][T14398] bridge_slave_1: entered allmulticast mode
[ 2139.734195][T14398] bridge_slave_1: entered promiscuous mode
[ 2139.776210][T14398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2139.778839][T14398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2139.823849][T14398] team0: Port device team_slave_0 added
[ 2139.829124][T14398] team0: Port device team_slave_1 added
[ 2139.878049][T14398] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2139.878063][T14398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2139.878080][T14398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2139.931583][T14398] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2139.931597][T14398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2139.931616][T14398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2140.022609][T14398] hsr_slave_0: entered promiscuous mode
[ 2140.023531][T14398] hsr_slave_1: entered promiscuous mode
[ 2140.193960][T14400] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2140.194168][T14400] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2140.194350][T14400] bridge_slave_0: entered allmulticast mode
[ 2140.203728][T14400] bridge_slave_0: entered promiscuous mode
[ 2140.231019][T14404] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2140.234083][T14404] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2140.243529][T14404] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2140.250645][T14404] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2140.253543][T14404] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2140.255785][T14400] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2140.256813][T14400] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2140.257501][T14400] bridge_slave_1: entered allmulticast mode
[ 2140.259944][T14400] bridge_slave_1: entered promiscuous mode
[ 2140.446079][T14400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2140.471452][T14400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2140.532058][T14400] team0: Port device team_slave_0 added
[ 2140.544343][T14400] team0: Port device team_slave_1 added
[ 2140.595647][T14400] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2140.595662][T14400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2140.595680][T14400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2140.600691][T14400] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2140.600706][T14400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2140.600721][T14400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2140.677866][T14400] hsr_slave_0: entered promiscuous mode
[ 2140.678381][T14400] hsr_slave_1: entered promiscuous mode
[ 2140.678809][T14400] debugfs: 'hsr0' already exists in 'hsr'
[ 2140.678823][T14400] Cannot create hsr debugfs directory
[ 2140.808482][T14434] wg2 speed is unknown, defaulting to 1000
[ 2141.171677][T14434] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2141.171758][T14434] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2141.172016][T14434] bridge_slave_0: entered allmulticast mode
[ 2141.172814][T14434] bridge_slave_0: entered promiscuous mode
[ 2141.187869][T14434] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2141.187945][T14434] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2141.188177][T14434] bridge_slave_1: entered allmulticast mode
[ 2141.189584][T14434] bridge_slave_1: entered promiscuous mode
[ 2141.218073][T14434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2141.223276][T14434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2141.243476][T14434] team0: Port device team_slave_0 added
[ 2141.247047][T14434] team0: Port device team_slave_1 added
[ 2141.255142][T14404] Bluetooth: hci4: command tx timeout
[ 2141.261876][T14434] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2141.261886][T14434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2141.261896][T14434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2141.262999][T14434] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2141.263006][T14434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2141.263016][T14434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2141.299550][T14434] hsr_slave_0: entered promiscuous mode
[ 2141.300155][T14434] hsr_slave_1: entered promiscuous mode
[ 2141.300529][T14434] debugfs: 'hsr0' already exists in 'hsr'
[ 2141.300539][T14434] Cannot create hsr debugfs directory
[ 2141.335203][T14404] Bluetooth: hci5: command tx timeout
[ 2142.375148][T14404] Bluetooth: hci6: command tx timeout
[ 2143.335180][T14404] Bluetooth: hci4: command tx timeout
[ 2143.415127][T14404] Bluetooth: hci5: command tx timeout
[ 2144.455212][T14404] Bluetooth: hci6: command tx timeout
[ 2145.415200][T14404] Bluetooth: hci4: command tx timeout
[ 2145.495138][T14404] Bluetooth: hci5: command tx timeout
[ 2146.535443][T14404] Bluetooth: hci6: command tx timeout
[ 2147.496245][T14404] Bluetooth: hci4: command tx timeout
[ 2147.575224][T14404] Bluetooth: hci5: command tx timeout
[ 2148.616336][ T4993] Bluetooth: hci6: command tx timeout
[ 2160.138393][  T190] block nbd4: Possible stuck request ffff88810a88d600: control (read@0,1024B). Runtime 150 seconds
[ 2160.138424][  T190] block nbd4: Possible stuck request ffff88810a88d800: control (read@1024,1024B). Runtime 150 seconds
[ 2160.138442][  T190] block nbd4: Possible stuck request ffff88810a88da00: control (read@2048,1024B). Runtime 150 seconds
[ 2160.138459][  T190] block nbd4: Possible stuck request ffff88810a88dc00: control (read@3072,1024B). Runtime 150 seconds
[ 2164.617062][  T190] block nbd5: Possible stuck request ffff88810a8e5200: control (read@0,1024B). Runtime 150 seconds
[ 2164.617085][  T190] block nbd5: Possible stuck request ffff88810a8e5400: control (read@1024,1024B). Runtime 150 seconds
[ 2164.617096][  T190] block nbd5: Possible stuck request ffff88810a8e5600: control (read@2048,1024B). Runtime 150 seconds
[ 2164.617106][  T190] block nbd5: Possible stuck request ffff88810a8e5800: control (read@3072,1024B). Runtime 150 seconds
[ 2189.494755][ T5044] udevd[5044]: worker [4060] /devices/virtual/block/nbd4 timeout; kill it
[ 2189.510106][ T5044] udevd[5044]: seq 52611 '/devices/virtual/block/nbd4' killed
[ 2190.227071][  T190] block nbd4: Possible stuck request ffff88810a88d600: control (read@0,1024B). Runtime 180 seconds
[ 2190.227104][  T190] block nbd4: Possible stuck request ffff88810a88d800: control (read@1024,1024B). Runtime 180 seconds
[ 2190.227120][  T190] block nbd4: Possible stuck request ffff88810a88da00: control (read@2048,1024B). Runtime 180 seconds
[ 2190.227135][  T190] block nbd4: Possible stuck request ffff88810a88dc00: control (read@3072,1024B). Runtime 180 seconds
[ 2194.704126][  T190] block nbd5: Possible stuck request ffff88810a8e5200: control (read@0,1024B). Runtime 180 seconds
[ 2194.704160][  T190] block nbd5: Possible stuck request ffff88810a8e5400: control (read@1024,1024B). Runtime 180 seconds
[ 2194.704177][  T190] block nbd5: Possible stuck request ffff88810a8e5600: control (read@2048,1024B). Runtime 180 seconds
[ 2194.704194][  T190] block nbd5: Possible stuck request ffff88810a8e5800: control (read@3072,1024B). Runtime 180 seconds
[ 2195.517083][ T5044] udevd[5044]: worker [4059] /devices/virtual/block/nbd5 timeout; kill it
[ 2195.518943][ T5044] udevd[5044]: seq 52637 '/devices/virtual/block/nbd5' killed
[ 2199.149797][ T4993] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2199.153356][ T4993] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2199.165105][ T4993] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2199.171307][ T4993] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2199.173618][ T4993] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2199.356730][T14454] wg2 speed is unknown, defaulting to 1000
[ 2199.505394][T14454] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2199.505471][T14454] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2199.505568][T14454] bridge_slave_0: entered allmulticast mode
[ 2199.506371][T14454] bridge_slave_0: entered promiscuous mode
[ 2199.508166][T14454] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2199.508236][T14454] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2199.508292][T14454] bridge_slave_1: entered allmulticast mode
[ 2199.509176][T14454] bridge_slave_1: entered promiscuous mode
[ 2199.532461][T14454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2199.534122][T14454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2199.553119][T14454] team0: Port device team_slave_0 added
[ 2199.554410][T14454] team0: Port device team_slave_1 added
[ 2199.569322][T14454] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2199.569332][T14454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2199.569343][T14454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2199.570285][T14454] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2199.570291][T14454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2199.570300][T14454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2199.597685][T14454] hsr_slave_0: entered promiscuous mode
[ 2199.598199][T14454] hsr_slave_1: entered promiscuous mode
[ 2199.598698][T14454] debugfs: 'hsr0' already exists in 'hsr'
[ 2199.598712][T14454] Cannot create hsr debugfs directory
[ 2200.173028][T14404] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 2200.178996][T14404] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 2200.179985][T14404] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 2200.184251][T14404] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 2200.184748][T14404] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 2200.340873][T14472] wg2 speed is unknown, defaulting to 1000
[ 2200.503038][T14472] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2200.503119][T14472] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2200.503219][T14472] bridge_slave_0: entered allmulticast mode
[ 2200.504058][T14472] bridge_slave_0: entered promiscuous mode
[ 2200.505915][T14472] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2200.505983][T14472] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2200.506040][T14472] bridge_slave_1: entered allmulticast mode
[ 2200.506808][T14472] bridge_slave_1: entered promiscuous mode
[ 2200.530179][T14472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2200.531882][T14472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2200.556716][T14472] team0: Port device team_slave_0 added
[ 2200.558141][T14472] team0: Port device team_slave_1 added
[ 2200.575245][T14472] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2200.575255][T14472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2200.575265][T14472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2200.576096][T14472] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2200.576102][T14472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2200.576111][T14472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2200.608126][T14472] hsr_slave_0: entered promiscuous mode
[ 2200.608620][T14472] hsr_slave_1: entered promiscuous mode
[ 2200.608981][T14472] debugfs: 'hsr0' already exists in 'hsr'
[ 2200.608991][T14472] Cannot create hsr debugfs directory
[ 2201.143977][ T4993] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 2201.148495][ T4993] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 2201.149085][ T4993] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 2201.149483][ T4993] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 2201.150497][ T4993] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 2201.255308][T14404] Bluetooth: hci7: command tx timeout
[ 2201.303115][T14490] wg2 speed is unknown, defaulting to 1000
[ 2201.461833][T14490] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2201.461979][T14490] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2201.462043][T14490] bridge_slave_0: entered allmulticast mode
[ 2201.462818][T14490] bridge_slave_0: entered promiscuous mode
[ 2201.464197][T14490] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2201.464263][T14490] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2201.464318][T14490] bridge_slave_1: entered allmulticast mode
[ 2201.466164][T14490] bridge_slave_1: entered promiscuous mode
[ 2201.483628][T14490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2201.488614][T14490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2201.510068][T14490] team0: Port device team_slave_0 added
[ 2201.511835][T14490] team0: Port device team_slave_1 added
[ 2201.528263][T14490] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2201.528277][T14490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2201.528292][T14490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2201.529318][T14490] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2201.529324][T14490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2201.529335][T14490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2201.553003][T14490] hsr_slave_0: entered promiscuous mode
[ 2201.553416][T14490] hsr_slave_1: entered promiscuous mode
[ 2201.553907][T14490] debugfs: 'hsr0' already exists in 'hsr'
[ 2201.553916][T14490] Cannot create hsr debugfs directory
[ 2202.217205][T14404] Bluetooth: hci8: command tx timeout
[ 2203.175416][T14404] Bluetooth: hci9: command tx timeout
[ 2203.335469][T14404] Bluetooth: hci7: command tx timeout
[ 2204.295535][T14404] Bluetooth: hci8: command tx timeout
[ 2205.255531][T14404] Bluetooth: hci9: command tx timeout
[ 2205.415345][T14404] Bluetooth: hci7: command tx timeout
[ 2206.375318][T14404] Bluetooth: hci8: command tx timeout
[ 2207.336814][T14404] Bluetooth: hci9: command tx timeout
[ 2207.495369][T14404] Bluetooth: hci7: command tx timeout
[ 2208.455253][T14404] Bluetooth: hci8: command tx timeout
[ 2209.416494][T14404] Bluetooth: hci9: command tx timeout
[ 2220.299428][  T190] block nbd4: Possible stuck request ffff88810a88d600: control (read@0,1024B). Runtime 210 seconds
[ 2220.299462][  T190] block nbd4: Possible stuck request ffff88810a88d800: control (read@1024,1024B). Runtime 210 seconds
[ 2220.299480][  T190] block nbd4: Possible stuck request ffff88810a88da00: control (read@2048,1024B). Runtime 210 seconds
[ 2220.299498][  T190] block nbd4: Possible stuck request ffff88810a88dc00: control (read@3072,1024B). Runtime 210 seconds
[ 2224.779007][  T190] block nbd5: Possible stuck request ffff88810a8e5200: control (read@0,1024B). Runtime 210 seconds
[ 2224.779042][  T190] block nbd5: Possible stuck request ffff88810a8e5400: control (read@1024,1024B). Runtime 210 seconds
[ 2224.779060][  T190] block nbd5: Possible stuck request ffff88810a8e5600: control (read@2048,1024B). Runtime 210 seconds
[ 2224.779076][  T190] block nbd5: Possible stuck request ffff88810a8e5800: control (read@3072,1024B). Runtime 210 seconds
[ 2250.378747][  T190] block nbd4: Possible stuck request ffff88810a88d600: control (read@0,1024B). Runtime 240 seconds
[ 2250.378770][  T190] block nbd4: Possible stuck request ffff88810a88d800: control (read@1024,1024B). Runtime 240 seconds
[ 2250.378781][  T190] block nbd4: Possible stuck request ffff88810a88da00: control (read@2048,1024B). Runtime 240 seconds
[ 2250.378791][  T190] block nbd4: Possible stuck request ffff88810a88dc00: control (read@3072,1024B). Runtime 240 seconds
[ 2254.861714][  T190] block nbd5: Possible stuck request ffff88810a8e5200: control (read@0,1024B). Runtime 240 seconds
[ 2254.861748][  T190] block nbd5: Possible stuck request ffff88810a8e5400: control (read@1024,1024B). Runtime 240 seconds
[ 2254.861764][  T190] block nbd5: Possible stuck request ffff88810a8e5600: control (read@2048,1024B). Runtime 240 seconds
[ 2254.861787][  T190] block nbd5: Possible stuck request ffff88810a8e5800: control (read@3072,1024B). Runtime 240 seconds
[ 2259.158885][ T4993] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 2259.169587][ T4993] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 2259.171072][ T4993] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 2259.175229][ T4993] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 2259.183659][ T4993] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 2259.382038][T14510] wg2 speed is unknown, defaulting to 1000
[ 2259.610839][T14510] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2259.610981][T14510] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2259.611049][T14510] bridge_slave_0: entered allmulticast mode
[ 2259.611850][T14510] bridge_slave_0: entered promiscuous mode
[ 2259.623342][T14510] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2259.623453][T14510] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2259.623761][T14510] bridge_slave_1: entered allmulticast mode
[ 2259.624703][T14510] bridge_slave_1: entered promiscuous mode
[ 2259.668224][T14510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2259.679950][T14510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2259.710221][T14510] team0: Port device team_slave_0 added
[ 2259.712707][T14510] team0: Port device team_slave_1 added
[ 2259.738138][T14510] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2259.738148][T14510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2259.738159][T14510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2259.739159][T14510] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2259.739166][T14510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2259.739176][T14510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2259.809931][T14510] hsr_slave_0: entered promiscuous mode
[ 2259.810741][T14510] hsr_slave_1: entered promiscuous mode
[ 2259.811410][T14510] debugfs: 'hsr0' already exists in 'hsr'
[ 2259.811426][T14510] Cannot create hsr debugfs directory
[ 2260.284014][T14404] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 2260.301331][T14404] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 2260.304572][T14404] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 2260.313984][T14404] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 2260.314233][T14404] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 2260.670761][T14528] wg2 speed is unknown, defaulting to 1000
[ 2260.932451][T14528] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2260.932601][T14528] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2260.932971][T14528] bridge_slave_0: entered allmulticast mode
[ 2260.934429][T14528] bridge_slave_0: entered promiscuous mode
[ 2260.952044][T14528] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2260.952164][T14528] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2260.952289][T14528] bridge_slave_1: entered allmulticast mode
[ 2260.953211][T14528] bridge_slave_1: entered promiscuous mode
[ 2260.993717][T14528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2261.002082][T14528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2261.034304][T14528] team0: Port device team_slave_0 added
[ 2261.038062][T14528] team0: Port device team_slave_1 added
[ 2261.052641][T14528] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2261.052650][T14528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2261.052660][T14528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2261.053584][T14528] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2261.053591][T14528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2261.053600][T14528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2261.130268][T14528] hsr_slave_0: entered promiscuous mode
[ 2261.130778][T14528] hsr_slave_1: entered promiscuous mode
[ 2261.131127][T14528] debugfs: 'hsr0' already exists in 'hsr'
[ 2261.131137][T14528] Cannot create hsr debugfs directory
[ 2261.256039][T14404] Bluetooth: hci10: command tx timeout
[ 2261.332059][ T4993] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 2261.349147][ T4993] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 2261.350066][ T4993] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 2261.350697][ T4993] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 2261.351080][ T4993] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 2261.669100][T14546] wg2 speed is unknown, defaulting to 1000
[ 2262.141054][T14546] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2262.141144][T14546] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2262.141209][T14546] bridge_slave_0: entered allmulticast mode
[ 2262.141988][T14546] bridge_slave_0: entered promiscuous mode
[ 2262.153776][T14546] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2262.153854][T14546] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2262.153949][T14546] bridge_slave_1: entered allmulticast mode
[ 2262.154739][T14546] bridge_slave_1: entered promiscuous mode
[ 2262.190296][T14546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2262.193353][T14546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2262.221331][T14546] team0: Port device team_slave_0 added
[ 2262.222707][T14546] team0: Port device team_slave_1 added
[ 2262.242521][T14546] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2262.242535][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2262.242551][T14546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2262.243652][T14546] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2262.243661][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2262.243676][T14546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2262.302212][T14546] hsr_slave_0: entered promiscuous mode
[ 2262.302916][T14546] hsr_slave_1: entered promiscuous mode
[ 2262.303330][T14546] debugfs: 'hsr0' already exists in 'hsr'
[ 2262.303339][T14546] Cannot create hsr debugfs directory
[ 2262.375397][ T4993] Bluetooth: hci11: command tx timeout
[ 2263.335751][T14564] Bluetooth: hci10: command tx timeout
[ 2263.415524][T14564] Bluetooth: hci12: command tx timeout
[ 2264.456026][T14564] Bluetooth: hci11: command tx timeout
[ 2265.257096][T14564] Bluetooth: hci4: command 0x0406 tx timeout
[ 2265.257765][T14564] Bluetooth: hci5: command 0x0406 tx timeout
[ 2265.268004][T14564] Bluetooth: hci6: command 0x0406 tx timeout
[ 2265.415274][ T7206] Bluetooth: hci10: command tx timeout
[ 2265.495287][ T7206] Bluetooth: hci12: command tx timeout
[ 2266.535431][ T7206] Bluetooth: hci11: command tx timeout
[ 2267.496682][ T7206] Bluetooth: hci10: command tx timeout
[ 2267.577080][ T7206] Bluetooth: hci12: command tx timeout
[ 2268.615544][ T7206] Bluetooth: hci11: command tx timeout
[ 2269.655546][ T7206] Bluetooth: hci12: command tx timeout
[ 2280.471575][  T190] block nbd4: Possible stuck request ffff88810a88d600: control (read@0,1024B). Runtime 270 seconds
[ 2280.471610][  T190] block nbd4: Possible stuck request ffff88810a88d800: control (read@1024,1024B). Runtime 270 seconds
[ 2280.471628][  T190] block nbd4: Possible stuck request ffff88810a88da00: control (read@2048,1024B). Runtime 270 seconds
[ 2280.471651][  T190] block nbd4: Possible stuck request ffff88810a88dc00: control (read@3072,1024B). Runtime 270 seconds
[ 2281.735462][   T35] INFO: task syz.4.29418:14326 blocked for more than 143 seconds.
[ 2281.735487][   T35]       Not tainted syzkaller #0
[ 2281.735494][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2281.735499][   T35] task:syz.4.29418     state:D stack:26536 pid:14326 tgid:14325 ppid:12986  task_flags:0x480140 flags:0x00080002
[ 2281.735538][   T35] Call Trace:
[ 2281.735544][   T35]  <TASK>
[ 2281.735554][   T35]  __schedule+0x17db/0x58f0
[ 2281.735575][   T35]  ? __lock_acquire+0x747/0x2de0
[ 2281.735606][   T35]  ? __pfx___schedule+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2281.735618][   T35]  ? lock_acquire+0x115/0x350
[ 2281.735638][   T35]  ? schedule+0x90/0x2b0
[ 2281.735654][   T35]  schedule+0x164/0x2b0
[ 2281.735701][   T35]  blk_mq_freeze_queue_wait+0x101/0x180
[ 2281.735722][   T35]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[ 2281.735742][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2281.735768][   T35]  queue_limits_commit_update_frozen+0x55/0xd0
[ 2281.735785][   T35]  nbd_set_size+0x4c5/0x7d0
[ 2281.735802][   T35]  ? __pfx_nbd_set_size+0x10/0x10
[ 2281.735827][   T35]  ? nla_memcpy+0x5b/0xc0
[ 2281.735848][   T35]  nbd_genl_reconfigure+0x7e1/0x1040
[ 2281.735867][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[ 2281.735888][   T35]  ? __kmalloc_noprof+0x38c/0x720
[ 2281.735902][   T35]  ? __nla_parse+0x40/0x60
[ 2281.735920][   T35]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 2281.735939][   T35]  genl_family_rcv_msg_doit+0x233/0x340
[ 2281.735957][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2281.735977][   T35]  ? __lock_acquire+0x747/0x2de0
[ 2281.735996][   T35]  genl_rcv_msg+0x614/0x7a0
[ 2281.736016][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2281.736038][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[ 2281.736067][   T35]  netlink_rcv_skb+0x226/0x4a0
[ 2281.736086][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2281.736102][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2281.736129][   T35]  ? down_read+0x2be/0x330
[ 2281.736147][   T35]  genl_rcv+0x28/0x40
[ 2281.736160][   T35]  netlink_unicast+0x7bd/0x940
[ 2281.736185][   T35]  netlink_sendmsg+0x813/0xb40
[ 2281.736211][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2281.736235][   T35]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2281.736252][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2281.736269][   T35]  sock_sendmsg_nosec+0x13a/0x180
[ 2281.736293][   T35]  ____sys_sendmsg+0x54e/0x850
[ 2281.736314][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2281.736337][   T35]  ? import_iovec+0x73/0xa0
[ 2281.736356][   T35]  ___sys_sendmsg+0x2a5/0x360
[ 2281.736371][   T35]  ? __lock_acquire+0x747/0x2de0
[ 2281.736385][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2281.736405][   T35]  ? futex_wait+0x2a2/0x390
[ 2281.736445][   T35]  ? __fget_files+0x2a/0x420
[ 2281.736462][   T35]  ? __fget_files+0x3a2/0x420
[ 2281.736485][   T35]  __x64_sys_sendmsg+0x1b1/0x290
[ 2281.736504][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2281.736533][   T35]  do_syscall_64+0x166/0x520
[ 2281.736547][   T35]  ? trace_irq_disable+0x3b/0x140
[ 2281.736560][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2281.736576][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2281.736590][   T35] RIP: 0033:0x7f3bceb9e159
[ 2281.736605][   T35] RSP: 002b:00007f3bcfa1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2281.736619][   T35] RAX: ffffffffffffffda RBX: 00007f3bcee25fa0 RCX: 00007f3bceb9e159
[ 2281.736629][   T35] RDX: 0000000004000080 RSI: 00002000000005c0 RDI: 0000000000000004
[ 2281.736637][   T35] RBP: 00007f3bcec3506b R08: 0000000000000000 R09: 0000000000000000
[ 2281.736647][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2281.736656][   T35] R13: 00007f3bcee26038 R14: 00007f3bcee25fa0 R15: 00007ffcb62f7728
[ 2281.736937][   T35]  </TASK>
[ 2281.737012][   T35] INFO: task syz.5.29423:14344 blocked for more than 143 seconds.
[ 2281.737032][   T35]       Not tainted syzkaller #0
[ 2281.737039][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2281.737046][   T35] task:syz.5.29423     state:D stack:27872 pid:14344 tgid:14338 ppid:12981  task_flags:0x400040 flags:0x00080002
[ 2281.737085][   T35] Call Trace:
[ 2281.737090][   T35]  <TASK>
[ 2281.737099][   T35]  __schedule+0x17db/0x58f0
[ 2281.737137][   T35]  ? __pfx___schedule+0x10/0x10
[ 2281.737158][   T35]  ? schedule+0x90/0x2b0
[ 2281.737174][   T35]  schedule+0x164/0x2b0
[ 2281.737189][   T35]  schedule_preempt_disabled+0x13/0x30
[ 2281.737203][   T35]  __mutex_lock+0x7c1/0x1550
[ 2281.737222][   T35]  ? __mutex_lock+0x5d4/0x1550
[ 2281.737240][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[ 2281.737256][   T35]  ? __pfx___mutex_lock+0x10/0x10
[ 2281.737276][   T35]  ? __dev_queue_xmit+0x29b/0x3820
[ 2281.737297][   T35]  ? radix_tree_lookup+0x240/0x290
[ 2281.737320][   T35]  genl_rcv_msg+0x10b/0x7a0
[ 2281.737339][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2281.737366][   T35]  netlink_rcv_skb+0x226/0x4a0
[ 2281.737385][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2281.737401][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2281.737430][   T35]  ? down_read+0x2be/0x330
[ 2281.737449][   T35]  genl_rcv+0x28/0x40
[ 2281.737464][   T35]  netlink_unicast+0x7bd/0x940
[ 2281.737489][   T35]  netlink_sendmsg+0x813/0xb40
[ 2281.737514][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2281.737538][   T35]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2281.737556][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2281.737574][   T35]  sock_sendmsg_nosec+0x13a/0x180
[ 2281.737597][   T35]  __sys_sendto+0x408/0x5a0
[ 2281.737618][   T35]  ? __pfx___sys_sendto+0x10/0x10
[ 2281.737654][   T35]  ? do_user_addr_fault+0xc4c/0x1340
[ 2281.737698][   T35]  __x64_sys_sendto+0xde/0x100
[ 2281.737717][   T35]  do_syscall_64+0x166/0x520
[ 2281.737733][   T35]  ? trace_irq_disable+0x3b/0x140
[ 2281.737746][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2281.737763][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2281.737777][   T35] RIP: 0033:0x7fc69d35e98e
[ 2281.737789][   T35] RSP: 002b:00007fc69e1b0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 2281.737803][   T35] RAX: ffffffffffffffda RBX: 00007fc69e1b26c0 RCX: 00007fc69d35e98e
[ 2281.737813][   T35] RDX: 0000000000000020 RSI: 00007fc69e1b1000 RDI: 0000000000000009
[ 2281.737822][   T35] RBP: 0000000000000000 R08: 00007fc69e1b0f04 R09: 000000000000000c
[ 2281.737830][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[ 2281.737839][   T35] R13: 00007fc69e1b0f58 R14: 00007fc69e1b1000 R15: 0000000000000000
[ 2281.737861][   T35]  </TASK>
[ 2281.737867][   T35] INFO: task syz.5.29423:14349 blocked for more than 143 seconds.
[ 2281.737877][   T35]       Not tainted syzkaller #0
[ 2281.737884][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2281.737890][   T35] task:syz.5.29423     state:D stack:27872 pid:14349 tgid:14338 ppid:12981  task_flags:0x400040 flags:0x00080002
[ 2281.737928][   T35] Call Trace:
[ 2281.737932][   T35]  <TASK>
[ 2281.737941][   T35]  __schedule+0x17db/0x58f0
[ 2281.737974][   T35]  ? __pfx___schedule+0x10/0x10
[ 2281.737994][   T35]  ? schedule+0x90/0x2b0
[ 2281.738009][   T35]  schedule+0x164/0x2b0
[ 2281.738028][   T35]  schedule_preempt_disabled+0x13/0x30
[ 2281.738041][   T35]  __mutex_lock+0x7c1/0x1550
[ 2281.738059][   T35]  ? __mutex_lock+0x5d4/0x1550
[ 2281.738076][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[ 2281.738092][   T35]  ? __pfx___mutex_lock+0x10/0x10
[ 2281.738111][   T35]  ? __dev_queue_xmit+0x29b/0x3820
[ 2281.738131][   T35]  ? radix_tree_lookup+0x240/0x290
[ 2281.738153][   T35]  genl_rcv_msg+0x10b/0x7a0
[ 2281.738170][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2281.738195][   T35]  netlink_rcv_skb+0x226/0x4a0
[ 2281.738215][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2281.738233][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2281.738262][   T35]  ? down_read+0x2be/0x330
[ 2281.738281][   T35]  genl_rcv+0x28/0x40
[ 2281.738296][   T35]  netlink_unicast+0x7bd/0x940
[ 2281.738320][   T35]  netlink_sendmsg+0x813/0xb40
[ 2281.738346][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2281.738371][   T35]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2281.738387][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2281.738404][   T35]  sock_sendmsg_nosec+0x13a/0x180
[ 2281.738424][   T35]  __sys_sendto+0x408/0x5a0
[ 2281.738442][   T35]  ? __pfx___sys_sendto+0x10/0x10
[ 2281.738455][   T35]  ? errseq_sample+0x40/0x70
[ 2281.738486][   T35]  ? fd_install+0x94/0x3d0
[ 2281.738502][   T35]  ? fd_install+0x309/0x3d0
[ 2281.738522][   T35]  __x64_sys_sendto+0xde/0x100
[ 2281.738539][   T35]  do_syscall_64+0x166/0x520
[ 2281.738553][   T35]  ? trace_irq_disable+0x3b/0x140
[ 2281.738566][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2281.738583][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2281.738596][   T35] RIP: 0033:0x7fc69d35e98e
[ 2281.738607][   T35] RSP: 002b:00007fc69e18fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 2281.738621][   T35] RAX: ffffffffffffffda RBX: 00007fc69e1916c0 RCX: 00007fc69d35e98e
[ 2281.738630][   T35] RDX: 0000000000000020 RSI: 00007fc69e190000 RDI: 000000000000000b
[ 2281.738638][   T35] RBP: 0000000000000000 R08: 00007fc69e18ff04 R09: 000000000000000c
[ 2281.738646][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b
[ 2281.738654][   T35] R13: 00007fc69e18ff58 R14: 00007fc69e190000 R15: 0000000000000000
[ 2281.738708][   T35]  </TASK>
[ 2281.738716][   T35] INFO: task syz.5.29423:14352 blocked for more than 143 seconds.
[ 2281.738726][   T35]       Not tainted syzkaller #0
[ 2281.738733][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2281.738739][   T35] task:syz.5.29423     state:D stack:25768 pid:14352 tgid:14338 ppid:12981  task_flags:0x400040 flags:0x00080002
[ 2281.738776][   T35] Call Trace:
[ 2281.738781][   T35]  <TASK>
[ 2281.738789][   T35]  __schedule+0x17db/0x58f0
[ 2281.738823][   T35]  ? __pfx___schedule+0x10/0x10
[ 2281.738843][   T35]  ? schedule+0x90/0x2b0
[ 2281.738859][   T35]  schedule+0x164/0x2b0
[ 2281.738874][   T35]  schedule_preempt_disabled+0x13/0x30
[ 2281.738887][   T35]  __mutex_lock+0x7c1/0x1550
[ 2281.738906][   T35]  ? __mutex_lock+0x5d4/0x1550
[ 2281.738923][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[ 2281.738939][   T35]  ? __pfx___mutex_lock+0x10/0x10
[ 2281.738958][   T35]  ? __dev_queue_xmit+0x29b/0x3820
[ 2281.738978][   T35]  ? radix_tree_lookup+0x240/0x290
[ 2281.739000][   T35]  genl_rcv_msg+0x10b/0x7a0
[ 2281.739018][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2281.739048][   T35]  netlink_rcv_skb+0x226/0x4a0
[ 2281.739067][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2281.739082][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2281.739111][   T35]  ? down_read+0x2be/0x330
[ 2281.739129][   T35]  genl_rcv+0x28/0x40
[ 2281.739145][   T35]  netlink_unicast+0x7bd/0x940
[ 2281.739167][   T35]  netlink_sendmsg+0x813/0xb40
[ 2281.739192][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2281.739216][   T35]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2281.739233][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2281.739250][   T35]  sock_sendmsg_nosec+0x13a/0x180
[ 2281.739272][   T35]  __sys_sendto+0x408/0x5a0
[ 2281.739292][   T35]  ? __pfx___sys_sendto+0x10/0x10
[ 2281.739328][   T35]  ? do_user_addr_fault+0xc4c/0x1340
[ 2281.739344][   T35]  __x64_sys_sendto+0xde/0x100
[ 2281.739363][   T35]  do_syscall_64+0x166/0x520
[ 2281.739376][   T35]  ? trace_irq_disable+0x3b/0x140
[ 2281.739389][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2281.739406][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2281.739419][   T35] RIP: 0033:0x7fc69d35e98e
[ 2281.739431][   T35] RSP: 002b:00007fc69adf0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 2281.739445][   T35] RAX: ffffffffffffffda RBX: 00007fc69adf26c0 RCX: 00007fc69d35e98e
[ 2281.739454][   T35] RDX: 0000000000000024 RSI: 00007fc69adf1000 RDI: 0000000000000005
[ 2281.739462][   T35] RBP: 0000000000000000 R08: 00007fc69adf0f04 R09: 000000000000000c
[ 2281.739471][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 2281.739479][   T35] R13: 00007fc69adf0f58 R14: 00007fc69adf1000 R15: 0000000000000000
[ 2281.739500][   T35]  </TASK>
[ 2281.739507][   T35] INFO: task syz.6.29429:14358 blocked for more than 143 seconds.
[ 2281.739517][   T35]       Not tainted syzkaller #0
[ 2281.739523][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2281.739529][   T35] task:syz.6.29429     state:D stack:25624 pid:14358 tgid:14357 ppid:12992  task_flags:0x400140 flags:0x00080002
[ 2281.739563][   T35] Call Trace:
[ 2281.739567][   T35]  <TASK>
[ 2281.739575][   T35]  __schedule+0x17db/0x58f0
[ 2281.739609][   T35]  ? __pfx___schedule+0x10/0x10
[ 2281.739628][   T35]  ? schedule+0x90/0x2b0
[ 2281.739645][   T35]  schedule+0x164/0x2b0
[ 2281.739660][   T35]  schedule_preempt_disabled+0x13/0x30
[ 2281.739700][   T35]  __mutex_lock+0x7c1/0x1550
[ 2281.739718][   T35]  ? __mutex_lock+0x5d4/0x1550
[ 2281.739734][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[ 2281.739749][   T35]  ? __pfx___mutex_lock+0x10/0x10
[ 2281.739764][   T35]  ? stack_trace_save+0xa9/0x100
[ 2281.739786][   T35]  ? __lock_acquire+0x747/0x2de0
[ 2281.739802][   T35]  ? radix_tree_lookup+0x240/0x290
[ 2281.739824][   T35]  genl_rcv_msg+0x10b/0x7a0
[ 2281.739843][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2281.739868][   T35]  netlink_rcv_skb+0x226/0x4a0
[ 2281.739886][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2281.739903][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2281.739931][   T35]  ? down_read+0x2be/0x330
[ 2281.739951][   T35]  genl_rcv+0x28/0x40
[ 2281.739964][   T35]  netlink_unicast+0x7bd/0x940
[ 2281.739990][   T35]  netlink_sendmsg+0x813/0xb40
[ 2281.740014][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2281.740046][   T35]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2281.740063][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2281.740080][   T35]  sock_sendmsg_nosec+0x13a/0x180
[ 2281.740101][   T35]  __sys_sendto+0x408/0x5a0
[ 2281.740121][   T35]  ? __pfx___sys_sendto+0x10/0x10
[ 2281.740158][   T35]  ? do_user_addr_fault+0xc4c/0x1340
[ 2281.740176][   T35]  __x64_sys_sendto+0xde/0x100
[ 2281.740195][   T35]  do_syscall_64+0x166/0x520
[ 2281.740208][   T35]  ? trace_irq_disable+0x3b/0x140
[ 2281.740222][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2281.740240][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2281.740254][   T35] RIP: 0033:0x7ffa0995e98e
[ 2281.740265][   T35] RSP: 002b:00007ffa0a79de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 2281.740279][   T35] RA
** replaying previous printk message **
[ 2281.740279][   T35] RAX: ffffffffffffffda RBX: 00007ffa0a79f6c0 RCX: 00007ffa0995e98e
[ 2281.740288][   T35] RDX: 0000000000000020 RSI: 00007ffa0a79e000 RDI: 0000000000000003
[ 2281.740297][   T35] RBP: 0000000000000000 R08: 00007ffa0a79df04 R09: 000000000000000c
[ 2281.740305][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 2281.740313][   T35] R13: 00007ffa0a79df58 R14: 00007ffa0a79e000 R15: 0000000000000000
[ 2281.740336][   T35]  </TASK>
[ 2281.740342][   T35] INFO: task syz.6.29429:14359 blocked for more than 143 seconds.
[ 2281.740351][   T35]       Not tainted syzkaller #0
[ 2281.740358][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2281.740364][   T35] task:syz.6.29429     state:D stack:28752 pid:14359 tgid:14357 ppid:12992  task_flags:0x400140 flags:0x00080002
[ 2281.740402][   T35] Call Trace:
[ 2281.740406][   T35]  <TASK>
[ 2281.740414][   T35]  __schedule+0x17db/0x58f0
[ 2281.740446][   T35]  ? __pfx___schedule+0x10/0x10
[ 2281.740466][   T35]  ? schedule+0x90/0x2b0
[ 2281.740482][   T35]  schedule+0x164/0x2b0
[ 2281.740497][   T35]  schedule_preempt_disabled+0x13/0x30
[ 2281.740510][   T35]  __mutex_lock+0x7c1/0x1550
[ 2281.740528][   T35]  ? __mutex_lock+0x5d4/0x1550
[ 2281.740546][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[ 2281.740562][   T35]  ? __pfx___mutex_lock+0x10/0x10
[ 2281.740579][   T35]  ? stack_trace_save+0xa9/0x100
[ 2281.740600][   T35]  ? __lock_acquire+0x747/0x2de0
[ 2281.740617][   T35]  ? radix_tree_lookup+0x240/0x290
[ 2281.740639][   T35]  genl_rcv_msg+0x10b/0x7a0
[ 2281.740656][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2281.740708][   T35]  netlink_rcv_skb+0x226/0x4a0
[ 2281.740728][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2281.740744][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2281.740774][   T35]  ? down_read+0x2be/0x330
[ 2281.740792][   T35]  genl_rcv+0x28/0x40
[ 2281.740805][   T35]  netlink_unicast+0x7bd/0x940
[ 2281.740830][   T35]  netlink_sendmsg+0x813/0xb40
[ 2281.740855][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2281.740880][   T35]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2281.740896][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2281.740913][   T35]  sock_sendmsg_nosec+0x13a/0x180
[ 2281.740935][   T35]  __sys_sendto+0x408/0x5a0
[ 2281.740955][   T35]  ? __pfx___sys_sendto+0x10/0x10
[ 2281.740969][   T35]  ? errseq_sample+0x40/0x70
[ 2281.741005][   T35]  ? rcu_is_watching+0x16/0xb0
[ 2281.741031][   T35]  __x64_sys_sendto+0xde/0x100
[ 2281.741050][   T35]  do_syscall_64+0x166/0x520
[ 2281.741064][   T35]  ? trace_irq_disable+0x3b/0x140
[ 2281.741077][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2281.741095][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2281.741108][   T35] RIP: 0033:0x7ffa0995e98e
[ 2281.741119][   T35] RSP: 002b:00007ffa0a77ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 2281.741132][   T35] RAX: ffffffffffffffda RBX: 00007ffa0a77e6c0 RCX: 00007ffa0995e98e
[ 2281.741142][   T35] RDX: 0000000000000020 RSI: 00007ffa0a77d000 RDI: 0000000000000009
[ 2281.741150][   T35] RBP: 0000000000000000 R08: 00007ffa0a77cf04 R09: 000000000000000c
[ 2281.741159][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[ 2281.741167][   T35] R13: 00007ffa0a77cf58 R14: 00007ffa0a77d000 R15: 0000000000000000
[ 2281.741189][   T35]  </TASK>
[ 2281.741195][   T35] INFO: task syz.6.29429:14360 blocked for more than 143 seconds.
[ 2281.741205][   T35]       Not tainted syzkaller #0
[ 2281.741212][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2281.741218][   T35] task:syz.6.29429     state:D stack:28552 pid:14360 tgid:14357 ppid:12992  task_flags:0x400040 flags:0x00080002
[ 2281.741255][   T35] Call Trace:
[ 2281.741260][   T35]  <TASK>
[ 2281.741268][   T35]  __schedule+0x17db/0x58f0
[ 2281.741302][   T35]  ? __pfx___schedule+0x10/0x10
[ 2281.741322][   T35]  ? schedule+0x90/0x2b0
[ 2281.741338][   T35]  schedule+0x164/0x2b0
[ 2281.741353][   T35]  schedule_preempt_disabled+0x13/0x30
[ 2281.741368][   T35]  __mutex_lock+0x7c1/0x1550
[ 2281.741387][   T35]  ? __mutex_lock+0x5d4/0x1550
[ 2281.741404][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[ 2281.741418][   T35]  ? __pfx___mutex_lock+0x10/0x10
[ 2281.741435][   T35]  ? stack_trace_save+0xa9/0x100
[ 2281.741455][   T35]  ? __lock_acquire+0x747/0x2de0
[ 2281.741469][   T35]  ? radix_tree_lookup+0x240/0x290
[ 2281.741488][   T35]  genl_rcv_msg+0x10b/0x7a0
[ 2281.741505][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2281.741530][   T35]  netlink_rcv_skb+0x226/0x4a0
[ 2281.741546][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2281.741560][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2281.741586][   T35]  ? down_read+0x2be/0x330
[ 2281.741603][   T35]  genl_rcv+0x28/0x40
[ 2281.741615][   T35]  netlink_unicast+0x7bd/0x940
[ 2281.741637][   T35]  netlink_sendmsg+0x813/0xb40
[ 2281.741662][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2281.741714][   T35]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2281.741731][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2281.741748][   T35]  sock_sendmsg_nosec+0x13a/0x180
[ 2281.741768][   T35]  __sys_sendto+0x408/0x5a0
[ 2281.741785][   T35]  ? __pfx___sys_sendto+0x10/0x10
[ 2281.741797][   T35]  ? errseq_sample+0x40/0x70
[ 2281.741827][   T35]  ? fd_install+0x94/0x3d0
[ 2281.741843][   T35]  ? fd_install+0x309/0x3d0
[ 2281.741865][   T35]  __x64_sys_sendto+0xde/0x100
[ 2281.741883][   T35]  do_syscall_64+0x166/0x520
[ 2281.741896][   T35]  ? trace_irq_disable+0x3b/0x140
[ 2281.741908][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2281.741926][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2281.741937][   T35] RIP: 0033:0x7ffa0995e98e
[ 2281.741950][   T35] RSP: 002b:00007ffa07bf4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 2281.741962][   T35] RAX: ffffffffffffffda RBX: 00007ffa07bf66c0 RCX: 00007ffa0995e98e
[ 2281.741970][   T35] RDX: 0000000000000020 RSI: 00007ffa07bf5000 RDI: 000000000000000d
[ 2281.741977][   T35] RBP: 0000000000000000 R08: 00007ffa07bf4f04 R09: 000000000000000c
[ 2281.741983][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d
[ 2281.741990][   T35] R13: 00007ffa07bf4f58 R14: 00007ffa07bf5000 R15: 0000000000000000
[ 2281.742008][   T35]  </TASK>
[ 2281.742056][   T35] 
[ 2281.742056][   T35] Showing all locks held in the system:
[ 2281.742065][   T35] locks held by khungtaskd/35: 1, last CPU#1:
[ 2281.742074][   T35]  #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2281.742141][   T35] locks held by getty/5422: 2, on CPU#0:
[ 2281.742150][   T35]  #0: ffff88816fa440a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2281.742188][   T35]  #1: ffffc900034762e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[ 2281.742256][   T35] locks held by udevd/4059: 1, on CPU#1:
[ 2281.742266][   T35]  #0: ffff88810a3e1350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[ 2281.742299][   T35] locks held by udevd/4060: 1, on CPU#1:
[ 2281.742307][   T35]  #0: ffff88810a345350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[ 2281.742346][   T35] locks held by syz.4.29418/14326: 6, on CPU#1:
[ 2281.742355][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.742387][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.742418][   T35]  #2: ffff88810a275260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040
[ 2281.742449][   T35]  #3: ffff88810a2aa288 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0
[ 2281.742479][   T35]  #4: ffff88810a2a9c50 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[ 2281.742515][   T35]  #5: ffff88810a2a9c88 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[ 2281.742548][   T35] locks held by syz.5.29423/14344: 2, on CPU#1:
[ 2281.742556][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.742586][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.742617][   T35] locks held by syz.5.29423/14349: 2, on CPU#0:
[ 2281.742625][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.742655][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.742715][   T35] locks held by syz.5.29423/14352: 2, on CPU#1:
[ 2281.742725][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.742754][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.742785][   T35] locks held by syz.6.29429/14358: 2, on CPU#1:
[ 2281.742794][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.742825][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.742856][   T35] locks held by syz.6.29429/14359: 2, on CPU#1:
[ 2281.742865][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.742895][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.742928][   T35] locks held by syz.6.29429/14360: 2, on CPU#0:
[ 2281.742937][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.742968][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.743001][   T35] locks held by syz-executor/14398: 2, on CPU#0:
[ 2281.743011][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.743049][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.743082][   T35] locks held by syz-executor/14400: 2, on CPU#1:
[ 2281.743092][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.743122][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.743156][   T35] locks held by syz-executor/14434: 2, on CPU#1:
[ 2281.743165][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.743195][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.743228][   T35] locks held by syz-executor/14454: 2, on CPU#1:
[ 2281.743237][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.743268][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.743300][   T35] locks held by syz-executor/14472: 2, on CPU#0:
[ 2281.743309][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.743340][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.743373][   T35] locks held by syz-executor/14490: 2, on CPU#1:
[ 2281.743382][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.743412][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.743446][   T35] locks held by syz-executor/14510: 2, on CPU#0:
[ 2281.743457][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.743487][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.743522][   T35] locks held by syz-executor/14528: 2, on CPU#1:
[ 2281.743531][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.743562][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.743594][   T35] locks held by syz-executor/14546: 2, on CPU#1:
[ 2281.743603][   T35]  #0: ffffffff902c36e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2281.743634][   T35]  #1: ffffffff902c3520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2281.743693][   T35] 
[ 2281.743698][   T35] =============================================
[ 2281.743698][   T35] 
[ 2281.743705][   T35] NMI backtrace for cpu 1
[ 2281.743715][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 2281.743729][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2281.743737][   T35] Call Trace:
[ 2281.743743][   T35]  <TASK>
[ 2281.743750][   T35]  dump_stack_lvl+0xe8/0x150
[ 2281.743770][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[ 2281.743789][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2281.743810][   T35]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[ 2281.743831][   T35]  sys_info+0x135/0x170
[ 2281.743848][   T35]  watchdog+0xfd7/0x1030
[ 2281.743867][   T35]  ? watchdog+0x1c7/0x1030
[ 2281.743884][   T35]  kthread+0x38b/0x480
[ 2281.743899][   T35]  ? __pfx_watchdog+0x10/0x10
[ 2281.743910][   T35]  ? __pfx_kthread+0x10/0x10
[ 2281.743924][   T35]  ret_from_fork+0x514/0xb70
[ 2281.743939][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[ 2281.743958][   T35]  ? __switch_to+0xc89/0x1420
[ 2281.743978][   T35]  ? __pfx_kthread+0x10/0x10
[ 2281.743992][   T35]  ret_from_fork_asm+0x1a/0x30
[ 2281.744039][   T35]  </TASK>
[ 2281.744069][   T35] Sending NMI from CPU 1 to CPUs 0:
[ 2281.744178][    C0] NMI backtrace for cpu 0
[ 2281.744196][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 2281.744211][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2281.744217][    C0] RIP: 0010:native_apic_msr_write+0x39/0x50
[ 2281.744230][    C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 26 6d a6 03 66 0f 1f 44 00
[ 2281.744236][    C0] RSP: 0018:ffffc90000147ab0 EFLAGS: 00000046
[ 2281.744244][    C0] RAX: 000000000000b593 RBX: ffff888121023c80 RCX: 0000000000000838
[ 2281.744249][    C0] RDX: 0000000000000000 RSI: 000000000000b593 RDI: 0000000000000838
[ 2281.744253][    C0] RBP: ffffc90000147b70 R08: 0000000000000100 R09: 0000000000000001
[ 2281.744258][    C0] R10: 0000000000000003 R11: ffffffff81754510 R12: 000000000000b593
[ 2281.744263][    C0] R13: dffffc0000000000 R14: 0000000010000a10 R15: 0000000000000020
[ 2281.744267][    C0] FS:  0000000000000000(0000) GS:ffff88818d6d1000(0000) knlGS:0000000000000000
[ 2281.744273][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2281.744278][    C0] CR2: 000056428878f828 CR3: 000000011a2f8000 CR4: 00000000000006f0
[ 2281.744307][    C0] Call Trace:
[ 2281.744312][    C0]  <TASK>
[ 2281.744316][    C0]  lapic_next_event+0x11/0x20
[ 2281.744324][    C0]  clockevents_program_event+0x385/0x630
[ 2281.744336][    C0]  ? __pfx_clockevents_program_event+0x10/0x10
[ 2281.744345][    C0]  ? tick_program_event+0x8f/0x120
[ 2281.744353][    C0]  __hrtimer_rearm_deferred+0x36c/0x4b0
[ 2281.744363][    C0]  irqentry_exit+0x8d3/0x910
[ 2281.744372][    C0]  ? trace_irq_disable+0x3b/0x140
[ 2281.744380][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2281.744388][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 2281.744399][    C0] Code: f7 e8 8d 03 bc f5 f7 c3 00 02 00 00 74 05 e8 50 47 e8 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 94 12 ad f5 65 48 8b 05 0c 21 ad 07 48 85 c0 74 18 5b 41 5e e9
[ 2281.744404][    C0] RSP: 0018:ffffc90000147cc8 EFLAGS: 00000206
[ 2281.744411][    C0] RAX: 0000000000000002 RBX: 0000000000000283 RCX: 8000000000000101
[ 2281.744415][    C0] RDX: 0000000000000000 RSI: ffffffff8e476b04 RDI: 0000000000000001
[ 2281.744420][    C0] RBP: 0000000000000008 R08: ffffffff907a357f R09: 1ffffffff20f46af
[ 2281.744424][    C0] R10: dffffc0000000000 R11: fffffbfff20f46b0 R12: 0000000000000009
[ 2281.744429][    C0] R13: 0000000000000008 R14: ffff888121028280 R15: 0000000000000100
[ 2281.744437][    C0]  handle_softirqs+0x226/0x860
[ 2281.744448][    C0]  ? run_ksoftirqd+0x36/0x60
[ 2281.744458][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[ 2281.744467][    C0]  run_ksoftirqd+0x36/0x60
[ 2281.744476][    C0]  smpboot_thread_fn+0x565/0xa70
[ 2281.744486][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[ 2281.744496][    C0]  kthread+0x38b/0x480
[ 2281.744503][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 2281.744511][    C0]  ? __pfx_kthread+0x10/0x10
[ 2281.744518][    C0]  ret_from_fork+0x514/0xb70
[ 2281.744525][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 2281.744535][    C0]  ? __switch_to+0xc89/0x1420
[ 2281.744545][    C0]  ? __pfx_kthread+0x10/0x10
[ 2281.744551][    C0]  ret_from_fork_asm+0x1a/0x30
[ 2281.744570][    C0]  </TASK>
[ 2282.245513][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[ 2282.753503][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 2282.756684][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2282.759955][   T35] Call Trace:
[ 2282.761109][   T35]  <TASK>
[ 2282.762136][   T35]  vpanic+0x56d/0xa60
[ 2282.763641][   T35]  ? __pfx___schedule+0x10/0x10
[ 2282.765442][   T35]  ? __pfx_vpanic+0x10/0x10
[ 2282.767106][   T35]  panic+0xc5/0xd0
[ 2282.768501][   T35]  ? __pfx_panic+0x10/0x10
[ 2282.770138][   T35]  ? preempt_schedule_common+0x7f/0xd0
[ 2282.772234][   T35]  ? preempt_schedule_thunk+0x16/0x40
[ 2282.774188][   T35]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[ 2282.776543][   T35]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[ 2282.778705][   T35]  watchdog+0x1030/0x1030
[ 2282.780293][   T35]  ? watchdog+0x1c7/0x1030
[ 2282.781745][   T35]  kthread+0x38b/0x480
[ 2282.783167][   T35]  ? __pfx_watchdog+0x10/0x10
[ 2282.784760][   T35]  ? __pfx_kthread+0x10/0x10
[ 2282.786363][   T35]  ret_from_fork+0x514/0xb70
[ 2282.788054][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[ 2282.789946][   T35]  ? __switch_to+0xc89/0x1420
[ 2282.791649][   T35]  ? __pfx_kthread+0x10/0x10
[ 2282.793159][   T35]  ret_from_fork_asm+0x1a/0x30
[ 2282.794858][   T35]  </TASK>
[ 2282.796601][   T35] Kernel Offset: disabled
[ 2282.798092][   T35] Rebooting in 86400 seconds..
