last executing test programs:

16.573596578s ago: executing program 2 (id=1296):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bc21fdb563013409b5c46047451b025705acfb00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bc21fdb563013409b5c46047451b025705acfb00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) (async)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) (async)
bind$802154_raw(r1, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8)
shutdown(r0, 0x1) (async)
shutdown(r0, 0x1)
setsockopt(r0, 0x88, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) (async)
setsockopt(r0, 0x88, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb401}}}, 0x84) (async)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb401}}}, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x4000000)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000000c0)=0x5d)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4, 0x6}, 0x8)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c00000400420a00"/56], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$kcm(0x2, 0x3, 0x2)
socket(0x10, 0x803, 0x0) (async)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r9=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r9, 0x25, 0x2, @void}, 0x10)

16.568953289s ago: executing program 1 (id=1297):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x8c, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000d443cea8514bff5da867c4ce2d30623eaa28e887feee47de26d269c1b2e78df81ed3ee73429eb6d6a8ffde3aba4729785e0900dd6689ef210d1430ddb7cfcfa3b97fd4d404a984c3caa5abe4e75c7ddfeb317cc40190d553f6f1b543b94f64f3d787c06a4efa453a68d3855d8f12467674fe2f08dbe3d58f4ae14d47dc83c6225d0cd309c1d37321a03a6fec58cd681ae955f647ea4fd23727fbfcaeb175d9de0900828a93f516ccd7f8005f26e06d7091000000000000000000", @ANYRES32=0x0, @ANYBLOB="14000200"/14], 0x34}}, 0x8000)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000002c0))
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300), 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=<r1=>0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x20000000)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=@newqdisc={0x1cc, 0x24, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x8, 0x8}, {0x8, 0xe}, {0x8, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ff}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xc, 0xc, 0x7f, 0x1, 0x4, 0x200003, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x4, 0xb0, 0xb5a6, 0x1, 0x2, 0x6767605a, 0x6, 0x1}}, {0x6, 0x2, [0xd]}}, {{0x1c, 0x1, {0x6, 0xff, 0xff, 0x9, 0x0, 0x3, 0x5, 0x5}}, {0xe, 0x2, [0x7f, 0x100, 0x0, 0x6, 0x3]}}, {{0x1c, 0x1, {0x6, 0x6, 0x8, 0x8, 0x0, 0x101, 0xfffff843, 0x5}}, {0xe, 0x2, [0x5, 0x10, 0x9c5f, 0x12d3, 0x8]}}, {{0x1c, 0x1, {0x96, 0x0, 0x78, 0x80, 0x5, 0x7, 0xffffffff, 0x9}}, {0x16, 0x2, [0x8, 0xb, 0x4, 0x5, 0x2, 0xff, 0x6, 0x9, 0x5]}}, {{0x1c, 0x1, {0x0, 0x3, 0x4, 0x5, 0x1, 0x4000008, 0x7, 0x2}}, {0x8, 0x2, [0x0, 0x5]}}, {{0x1c, 0x1, {0xa5, 0x24, 0x4, 0x7, 0x2, 0xa, 0x80000002, 0x4}}, {0xc, 0x2, [0x5, 0x82, 0x9, 0x7]}}, {{0x1c, 0x1, {0x3, 0xb3, 0x7, 0x8, 0x2, 0x10, 0x3, 0x2}}, {0x8, 0x2, [0x39, 0x1ff]}}, {{0x1c, 0x1, {0x4, 0x3, 0x7, 0x10, 0x2, 0x8001, 0xfffffffb, 0x8}}, {0x14, 0x2, [0x4, 0x7, 0x6, 0x79, 0x5, 0xa, 0x6, 0x0]}}, {{0x1c, 0x1, {0x6, 0x6, 0x1, 0x80, 0x0, 0xfffeffff, 0x5}}, {0x4}}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0xe2c5, @empty}, 0x1c)
listen(r2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
bind$inet6(r5, 0x0, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4)
socket$inet(0x2, 0x1, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x24, 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000000380)="b3", 0x1, 0x20060000, 0x0, 0x0)

16.470906279s ago: executing program 2 (id=1299):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r0, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x7431, 0x4e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r0, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x7431, 0x4e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)

16.2882507s ago: executing program 2 (id=1301):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', <r2=>0x0})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xff8, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000000))
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0xe6457df45c10c059, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0x3}, {0x0, 0xffe0}, {0xd, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4044004)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x10240, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000885}, 0x24008800)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0xd6e2}]}, &(0x7f0000000180)=0x10)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea34502)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)
readv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/146, 0x92}], 0x1)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x83, &(0x7f0000001000)={r9}, 0x8)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x99af8e632bfb392d, 0x11, r10, 0x100000000)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
vmsplice(r11, &(0x7f0000000380)=[{&(0x7f0000002040)="162dd3cad75f87b473622140aca9f6be4377caaba76f08daaad767f134c2ffc2ba9c92a5971b01b71a225dababc99832633ea975d465532309695b29d56eb9befec5159067bffa2d17b24093b372ebaf5589d18a8905982d01ee2870aa096647d6afabca77e0f36a01481b10ed8f0a585ceb41bf50f0515c259bbbbee74db0e045a9fde3614d35c6f2dfa1e71dace811a410bdfb395dd7c54fa733c6f8111f24df309ad928c6462d0a53a3824f9af07b11cb0c05724c33acfad1f5f16bffaf6c58ab2b8c4626bd9d4d1cc4ab67c9838b1fc53fb4ce46d304a12fffc2110043381d08160f056e8d3908497a402dcc156ff69bbf5cb5e5443c06bc4e3c6e4f231aab0eb6fdd2bb0740ae88095360d8b247daa6628fc10edbf048d800625134022e1d5d0bcb5c50e567f50c1990b1a434caa57d210b6084c9424d37c7a71479613b69b67670baab82f13b0923a73786655cfceb0c70d511b94f992391cad9ce57c5c76675cae6a2712cb9ce6dc07bdd0118001f062a22943ca72742a0fe97c48b9b895515fc71145fac9dfd27118a70b71dd564f27e31e1112292864a7be45459524ad8fb03c1f4388bdba3d9e3882a9be894133b0deea92885d0276f268bad0396635036192da1a9788e7525b08de07b0f351147e0f2aaa239e197924a5fc6961dbfcc96ad4cae4cf59f7a812d0c7f8506216dfb7658f8f8545477f4b6c1a606554ee19621d85438014d5e569b0c467e67cf0bb046284f4145ee9f9601b950b0217d183d0266da78f83ed2cf8a83f1374295853d52cdd561a756f247598126cddc98416c42c47a5ad4fda1c419b6ce04f4b57efd2cecf7bfe1589aab05c33e397c8acfb5e4d05cc62db2ba633e74d08c9a3c92111d39ef7d1c0321bfa1827b9fbbb592c49d46244b57c985ee4cc830f7eeda32cae961c4386916f927fc7f442eb6e2eaf45a3d2b0f28d4d319fdedd003aedc1c6384085921397a041384edee7172973fddb3eee2132acdec385cb596055f82a41087097ffece144a340cfe3ec0c0b833f4a92d28709419827eb0f747d73a2e7cc7d00a24749b9dd340793e2ca36536bc47233c9e2602a7f7f94450b22117215be6086d0c0132d24350c19abcb3d713fa97f76ce6ec8f61b24bfecb3ddcd0e7bccd0c4839de19283e95e08bc629554aac9543c15b0f69f1d03374269796c477579d212708b760914bde3269d9e9b0036c7cd0e8f3376d6a62ed0cde76861423ec5f76f2ab4d0f05b21db57277feaaf8475e6e6d1e5672281db17046b7464439d69e25210f67998e912d02c5296c60a450a38495e3b6737339a05f83e5a02aa1ee5bca6bf67ba84c659ef3cc4495cb1551e749277a86db07e7c48f61ee0672919d6a00472a893b6c6eead02140318fb497a1819b692b9bcb3b5cbe7cb55b9524abb1268b3f4a031a64fe6305519a2212298089c443b0503e77b7c8a3da14387872ca35cd6524f629161d85f253498568587513aa16848fa8f8f3dea115cbe8e85bdb8aa20f20ce26f3fcaac4615a9b9d7d6919ba952f7e93a96ba26010cc4bc24622ed3bb9b063e0e686f41b2cece5a50d787676600a04bfe7e6eb78e740b8bcb4b3a51f2a39250d0163a75d8f97032c60efc5516ba48ce2d53da0a7aab99330369a2c44cfc6ac65707733971493de86a519629f7be4643a52abe3d0ca1e22dfa27d8f7c54c50e0e1f3f639dbc622afa56d22b2732232d62b0a312c359dfd25e266f2138a49689fcc789470b01aabc05563ab025938153c15abbb300192e0bc27f810246d4d24295f337db02aa6b3e801905ee519a681fd73462eb330800763f75ae88e3e57c2a5552fba4b6154cab775625b817e18ff1e26273d21bf8b3cb2a79df7e92a8e498dadc04f11c62d6841bdd0408b212a43951a4a4f4f29c9b8918644e743e2f30cc52d422a9ce03750307096a5f8b61bb585ada2ad7a63d440e418c16e6827792dd470fa980a72cbe53b354ab208b0cb99ad858ff2ee4395f7fbff96c38fe2f84ccca78b6c867d1ff0440c5795b875339b87d98e59dca2dd80b3624c7406b56dc76b0198514bdb97b228e5b726683b3c12f71fb2b1dda24d085175acdc5d7744129df8065168ac103d819bc95dd408e17bfa7ae37d0ff5145e393a37b5cc08c2c10e5ef5d80dd6c79d35c650417e6fc47467c3552bbc1a3d50d2cdce471e5cd43b48475272e30c9d415c826bed60369c1841219e15d93bd87de49e2566de3a01dfc60cd3295134c876863cbfb7be8be44b0d4369b81a778f8fb2fcd039048fd16bf9d4f08a9458dbeadb298ee12b7ee7f6f43099dc684e33bee75d23f37c5b058e56f785f1c2af0c2ad66b69fc1fc06073bd53bed4a967314a6af8ede4d2facdae08ed503c4903fd5fdfd291327cd2ead1876361a16d9341cc24a63b2b51538b7199e048c00cab7127d19ae9a3ea0755b9b5d9604fefcfe7237d641019291bcd9ce30d5a388ad7127fde6061f1e307c0024ff1c200dc04354340eb4e8daac073b7c2f1fe1cee49330cc89ac061bd8a5f1676391d22d4afc8e5875daf4806bac0b5565bb99f07723cdd063ff070ba409fba6642888ea88109b333c3748f77b99f3bd4b9b61ec5e3d798d3584937c0165f4df571b8132ae425849e7e5ce414fbb00d9a30c129e2c13b6791435bb552bb01cedf3003b3bb24503fe226121d1f83419d5c23fad54dbd08fb3449b8a561954a23b47e34b7b14ddbcec2745353269e19fe218da2d0aad6df73083b3979160d4e52c8532c9f6602bc8ee624b9d5157fefbffec98e0e91a4f3824ccb4c33e17d19011f4c8db333d0fc5530930951cb63353a3aa0617ab2aba52268b81628d9f4a56b227300488c10df1e7f7533e1e4db449cb9cb6e588debf4795f98810702de5bfb81414bdacfcbd9e66f051ec7272b41ba281e8a68fe7c61e1cb4e74077342ddb7c5191d9731448a9e42a30c4df80e533db26ca3e12ab8ce8b5f0d114888692589b6c836c603ea4210c31b0e053092d75d9ceb49c5e9e2815b5aeebfcb53e97017d0ff6c7d3410120e355f9a6a1226e64a1621a2e6c04865acb25e137243ab9b82beea39c411163afd8969b086df73751020879785ec79c451fb822c11df1ae927318b35bd583a56827fd8744df8e7693837b8ddb0e831fd97b87505d5540d76d3e09895e64cc563dadf60bec88ee70b6008a53e50523ffbd2c0aa9f19123bd6f28de9851ae1f3f6101b46acf9139792be4872bf494c8970aee100a7a0c4dfbccbf01b6ccbebdfa8291f8ab3e25a9e4ff5dbda11488630e3bb8158b8f8de8cd4f793885e7a28e5afdf45eb57ad1330dfc0c51f51986e53c458feb4a4ef55b810a32f847d7ff5500c0f769d9abc090c10f87ba4e5250f36e70abb838ccb8f9fa95d96ba1e2e75a2d808a8fa26b686149ed6738a8e63ef70ed284e25d044aaa1e14c8caea04b77c9fba96036dd8b3be2e7704c65090fa7e8bf0e45c291709d3eb16a81e8aac27a120e52c05866310d8f288367f2b5187e83a1f7d5cb9dc6f8faa648683b7c88d54871dfcdca822568959ac2f7eb7dd3a345b0a8149806105dc90abfee3d5cefae3dfece4723fdc5a73c3a087020ca2fe1b166fe5b54cfb2f661fa5b017502155bf91856c3aae5cd20a48fbb958e1a0e70df51e4e46bbea56f639f6f32698d45297296244e8aaa845c13b70fa7f4f31115de0808975c143191c89c0233c557ddb93d6233ce22a699ca9a54ca6e8ddcfb5bf9d95b9807a49d9a64f7a239c77fa4e0d92d561fca5aa3e6c149c16c11131c9ad78493572cf1a9f953cc63ef8121cfa86a0f3fdb5a73c8530ddf93a9308fcaf436455aa6817f65e4616c9e38733b1cf9fa09822953d7d203748c5e45cbbe84a4fb7d59318013ba2a7da6f972c47ff9289091d7476035affddf44cc7a0b223cd14af5243dd14cd5d0f42849bd31af8ef9de434a01c52ee583c2d93b4785c34969629ffa406335ccd090637b83a5ee126a4833e6d6cf92b8aa6f9a2213df25fa575980c0cbd98039ca978860442b7466c3d4aa215593243d9c7ad3980470c9ef85154566ceed93ccb0330634f92d1fe5050bfe135f345527c93476e474f31ea45729ec534475d36b69876644e5db59c8cb0412f8d65be9ff2bea5ac37c5b1ff5d5d484aebed8b33920bbc8ed59ba9b3bf24ab6da8ebeda14dad9148183411980136cc2fde47049c98063b0ff1816a0852af035cbe8313d88620559e8331d983a43e0f4b515a61f5761bcd2130853ea24377d042643684699ceb9441a73f1285f6a15c8e00d17b4e051df2bd16b1a5699f6dce4556b0b6c88b8b86464beb6415777a8ec890c9335cc14452d6b23e2483d5b77b56042a694435bf913cb6e48ce6ca60c3009b274869bb350a8026d80680b32c9394e9b5dfee8df555a705bb1ff17ac848ccec95bb37206a72ab1d56160682d83e38c8acca34b08fa3b8665b35d01967c0a49681ef74b89b39f785977187a9d6f70affe2a32f41fe942fbd30fd9da981cf8f75485015962cb598d3d09a039787bf8d339695d0f5cd7cb60d25cdba119fa435e3692e06bdd76db5856eb2ed2cd85a081209b0a1453d52e1f8cf5120c7f044bddc38cded7ed59a793bfb2b289137137147f704a0628bb8e3e342b6084fbcc105b5345023fed9b2d339b95b0d0c97945943a70e007fe2172c501fae54ad04c279ae6da7150ea25469ce7e9c33b51713b05dcd4753930a0a37326d276fd28c8c0f6e06660beb102e2868fee31f70d37d38769e824846b081d120d8fcd394627fd672fe823cfdcf7af07b20b40e8e5efce8e93e8414744efd2723798aad9dabd8e23efc08983db6c65cf3c43d5b759ca52d118fad7a1bb23e5b3578f616fc42e304c797e640d8b985987274766adbf424e4e9a78c29dc436636e0df6e9255ebdd2c7c0cd261d42631cc49df231d0bd080da2928bcab9a0546b404b658f75fca9d8e506f3f6639bca2a13eae6bded0081fd2239bd8c0ab2382d23eecfb8985da82fe5ed32a96ac1e198d7f8cf5752cfb296af0a2d59ed19022cb084b525d44d8c773a14743a706baf209aebb270104b16181fdc2462d356341d89ba8024171c462640abfc3bd6f602c3bbd710f6ae6a2cef146f27002f78051d6687b83dac0cc627e0af1ed8765396d9783c6429b4063a8d58728c60ec88416c5dbdf362b891d278db21c9a4558c724b06547fc5f641801dd0da8403e57cff37d407fab07bb389c40555af869af263265333bf8aa4290d7cdb9a78573362d608a549165f13323c0107aa4dfac934fef838cf6e5f06b9324a5d8474183f077de97287eaf3c85cb74165b189d7547d3fccc4c763d02ce57d59c70f39e8065cdeb5fd13c4c14609f98941b73b16fed60bc55a2d8ef92104568b595f4a31f6428d527b34c470715d1300cd41ea992763f46a739ba387f359ee1d97c51e889e5599cebd800dbeef1496e3dbacaafc403d0dc7cd3c7d193788536aa5b0f5f25482744107d74795f27a8a8832596166fdcaa548b90c48890715526a52518f16d697d65beb6321befa003dc56432e3dd4b01cede5447813eb429dce845bf9702e5063fe571d8cb6cfecf12870e373b42c4f86f75b7b249f1bdb397113dfd7a23f1930f8533e300e8d0dc1674acb3ce38342b01edcaa09a0f4502f0ba94efeb853fa917612fc16a3829b437663a1e1", 0xfc1}], 0x1, 0x6)
close(0x3)

15.651203345s ago: executing program 1 (id=1310):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r3 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x11, 0x3, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
accept4(r7, 0x0, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800200000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r5, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100003052bbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280050001000500000008000a00", @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2a00c00020003000000000000001400cf00fc01000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc009000000000000006fbe816b89f7cb81bff81a8b9473deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f0400e9000000"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

15.500990505s ago: executing program 1 (id=1313):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000002000000000000000d0000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'nicvf0\x00', @remote})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket(0x28, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}}, 0x8000)

15.379031367s ago: executing program 1 (id=1315):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}}, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
listen(r4, 0x372) (async)
r5 = socket$rxrpc(0x21, 0x2, 0xa) (async)
r6 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) (async)
connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f00000001c0)={{0x0, 0xcfb}, 0x2}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @remote, @multicast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x0) (async)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r9 = socket$kcm(0x21, 0x2, 0xa) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000100100000100000000000002000000001000000000000000100100000b000000f7eb84f30fc73918e47dd544d27667ed70aa4e2ee3b7d9e6968afe566b7d68f14dfaeaf64d7552e3d45deded94cef432558699cbd50381011948c74696f42ea1ea71fae5dacadb79bc551abfaf723f6bcb18b601af99a2624d0fdcf9692f0a537d3d2df78e79314660f177885c3cef03a3380620127968038deabc15cec7ed5d8bfed2a28166e298a2d5627a6e410b7c9ec692d27918423e"], 0x28}, 0xfc40) (async)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) (async)
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001700010027bd7000fedbdf25fc000000000000000000000000000004000004d4ff000000b40000010000000000000000000000e0000002000000000000000000000000fe8800000000000000000000000001014e210100202000030200e0203b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001fe8800000000000000000000000000014e2100094e2200830a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba00000000000000020000030000000003000000010000000002000029bd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r1, 0x7, 0x2, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)

15.378372232s ago: executing program 2 (id=1316):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) (async)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x8, 0x4) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x94, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0xd, 0x7, 0x1, 0x0, "9055aa41cc74a66620"}, @NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x5, 0xb, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r4, 0x0, 0xd88d02a0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r4, &(0x7f0000000240), &(0x7f0000000340)=""/186}, 0x20) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r6=>0x0}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x7a92e05873d32bae}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004081}, 0x8000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r8)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001b40)={0x54, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x80)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x54}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf0}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40850) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='=\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100fbffffff000000000100000028000180060001000a00000014000400200100000000000000000000000000020800060009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000840}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x6b, 0x0, 0x3, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x0, 0x200, 0x400}})

15.377998633s ago: executing program 0 (id=1317):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0, 0x604000000000000}, 0x20)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000900)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000780)=""/25, 0x19}], 0x8, &(0x7f0000000600)=""/188, 0xbc, 0xa1}, 0x4}], 0x1, 0x2040000, &(0x7f00000003c0)={0x77359400})

15.300804714s ago: executing program 0 (id=1318):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0x19, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0)
sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

15.241207309s ago: executing program 1 (id=1319):
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
connect(r1, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @local}, 0x2, 0x0, 0x1, 0x1}}, 0x80) (async)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={<r4=>0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x1ff, @mcast1, 0x9}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0)={<r5=>r4, 0x10}, &(0x7f0000000400)=0x8) (async)
r6 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', <r7=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001400010000000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200000000000000ff0000000000ffffffff000000000000000000000000000000000f000000"], 0x40}}, 0x0) (async, rerun: 64)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (rerun: 64)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}], 0x1c) (async)
r9 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000240)={'pim6reg\x00', &(0x7f0000000080)=@ethtool_channels={0x3c, 0x3, 0x0, 0x8, 0x6, 0x1, 0x5, 0x4, 0x2}})
sendmmsg$inet(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)="0ee441ce75", 0x5}], 0x1}}, {{&(0x7f0000000580)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000b80)=[{&(0x7f00000005c0)="0a08e4cf87aa55dff0f5d832fdc0c8a7630d45906795930ee2b59ec04cbb33fc8850f625d46eab1f92a604ae4bcd3cc49b57c16f3b5ad12d125e0957", 0x3c}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000010c0)="9a42be07caf8a3b7eef075011e9d0b5ff552c716d701f70817d9c9ac2d8a8da779cd2acc7cbf26574d5a806763e36290f7b1a74ae5a15b0d8adad47f85145bbd9342b5e60fe25179e0dd1af148ecc7b9f428fa99c3902381e85a27", 0x5b}], 0x1}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000012c0)="7fe383cbd4d4a0096a48d5354fceb5a603052a453af4a2c5bc934b005b2b3c4c720d5fcf412bbf", 0x27}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001640)="9d7300f4b9fb996a9c07", 0xa}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="a57c5362b4d4c12bce2206893fa54858", 0x10}], 0x1}}, {{&(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000003040)=[{&(0x7f0000001c40)="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", 0x228}, {0x0}, {0x0}], 0x3}}], 0x7, 0x8080) (async)
r10 = socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r2, @ANYRES16=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000002c0))

15.240891897s ago: executing program 0 (id=1320):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

15.239928438s ago: executing program 2 (id=1321):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a000008001500", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="040002"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000000004740906140000000000000000000000000114000600626f6e643000"/48], 0x3c}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x404c080)

15.23953498s ago: executing program 1 (id=1322):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) (async)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000100800024000"], 0xfc}}, 0x0)

15.181749059s ago: executing program 0 (id=1323):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x40000, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x270000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

15.181444611s ago: executing program 2 (id=1324):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(0xffffffffffffffff)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendfile(r2, r3, 0x0, 0xffffffff000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='+\x00'}]}, 0x1c}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

15.121643467s ago: executing program 0 (id=1325):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000002e40)={0x0, 0xf69, 0xb2ab}, &(0x7f0000002e80)=0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x50}}, 0x0)

15.121072962s ago: executing program 0 (id=1326):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6erspan0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r8], 0x48}}, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1)
close(r0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/537], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f00000002c0)=0x30)

57.963ms ago: executing program 32 (id=1326):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6erspan0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r8], 0x48}}, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1)
close(r0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/537], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f00000002c0)=0x30)

111.265µs ago: executing program 33 (id=1322):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) (async)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000100800024000"], 0xfc}}, 0x0)

0s ago: executing program 34 (id=1324):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(0xffffffffffffffff)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendfile(r2, r3, 0x0, 0xffffffff000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='+\x00'}]}, 0x1c}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

6313] geneve2: entered promiscuous mode
[  335.417463][ T5715] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.421571][ T5715] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.424903][ T5715] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.427909][ T5715] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.586578][ T6318] netlink: 'syz.0.124': attribute type 16 has an invalid length.
[  335.596548][ T6318] netlink: 'syz.0.124': attribute type 17 has an invalid length.
[  335.641664][ T6318] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.644891][ T6318] 8021q: adding VLAN 0 to HW filter on device team0
[  335.649624][ T6318] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.660921][   T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.665331][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.672672][   T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.676546][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.693226][   T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.697668][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.702267][ T6318] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.704652][ T6318] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.711462][ T6318] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.714000][ T6318] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.722856][ T6318] batman_adv: batadv0: Interface activated: batadv_slave_0
[  335.730494][ T6318] batman_adv: batadv0: Interface activated: batadv_slave_1
[  335.840461][ T6332] netlink: 'syz.1.129': attribute type 1 has an invalid length.
[  336.304290][ T6378] __nla_validate_parse: 8 callbacks suppressed
[  336.304307][ T6378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.142'.
[  336.446316][ T6390] trusted_key: syz.2.145 sent an empty control message without MSG_MORE.
[  336.452366][ T6390] netlink: 96 bytes leftover after parsing attributes in process `syz.2.145'.
[  336.766900][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'.
[  336.824999][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'.
[  336.993967][ T6410] netlink: 14 bytes leftover after parsing attributes in process `syz.1.151'.
[  337.002475][ T6410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  337.007236][ T6410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  337.011367][ T6410] bond0 (unregistering): Released all slaves
[  337.158682][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'.
[  337.178937][   T33] audit: type=1800 audit(1778606634.272:2): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.156" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=324 res=0 errno=0
[  337.200115][ T5716] IPVS: starting estimator thread 0...
[  337.207838][ T6424] hsr_slave_1 (unregistering): left promiscuous mode
[  337.289085][ T6428] IPVS: using max 81 ests per chain, 194400 per kthread
[  337.321407][ T6435] netlink: 48 bytes leftover after parsing attributes in process `syz.1.158'.
[  337.329234][ T6438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.159'.
[  337.350259][ T6438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.159'.
[  337.548229][ T6451] netlink: 36 bytes leftover after parsing attributes in process `syz.2.162'.
[  337.797997][ T6464] validate_nla: 1 callbacks suppressed
[  337.798011][ T6464] netlink: 'syz.2.166': attribute type 2 has an invalid length.
[  337.804359][ T6464] netlink: 'syz.2.166': attribute type 1 has an invalid length.
[  337.807960][ T6464] netlink: 'syz.2.166': attribute type 2 has an invalid length.
[  337.811197][ T6464] netlink: 'syz.2.166': attribute type 2 has an invalid length.
[  337.813652][ T6464] netlink: 'syz.2.166': attribute type 1 has an invalid length.
[  337.815969][ T6464] netlink: 'syz.2.166': attribute type 2 has an invalid length.
[  337.881233][ T6466] 5n: entered promiscuous mode
[  338.042435][ T6470] sctp: [Deprecated]: syz.2.168 (pid 6470) Use of struct sctp_assoc_value in delayed_ack socket option.
[  338.042435][ T6470] Use struct sctp_sack_info instead
[  338.048491][ T6471] sctp: [Deprecated]: syz.2.168 (pid 6471) Use of struct sctp_assoc_value in delayed_ack socket option.
[  338.048491][ T6471] Use struct sctp_sack_info instead
[  338.387893][ T6492] bond0 (unregistering): Released all slaves
[  338.418821][ T6495] netlink: 'syz.2.176': attribute type 11 has an invalid length.
[  338.572908][ T6505] syzkaller0: entered promiscuous mode
[  338.577001][ T6505] syzkaller0: entered allmulticast mode
[  338.746923][ T6500] infiniband syz0: set active
[  338.750625][ T6500] infiniband syz0: added bond0
[  338.774646][ T6500] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  338.786507][ T6500] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  338.795572][ T6500] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  338.841985][ T6500] RDS/IB: syz0: added
[  338.844444][ T6500] smc: adding ib device syz0 with port count 1
[  338.846987][ T6500] smc:    ib device syz0 port 1 has no pnetid
[  338.912939][ T6522] xt_CT: No such helper "snmp"
[  339.207677][ T6547] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  339.318536][ T6550] netlink: 'syz.0.190': attribute type 21 has an invalid length.
[  339.375376][ T6552] batman_adv: batadv0: Adding interface: gretap1
[  339.378461][ T6552] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  339.389666][ T6552] batman_adv: batadv0: Interface activated: gretap1
[  339.576562][ T6565] netlink: 'syz.0.196': attribute type 5 has an invalid length.
[  339.676475][ T6577] syzkaller1: entered promiscuous mode
[  339.678430][ T6577] syzkaller1: entered allmulticast mode
[  339.694042][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  339.697487][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  339.701464][    C0] net_ratelimit: 15 callbacks suppressed
[  339.701476][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.711054][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  339.714420][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  339.817353][ T6582] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004
[  339.927595][ T6590] team0: Port device team_slave_0 removed
[  339.934996][ T6592] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  339.934996][ T6592] Please contact the netfilter-devel mailing list or update your nftables rules.
[  340.008516][ T6596] syzkaller0: entered promiscuous mode
[  340.010981][ T6596] syzkaller0: entered allmulticast mode
[  340.338017][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.341788][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.347887][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.356368][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.507954][ T6636] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  340.517291][ T6636] bond0 (unregistering): Released all slaves
[  340.803705][ T6640] sctp: [Deprecated]: syz.0.215 (pid 6640) Use of int in max_burst socket option.
[  340.803705][ T6640] Use struct sctp_assoc_value instead
[  340.980136][   T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.630282][   T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.395504][ T6630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  343.638795][ T6657] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  343.685600][ T6664] bond0: option ad_user_port_key: invalid value (65535)
[  343.688290][ T6664] bond0: option ad_user_port_key: allowed values 0 - 1023
[  343.692190][ T6664] bond0 (unregistering): Released all slaves
[  343.735990][ T6671] __nla_validate_parse: 29 callbacks suppressed
[  343.736001][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'.
[  343.748784][ T6668] ipt_REJECT: TCP_RESET invalid for non-tcp
[  343.758363][ T6668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.223'.
[  343.764393][ T6668] netlink: 36 bytes leftover after parsing attributes in process `syz.2.223'.
[  343.905472][ T1294] IPVS: starting estimator thread 0...
[  343.909727][ T6680] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  343.999165][ T6683] IPVS: using max 73 ests per chain, 175200 per kthread
[  344.119230][ T6691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.229'.
[  344.131745][ T6704] netlink: 68 bytes leftover after parsing attributes in process `syz.1.232'.
[  344.144501][ T6704] netlink: 'syz.1.232': attribute type 11 has an invalid length.
[  344.215118][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'.
[  344.262829][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'.
[  344.268120][ T6719] netlink: 'syz.1.237': attribute type 13 has an invalid length.
[  344.274767][ T6719] netlink: 'syz.1.237': attribute type 17 has an invalid length.
[  344.382482][ T6731] netlink: 44 bytes leftover after parsing attributes in process `syz.1.237'.
[  344.432239][ T6719] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  344.454730][ T6731] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.610722][ T6737] netlink: 'syz.0.239': attribute type 10 has an invalid length.
[  344.614618][ T6737] netlink: 'syz.0.239': attribute type 10 has an invalid length.
[  344.821128][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.823783][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.853541][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.858532][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  344.872591][ T6747] batman_adv: batadv0: Interface deactivated: gretap1
[  344.878363][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.886477][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  344.889917][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.892633][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  344.895397][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.898103][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  344.902068][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.905532][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  344.933471][ T6746] netlink: 'syz.0.242': attribute type 1 has an invalid length.
[  344.936958][ T6747] netlink: 'syz.0.242': attribute type 1 has an invalid length.
[  344.939150][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.242'.
[  344.941252][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.242'.
[  345.426474][ T6756] syzkaller1: tun_chr_ioctl cmd 2147767506
[  345.805253][ T6781] xt_hashlimit: size too large, truncated to 1048576
[  345.849968][ T6776] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  345.859754][ T6776] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  345.893577][ T6776] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  345.898043][ T6776] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  346.479831][ T5648] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  346.490218][ T5648] CPU: 0 UID: 0 PID: 5648 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  346.490241][ T5648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  346.490249][ T5648] Call Trace:
[  346.490255][ T5648]  <TASK>
[  346.490261][ T5648]  dump_stack_lvl+0xe8/0x150
[  346.490281][ T5648]  dump_header+0xd3/0x4c0
[  346.490301][ T5648]  oom_kill_process+0x3ab/0x970
[  346.490322][ T5648]  out_of_memory+0x106c/0x1410
[  346.490336][ T5648]  ? try_charge_memcg+0xbb9/0x1570
[  346.490356][ T5648]  ? __pfx___mutex_lock+0x10/0x10
[  346.490374][ T5648]  ? __pfx_out_of_memory+0x10/0x10
[  346.490388][ T5648]  ? do_raw_spin_unlock+0x4d/0x210
[  346.490413][ T5648]  try_charge_memcg+0xc77/0x1570
[  346.490444][ T5648]  ? __pfx_try_charge_memcg+0x10/0x10
[  346.490460][ T5648]  ? percpu_ref_tryget+0x15/0x180
[  346.490492][ T5648]  ? charge_memcg+0x23/0x2b0
[  346.490510][ T5648]  charge_memcg+0x1a2/0x2b0
[  346.490540][ T5648]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  346.490557][ T5648]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  346.490576][ T5648]  __swap_cache_prepare_and_add+0xdc/0x700
[  346.490596][ T5648]  ? page_rmappable_folio+0x9a/0x170
[  346.490620][ T5648]  swap_cache_alloc_folio+0xf1/0x240
[  346.490638][ T5648]  swap_cluster_readahead+0x355/0x670
[  346.490690][ T5648]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  346.490714][ T5648]  ? get_vma_policy+0x27b/0x3c0
[  346.490734][ T5648]  swapin_readahead+0x196/0xc50
[  346.490752][ T5648]  ? swap_table_get+0x1e/0x260
[  346.490769][ T5648]  ? __pfx_swapin_readahead+0x10/0x10
[  346.490784][ T5648]  ? swap_table_get+0x1e/0x260
[  346.490797][ T5648]  ? swap_table_get+0x1e/0x260
[  346.490808][ T5648]  ? swap_table_get+0x1e/0x260
[  346.490823][ T5648]  ? swap_table_get+0x216/0x260
[  346.490837][ T5648]  ? swap_cache_get_folio+0x2e4/0x2f0
[  346.490856][ T5648]  do_swap_page+0x555/0x5120
[  346.490875][ T5648]  ? __pte_offset_map+0x29/0x240
[  346.490891][ T5648]  ? __pte_offset_map+0x29/0x240
[  346.490913][ T5648]  ? do_swap_page+0x128/0x5120
[  346.490926][ T5648]  ? __pfx_do_swap_page+0x10/0x10
[  346.490939][ T5648]  ? __pte_offset_map+0x1ae/0x240
[  346.490957][ T5648]  ? pte_offset_map_rw_nolock+0xea/0x160
[  346.490974][ T5648]  handle_mm_fault+0x12d2/0x3170
[  346.491000][ T5648]  ? handle_mm_fault+0xee/0x3170
[  346.491020][ T5648]  ? __pfx_handle_mm_fault+0x10/0x10
[  346.491033][ T5648]  ? lock_vma_under_rcu+0x45a/0x500
[  346.491070][ T5648]  do_user_addr_fault+0xa73/0x1340
[  346.491089][ T5648]  ? rcu_is_watching+0x15/0xb0
[  346.491105][ T5648]  ? trace_page_fault_user+0x84/0x1e0
[  346.491121][ T5648]  exc_page_fault+0x6a/0xc0
[  346.491140][ T5648]  asm_exc_page_fault+0x26/0x30
[  346.491153][ T5648] RIP: 0033:0x7f90da15d60e
[  346.491166][ T5648] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  346.491177][ T5648] RSP: 002b:00007ffe37340e08 EFLAGS: 00010246
[  346.491189][ T5648] RAX: 0000000000000000 RBX: 0000555556d02500 RCX: 00007f90da15d60e
[  346.491197][ T5648] RDX: 00007ffe37340e60 RSI: 0000000000000000 RDI: 0000000000000000
[  346.491205][ T5648] RBP: 00007ffe37340ecc R08: 0000000000000000 R09: 0000000000000000
[  346.491212][ T5648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  346.491220][ T5648] R13: 00000000000927c0 R14: 00000000000547f8 R15: 00007ffe37340f20
[  346.491242][ T5648]  </TASK>
[  346.491248][ T5648] memory: usage 307200kB, limit 307200kB, failcnt 2236
[  346.636946][ T5648] memory+swap: usage 307348kB, limit 9007199254740988kB, failcnt 0
[  346.640479][ T5648] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0
[  346.643473][ T5648] Memory cgroup stats for /syz2:
[  346.643845][ T5648] cache 0
[  346.666965][ T5648] rss 0
[  346.669699][ T5648] rss_huge 0
[  346.679746][ T5648] shmem 0
[  346.681053][ T5648] mapped_file 0
[  346.682387][ T5648] dirty 0
[  346.683615][ T5648] writeback 0
[  346.685072][ T5648] workingset_refault_anon 17
[  346.687315][ T5648] workingset_refault_file 0
[  346.704390][ T5648] swap 151552
[  346.706144][ T5648] swapcached 274432
[  346.707848][ T5648] pgpgin 11151
[  346.717333][ T5648] pgpgout 11138
[  346.730341][ T5648] pgfault 20813
[  346.733331][ T5648] pgmajfault 5
[  346.734469][ T5648] inactive_anon 53248
[  346.740713][ T5648] active_anon 0
[  346.751524][ T5648] inactive_file 0
[  346.755214][ T5648] active_file 0
[  346.766972][ T5648] unevictable 0
[  346.769669][ T5648] hierarchical_memory_limit 314572800
[  346.774704][ T5648] hierarchical_memsw_limit 9223372036854771712
[  346.790741][ T5648] total_cache 0
[  346.792068][ T5648] total_rss 0
[  346.797953][ T5648] total_rss_huge 0
[  346.803003][ T5648] total_shmem 0
[  346.806366][ T5648] total_mapped_file 0
[  346.810637][ T5648] total_dirty 0
[  346.816275][ T5648] total_writeback 0
[  346.818428][ T5648] total_workingset_refault_anon 17
[  346.829342][ T5648] total_workingset_refault_file 0
[  346.832021][ T5648] total_swap 151552
[  346.837131][ T5648] total_swapcached 274432
[  346.846777][ T5648] total_pgpgin 11151
[  346.852356][ T5648] total_pgpgout 11138
[  346.856093][ T5648] total_pgfault 20813
[  346.862520][ T5648] total_pgmajfault 5
[  346.864872][ T6810] tipc: Started in network mode
[  346.868334][ T5648] total_inactive_anon 53248
[  346.871552][ T6810] tipc: Node identity 4eced61cde13, cluster identity 4711
[  346.875784][ T6810] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.879324][ T5648] total_active_anon 0
[  346.882907][ T5648] total_inactive_file 0
[  346.886705][ T5648] total_active_file 0
[  346.891251][ T5648] total_unevictable 0
[  346.894533][ T5648] anon_cost 0
[  346.895961][ T5648] file_cost 0
[  346.903633][ T6809] tipc: Disabling bearer <eth:syzkaller0>
[  346.905965][ T5648] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.248,pid=6763,uid=0
[  346.933004][ T5648] Memory cgroup out of memory: Killed process 6763 (syz.2.248) total-vm:102424kB, anon-rss:1248kB, file-rss:23072kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  347.222125][ T6823] netlink: 'syz.2.263': attribute type 4 has an invalid length.
[  347.229047][ T6822] netlink: 'syz.2.263': attribute type 4 has an invalid length.
[  347.466946][ T6838] netlink: 'syz.2.268': attribute type 32 has an invalid length.
[  348.614579][ T6863] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  348.687312][ T6873] openvswitch: netlink: Key 4 has unexpected len 8374 expected 12
[  348.734010][ T6878] dvmrp1: tun_chr_ioctl cmd 1074025677
[  348.736485][ T6878] dvmrp1: linktype set to 0
[  348.748512][ T6882] nbd: must specify at least one socket
[  348.861966][ T6892] __nla_validate_parse: 7 callbacks suppressed
[  348.861976][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'.
[  348.867749][ T6892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.286'.
[  348.872833][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'.
[  348.882347][ T6892] netlink: zone id is out of range
[  348.924715][ T6897] netlink: 13 bytes leftover after parsing attributes in process `syz.0.287'.
[  358.652848][ T6904] batadv_slave_1: entered promiscuous mode
[  358.682307][ T6905] netlink: 277 bytes leftover after parsing attributes in process `syz.0.288'.
[  358.683905][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'.
[  358.689915][ T6904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.702274][ T6904] batadv_slave_1 (unregistering): left promiscuous mode
[  358.705402][ T6904] batman_adv: batadv0: Removing interface: batadv_slave_1
[  359.017493][ T6913] validate_nla: 3 callbacks suppressed
[  359.017534][ T6913] netlink: 'syz.2.291': attribute type 10 has an invalid length.
[  359.023748][ T6912] netlink: 'syz.2.291': attribute type 10 has an invalid length.
[  359.026532][ T6912] ipvlan0: entered allmulticast mode
[  359.028608][ T6912] veth0_vlan: entered allmulticast mode
[  359.351395][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.295'.
[  359.793117][ T5716] IPVS: starting estimator thread 0...
[  359.922461][ T6946] IPVS: using max 80 ests per chain, 192000 per kthread
[  360.006788][ T6959] Bluetooth: MGMT ver 1.23
[  360.012722][ T6959] xt_CT: You must specify a L4 protocol and not use inversions on it
[  360.104806][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'.
[  360.173967][ T6971] netlink: 64 bytes leftover after parsing attributes in process `syz.1.302'.
[  360.184854][ T6970] netlink: 'syz.2.305': attribute type 1 has an invalid length.
[  360.267997][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'.
[  360.288618][ T6976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.307'.
[  360.296291][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'.
[  360.354694][ T6982] netlink: 27 bytes leftover after parsing attributes in process `syz.1.309'.
[  360.359220][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'.
[  360.396426][ T6982] tap0: tun_chr_ioctl cmd 1074025692
[  360.402865][ T6989] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001
[  360.641369][ T7007] ip6gretap1: entered promiscuous mode
[  360.701057][ T6993] bridge_slave_0 (unregistering): left allmulticast mode
[  360.705620][ T6993] bridge_slave_0 (unregistering): left promiscuous mode
[  360.708454][ T6993] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.757307][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  360.762224][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  360.765999][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  360.769999][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  360.885258][ T7026] netlink: 'syz.1.322': attribute type 1 has an invalid length.
[  360.945946][ T7026] bond0: (slave gretap1): making interface the new active one
[  360.952917][ T7026] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  360.965757][ T7026] macvlan2: entered promiscuous mode
[  360.968079][ T7026] macvlan2: entered allmulticast mode
[  360.972191][ T7026] bond0: entered promiscuous mode
[  360.974571][ T7026] gretap1: entered promiscuous mode
[  360.980780][ T7026] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  361.002023][ T7026] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  361.013979][ T7026] bond0: left promiscuous mode
[  361.018986][ T7026] gretap1: left promiscuous mode
[  361.125411][ T7045] tunl0: entered promiscuous mode
[  361.130386][ T7045] netlink: 'syz.2.327': attribute type 4 has an invalid length.
[  361.190312][ T7047] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.244563][ T7047] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.297075][ T7047] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.333794][ T7047] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.387950][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.397607][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.406723][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.416467][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.629216][ T7062] netlink: 'syz.1.331': attribute type 1 has an invalid length.
[  361.654677][ T7064] 8021q: VLANs not supported on ip_vti0
[  361.717648][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  361.721774][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  361.724743][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  361.736830][ T7069] vlan2: entered promiscuous mode
[  361.740023][ T7069] gretap0: entered promiscuous mode
[  361.743729][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  361.747619][ T7069] 8021q: VLANs not supported on wg1
[  361.835549][ T7073] netlink: 'syz.1.336': attribute type 21 has an invalid length.
[  361.852861][ T7073] netlink: 'syz.1.336': attribute type 21 has an invalid length.
[  361.852894][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  361.861198][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  361.865042][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  361.867747][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  361.998227][ T7078] netlink: 'syz.0.335': attribute type 1 has an invalid length.
[  362.152078][ T7081] netlink: 'syz.2.338': attribute type 13 has an invalid length.
[  362.597060][ T7087] lo speed is unknown, defaulting to 1000
[  362.602814][ T7087] lo speed is unknown, defaulting to 1000
[  362.609674][ T7087] lo speed is unknown, defaulting to 1000
[  363.295033][ T7087] infiniband sqz0: set active
[  363.303570][ T7087] infiniband sqz0: added lo
[  363.312153][ T1294] lo speed is unknown, defaulting to 1000
[  363.336338][ T7087] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  363.344150][ T7087] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  363.350593][ T7087] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  363.379294][ T7087] RDS/IB: sqz0: added
[  363.384000][ T7087] smc: adding ib device sqz0 with port count 1
[  363.387043][ T7087] smc:    ib device sqz0 port 1 has no pnetid
[  363.393529][ T1294] lo speed is unknown, defaulting to 1000
[  363.398388][ T7087] lo speed is unknown, defaulting to 1000
[  363.670113][ T7087] lo speed is unknown, defaulting to 1000
[  363.729835][ T7130] __nla_validate_parse: 23 callbacks suppressed
[  363.729850][ T7130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.349'.
[  363.740801][ T7128] netlink: 268 bytes leftover after parsing attributes in process `syz.0.349'.
[  363.913087][ T7087] lo speed is unknown, defaulting to 1000
[  363.933879][ T7138] geneve3: entered promiscuous mode
[  363.943515][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.946824][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'.
[  363.950191][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.953029][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.955761][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.044828][ T7142] vlan3: entered promiscuous mode
[  364.047163][ T7142] bridge0: entered promiscuous mode
[  364.081312][ T7140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.101514][ T7087] lo speed is unknown, defaulting to 1000
[  364.103496][ T7143] tipc: Started in network mode
[  364.107127][ T7143] tipc: Node identity ac14140f, cluster identity 4711
[  364.115085][ T7143] tipc: New replicast peer: 172.20.20.170
[  364.117296][ T7143] tipc: Enabled bearer <udp:syz2>, priority 10
[  364.144833][ T7140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.205559][ T7140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.274672][ T7140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.426681][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.490582][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.565260][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.632422][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.761878][ T7165] tipc: Enabling of bearer <ib:team0> rejected, failed to enable media
[  364.766254][ T7165] netlink: 188 bytes leftover after parsing attributes in process `syz.2.360'.
[  364.874559][ T7173] validate_nla: 1 callbacks suppressed
[  364.874571][ T7173] netlink: 'syz.2.363': attribute type 1 has an invalid length.
[  364.879245][ T7173] netlink: 224 bytes leftover after parsing attributes in process `syz.2.363'.
[  364.879671][ T7175] netlink: 'syz.0.362': attribute type 1 has an invalid length.
[  364.916840][ T7175] bond2: entered promiscuous mode
[  364.919907][ T7175] 8021q: adding VLAN 0 to HW filter on device bond2
[  364.961031][ T7176] bond2: (slave veth3): making interface the new active one
[  364.963658][ T7176] veth3: entered promiscuous mode
[  364.970559][ T7176] bond2: (slave veth3): Enslaving as an active interface with an up link
[  364.980517][ T7179] IPVS: lc: FWM 3 0x00000003 - no destination available
[  365.086504][ T7193] netlink: 'syz.2.367': attribute type 1 has an invalid length.
[  365.108701][ T7193] 8021q: adding VLAN 0 to HW filter on device bond3
[  365.173607][ T7199] Driver unsupported XDP return value 0 on prog  (id 84) dev N/A, expect packet loss!
[  365.232082][ T5425] tipc: Node number set to 2886997007
[  365.549592][ T7230] netlink: 'syz.0.376': attribute type 13 has an invalid length.
[  365.561885][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'.
[  366.349347][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.381'.
[  366.386290][ T7251] netlink: 'syz.0.384': attribute type 4 has an invalid length.
[  366.444559][ T7251] netlink: 'syz.0.384': attribute type 4 has an invalid length.
[  366.447924][ T7254] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  366.457588][ T7251] netlink: 'syz.0.384': attribute type 4 has an invalid length.
[  366.465670][ T7251] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.384'.
[  366.471387][ T7254] netlink: 'syz.1.385': attribute type 10 has an invalid length.
[  366.512837][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.386'.
[  366.554710][ T7258] openvswitch: netlink: IPv4 tun info is not correct
[  366.610360][ T7265] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  366.634167][ T7269] netlink: 36 bytes leftover after parsing attributes in process `syz.1.387'.
[  366.872979][ T7285] netlink: 'syz.1.393': attribute type 1 has an invalid length.
[  366.875848][ T7285] netlink: 'syz.1.393': attribute type 2 has an invalid length.
[  367.675962][ T7295] syzkaller1: entered promiscuous mode
[  367.688207][ T7295] syzkaller1: entered allmulticast mode
[  367.720102][ T7299] tunl0: left promiscuous mode
[  367.760750][ T7299] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  367.766474][ T5425] lo speed is unknown, defaulting to 1000
[  370.189851][ T7351] validate_nla: 7 callbacks suppressed
[  370.189868][ T7351] netlink: 'syz.1.408': attribute type 1 has an invalid length.
[  370.209303][ T7351] netlink: 'syz.1.408': attribute type 6 has an invalid length.
[  370.224346][ T7351] netlink: 'syz.1.408': attribute type 7 has an invalid length.
[  370.228048][ T7351] netlink: 'syz.1.408': attribute type 1 has an invalid length.
[  370.238158][ T7351] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  370.244438][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.671253][ T7381] __nla_validate_parse: 11 callbacks suppressed
[  370.671275][ T7381] netlink: 100 bytes leftover after parsing attributes in process `syz.0.414'.
[  370.680671][ T7376] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  370.689622][ T7376] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  370.739918][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'.
[  370.762421][ T7374] netlink: 'syz.1.412': attribute type 1 has an invalid length.
[  370.799728][ T7374] 8021q: adding VLAN 0 to HW filter on device bond3
[  370.820662][ T7374] bond3: (slave gretap2): making interface the new active one
[  370.826280][ T7374] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  371.034763][ T7406] 8021q: VLANs not supported on sit0
[  371.105881][ T7411] netlink: 'syz.0.421': attribute type 1 has an invalid length.
[  371.142401][ T7411] 8021q: adding VLAN 0 to HW filter on device bond3
[  371.151512][ T7411] netlink: 204 bytes leftover after parsing attributes in process `syz.0.421'.
[  371.220324][ T7418] netlink: 68 bytes leftover after parsing attributes in process `syz.0.421'.
[  371.453140][ T7425] bond4: option ad_select: invalid value (34)
[  371.458564][ T7425] bond4 (unregistering): Released all slaves
[  371.477022][ T7428] netlink: 'syz.2.426': attribute type 2 has an invalid length.
[  371.480149][ T7428] netlink: 224 bytes leftover after parsing attributes in process `syz.2.426'.
[  371.750560][ T7447] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  371.830578][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'.
[  371.836944][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.432'.
[  372.043778][ T7452] macsec1: entered promiscuous mode
[  372.351787][ T7459] lo speed is unknown, defaulting to 1000
[  372.685654][ T7472] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  373.080070][ T7483] lo: entered allmulticast mode
[  373.418707][ T7491] netlink: 'syz.1.443': attribute type 22 has an invalid length.
[  373.424793][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'.
[  373.598749][ T7498] netlink: 68 bytes leftover after parsing attributes in process `syz.1.445'.
[  383.862719][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  383.865720][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  384.238715][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.446'.
[  384.451452][ T7521] netlink: 48 bytes leftover after parsing attributes in process `syz.2.449'.
[  384.458058][ T7525] netlink: 48 bytes leftover after parsing attributes in process `syz.2.449'.
[  384.845667][ T7537] netlink: 80 bytes leftover after parsing attributes in process `syz.2.453'.
[  384.899919][ T7540] netlink: 'syz.2.454': attribute type 1 has an invalid length.
[  385.173718][ T7545] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.454'.
[  385.639053][ T7562] netlink: 'syz.0.459': attribute type 12 has an invalid length.
[  385.877011][ T7572] lo speed is unknown, defaulting to 1000
[  386.178520][ T7579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.182606][ T7579] syzkaller0: entered promiscuous mode
[  386.185442][ T7579] syzkaller0: entered allmulticast mode
[  386.247906][ T7578] tipc: Resetting bearer <eth:syzkaller0>
[  386.298654][ T7578] tipc: Disabling bearer <eth:syzkaller0>
[  386.317157][ T7582] netlink: 'syz.2.463': attribute type 1 has an invalid length.
[  386.597764][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'.
[  386.752147][ T7591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.466'.
[  387.416109][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'.
[  387.624495][ T7641] netlink: 52 bytes leftover after parsing attributes in process `syz.2.474'.
[  387.651583][ T7641] netlink: 'syz.2.474': attribute type 1 has an invalid length.
[  387.785935][ T7644] lo speed is unknown, defaulting to 1000
[  388.614912][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'.
[  388.763027][ T7663] xt_CT: You must specify a L4 protocol and not use inversions on it
[  388.835592][ T7672] netlink: 'syz.2.483': attribute type 4 has an invalid length.
[  388.846613][ T7672] netlink: 'syz.2.483': attribute type 4 has an invalid length.
[  388.856158][ T5720] lo speed is unknown, defaulting to 1000
[  388.878968][ T5720] lo speed is unknown, defaulting to 1000
[  388.890356][    T9] lo speed is unknown, defaulting to 1000
[  389.500604][ T7678] syzkaller0: entered promiscuous mode
[  389.502603][ T7678] syzkaller0: entered allmulticast mode
[  389.526669][ T7678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.553654][ T7679] ipt_REJECT: TCP_RESET invalid for non-tcp
[  389.563600][ T7680] tipc: Resetting bearer <eth:syzkaller0>
[  389.590817][ T7680] tipc: Disabling bearer <eth:syzkaller0>
[  389.701935][ T7685] netlink: 'syz.0.488': attribute type 1 has an invalid length.
[  389.758519][ T7685] bond4: (slave bridge3): making interface the new active one
[  389.762904][ T7685] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  389.890773][ T7685] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  389.903602][ T7688] macvlan2: entered promiscuous mode
[  389.906239][ T7688] macvlan2: entered allmulticast mode
[  389.911987][ T7688] bond4: entered promiscuous mode
[  389.913827][ T7688] bridge3: entered promiscuous mode
[  389.916561][ T7688] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  389.920414][ T7688] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  389.927367][ T7688] bond4: left promiscuous mode
[  389.930509][ T7688] bridge3: left promiscuous mode
[  390.033300][ T7696] __nla_validate_parse: 2 callbacks suppressed
[  390.033311][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'.
[  391.294745][ T7708] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  391.309316][ T7708] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.314684][ T7708] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  391.392076][ T7708] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  391.398404][ T7708] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.402069][ T7708] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  391.444635][ T7713] lo: MTU too low for tipc bearer
[  391.447429][ T7713] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  391.451745][ T7713] xt_cgroup: xt_cgroup: no path or classid specified
[  391.476332][ T7708] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  391.492665][ T7708] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.507864][ T7708] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  391.566778][ T7708] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  391.570641][ T7708] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.573782][ T7708] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  391.672568][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  391.676016][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  391.680988][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  391.691218][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  391.695298][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  391.698622][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  391.713001][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  391.716719][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  391.720533][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  391.732849][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  391.737250][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  391.740656][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  391.773377][ T7725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.498'.
[  392.610186][ T7742] netlink: 'syz.2.503': attribute type 10 has an invalid length.
[  392.868590][ T7758] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.507'.
[  392.932981][ T7760] netlink: 49599 bytes leftover after parsing attributes in process `syz.2.508'.
[  393.224386][ T7772] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20001
[  393.276864][ T7774] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  393.287328][ T7774] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.634013][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'.
[  393.731241][ T7796] netlink: 'syz.2.520': attribute type 2 has an invalid length.
[  393.783913][ T7799] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  393.785846][ T7796] xt_hashlimit: size too large, truncated to 1048576
[  393.794963][ T7796] xt_hashlimit: max too large, truncated to 1048576
[  393.846527][ T7796] ipt_REJECT: TCP_RESET invalid for non-tcp
[  393.933433][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'.
[  394.278495][ T7817] syzkaller0: entered promiscuous mode
[  394.283174][ T7817] syzkaller0: entered allmulticast mode
[  394.887837][ T7832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.530'.
[  394.904298][ T7832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.530'.
[  395.044331][ T7834] netlink: 'syz.2.531': attribute type 21 has an invalid length.
[  395.049486][ T7834] netlink: 128 bytes leftover after parsing attributes in process `syz.2.531'.
[  395.053214][ T7834] netlink: 'syz.2.531': attribute type 4 has an invalid length.
[  395.056039][ T7834] netlink: 3 bytes leftover after parsing attributes in process `syz.2.531'.
[  395.348673][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[  395.521255][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.536'.
[  395.538032][ T7853] netlink: 'syz.2.535': attribute type 1 has an invalid length.
[  395.640031][ T7853] 8021q: adding VLAN 0 to HW filter on device bond4
[  395.746273][ T7857] netlink: 'syz.1.537': attribute type 3 has an invalid length.
[  395.757411][ T7857] netlink: 'syz.1.537': attribute type 1 has an invalid length.
[  395.766535][ T7857] netlink: 196 bytes leftover after parsing attributes in process `syz.1.537'.
[  395.778010][ T7857] NCSI netlink: No device for ifindex 2147483648
[  397.297296][ T7855] bond4: (slave veth5): Enslaving as an active interface with a down link
[  397.306613][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'.
[  397.537927][ T7865] netlink: 'syz.2.538': attribute type 1 has an invalid length.
[  397.814993][ T7875] netlink: 'syz.2.538': attribute type 1 has an invalid length.
[  397.885354][ T7865] 8021q: adding VLAN 0 to HW filter on device bond5
[  397.896033][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'.
[  397.906623][ T7875] bond5: (slave batadv1): Opening slave failed
[  397.938326][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'.
[  398.013177][ T7887] xt_hashlimit: size too large, truncated to 1048576
[  398.069243][ T7890] netlink: 52 bytes leftover after parsing attributes in process `syz.0.542'.
[  398.357192][ T7910] netlink: 'syz.2.546': attribute type 11 has an invalid length.
[  398.360910][ T7909] netlink: 'syz.2.546': attribute type 11 has an invalid length.
[  398.937019][ T7930] syzkaller0: entered promiscuous mode
[  398.960024][ T7930] syzkaller0: entered allmulticast mode
[  399.023404][ T7938] netlink: 72 bytes leftover after parsing attributes in process `syz.2.553'.
[  400.978153][ T7959] bond6: option ad_user_port_key: invalid value (65535)
[  400.980875][ T7959] bond6: option ad_user_port_key: allowed values 0 - 1023
[  400.985486][ T7959] bond6 (unregistering): Released all slaves
[  401.156820][ T7978] netlink: 277 bytes leftover after parsing attributes in process `syz.2.562'.
[  401.871467][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'.
[  401.874430][ T8009] block nbd0: not configured, cannot reconfigure
[  401.877630][ T8010] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  402.067622][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.569'.
[  402.166114][ T8023] bond5 (unregistering): Released all slaves
[  402.230845][ T8025] netlink: 104 bytes leftover after parsing attributes in process `syz.0.570'.
[  402.361720][ T8029] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  402.416695][ T8033] x_tables: ip_tables: osf match: only valid for protocol 6
[  402.467949][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.576'.
[  402.472563][ T8037] netlink: 'syz.0.574': attribute type 29 has an invalid length.
[  402.483290][ T8040] netlink: 596 bytes leftover after parsing attributes in process `syz.0.574'.
[  402.499904][ T8037] netlink: 'syz.0.574': attribute type 29 has an invalid length.
[  402.602906][ T8043] netlink: 'syz.0.577': attribute type 1 has an invalid length.
[  402.605661][ T8043] netlink: 248 bytes leftover after parsing attributes in process `syz.0.577'.
[  402.645807][ T8048] netlink: 'syz.2.578': attribute type 61 has an invalid length.
[  402.649983][ T8048] netlink: 'syz.2.578': attribute type 211 has an invalid length.
[  402.656860][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'.
[  402.728512][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'.
[  402.745611][ T8055] syzkaller1: entered promiscuous mode
[  402.750640][ T8055] syzkaller1: entered allmulticast mode
[  403.201139][ T8077] sctp: [Deprecated]: syz.0.586 (pid 8077) Use of struct sctp_assoc_value in delayed_ack socket option.
[  403.201139][ T8077] Use struct sctp_sack_info instead
[  403.287677][ T8067] lo speed is unknown, defaulting to 1000
[  403.641125][ T8064] lo speed is unknown, defaulting to 1000
[  403.661064][ T8086] netlink: 64 bytes leftover after parsing attributes in process `syz.1.588'.
[  403.790763][ T8086] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  404.086485][ T8090] x_tables: duplicate underflow at hook 2
[  404.098600][ T8091] x_tables: duplicate underflow at hook 2
[  404.802654][ T8104] netlink: 'syz.2.593': attribute type 1 has an invalid length.
[  405.162227][ T8117] netlink: 'syz.0.597': attribute type 83 has an invalid length.
[  405.178755][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.184800][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  405.189056][   T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  405.191907][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.194755][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  405.197725][   T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  405.200767][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.203328][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  405.205893][   T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  405.209363][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.212652][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  405.216138][   T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  405.331748][ T8135] tipc: Started in network mode
[  405.333366][ T8135] tipc: Node identity 52b7a972ccc9, cluster identity 4711
[  405.335758][ T8135] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.339773][ T8137] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  405.346227][ T8135] syzkaller0: entered promiscuous mode
[  405.349208][ T8135] syzkaller0: entered allmulticast mode
[  405.371398][ T8134] tipc: Resetting bearer <eth:syzkaller0>
[  405.402073][ T8134] tipc: Disabling bearer <eth:syzkaller0>
[  405.685274][ T8165] openvswitch: netlink: Flow key attr not present in new flow.
[  405.824183][ T8171] bond4 (unregistering): Released all slaves
[  405.843661][ T8181] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  405.888685][ T8183] netlink: 'syz.2.617': attribute type 4 has an invalid length.
[  405.893849][ T5618] lo speed is unknown, defaulting to 1000
[  405.895852][ T5618] sqz0: Port: 1 Link DOWN
[  405.897487][ T5618] lo speed is unknown, defaulting to 1000
[  405.903172][ T8183] netlink: 'syz.2.617': attribute type 4 has an invalid length.
[  405.916062][   T10] lo speed is unknown, defaulting to 1000
[  405.922127][ T8184] netlink: 'syz.2.617': attribute type 4 has an invalid length.
[  405.922462][   T10] sqz0: Port: 1 Link ACTIVE
[  405.929819][ T5618] lo speed is unknown, defaulting to 1000
[  405.931691][ T5618] sqz0: Port: 1 Link DOWN
[  405.937005][   T10] lo speed is unknown, defaulting to 1000
[  405.981088][ T8192] netlink: 'syz.0.619': attribute type 13 has an invalid length.
[  405.983962][ T8192] netlink: 'syz.0.619': attribute type 17 has an invalid length.
[  406.092818][ T8192] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.095810][ T8192] 8021q: adding VLAN 0 to HW filter on device team0
[  406.104556][ T8192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.125618][ T8192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.130515][ T8192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  406.135141][ T8192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  406.141615][ T8192] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  406.149241][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.203897][ T8217] netlink: 'syz.0.624': attribute type 1 has an invalid length.
[  406.228023][ T8217] 8021q: adding VLAN 0 to HW filter on device bond5
[  406.243115][ T8218] netlink: 'syz.0.624': attribute type 1 has an invalid length.
[  406.393772][ T8235] __nla_validate_parse: 17 callbacks suppressed
[  406.393783][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'.
[  406.413562][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.629'.
[  406.463959][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'.
[  406.466814][ T8242] netlink: 304 bytes leftover after parsing attributes in process `syz.1.631'.
[  406.501204][ T8244] netlink: 'syz.2.632': attribute type 1 has an invalid length.
[  406.517834][ T8244] bond6: entered promiscuous mode
[  406.520465][ T8244] bond6: entered allmulticast mode
[  406.524321][ T8244] 8021q: adding VLAN 0 to HW filter on device bond6
[  406.539832][ T8244] erspan1: entered allmulticast mode
[  406.545193][ T8244] bond6: (slave erspan1): making interface the new active one
[  406.548626][ T8244] erspan1: entered promiscuous mode
[  406.553919][ T8244] bond6: (slave erspan1): Enslaving as an active interface with an up link
[  406.582103][ T8244] syz.2.632 (8244) used obsolete PPPIOCDETACH ioctl
[  406.741772][ T8270] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  406.857674][ T8280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.639'.
[  407.071220][ T8294] netlink: 32 bytes leftover after parsing attributes in process `syz.1.643'.
[  407.171131][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.644'.
[  407.248090][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.645'.
[  407.392073][ T8244] syz.2.632 (8244) used greatest stack depth: 18848 bytes left
[  407.571459][ T8314] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  407.774339][ T8325] IPVS: set_ctl: invalid protocol: 12139 57.155.194.241:44889
[  407.781017][ T8325] IPVS: set_ctl: invalid protocol: 951 8.0.0.0:46852
[  407.854252][ T8331] netlink: 9 bytes leftover after parsing attributes in process `syz.0.654'.
[  407.857663][ T8331] 0: renamed from hsr0 (while UP)
[  407.862115][ T8331] 0: entered allmulticast mode
[  407.863704][ T8331] hsr_slave_0: entered allmulticast mode
[  407.865709][ T8331] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  408.864411][ T8346] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) !
[  408.874509][ T8346] syzkaller0: entered promiscuous mode
[  408.876348][ T8346] syzkaller0: entered allmulticast mode
[  408.891379][ T8346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.915042][ T8345] tipc: Resetting bearer <eth:syzkaller0>
[  408.958975][ T8345] tipc: Disabling bearer <eth:syzkaller0>
[  409.193175][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'.
[  409.813865][ T8394] syzkaller0: entered promiscuous mode
[  409.815905][ T8394] syzkaller0: entered allmulticast mode
[  409.819823][ T8396] validate_nla: 3 callbacks suppressed
[  409.819831][ T8396] netlink: 'syz.1.675': attribute type 1 has an invalid length.
[  409.841591][ T8396] 8021q: adding VLAN 0 to HW filter on device bond4
[  411.048622][ T8396] bond4: (slave veth3): Enslaving as an active interface with a down link
[  411.055861][ T8401] bond4: (slave dummy0): making interface the new active one
[  411.059511][ T8401] dummy0: entered promiscuous mode
[  411.061828][ T8401] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  411.075232][ T8403] bond4: (slave dummy0): Releasing active interface
[  411.079195][ T8403] dummy0 (unregistering): left promiscuous mode
[  411.316164][ T8429] netlink: 'syz.1.683': attribute type 21 has an invalid length.
[  411.335368][ T8431] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  411.340719][ T8431] Cannot find set identified by id 3 to match
[  411.348195][ T8431] syzkaller0: entered promiscuous mode
[  411.350303][ T8431] syzkaller0: entered allmulticast mode
[  411.446401][ T8439] __nla_validate_parse: 7 callbacks suppressed
[  411.446410][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'.
[  411.453592][ T8439] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.456851][ T8439] batman_adv: batadv0: Removing interface: batadv_slave_0
[  412.177501][ T8447] netlink: 'syz.1.688': attribute type 1 has an invalid length.
[  412.190149][ T8447] bond5: entered promiscuous mode
[  412.192153][ T8447] 8021q: adding VLAN 0 to HW filter on device bond5
[  412.204544][ T8447] bond5: (slave bridge5): making interface the new active one
[  412.207081][ T8447] bridge5: entered promiscuous mode
[  412.209774][ T8447] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  412.216643][ T8447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.688'.
[  412.232319][ T8447] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  412.243477][ T8447] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  412.289422][ T8447] netlink: 'syz.1.688': attribute type 13 has an invalid length.
[  412.322754][ T8450] netlink: 'syz.2.689': attribute type 1 has an invalid length.
[  412.369417][ T8450] 8021q: adding VLAN 0 to HW filter on device bond7
[  412.396466][ T8450] bond7: (slave veth9): Enslaving as an active interface with a down link
[  412.438225][ T8456] netlink: 'syz.1.691': attribute type 4 has an invalid length.
[  412.449000][ T8456] netlink: 'syz.1.691': attribute type 4 has an invalid length.
[  412.537584][ T8463] netlink: 'syz.1.694': attribute type 21 has an invalid length.
[  412.540571][ T8463] netlink: 128 bytes leftover after parsing attributes in process `syz.1.694'.
[  412.543894][ T8463] netlink: 3 bytes leftover after parsing attributes in process `syz.1.694'.
[  412.552464][ T8464] netlink: 'syz.1.694': attribute type 21 has an invalid length.
[  412.557549][ T8464] netlink: 128 bytes leftover after parsing attributes in process `syz.1.694'.
[  412.569056][ T8462] bridge_slave_1: left promiscuous mode
[  412.572109][ T8462] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.584051][ T8462] bond0: (slave bond_slave_0): Releasing backup interface
[  412.593155][ T8462] bond0: (slave bond_slave_1): Releasing backup interface
[  412.595173][ T8463] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  412.604707][ T8462] team0: Port device team_slave_0 removed
[  412.623658][ T8462] team0: Port device team_slave_1 removed
[  412.630603][ T8462] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  412.637763][ T8462] batman_adv: batadv0: Removing interface: batadv_slave_0
[  412.643708][ T8462] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  412.650075][ T8462] batman_adv: batadv0: Removing interface: batadv_slave_1
[  412.656481][ T8462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  412.664687][ T8464] netlink: 3 bytes leftover after parsing attributes in process `syz.1.694'.
[  412.681232][ T8463] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  412.693358][ T8464] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  412.697705][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'.
[  412.882192][ T8488] bridge6: entered promiscuous mode
[  412.884351][ T8488] bridge6: entered allmulticast mode
[  412.888665][ T8488] team0: Port device bridge6 added
[  412.902593][ T8480] netlink: 'syz.0.698': attribute type 2 has an invalid length.
[  412.923947][ T8490] tun0: tun_chr_ioctl cmd 1074025672
[  412.925797][ T8490] tun0: ignored: set checksum disabled
[  412.993827][ T8497] netem: change failed
[  413.053545][ T8502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.703'.
[  413.093535][ T8505] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.704'.
[  413.366788][ T8519] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.446288][ T8519] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.481185][ T8519] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.537594][ T8519] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.614671][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.624631][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.634375][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.642676][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.686110][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'.
[  413.698469][ T5715] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  413.703876][ T5715] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  413.714469][ T5715] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  413.720836][ T5715] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  414.905421][ T8574] bridge_slave_0: left allmulticast mode
[  414.907485][ T8574] bridge_slave_0: left promiscuous mode
[  414.910059][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.914785][ T8574] bridge_slave_1: left allmulticast mode
[  414.917339][ T8574] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.925273][ T8574] team0: Port device team_slave_1 removed
[  414.927772][ T8574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  415.167512][ T8610] validate_nla: 4 callbacks suppressed
[  415.167523][ T8610] netlink: 'syz.1.730': attribute type 1 has an invalid length.
[  415.193630][ T8610] bond6: entered promiscuous mode
[  415.195488][ T8610] bond6: entered allmulticast mode
[  415.198017][ T8610] 8021q: adding VLAN 0 to HW filter on device bond6
[  415.209584][ T8610] erspan2: entered allmulticast mode
[  415.217234][ T8610] bond6: (slave erspan2): making interface the new active one
[  415.220281][ T8610] erspan2: entered promiscuous mode
[  415.222722][ T8610] bond6: (slave erspan2): Enslaving as an active interface with an up link
[  415.377724][ T8615] syzkaller0: entered promiscuous mode
[  415.379795][ T8615] syzkaller0: entered allmulticast mode
[  416.064655][ T8655] bridge_slave_1: left allmulticast mode
[  416.083792][ T8655] 0: left allmulticast mode
[  416.085453][ T8655] hsr_slave_0: left allmulticast mode
[  416.090209][ T8655] geneve2: left promiscuous mode
[  416.097324][ T8655] geneve3: left promiscuous mode
[  416.103485][ T8655] bond2: left promiscuous mode
[  416.105654][ T8655] veth3: left promiscuous mode
[  416.127074][ T5715] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  416.135415][ T5715] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.140449][ T5715] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  416.143856][ T5715] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.147559][ T5715] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  416.152409][ T5715] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.157318][ T5715] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  416.161099][ T5715] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.187833][ T8664] netlink: 'syz.2.747': attribute type 1 has an invalid length.
[  416.214934][ T8664] 8021q: adding VLAN 0 to HW filter on device bond9
[  416.220094][ T8664] bond8: (slave bond9): making interface the new active one
[  416.223187][ T8664] bond8: (slave bond9): Enslaving as an active interface with an up link
[  416.241517][ T8664] bond8: (slave gretap1): Enslaving as a backup interface with an up link
[  416.249777][ T8664] 8021q: adding VLAN 0 to HW filter on device bond8
[  416.421180][ T8673] syzkaller0: entered promiscuous mode
[  416.423593][ T8673] syzkaller0: entered allmulticast mode
[  416.526036][ T8677] __nla_validate_parse: 16 callbacks suppressed
[  416.526053][ T8677] netlink: 56 bytes leftover after parsing attributes in process `syz.2.751'.
[  416.532911][ T8677] netlink: 19 bytes leftover after parsing attributes in process `syz.2.751'.
[  416.536562][ T8677] netlink: 19 bytes leftover after parsing attributes in process `syz.2.751'.
[  416.542121][ T8678] netlink: 56 bytes leftover after parsing attributes in process `syz.2.751'.
[  416.545981][ T8678] netlink: 19 bytes leftover after parsing attributes in process `syz.2.751'.
[  416.550112][ T8678] netlink: 19 bytes leftover after parsing attributes in process `syz.2.751'.
[  416.575755][ T8677] netlink: 'syz.2.751': attribute type 21 has an invalid length.
[  416.575786][ T8678] netlink: 'syz.2.751': attribute type 21 has an invalid length.
[  416.661503][ T8688] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  416.941953][ T8723] netlink: 36 bytes leftover after parsing attributes in process `syz.0.759'.
[  417.040395][ T8729] macvtap1: entered promiscuous mode
[  417.042523][ T8729] team0: entered promiscuous mode
[  417.044568][ T8729] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  417.046873][ T8729] team0: Device macvtap1 is already an upper device of the team interface
[  417.050957][ T8729] team0: left promiscuous mode
[  417.439267][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'.
[  417.545202][ T8759] netlink: 32 bytes leftover after parsing attributes in process `syz.0.772'.
[  417.564681][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'.
[  417.601333][ T8756] veth13: entered allmulticast mode
[  417.606110][ T8756] bond10: (slave veth13): Enslaving as an active interface with an up link
[  417.622631][ T8756] bond10 (unregistering): (slave veth13): Releasing backup interface
[  417.635090][ T8756] bond10 (unregistering): Released all slaves
[  417.737433][ T8772] netem: change failed
[  418.051955][ T8785] lo speed is unknown, defaulting to 1000
[  418.616953][ T8817] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  418.942674][ T8829] : entered promiscuous mode
[  418.961261][ T8828] openvswitch: : Dropping previously announced user features
[  419.064114][ T8837] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  419.068080][ T8837] syzkaller0: entered promiscuous mode
[  419.073063][ T8837] syzkaller0: entered allmulticast mode
[  419.107555][ T8837] tipc: Resetting bearer <eth:syzkaller0>
[  419.112944][ T8836] tipc: Resetting bearer <eth:syzkaller0>
[  419.122501][ T8836] tipc: Disabling bearer <eth:syzkaller0>
[  419.200870][ T8840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  419.217454][ T8843] vlan0: entered promiscuous mode
[  419.220204][ T8843] bridge0: entered promiscuous mode
[  419.454593][ T8864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  419.516992][ T8873] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2
[  419.854959][ T8896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  419.906101][ T8898] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  419.910756][ T8898] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  420.435491][ T8927] netlink: 'syz.0.820': attribute type 20 has an invalid length.
[  420.438750][ T8927] netlink: 'syz.0.820': attribute type 21 has an invalid length.
[  420.847972][   T33] audit: type=1804 audit(1778606717.942:3): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.822" name="/newroot/249/cgroup.controllers" dev="tmpfs" ino=1285 res=1 errno=0
[  420.849012][ T8934] netlink: 'syz.1.822': attribute type 1 has an invalid length.
[  420.857258][   T33] audit: type=1800 audit(1778606717.942:4): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.822" name="cgroup.controllers" dev="tmpfs" ino=1285 res=0 errno=0
[  420.904843][ T8934] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  420.909928][ T8934] bond7: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  420.918558][ T8934] bond7: (slave vxcan1): making interface the new active one
[  420.922704][ T8934] bond7: (slave vxcan1): Enslaving as an active interface with an up link
[  420.931065][ T8934] bond7 (unregistering): (slave vxcan1): Releasing backup interface
[  420.936258][ T8934] bond7 (unregistering): Released all slaves
[  421.312610][ T8943] syzkaller0: entered promiscuous mode
[  421.315159][ T8943] syzkaller0: entered allmulticast mode
[  424.175799][ T8947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.266174][ T8947] __nla_validate_parse: 19 callbacks suppressed
[  424.266188][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'.
[  424.317982][ T8951] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.535950][ T8947] ip6tnl2: entered allmulticast mode
[  425.543511][ T5715] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  425.604628][ T8958] netlink: 144 bytes leftover after parsing attributes in process `syz.1.828'.
[  425.610968][ T8959] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.827'.
[  425.614024][ T8958] netlink: 120 bytes leftover after parsing attributes in process `syz.1.828'.
[  425.617167][ T8959] openvswitch: netlink: Message has 3 unknown bytes.
[  425.620341][ T8958] netlink: 'syz.1.828': attribute type 1 has an invalid length.
[  425.624111][ T8958] netlink: 64 bytes leftover after parsing attributes in process `syz.1.828'.
[  425.627873][ T8958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.828'.
[  425.751353][ T8968] syzkaller0: entered promiscuous mode
[  425.759146][ T8968] syzkaller0: entered allmulticast mode
[  425.818414][ T8970] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  427.353826][   T10] lo speed is unknown, defaulting to 1000
[  427.362434][   T10] sqz0: Port: 1 Link ACTIVE
[  427.394098][   T10] lo speed is unknown, defaulting to 1000
[  427.404968][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.835'.
[  427.655874][ T9006] netlink: 'syz.1.840': attribute type 1 has an invalid length.
[  427.676865][ T9006] 8021q: adding VLAN 0 to HW filter on device bond7
[  427.703699][ T9006] bond7: (slave veth5): Enslaving as an active interface with a down link
[  427.726853][ T9006] bond7: (slave veth7): Enslaving as an active interface with a down link
[  427.786911][ T9009] netlink: 'syz.1.841': attribute type 1 has an invalid length.
[  427.814516][ T9009] 8021q: adding VLAN 0 to HW filter on device bond8
[  427.831015][ T9009] macvlan2: entered promiscuous mode
[  427.832837][ T9009] macvlan2: entered allmulticast mode
[  427.834876][ T9009] bond8: entered allmulticast mode
[  427.836620][ T9009] bond8: entered promiscuous mode
[  427.838673][ T9009] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  427.841913][ T9009] team0: Port device macvlan2 added
[  427.844712][ T9009] netlink: 36 bytes leftover after parsing attributes in process `syz.1.841'.
[  427.851592][ T9009] sctp: [Deprecated]: syz.1.841 (pid 9009) Use of int in maxseg socket option.
[  427.851592][ T9009] Use struct sctp_assoc_value instead
[  428.077717][ T9020] netlink: 80 bytes leftover after parsing attributes in process `syz.0.845'.
[  428.302092][ T9047] netlink: 72 bytes leftover after parsing attributes in process `syz.1.852'.
[  428.312163][ T9044] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.319549][ T9044] syzkaller0: entered promiscuous mode
[  428.325335][ T9044] syzkaller0: entered allmulticast mode
[  428.371460][ T9044] tipc: Resetting bearer <eth:syzkaller0>
[  428.375644][ T9054] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode
[  428.378295][ T9054] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode
[  428.385646][ T9043] tipc: Resetting bearer <eth:syzkaller0>
[  428.407032][ T9043] tipc: Disabling bearer <eth:syzkaller0>
[  428.450142][ T9061] IPVS: set_ctl: invalid protocol: 44 10.17.1.1:21
[  428.557068][ T9054] lo speed is unknown, defaulting to 1000
[  429.316608][ T9095] __nla_validate_parse: 3 callbacks suppressed
[  429.316624][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'.
[  429.367673][ T9100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.865'.
[  429.384696][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'.
[  429.392512][ T9102] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  429.395603][ T9102] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  429.398335][ T9102] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  429.401098][ T9102] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  429.403698][ T9102] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  429.406518][ T9102] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  429.408539][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'.
[  429.409459][ T9102] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  429.430899][ T9100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.865'.
[  429.548973][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  429.620365][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'.
[  429.746236][ T9127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.875'.
[  429.757392][ T9127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.875'.
[  429.930978][ T9145] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  429.944621][ T9145] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  430.464363][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.884'.
[  430.467429][ T9161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  430.504073][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'.
[  430.682295][   T10] hsr0: entered promiscuous mode
[  431.040897][ T9183] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  431.044297][ T9183] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  431.991176][ T9220] ip6gretap0: entered allmulticast mode
[  432.369839][ T9249] veth5: entered allmulticast mode
[  432.481856][ T9254] team1: entered promiscuous mode
[  432.483658][ T9254] team1: entered allmulticast mode
[  432.486054][ T9254] 8021q: adding VLAN 0 to HW filter on device team1
[  432.510512][ T9254] team2: entered promiscuous mode
[  432.513749][ T9254] team2: entered allmulticast mode
[  432.516278][ T9254] 8021q: adding VLAN 0 to HW filter on device team2
[  432.573793][ T9258] validate_nla: 27 callbacks suppressed
[  432.573805][ T9258] netlink: 'syz.0.912': attribute type 1 has an invalid length.
[  432.766203][ T9267] geneve2: entered promiscuous mode
[  432.852747][ T9276] sctp: [Deprecated]: syz.0.919 (pid 9276) Use of struct sctp_assoc_value in delayed_ack socket option.
[  432.852747][ T9276] Use struct sctp_sack_info instead
[  432.873710][ T9276] xt_bpf: check failed: parse error
[  433.102597][ T9293] bond9: entered promiscuous mode
[  433.109358][ T9293] 8021q: adding VLAN 0 to HW filter on device bond9
[  433.112359][ T9278] lo speed is unknown, defaulting to 1000
[  433.376217][ T9285] lo speed is unknown, defaulting to 1000
[  433.694436][ T9290] lo speed is unknown, defaulting to 1000
[  434.109155][ T9313] nbd1: detected capacity change from 0 to 63
[  434.116488][   T54] block nbd1: Receive control failed (result -32)
[  434.137965][ T9091] block nbd1: Send control failed (result -32)
[  434.142134][ T9091] block nbd1: Request send failed, requeueing
[  434.153276][ T9091] block nbd1: Dead connection, failed to find a fallback
[  434.164633][   T95] block nbd1: Dead connection, failed to find a fallback
[  434.361032][ T9318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.365257][ T9319] syzkaller0: entered promiscuous mode
[  434.370249][ T9319] syzkaller0: entered allmulticast mode
[  434.437170][ T9315] tipc: Resetting bearer <eth:syzkaller0>
[  434.460790][ T9315] tipc: Disabling bearer <eth:syzkaller0>
[  434.593171][ T9332] TCP: TCP_TX_DELAY enabled
[  435.635752][ T9366] syzkaller0: entered promiscuous mode
[  435.637882][ T9366] syzkaller0: entered allmulticast mode
[  435.784806][ T9381] __nla_validate_parse: 14 callbacks suppressed
[  435.784818][ T9381] netlink: 84 bytes leftover after parsing attributes in process `syz.0.946'.
[  435.816069][ T9377] bond10: Removing last ns target with arp_interval on
[  435.890860][ T9389] netlink: 'syz.2.948': attribute type 2 has an invalid length.
[  436.081314][ T9401] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  436.107232][ T9386] lo speed is unknown, defaulting to 1000
[  436.184603][ T9414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.954'.
[  436.342373][ T9429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.958'.
[  436.697461][ T9439] netlink: 'syz.0.962': attribute type 6 has an invalid length.
[  436.784569][ T9444] bond6: option arp_all_targets: invalid value (129)
[  436.789353][ T9444] bond6 (unregistering): Released all slaves
[  436.876800][ T9449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.964'.
[  436.910295][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'.
[  436.978664][ T9459] netlink: 260 bytes leftover after parsing attributes in process `syz.2.967'.
[  437.022071][ T9459] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  437.026861][ T9459] bond11 (unregistering): Released all slaves
[  437.046446][ T9466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  437.055473][   T24] lo speed is unknown, defaulting to 1000
[  437.057756][   T24] sqz0: Port: 1 Link DOWN
[  437.064122][   T24] lo speed is unknown, defaulting to 1000
[  437.066815][ T9465] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.970'.
[  437.130618][ T9471] netlink: 'syz.2.972': attribute type 29 has an invalid length.
[  437.135662][ T9471] netlink: 'syz.2.972': attribute type 29 has an invalid length.
[  437.154218][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.973'.
[  437.194100][   T54] block nbd2: Receive control failed (result -1)
[  437.509888][ T9494] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.974'.
[  437.919834][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'.
[  438.012871][ T9520] netlink: 'syz.1.981': attribute type 1 has an invalid length.
[  438.015410][ T9520] netlink: 'syz.1.981': attribute type 1 has an invalid length.
[  438.259055][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  438.366894][ T9547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  438.374209][ T9546] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  438.379551][ T9545] syzkaller0: entered promiscuous mode
[  438.388312][ T9545] syzkaller0: entered allmulticast mode
[  438.424143][ T9546] tipc: Resetting bearer <eth:syzkaller0>
[  438.429608][ T9544] tipc: Resetting bearer <eth:syzkaller0>
[  438.449530][ T9544] tipc: Disabling bearer <eth:syzkaller0>
[  438.511930][ T9562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.591393][ T9562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.857080][ T9595] ip6gre1: entered promiscuous mode
[  438.861230][ T9595] ip6gre1: entered allmulticast mode
[  439.070122][ T9620] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  439.072500][ T9619] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  439.121216][ T9622] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.128105][ T9622] 8021q: adding VLAN 0 to HW filter on device team0
[  439.136329][ T9622] 8021q: adding VLAN 0 to HW filter on device batadv0
[  439.145457][ T9624] netlink: 'syz.2.1009': attribute type 1 has an invalid length.
[  439.168083][ T9622] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  439.173584][ T9622] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  439.205222][ T9624] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  439.463704][ T9646] netlink: 'syz.0.1014': attribute type 1 has an invalid length.
[  439.936534][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  439.942850][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  439.950361][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  439.956371][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  440.166524][ T9698] netlink: 'syz.2.1031': attribute type 6 has an invalid length.
[  440.256761][ T9705] syzkaller0: entered promiscuous mode
[  440.261149][ T9705] syzkaller0: entered allmulticast mode
[  440.314234][ T9707] bridge10: entered promiscuous mode
[  440.316195][ T9707] bridge10: entered allmulticast mode
[  440.323299][ T9707] team0: Port device bridge10 added
[  440.335448][ T9707] bridge0: port 1(team0) entered blocking state
[  440.341712][ T9707] bridge0: port 1(team0) entered disabled state
[  440.344021][ T9707] team0: entered allmulticast mode
[  440.345541][ T9717] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20004
[  440.350907][ T9707] team0: entered promiscuous mode
[  440.652863][ T9735] netlink: 'syz.1.1041': attribute type 10 has an invalid length.
[  440.787452][ T9741] netlink: 'syz.1.1042': attribute type 1 has an invalid length.
[  440.955619][ T9759] __nla_validate_parse: 25 callbacks suppressed
[  440.955630][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'.
[  441.117191][ T9772] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode
[  441.119965][ T9772] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode
[  441.278368][ T9776] syzkaller0: entered promiscuous mode
[  441.284112][ T9776] syzkaller0: entered allmulticast mode
[  441.543765][ T9780] lo speed is unknown, defaulting to 1000
[  441.946285][ T9800] IPVS: Scheduler module ip_vs_sip not found
[  441.975365][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'.
[  441.979088][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'.
[  442.016025][ T9809] policy can only be matched on NF_INET_PRE_ROUTING
[  442.016036][ T9809] unable to load match
[  442.022740][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'.
[  442.318000][ T9817] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  442.321171][ T9817] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  442.323639][ T9817] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  442.326001][ T9817] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  442.328468][ T9817] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  442.330850][ T9817] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  442.333114][ T9817] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  442.335205][ T9817] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  442.337392][ T9817] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  442.339879][ T9817] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  442.404655][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'.
[  442.471160][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'.
[  442.478965][ T9818] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1066'.
[  442.494974][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'.
[  442.509172][ T9818] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1066'.
[  442.519774][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'.
[  442.952554][ T9837] bond11 (unregistering): Released all slaves
[  442.983978][ T9842] bridge0: port 2(veth0_virt_wifi) entered blocking state
[  442.986476][ T9842] bridge0: port 2(veth0_virt_wifi) entered disabled state
[  442.990118][ T9842] veth0_virt_wifi: entered allmulticast mode
[  442.993080][ T9842] veth0_virt_wifi: entered promiscuous mode
[  442.995310][ T9842] bridge0: port 2(veth0_virt_wifi) entered blocking state
[  442.997763][ T9842] bridge0: port 2(veth0_virt_wifi) entered forwarding state
[  443.025129][ T9842] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.065545][ T9842] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.076487][ T9850] veth0: entered promiscuous mode
[  443.096075][ T9850] veth0: left promiscuous mode
[  443.123205][ T9842] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.184841][ T9842] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.260642][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  443.272473][ T5715] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  443.284484][ T5715] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  443.313246][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  443.745059][ T9898] tipc: Enabled bearer <ib:veth0_macvtap>, priority 10
[  443.824511][   T33] audit: type=1804 audit(1778606740.922:5): pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1086" name="/newroot/375/cgroup.controllers" dev="tmpfs" ino=1922 res=1 errno=0
[  443.837023][   T33] audit: type=1800 audit(1778606740.942:6): pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1086" name="cgroup.controllers" dev="tmpfs" ino=1922 res=0 errno=0
[  443.845852][   T33] audit: type=1800 audit(1778606740.942:7): pid=9905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1086" name="cgroup.controllers" dev="tmpfs" ino=1922 res=0 errno=0
[  443.861931][   T33] audit: type=1804 audit(1778606740.962:8): pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1086" name="/newroot/375/cgroup.controllers" dev="tmpfs" ino=1922 res=1 errno=0
[  443.891223][ T9912] netlink: 'syz.0.1089': attribute type 13 has an invalid length.
[  443.899795][ T9912] netlink: 'syz.0.1089': attribute type 17 has an invalid length.
[  443.943314][ T9912] netlink: 'syz.0.1089': attribute type 17 has an invalid length.
[  443.946582][ T9913] netlink: 'syz.0.1089': attribute type 17 has an invalid length.
[  443.947319][ T9912] bridge_slave_1: entered allmulticast mode
[  444.087509][ T9921] veth5: entered allmulticast mode
[  444.093617][ T9921] bond6: (slave veth5): Enslaving as an active interface with an up link
[  444.098115][ T9928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  444.108027][ T9931] nbd: couldn't find a device at index 65546
[  444.118027][ T9921] bond6 (unregistering): (slave veth5): Releasing backup interface
[  444.125136][ T9921] bond6 (unregistering): Released all slaves
[  444.244711][ T9935] sctp: [Deprecated]: syz.2.1097 (pid 9935) Use of struct sctp_assoc_value in delayed_ack socket option.
[  444.244711][ T9935] Use struct sctp_sack_info instead
[  444.251061][ T9935] sctp: [Deprecated]: syz.2.1097 (pid 9935) Use of struct sctp_assoc_value in delayed_ack socket option.
[  444.251061][ T9935] Use struct sctp_sack_info instead
[  444.367105][ T9945] dvmrp6: entered allmulticast mode
[  444.468268][ T9952] netlink: 'syz.2.1104': attribute type 13 has an invalid length.
[  444.473867][ T9951] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  444.620355][ T9962] sock: sock_timestamping_bind_phc: sock not bind to device
[  444.650172][ T9965] rdma_rxe: rxe_newlink: failed to add bond0
[  444.705770][ T9970] netlink: 'syz.2.1109': attribute type 21 has an invalid length.
[  444.781379][ T9982] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  444.791218][ T9982] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  444.860356][   T24] tipc: Node number set to 2430457372
[  444.906782][ T9989] bond12: option lacp_active: invalid value (8)
[  444.910585][ T9989] bond12 (unregistering): Released all slaves
[  445.304365][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  445.349327][T10012] xt_hashlimit: size too large, truncated to 1048576
[  446.133646][T10041] xt_hashlimit: size too large, truncated to 1048576
[  446.436157][T10044] lo speed is unknown, defaulting to 1000
[  446.528292][T10068] __nla_validate_parse: 28 callbacks suppressed
[  446.528303][T10068] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1135'.
[  446.537286][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1135'.
[  446.673446][T10077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1139'.
[  446.687934][T10078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1137'.
[  446.723664][T10080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1140'.
[  446.835135][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1142'.
[  446.853815][T10086] can: request_module (can-proto-0) failed.
[  447.005686][T10108] netlink: 'syz.0.1146': attribute type 10 has an invalid length.
[  447.022640][T10108] bridge0: port 1(team0) entered disabled state
[  447.035013][T10108] team0 (unregistering): left allmulticast mode
[  447.038798][T10108] team0 (unregistering): left promiscuous mode
[  447.041221][T10108] bridge0: port 1(team0) entered disabled state
[  447.049611][T10108] team0 (unregistering): Port device bridge10 removed
[  447.064770][T10115] netlink: 7724 bytes leftover after parsing attributes in process `syz.2.1148'.
[  447.188691][T10122] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  447.197888][T10122] netlink: 'syz.0.1150': attribute type 1 has an invalid length.
[  447.227125][T10122] 8021q: adding VLAN 0 to HW filter on device bond6
[  447.238632][T10122] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1150'.
[  447.349478][T10133] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  447.425661][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1155'.
[  447.453158][T10142] xt_CT: You must specify a L4 protocol and not use inversions on it
[  447.470773][T10142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1154'.
[  447.515840][T10149] ip6gre1: entered promiscuous mode
[  447.518139][T10149] ip6gre1: entered allmulticast mode
[  447.524571][T10149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  447.646737][T10163] netlink: 'syz.2.1159': attribute type 13 has an invalid length.
[  447.665929][T10161] x_tables: duplicate underflow at hook 1
[  447.791258][T10170] dvmrp0: entered allmulticast mode
[  447.795331][T10170] netlink: 'syz.2.1163': attribute type 1 has an invalid length.
[  447.911894][T10168] lo speed is unknown, defaulting to 1000
[  448.913650][T10201] syzkaller1: entered promiscuous mode
[  448.916163][T10201] syzkaller1: entered allmulticast mode
[  449.342031][T10206] lo speed is unknown, defaulting to 1000
[  449.856728][T10238] bond11 (unregistering): Released all slaves
[  450.102914][T10245] SET target dimension over the limit!
[  450.259868][T10249] netlink: 'syz.2.1187': attribute type 11 has an invalid length.
[  450.628256][T10263] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  450.736199][T10284] sctp: [Deprecated]: syz.2.1197 (pid 10284) Use of struct sctp_assoc_value in delayed_ack socket option.
[  450.736199][T10284] Use struct sctp_sack_info instead
[  450.743382][T10285] sctp: [Deprecated]: syz.2.1197 (pid 10285) Use of struct sctp_assoc_value in delayed_ack socket option.
[  450.743382][T10285] Use struct sctp_sack_info instead
[  450.932672][T10298] validate_nla: 1 callbacks suppressed
[  450.932688][T10298] netlink: 'syz.1.1201': attribute type 1 has an invalid length.
[  451.677184][T10316] __nla_validate_parse: 21 callbacks suppressed
[  451.677202][T10316] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1207'.
[  451.873321][T10332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1212'.
[  451.888015][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'.
[  452.004018][T10341] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  452.011491][T10341] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  452.015517][T10341] veth0_virt_wifi: entered allmulticast mode
[  452.018383][T10341] veth0_virt_wifi: entered promiscuous mode
[  452.023977][T10341] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  452.027449][T10341] bridge0: port 3(veth0_virt_wifi) entered forwarding state
[  452.061073][T10350] netlink: 'syz.0.1219': attribute type 1 has an invalid length.
[  452.104442][T10341] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.112936][T10341] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.136628][T10350] bond7: entered promiscuous mode
[  452.138697][T10350] 8021q: adding VLAN 0 to HW filter on device bond7
[  452.163684][T10352] bond7: (slave bridge12): making interface the new active one
[  452.167755][T10352] bridge12: entered promiscuous mode
[  452.174643][T10352] bond7: (slave bridge12): Enslaving as an active interface with an up link
[  452.298718][T10341] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.303556][T10341] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.396108][T10341] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.400266][T10341] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.420001][T10360] netlink: 'syz.0.1220': attribute type 13 has an invalid length.
[  452.474686][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'.
[  452.481843][T10341] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.485884][T10341] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.605390][ T5715] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  452.608728][ T5715] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.620289][ T5715] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  452.624177][ T5715] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.638106][ T5715] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  452.642044][ T5715] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.658267][ T5715] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  452.661659][ T5715] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.716941][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'.
[  452.941049][T10375] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1224'.
[  452.954655][T10375] netlink: 'syz.1.1224': attribute type 39 has an invalid length.
[  453.156705][T10386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  453.386177][T10390] lo speed is unknown, defaulting to 1000
[  453.462972][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'.
[  453.753848][T10397] netlink: 'syz.0.1229': attribute type 1 has an invalid length.
[  453.848141][T10397] 8021q: adding VLAN 0 to HW filter on device bond8
[  453.852891][T10399] netlink: 'syz.0.1229': attribute type 29 has an invalid length.
[  454.029379][T10405] netlink: 'syz.0.1231': attribute type 1 has an invalid length.
[  454.100687][T10408] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  454.128105][T10414] netlink: 'syz.2.1233': attribute type 1 has an invalid length.
[  454.135157][T10414] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1233'.
[  454.331672][T10425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1237'.
[  454.445954][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1240'.
[  454.475763][T10433] 8021q: adding VLAN 0 to HW filter on device bond10
[  454.486030][T10436] netlink: 'syz.1.1242': attribute type 8 has an invalid length.
[  454.536728][T10440] netlink: 'syz.2.1244': attribute type 15 has an invalid length.
[  454.605245][T10445] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  454.910666][T10465] 8021q: adding VLAN 0 to HW filter on device bond13
[  455.033655][T10482] syzkaller1: entered promiscuous mode
[  455.035696][T10482] syzkaller1: entered allmulticast mode
[  455.076299][T10484] tun0: tun_chr_ioctl cmd 1074025675
[  455.078790][T10484] tun0: persist enabled
[  455.081738][T10484] tun0: tun_chr_ioctl cmd 1074025675
[  455.084796][T10484] tun0: persist enabled
[  455.087363][T10484] tun0: tun_chr_ioctl cmd 1074025673
[  455.309690][T10494] bond11: entered promiscuous mode
[  455.312565][T10494] 8021q: adding VLAN 0 to HW filter on device bond11
[  455.330207][T10494] 8021q: adding VLAN 0 to HW filter on device bond11
[  455.334706][T10494] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  455.338532][T10494] bond11: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  455.346485][T10494] bond11: (slave ip6gre2): making interface the new active one
[  455.350048][T10494] ip6gre2: entered promiscuous mode
[  455.354770][T10494] bond11: (slave ip6gre2): Enslaving as an active interface with an up link
[  455.486923][T10501] net_ratelimit: 3322 callbacks suppressed
[  455.486944][T10501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  455.539300][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  456.201206][T10530] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  456.349189][T10536] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  456.397225][T10536] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  456.505859][T10541] validate_nla: 6 callbacks suppressed
[  456.505873][T10541] netlink: 'syz.0.1274': attribute type 8 has an invalid length.
[  456.701036][T10564] __nla_validate_parse: 12 callbacks suppressed
[  456.701051][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'.
[  456.945812][T10570] lo speed is unknown, defaulting to 1000
[  457.132772][T10576] lo speed is unknown, defaulting to 1000
[  457.583546][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'.
[  457.936654][T10602] dummy0: Caught tx_queue_len zero misconfig
[  457.957079][T10604] netlink: 'syz.0.1290': attribute type 3 has an invalid length.
[  458.117945][T10612] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1292'.
[  458.158573][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'.
[  458.168362][T10617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1295'.
[  458.178801][T10617] netlink: 'syz.1.1295': attribute type 7 has an invalid length.
[  458.190387][T10617] netlink: 'syz.1.1295': attribute type 8 has an invalid length.
[  458.207333][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1295'.
[  458.352764][T10636] syzkaller0: entered promiscuous mode
[  458.354748][T10636] syzkaller0: entered allmulticast mode
[  458.372820][T10638] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  458.377506][T10638] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  458.383895][T10638] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  458.390788][T10638] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  458.422892][T10638] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  458.463719][   T40] smbdirect: ib_dev[syz2] removed
[  458.521422][T10642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1300'.
[  458.562306][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'.
[  458.830131][T10656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1305'.
[  458.971359][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'.
[  459.203629][T10670] 8021q: adding VLAN 0 to HW filter on device bond13
[  459.217615][T10670] bond13 (unregistering): Released all slaves
[  459.335074][T10679] netlink: 'syz.1.1313': attribute type 27 has an invalid length.
[  459.350622][T10681] bond12: (slave bond_slave_1): Device is not bonding slave
[  459.353292][T10681] bond12: option active_slave: invalid value (bond_slave_1)
[  459.357996][T10681] bond12 (unregistering): Released all slaves
[  459.373946][T10679] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.400178][   T12] bond0: (slave gretap1): link status definitely down, disabling slave
[  459.406680][   T12] bond0: now running without any active interface!
[  459.580429][T10709] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c)
[  474.893933][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  474.894263][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  474.903317][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  474.909975][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  474.910118][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  474.916684][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  474.916747][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  474.920713][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  474.922129][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  474.926337][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  474.936557][ T5650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  474.940646][ T5650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  474.943564][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  474.947344][ T5650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  474.949692][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  474.956021][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  474.961013][ T5650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  474.962794][   T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  474.963629][ T5650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  474.967159][   T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  474.968450][ T5650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  474.970825][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  474.976080][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  474.978599][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  475.005528][ T5000] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  475.267188][T10737] lo speed is unknown, defaulting to 1000
[  475.391930][T10733] lo speed is unknown, defaulting to 1000
[  475.537913][T10734] lo speed is unknown, defaulting to 1000
[  475.632134][T10737] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.635224][T10737] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.638180][T10737] bridge_slave_0: entered allmulticast mode
[  475.642358][T10737] bridge_slave_0: entered promiscuous mode
[  475.654469][T10737] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.656871][T10737] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.660237][T10737] bridge_slave_1: entered allmulticast mode
[  475.664238][T10737] bridge_slave_1: entered promiscuous mode
[  475.690816][T10737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.695358][T10737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  475.721854][T10737] team0: Port device team_slave_0 added
[  475.727433][T10737] team0: Port device team_slave_1 added
[  475.767607][T10737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.770614][T10737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  475.781255][T10737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  475.795074][T10737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  475.797315][T10737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  475.805768][T10737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  475.859452][T10737] hsr_slave_0: entered promiscuous mode
[  475.862442][T10737] hsr_slave_1: entered promiscuous mode
[  475.864684][T10737] debugfs: 'hsr0' already exists in 'hsr'
[  475.866576][T10737] Cannot create hsr debugfs directory
[  476.001431][T10733] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.003925][T10733] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.006260][T10733] bridge_slave_0: entered allmulticast mode
[  476.008950][T10733] bridge_slave_0: entered promiscuous mode
[  476.012447][T10733] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.014810][T10733] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.016967][T10733] bridge_slave_1: entered allmulticast mode
[  476.020339][T10733] bridge_slave_1: entered promiscuous mode
[  476.071524][T10733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.090807][T10733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  476.128678][T10734] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.131698][T10734] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.133998][T10734] bridge_slave_0: entered allmulticast mode
[  476.136550][T10734] bridge_slave_0: entered promiscuous mode
[  476.145703][T10733] team0: Port device team_slave_0 added
[  476.147599][T10734] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.150516][T10734] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.152916][T10734] bridge_slave_1: entered allmulticast mode
[  476.155501][T10734] bridge_slave_1: entered promiscuous mode
[  476.166014][T10733] team0: Port device team_slave_1 added
[  476.197128][T10734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.202887][T10734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  476.218154][T10733] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.220880][T10733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.229771][T10733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.240687][T10733] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.243601][T10733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.252574][T10733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.257644][T10734] team0: Port device team_slave_0 added
[  476.264607][T10734] team0: Port device team_slave_1 added
[  476.285436][T10734] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.287915][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.296149][T10734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.306713][T10734] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.309625][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.318596][T10734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.325752][T10733] hsr_slave_0: entered promiscuous mode
[  476.328260][T10733] hsr_slave_1: entered promiscuous mode
[  476.331050][T10733] debugfs: 'hsr0' already exists in 'hsr'
[  476.333017][T10733] Cannot create hsr debugfs directory
[  476.362731][T10734] hsr_slave_0: entered promiscuous mode
[  476.364940][T10734] hsr_slave_1: entered promiscuous mode
[  476.367138][T10734] debugfs: 'hsr0' already exists in 'hsr'
[  476.369075][T10734] Cannot create hsr debugfs directory
[  477.059081][   T53] Bluetooth: hci4: command tx timeout
[  477.059547][ T5650] Bluetooth: hci5: command tx timeout
[  477.065033][ T5000] Bluetooth: hci3: command tx timeout
[  479.139187][ T5000] Bluetooth: hci5: command tx timeout
[  479.139303][ T5650] Bluetooth: hci3: command tx timeout
[  479.142860][   T53] Bluetooth: hci4: command tx timeout
[  481.219600][   T53] Bluetooth: hci5: command tx timeout
[  481.219660][ T5000] Bluetooth: hci4: command tx timeout
[  481.222165][ T5650] Bluetooth: hci3: command tx timeout
[  483.299176][ T5650] Bluetooth: hci5: command tx timeout
[  483.299496][ T5000] Bluetooth: hci3: command tx timeout
[  483.301361][   T53] Bluetooth: hci4: command tx timeout
[  490.099755][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  494.600725][ T5058] udevd[5058]: worker [9091] /devices/virtual/block/nbd1 is taking a long time
[  506.740839][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  534.866913][ T5000] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  534.870482][ T5000] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  534.873225][ T5000] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  534.876090][ T5000] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  534.878657][ T5000] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  535.170990][T10792] lo speed is unknown, defaulting to 1000
[  535.415292][T10792] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.417497][T10792] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.420048][T10792] bridge_slave_0: entered allmulticast mode
[  535.422638][T10792] bridge_slave_0: entered promiscuous mode
[  535.425722][T10792] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.427947][T10792] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.430491][T10792] bridge_slave_1: entered allmulticast mode
[  535.433013][T10792] bridge_slave_1: entered promiscuous mode
[  535.449128][T10792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  535.453478][T10792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  535.469615][T10792] team0: Port device team_slave_0 added
[  535.472688][T10792] team0: Port device team_slave_1 added
[  535.487005][T10792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  535.489410][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  535.497120][T10792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  535.501329][T10792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  535.503405][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  535.511144][T10792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  535.535895][T10792] hsr_slave_0: entered promiscuous mode
[  535.538428][T10792] hsr_slave_1: entered promiscuous mode
[  535.541001][T10792] debugfs: 'hsr0' already exists in 'hsr'
[  535.543085][T10792] Cannot create hsr debugfs directory
[  535.894790][ T5000] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  535.900424][ T5000] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  535.904299][ T5000] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  535.908398][ T5000] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  535.914034][ T5000] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  535.937645][   T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  535.943053][   T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  535.947234][   T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  535.953269][   T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  535.956898][   T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  536.180124][T10813] lo speed is unknown, defaulting to 1000
[  536.287150][T10811] lo speed is unknown, defaulting to 1000
[  536.433908][T10813] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.436971][T10813] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.440284][T10813] bridge_slave_0: entered allmulticast mode
[  536.444214][T10813] bridge_slave_0: entered promiscuous mode
[  536.453786][T10813] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.456875][T10813] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.460324][T10813] bridge_slave_1: entered allmulticast mode
[  536.464202][T10813] bridge_slave_1: entered promiscuous mode
[  536.496959][T10813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.504035][T10813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.533250][T10813] team0: Port device team_slave_0 added
[  536.540956][T10813] team0: Port device team_slave_1 added
[  536.585113][T10813] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.587987][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.598988][T10813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.609318][T10813] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.612246][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.622584][T10813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.677336][T10813] hsr_slave_0: entered promiscuous mode
[  536.680868][T10813] hsr_slave_1: entered promiscuous mode
[  536.683761][T10813] debugfs: 'hsr0' already exists in 'hsr'
[  536.685753][T10813] Cannot create hsr debugfs directory
[  536.754245][T10811] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.756399][T10811] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.759245][T10811] bridge_slave_0: entered allmulticast mode
[  536.761993][T10811] bridge_slave_0: entered promiscuous mode
[  536.769375][T10811] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.771866][T10811] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.774653][T10811] bridge_slave_1: entered allmulticast mode
[  536.779903][T10811] bridge_slave_1: entered promiscuous mode
[  536.813321][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.824492][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.855883][T10811] team0: Port device team_slave_0 added
[  536.861369][T10811] team0: Port device team_slave_1 added
[  536.891738][T10811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.893880][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.901821][ T5000] Bluetooth: hci6: command tx timeout
[  536.904526][T10811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.909810][T10811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.913902][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.922235][T10811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.961181][T10811] hsr_slave_0: entered promiscuous mode
[  536.963490][T10811] hsr_slave_1: entered promiscuous mode
[  536.965749][T10811] debugfs: 'hsr0' already exists in 'hsr'
[  536.967603][T10811] Cannot create hsr debugfs directory
[  537.949056][ T5000] Bluetooth: hci7: command tx timeout
[  538.019105][ T5000] Bluetooth: hci8: command tx timeout
[  538.979122][ T5000] Bluetooth: hci6: command tx timeout
[  540.019233][ T5000] Bluetooth: hci7: command tx timeout
[  540.099111][ T5000] Bluetooth: hci8: command tx timeout
[  541.059109][ T5000] Bluetooth: hci6: command tx timeout
[  542.099031][ T5000] Bluetooth: hci7: command tx timeout
[  542.179128][ T5000] Bluetooth: hci8: command tx timeout
[  543.139135][ T5000] Bluetooth: hci6: command tx timeout
[  544.179141][ T5000] Bluetooth: hci7: command tx timeout
[  544.259181][ T5000] Bluetooth: hci8: command tx timeout
[  557.939551][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  568.192233][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  594.883066][   T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  594.886534][   T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  594.891111][   T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  594.894284][   T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  594.896848][   T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  595.176551][T10846] lo speed is unknown, defaulting to 1000
[  595.387068][T10846] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.389764][T10846] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.392268][T10846] bridge_slave_0: entered allmulticast mode
[  595.395375][T10846] bridge_slave_0: entered promiscuous mode
[  595.399472][T10846] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.401909][T10846] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.404616][T10846] bridge_slave_1: entered allmulticast mode
[  595.407744][T10846] bridge_slave_1: entered promiscuous mode
[  595.426611][T10846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  595.432797][T10846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  595.450791][T10846] team0: Port device team_slave_0 added
[  595.454242][T10846] team0: Port device team_slave_1 added
[  595.471617][T10846] batman_adv: batadv0: Adding interface: batadv_slave_0
[  595.474121][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  595.484796][T10846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  595.490950][T10846] batman_adv: batadv0: Adding interface: batadv_slave_1
[  595.493752][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  595.504183][T10846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  595.537826][T10846] hsr_slave_0: entered promiscuous mode
[  595.540934][T10846] hsr_slave_1: entered promiscuous mode
[  595.543180][T10846] debugfs: 'hsr0' already exists in 'hsr'
[  595.545027][T10846] Cannot create hsr debugfs directory
[  595.919444][   T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  595.922920][   T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  595.926755][   T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  595.934008][   T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  595.937668][   T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  596.229244][T10864] lo speed is unknown, defaulting to 1000
[  596.485932][T10864] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.489106][T10864] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.491961][T10864] bridge_slave_0: entered allmulticast mode
[  596.495781][T10864] bridge_slave_0: entered promiscuous mode
[  596.500867][T10864] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.503867][T10864] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.506935][T10864] bridge_slave_1: entered allmulticast mode
[  596.510780][T10864] bridge_slave_1: entered promiscuous mode
[  596.536918][T10864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  596.541475][T10864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  596.558478][T10864] team0: Port device team_slave_0 added
[  596.561869][T10864] team0: Port device team_slave_1 added
[  596.579427][T10864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  596.582328][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  596.592559][T10864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  596.598471][T10864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  596.601502][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  596.611667][T10864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  596.639367][T10864] hsr_slave_0: entered promiscuous mode
[  596.641992][T10864] hsr_slave_1: entered promiscuous mode
[  596.644532][T10864] debugfs: 'hsr0' already exists in 'hsr'
[  596.646618][T10864] Cannot create hsr debugfs directory
[  596.907003][ T5000] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  596.913949][ T5000] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  596.920063][ T5000] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  596.925285][ T5000] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  596.929778][ T5000] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  596.983782][   T53] Bluetooth: hci9: command tx timeout
[  597.193487][T10882] lo speed is unknown, defaulting to 1000
[  597.441658][T10882] bridge0: port 1(bridge_slave_0) entered blocking state
[  597.444736][T10882] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.447478][T10882] bridge_slave_0: entered allmulticast mode
[  597.451752][T10882] bridge_slave_0: entered promiscuous mode
[  597.455497][T10882] bridge0: port 2(bridge_slave_1) entered blocking state
[  597.458126][T10882] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.461667][T10882] bridge_slave_1: entered allmulticast mode
[  597.464908][T10882] bridge_slave_1: entered promiscuous mode
[  597.485595][T10882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  597.491769][T10882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  597.507611][T10882] team0: Port device team_slave_0 added
[  597.511326][T10882] team0: Port device team_slave_1 added
[  597.525324][T10882] batman_adv: batadv0: Adding interface: batadv_slave_0
[  597.527554][T10882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  597.536032][T10882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  597.541180][T10882] batman_adv: batadv0: Adding interface: batadv_slave_1
[  597.543436][T10882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  597.552437][T10882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  597.577580][T10882] hsr_slave_0: entered promiscuous mode
[  597.580241][T10882] hsr_slave_1: entered promiscuous mode
[  597.582397][T10882] debugfs: 'hsr0' already exists in 'hsr'
[  597.584181][T10882] Cannot create hsr debugfs directory
[  597.619158][   T34] INFO: task kworker/1:1H:95 blocked for more than 143 seconds.
[  597.622173][   T34]       Not tainted syzkaller #0
[  597.627000][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  597.634478][   T34] task:kworker/1:1H    state:D stack:26504 pid:95    tgid:95    ppid:2      task_flags:0x4208060 flags:0x00080000
[  597.642085][   T34] Workqueue: kblockd blk_mq_requeue_work
[  597.643972][   T34] Call Trace:
[  597.645034][   T34]  <TASK>
[  597.646131][   T34]  __schedule+0x17b4/0x5680
[  597.647812][   T34]  ? do_raw_spin_lock+0x12b/0x2f0
[  597.653297][   T34]  ? __pfx___schedule+0x10/0x10
[  597.657993][   T34]  ? schedule+0x90/0x360
[  597.662607][   T34]  schedule+0x164/0x360
[  597.667653][   T34]  schedule_timeout+0x158/0x2c0
[  597.673178][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  597.681856][   T34]  ? __pfx_process_timeout+0x10/0x10
[  597.686304][   T34]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  597.692279][   T34]  ? prepare_to_wait_event+0x436/0x480
[  597.698963][   T34]  nbd_queue_rq+0x857/0x1100
[  597.701191][   T34]  ? __pfx_nbd_queue_rq+0x10/0x10
[  597.709380][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  597.712502][   T34]  blk_mq_dispatch_rq_list+0xa70/0x1910
[  597.714760][   T34]  ? sbitmap_get+0x229/0x390
[  597.716585][   T34]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  597.719531][   T34]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  597.721971][   T34]  __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  597.724343][   T34]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  597.726977][   T34]  ? blk_mq_hw_queue_need_run+0x13c/0x680
[  597.729864][   T34]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  597.731988][   T34]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  597.734154][   T34]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  597.736476][   T34]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  597.738506][   T34]  blk_mq_run_hw_queue+0x348/0x4f0
[  597.740924][   T34]  blk_mq_run_hw_queues+0x26c/0x3f0
[  597.743136][   T34]  blk_mq_requeue_work+0x71c/0x780
[  597.745136][   T34]  ? __pfx_blk_mq_requeue_work+0x10/0x10
[  597.747364][   T34]  ? process_scheduled_works+0xa70/0x1860
[  597.750167][   T34]  ? process_scheduled_works+0xa70/0x1860
[  597.752640][   T34]  process_scheduled_works+0xb5d/0x1860
[  597.754994][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  597.757441][   T34]  ? assign_work+0x3d5/0x5e0
[  597.759988][   T34]  worker_thread+0xa53/0xfc0
[  597.761963][   T34]  kthread+0x388/0x470
[  597.763658][   T34]  ? __pfx_worker_thread+0x10/0x10
[  597.765622][   T34]  ? __pfx_kthread+0x10/0x10
[  597.767497][   T34]  ret_from_fork+0x514/0xb70
[  597.769807][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  597.771910][   T34]  ? __switch_to+0xc79/0x1410
[  597.773794][   T34]  ? __pfx_kthread+0x10/0x10
[  597.775262][   T34]  ret_from_fork_asm+0x1a/0x30
[  597.776791][   T34]  </TASK>
[  597.777877][   T34] INFO: task udevd:9091 blocked for more than 143 seconds.
[  597.781229][   T34]       Not tainted syzkaller #0
[  597.783107][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  597.786348][   T34] task:udevd           state:D stack:22856 pid:9091  tgid:9091  ppid:5058   task_flags:0x400140 flags:0x00080800
[  597.790753][   T34] Call Trace:
[  597.792109][   T34]  <TASK>
[  597.793080][   T34]  __schedule+0x17b4/0x5680
[  597.794628][   T34]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  597.796973][   T34]  ? __blk_flush_plug+0x416/0x4d0
[  597.798781][   T34]  ? __pfx___schedule+0x10/0x10
[  597.800776][   T34]  ? schedule+0x90/0x360
[  597.802407][   T34]  schedule+0x164/0x360
[  597.803747][   T34]  schedule_timeout+0x158/0x2c0
[  597.805350][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  597.807305][   T34]  ? __pfx_process_timeout+0x10/0x10
[  597.809557][   T34]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  597.811684][   T34]  ? prepare_to_wait_event+0x436/0x480
[  597.813736][   T34]  nbd_queue_rq+0x857/0x1100
[  597.815278][   T34]  ? __pfx_nbd_queue_rq+0x10/0x10
[  597.816975][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  597.819913][   T34]  blk_mq_dispatch_rq_list+0xa70/0x1910
[  597.821897][   T34]  ? sbitmap_get+0x229/0x390
[  597.823347][   T34]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  597.825468][   T34]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  597.827643][   T34]  __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  597.830620][   T34]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  597.833494][   T34]  ? blk_mq_hw_queue_need_run+0x13c/0x680
[  597.835729][   T34]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  597.837691][   T34]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  597.840320][   T34]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  597.842445][   T34]  blk_mq_run_hw_queue+0x348/0x4f0
[  597.844470][   T34]  blk_mq_dispatch_list+0xd16/0xe10
[  597.846410][   T34]  ? bdev_count_inflight+0x1cf/0x210
[  597.848451][   T34]  ? blk_mq_dispatch_list+0x1b0/0xe10
[  597.850998][   T34]  ? __pfx_blk_mq_dispatch_list+0x10/0x10
[  597.853294][   T34]  ? rcu_is_watching+0x15/0xb0
[  597.855168][   T34]  blk_mq_flush_plug_list+0x48d/0x570
[  597.857301][   T34]  ? blk_add_rq_to_plug+0x300/0x450
[  597.859751][   T34]  ? blk_mq_submit_bio+0x1acf/0x28e0
[  597.861893][   T34]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  597.863965][   T34]  __blk_flush_plug+0x3ed/0x4d0
[  597.865637][   T34]  ? __pfx___blk_flush_plug+0x10/0x10
[  597.867374][   T34]  __submit_bio+0x28d/0x580
[  597.869445][   T34]  ? __pfx___submit_bio+0x10/0x10
[  597.871415][   T34]  ? bio_associate_blkg+0x6d/0x230
[  597.873291][   T34]  submit_bio_noacct_nocheck+0x2f4/0xa40
[  597.875408][   T34]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  597.877740][   T34]  block_read_full_folio+0x599/0x830
[  597.879991][   T34]  ? __pfx_blkdev_get_block+0x10/0x10
[  597.881748][   T34]  filemap_read_folio+0x137/0x3b0
[  597.883388][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  597.885113][   T34]  ? __pfx_filemap_read_folio+0x10/0x10
[  597.886799][   T34]  ? filemap_add_folio+0x356/0x530
[  597.888753][   T34]  do_read_cache_folio+0x358/0x590
[  597.891038][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  597.893104][   T34]  read_part_sector+0xb6/0x2b0
[  597.895036][   T34]  adfspart_check_ICS+0xb1/0x960
[  597.897052][   T34]  ? seq_buf_printf+0x212/0x2d0
[  597.899320][   T34]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  597.901891][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  597.904148][   T34]  bdev_disk_changed+0x817/0x1770
[  597.905903][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  597.907669][   T34]  blkdev_get_whole+0x380/0x510
[  597.909736][   T34]  bdev_open+0x31e/0xd30
[  597.911413][   T34]  blkdev_open+0x470/0x610
[  597.913153][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  597.914890][   T34]  do_dentry_open+0x785/0x14e0
[  597.916534][   T34]  vfs_open+0x3b/0x340
[  597.917891][   T34]  ? path_openat+0x2df0/0x3860
[  597.920081][   T34]  path_openat+0x2e08/0x3860
[  597.921991][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  597.923553][   T34]  ? stack_depot_save_flags+0x33/0x810
[  597.925305][   T34]  ? __pfx_path_openat+0x10/0x10
[  597.926907][   T34]  ? __x64_sys_openat+0x138/0x170
[  597.928532][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  597.930462][   T34]  do_file_open+0x23e/0x4a0
[  597.932020][   T34]  ? __pfx_do_file_open+0x10/0x10
[  597.933637][   T34]  ? _raw_spin_unlock+0x28/0x50
[  597.935210][   T34]  ? alloc_fd+0x64b/0x6c0
[  597.936594][   T34]  do_sys_openat2+0x113/0x200
[  597.938132][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  597.940925][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  597.942704][   T34]  ? rcu_is_watching+0x15/0xb0
[  597.944288][   T34]  __x64_sys_openat+0x138/0x170
[  597.945897][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.947865][   T34]  do_syscall_64+0x15f/0xf80
[  597.949728][   T34]  ? trace_irq_disable+0x3b/0x140
[  597.951440][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.953322][   T34] RIP: 0033:0x7f00c9f989a4
[  597.954840][   T34] RSP: 002b:00007ffd1b42bb70 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  597.957839][   T34] RAX: ffffffffffffffda RBX: 0000556a2dbfa780 RCX: 00007f00c9f989a4
[  597.960754][   T34] RDX: 00000000000a0800 RSI: 0000556a2dbdb5b0 RDI: 00000000ffffff9c
[  597.963377][   T34] RBP: 0000556a2dbdb5b0 R08: 0000000000000001 R09: 3fffffffffffffff
[  597.965910][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  597.968516][   T34] R13: 0000556a2dbebaa0 R14: 0000000000000001 R15: 0000556a2dbda910
[  597.971596][   T34]  </TASK>
[  597.972841][   T34] 
[  597.972841][   T34] Showing all locks held in the system:
[  597.975574][   T34] 1 lock held by rcu_exp_gp_kthr/18:
[  597.977438][   T34] 1 lock held by khungtaskd/34:
[  597.984803][   T34]  #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  597.988083][   T34] 4 locks held by kworker/1:1H/95:
[  597.990240][   T34]  #0: ffff8881622e5d40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  597.993772][   T34]  #1: ffffc900027e7c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  597.997764][   T34]  #2: ffff88816d9a8c18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0
[  598.001619][   T34]  #3: ffff888102720178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  598.004725][   T34] 2 locks held by getty/5436:
[  598.006359][   T34]  #0: ffff88816f07d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  598.009684][   T34]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  598.012923][   T34] 3 locks held by udevd/9091:
[  598.014412][   T34]  #0: ffff88816d966350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  598.017325][   T34]  #1: ffff88816d9a8c18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0
[  598.020735][   T34]  #2: ffff888102728178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  598.023677][   T34] 6 locks held by syz.1.1322/10711:
[  598.025319][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  598.027787][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  598.029223][   T53] Bluetooth: hci10: command tx timeout
[  598.031471][   T34]  #2: ffff88816d969260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[  598.031508][   T34]  #3: ffff88816d9f3e78 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  598.031537][   T34]  #4: ffff88816d9f3840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  598.031576][   T34]  #5: ffff88816d9f3878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  598.031613][   T34] 2 locks held by syz.2.1324/10718:
[  598.031621][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  598.031649][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  598.031678][   T34] 2 locks held by syz.2.1324/10722:
[  598.031684][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  598.031711][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  598.031738][   T34] 2 locks held by syz.2.1324/10728:
[  598.031745][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  598.031773][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  598.031802][   T34] 2 locks held by syz.0.1326/10724:
[  598.031808][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  598.031866][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  598.031894][   T34] 2 locks held by syz-executor/10733:
[  598.031901][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  598.031927][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  598.031955][   T34] 2 locks held by syz-executor/10734:
[  598.031962][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  598.031987][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  598.032021][   T34] 2 locks held by syz-executor/10737:
[  598.032027][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  598.032054][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  598.032085][   T34] 2 locks held by syz-executor/10792:
[  598.032092][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  598.032118][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  598.032148][   T34] 2 locks held by syz-executor/10811:
[  598.032155][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  598.032183][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  598.032213][   T34] 2 locks held by syz-executor/10813:
[  598.032219][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  598.032250][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  598.032285][   T34] 2 locks held by syz-executor/10846:
[  598.032291][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  598.032319][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  598.032347][   T34] 2 locks held by syz-executor/10864:
[  598.032353][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  598.032384][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  598.032419][   T34] 5 locks held by syz-executor/10882:
[  598.032427][   T34]  #0: ffff888191f9cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[  598.145547][   T34]  #1: ffff888191f9c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0
[  598.148659][   T34]  #2: ffffffff8ff53700 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  598.152068][   T34]  #3: ffff888191f50af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570
[  598.154953][   T34]  #4: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  598.158336][   T34] 
[  598.159352][   T34] =============================================
[  598.159352][   T34] 
[  598.162255][   T34] NMI backtrace for cpu 0
[  598.162268][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  598.162281][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  598.162288][   T34] Call Trace:
[  598.162294][   T34]  <TASK>
[  598.162298][   T34]  dump_stack_lvl+0xe8/0x150
[  598.162318][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  598.162333][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  598.162347][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  598.162363][   T34]  sys_info+0x135/0x170
[  598.162376][   T34]  watchdog+0xfd3/0x1030
[  598.162396][   T34]  ? watchdog+0x1c9/0x1030
[  598.162415][   T34]  kthread+0x388/0x470
[  598.162431][   T34]  ? __pfx_watchdog+0x10/0x10
[  598.162446][   T34]  ? __pfx_kthread+0x10/0x10
[  598.162462][   T34]  ret_from_fork+0x514/0xb70
[  598.162477][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  598.162490][   T34]  ? __switch_to+0xc79/0x1410
[  598.162510][   T34]  ? __pfx_kthread+0x10/0x10
[  598.162525][   T34]  ret_from_fork_asm+0x1a/0x30
[  598.162550][   T34]  </TASK>
[  598.162554][   T34] Sending NMI from CPU 0 to CPUs 1:
[  598.202377][    C1] NMI backtrace for cpu 1
[  598.202394][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  598.202405][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  598.202413][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  598.202436][    C1] Code: cb 7c 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 b1 1f 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  598.202446][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000202
[  598.202458][    C1] RAX: 00000000003b8475 RBX: ffffffff819a91ea RCX: 0000000080000001
[  598.202467][    C1] RDX: 0000000000000001 RSI: ffffffff8dfaae8d RDI: ffffffff8c28ade0
[  598.202474][    C1] RBP: ffffc90000197f10 R08: ffff88823c6339db R09: 1ffff110478c673b
[  598.202482][    C1] R10: dffffc0000000000 R11: ffffed10478c673c R12: 0000000000000001
[  598.202490][    C1] R13: 1ffff1102c095000 R14: 0000000000000001 R15: 1ffff1102c095000
[  598.202498][    C1] FS:  0000000000000000(0000) GS:ffff8882a9287000(0000) knlGS:0000000000000000
[  598.202507][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  598.202515][    C1] CR2: 00007f27a764c440 CR3: 000000000e74a000 CR4: 00000000000006f0
[  598.202555][    C1] Call Trace:
[  598.202563][    C1]  <TASK>
[  598.202568][    C1]  default_idle+0x9/0x20
[  598.202580][    C1]  default_idle_call+0x72/0xb0
[  598.202593][    C1]  do_idle+0x36a/0x5f0
[  598.202608][    C1]  ? __pfx_do_idle+0x10/0x10
[  598.202623][    C1]  cpu_startup_entry+0x43/0x60
[  598.202636][    C1]  start_secondary+0x101/0x110
[  598.202647][    C1]  common_startup_64+0x13e/0x147
[  598.202667][    C1]  </TASK>
[  598.260238][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  598.262438][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  598.265632][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  598.269386][   T34] Call Trace:
[  598.270684][   T34]  <TASK>
[  598.271627][   T34]  vpanic+0x56c/0xa60
[  598.272939][   T34]  ? __pfx___schedule+0x10/0x10
[  598.274540][   T34]  ? __pfx_vpanic+0x10/0x10
[  598.276002][   T34]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  598.277986][   T34]  panic+0xc5/0xd0
[  598.279199][   T34]  ? __pfx_panic+0x10/0x10
[  598.280630][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  598.282354][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  598.284331][   T34]  watchdog+0x102c/0x1030
[  598.285716][   T34]  ? watchdog+0x1c9/0x1030
[  598.287173][   T34]  kthread+0x388/0x470
[  598.288469][   T34]  ? __pfx_watchdog+0x10/0x10
[  598.289981][   T34]  ? __pfx_kthread+0x10/0x10
[  598.291476][   T34]  ret_from_fork+0x514/0xb70
[  598.293295][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  598.295361][   T34]  ? __switch_to+0xc79/0x1410
[  598.297246][   T34]  ? __pfx_kthread+0x10/0x10
[  598.299125][   T34]  ret_from_fork_asm+0x1a/0x30
[  598.301137][   T34]  </TASK>
[  598.303206][   T34] Kernel Offset: disabled
[  598.304702][   T34] Rebooting in 86400 seconds..
