last executing test programs:

18.705413015s ago: executing program 0 (id=12456):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'nr0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8008000}, 0x24004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xfff9, 0xfff2}, {0xa, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c841)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

18.595339402s ago: executing program 0 (id=12457):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe000000007203"], 0x0}, 0x94)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0x10, @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x42}, @broadcast, 0x7, 0x80}, {0x0, @remote, 0xd, 0x4, [0x7, 0x8]}, @ah_ip4_spec={@multicast1, @private=0xa010100, 0x0, 0x5}, {0x0, @local, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}})
sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x3c}}, 0x8000)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
socket(0x10, 0x803, 0x2) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe000000007203"], 0x0}, 0x94) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0x10, @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x42}, @broadcast, 0x7, 0x80}, {0x0, @remote, 0xd, 0x4, [0x7, 0x8]}, @ah_ip4_spec={@multicast1, @private=0xa010100, 0x0, 0x5}, {0x0, @local, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) (async)
sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x3c}}, 0x8000) (async)

18.494772824s ago: executing program 0 (id=12458):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e22, @private=0x7f000001}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r3=>0x0})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0)
setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={r3, @dev={0xac, 0x14, 0x14, 0x12}, @empty}, 0xc)

18.344303234s ago: executing program 0 (id=12459):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC], 0x48}, 0x1, 0x0, 0x0, 0x480d4}, 0x84)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000080)=0xfffffff8, 0x4)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x1000800800f3d, 0x7)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r4}, 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r6, r5}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, <r7=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20)
close(r4)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f0000000900)}, 0x20)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r7, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x20000080)
r8 = socket$inet6(0xa, 0x1, 0x84)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000900)={<r9=>0x0, "d4bf0c720fd077f0ba3a5b74f9eae86b"})
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001c80)={r9, 0x7})
setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r8, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c)
getsockopt$bt_hci(r8, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)
ioctl$XFS_IOC_AG_GEOMETRY(r6, 0xc080583d, &(0x7f0000000000)={0x6, 0xe2d, 0x8, 0x3, 0x2, 0x6, 0x401, 0x5})

17.923339293s ago: executing program 2 (id=12466):
unshare(0x6020480)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000083c478d77c550fbe000000000000000000000000000000002be202c0aa17b4d6737c1e5d38ecf1ee925cf68e"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080))
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4)
socket$inet(0x2, 0x2, 0x73)
shutdown(0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000001240)='+}\\)>&^}\x00', 0xa0882, &(0x7f00000001c0)={@align=0x2, {0xa, 0x4, 0x7, 0xf80000000000}}, 0xf6, 0x0, 0x0})
socket$kcm(0x10, 0x2, 0x4)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', <r9=>0x0})
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x74, r9, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004)
setsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000040)={@remote, r9}, 0x14)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000e7ffff07000340"], 0x88}}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r10)
r11 = getpid()
sendmsg$unix(r10, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80)

17.824909823s ago: executing program 2 (id=12467):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x40, 0x4)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delchain={0x24, 0x64, 0x1, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe0800000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r10, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0)
close(r11)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xd4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ea, 0xfffffffc}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x80}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)

17.76508111s ago: executing program 2 (id=12469):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003200)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x6, 0x31, 0x1ff, 0xfffff371, 0x8d, 0x1002, 0x804, 0x7ff, 0x6, 0x7, 0x6, 0x6, 0xa, 0x74, 0x7, 0x8, 0x4, 0x4, 0x3, 0x9, 0x401, 0x400, 0x4, 0x8, 0x0, 0x7, 0x7fffffff, 0x9, 0x7, 0x80, 0x5, 0x4, 0x8, 0xa, 0x74ad, 0x3, 0x4, 0x4, 0x8001, 0xffff, 0x2, 0x5, 0xfffff000, 0x0, 0x200, 0x41, 0x4, 0x7, 0x7, 0x0, 0x800, 0x4da, 0x5, 0x8e, 0x1, 0x1, 0x96, 0x800, 0x4, 0x8, 0x4, 0xdf69f4, 0x56, 0xef, 0x60, 0x4, 0x9, 0x800, 0x1ff, 0x3, 0x4, 0x5, 0x1a, 0x100, 0x8, 0x3, 0xa, 0x60, 0x7, 0xce, 0xa000, 0x1, 0x1, 0x34, 0x9, 0x4, 0x5, 0x8, 0x7, 0x7f, 0x9, 0xf58, 0x5, 0x400, 0x9, 0xe, 0x3, 0x3, 0x279, 0x6, 0x9, 0x1, 0x2, 0x994, 0x2, 0x0, 0xe304, 0xc00000, 0x96, 0x8, 0xb, 0x1, 0x40000, 0x64f6, 0x3cb, 0x2, 0x3, 0xd5, 0x5, 0x1, 0x9, 0x10000, 0x401, 0x7, 0x7, 0xfffffff8, 0x3, 0x1, 0xaba8, 0xfffffff7, 0x9, 0xfffffffb, 0xffffff80, 0x1000, 0x1, 0xfff, 0x1, 0xd51, 0x5, 0x9, 0x1050c0, 0x10001, 0x8, 0x7, 0x7, 0xbf81, 0xc2b0, 0x1ff, 0x101, 0x5, 0x1, 0x2, 0x3, 0x5, 0x0, 0x7fffffff, 0xffff, 0x5, 0x4, 0x7ff, 0x891, 0x401, 0x8, 0x6, 0x40, 0x5, 0x9, 0x0, 0x1000008, 0x5, 0xebc, 0x4, 0x3, 0x9, 0xb5, 0x7, 0x6, 0x6, 0x80000000, 0x1, 0x0, 0x9, 0x9, 0x7fffffff, 0x5, 0x6, 0x4, 0x200, 0x7, 0xc, 0x7f, 0x80009, 0x1, 0x7, 0x0, 0x5, 0x3, 0x4, 0x7fff, 0x8, 0x1, 0x4, 0x1eb0, 0x0, 0x1, 0x7, 0x1000, 0x2, 0xc4, 0x7, 0x1, 0x5, 0x5, 0x0, 0x9, 0x5, 0x0, 0xda0, 0x9, 0x0, 0xffffffff, 0x8, 0x6, 0x0, 0x4, 0x2, 0xff, 0x2, 0x100, 0x7, 0x1, 0x1, 0x1, 0xb, 0x2, 0x0, 0x4, 0x10001, 0x2, 0x81, 0xfffffffd, 0x6, 0x0, 0x7, 0x7, 0x1ff, 0x1, 0x3ff, 0x7f, 0x4, 0x80000001, 0x5, 0x6, 0x3ff, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x100, 0x8, 0x9, 0x401, 0x1, 0x1, 0x7, 0x3, 0xb84d, 0x6, 0x2, 0x0, 0x8, 0x9, 0x3, 0x3, 0x2, 0xc, 0xb, 0x9a, 0x8, 0xfffffff7, 0x1, 0x74, 0x6, 0x6, 0x0, 0x401, 0x1, 0x83, 0xffff, 0x90000000, 0x3564, 0x0, 0x992, 0xd, 0x7, 0xf2, 0x2ba6, 0x8, 0x12, 0x1b5b, 0x5, 0x6, 0x800, 0x2, 0x1, 0x40, 0xfffffff8, 0x86, 0x3, 0x7, 0x3, 0x10, 0x90d4, 0x10000, 0x9, 0x5, 0x6, 0x5, 0x400, 0xa6, 0x6, 0x7, 0x7, 0x7fff, 0x81, 0x2, 0x5, 0x5, 0x40, 0xfffffff7, 0xb3, 0x2, 0x2, 0xa, 0x9, 0x10, 0x158, 0x5, 0x7fffffff, 0x7ff, 0x97, 0x8, 0x4, 0xd5, 0xffff, 0x2, 0x6, 0x9, 0x8, 0x6, 0x1, 0x401, 0x289, 0x5, 0x800, 0xf35, 0x7f, 0x9, 0x6, 0x1, 0x800, 0xd90, 0x9, 0x26b, 0x6217, 0x1009, 0x4, 0x7, 0x6, 0x2, 0x3, 0xf, 0x1, 0x4, 0x5, 0x4, 0x3, 0x7, 0x3, 0x7, 0x9, 0x400, 0x8, 0xffffff01, 0x9, 0x8, 0x7f1, 0x6, 0xc, 0x4, 0x5, 0x4, 0xb, 0x80000000, 0x7f, 0x3c, 0x5158, 0x3, 0x448, 0x9, 0x80, 0x4, 0x81, 0xf744, 0xd, 0x0, 0x3, 0x1, 0x9, 0xd3e, 0x4, 0x2, 0xd6d, 0x476cf286, 0x2, 0x105, 0xd6, 0x80000000, 0x6, 0x3, 0x6, 0x2, 0x5, 0x8, 0x0, 0x9, 0xf8, 0x0, 0x5, 0x800, 0x3, 0x3, 0xff, 0x6, 0x6, 0x6, 0x8b9d, 0x4104, 0x8000, 0x0, 0x6, 0x3, 0x56, 0x0, 0x2, 0x893e, 0x2, 0x3ff, 0x8, 0x1, 0x0, 0x80, 0x2, 0x8, 0x7f, 0x5, 0xa54, 0x2, 0x1, 0x2, 0x8, 0x97, 0x2e, 0x4023, 0x7, 0x9, 0x9, 0x20, 0x9, 0x2, 0x80000000, 0x100, 0x5, 0x1df, 0x9, 0x40e4, 0x7, 0x3, 0x609, 0x7, 0xd5c, 0xfffffffe, 0xfffffff9, 0x6, 0x19bd, 0x885, 0x7, 0x5, 0x9, 0xbe000000, 0xe9, 0x4, 0x61bf, 0x1, 0x100, 0x77, 0x81, 0x0, 0x0, 0x9, 0x8, 0x6, 0x4, 0x4, 0xfffffffc, 0x4, 0x5, 0x3, 0x0, 0x1, 0x7, 0x401, 0x69]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x4, 0x5, 0x3, 0x2, {0x2, 0x1, 0x3e, 0x0, 0xffff, 0x800}, {0x4, 0x1, 0x10, 0x9, 0x2, 0x2}, 0x7, 0x7, 0x800}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400001260ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

17.652730088s ago: executing program 2 (id=12471):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r1 = socket(0x10, 0x803, 0x8)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2000)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r4, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x86, 0x9c2, 0x2, 0xac7d, 0x1fc, 0x1, 0x1}, 0x1c)
recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000180)=0x5, 0x4)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x0, @local}, 0x10)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x84, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)

17.562559704s ago: executing program 1 (id=12473):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8c}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000dbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000dbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x1ac, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x184, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x5}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x346, 0x9c}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x1f9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x10001}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0xffff, 0x742bb90a}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0xa0e4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x255, 0xa896}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x8f9, 0xc}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0xf1, 0x0, 0x8100}}, {0x14, 0x1, {0x10, 0x84b, 0x5, 0x8100}}, {0x14, 0x1, {0xd0, 0x43, 0x8, 0x8100}}, {0x14, 0x1, {0x4, 0xddc, 0xb, 0x8100}}, {0x14, 0x1, {0x0, 0x7cb, 0xffff, 0x8100}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x100, 0x7, 0x101}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0xffff}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0xd5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0xb7f, 0x8}}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x1ac, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x184, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x5}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x346, 0x9c}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x1f9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x10001}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0xffff, 0x742bb90a}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0xa0e4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x255, 0xa896}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x8f9, 0xc}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0xf1, 0x0, 0x8100}}, {0x14, 0x1, {0x10, 0x84b, 0x5, 0x8100}}, {0x14, 0x1, {0xd0, 0x43, 0x8, 0x8100}}, {0x14, 0x1, {0x4, 0xddc, 0xb, 0x8100}}, {0x14, 0x1, {0x0, 0x7cb, 0xffff, 0x8100}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x100, 0x7, 0x101}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0xffff}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0xd5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0xb7f, 0x8}}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x5, 0x61, 0x11, 0x4d}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) (async)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000380))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="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"], 0x50)
pread64(r4, &(0x7f0000002840)=""/4096, 0x1000, 0x4)

17.56238303s ago: executing program 1 (id=12474):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd000000}, 0x94)

17.494225662s ago: executing program 1 (id=12475):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1], &(0x7f0000000700), 0x200000000000000, 0x1}}, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030400000000000000000000000074ccecb492b95826cc23fb38add19d601be7f820be04b5dacd68609907bfa5af9b50403ba7fee169e6aea13eae743bd39c669bbdd31559cd9b53be175e7ba963962f702bf267fceb6c8d522b46c7a19f35a10f00b8575b0872969bf0fe30d436c781c1256c2c7088af7762c8d7546b31011328989008e15778872bdc6e7a8dbbe203e7f6e9ba05fa10ec87e4cf65b41438c2ca22fdc4630221ad69ba0ba758466a8bce746e2e32", @ANYRES32=0x0, @ANYBLOB="1502000000001000140012800a00010069706f69620000000400028008000500", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0xba01}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x84e56105723e644b}, @TCA_TBF_BURST={0x8, 0x6, 0x20000000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xa, 0x4}, {0x9c, 0x0, 0x7, 0x1, 0x6, 0x5}, 0x6, 0x71d, 0xa74}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
socket$inet_sctp(0x2, 0x1, 0x84)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
setsockopt$IP_VS_SO_SET_EDITDEST(r12, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e21, 0x3, 'none\x00', 0x0, 0x60000000, 0x8000c}, {@rand_addr=0x64010102, 0x4e26, 0x10000, 0x0, 0x8005, 0x1}}, 0x44)
ioctl$XFS_IOC_FSGEOMETRY_V4(r7, 0x8070587c, &(0x7f0000000400))
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

17.405588116s ago: executing program 2 (id=12476):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="5df2", 0x2}, {&(0x7f0000000380)="77b7", 0x2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="2bf0", 0x2}, {&(0x7f0000000140)="8843", 0x2}, {&(0x7f0000000480)="764594baec3837f1fedcf5af82ac8366dd", 0x11}], 0x3}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)="85", 0x1}, {&(0x7f0000000240)="0eea", 0x2}, {&(0x7f0000000840)="e3bd", 0x2}, {&(0x7f0000000900)='\x00\x00', 0x2}, {&(0x7f0000000940)=']', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c40)="082d6ea6", 0x4}, {&(0x7f0000000540)="94b0440d0e4a00cd4a456212b0", 0xd}], 0x2}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000d40)="ec71889b15", 0x5}, {&(0x7f0000000e00)="43a8", 0x2}, {&(0x7f0000000e40)='-g=', 0x3}, {&(0x7f0000002a80)='\n\"u', 0x3}, {&(0x7f0000000fc0)="ee0c1d4dfaca59a01d9997055f8c334db67d48cabb8808a613758d54333412c384b842619547bd5482b34e97272b53b13c06620fb120ed8871df31e5ba0a6f61e9e6", 0x42}, {&(0x7f00000010c0)="48c6f3d9", 0x4}, {&(0x7f00000004c0)="95d113060edd1b950000000000000000f2b4dc2f850d2f2e3fc473f69cbd9c7f09dc5ffde56c99c206b69be1036d60b4283e1691bbe8", 0x36}], 0x100001c3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001380)="b85f1c", 0x3}, {&(0x7f0000001440)="a51b", 0x2}, {&(0x7f0000002ac0)="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", 0xac1}, {&(0x7f0000001480)="f99d", 0x2}, {&(0x7f0000000700)="93cf5ea94e8f9ca018f43bc800e79391d29dc8861d3a3b707600000000e26e2d3c28856aba31eeb5918f3992b7f818226135fe7e966b7165fcc7040000004beb6de9e05e9de37623c915e0c54018fa6598efbcd65b4a49c0d0711709c2bebfc9f5635b7940757ec24f5ac89f14832b", 0x6f}, {&(0x7f0000002600)}, {&(0x7f0000000ac0)="3e6b4512549007af2e93ecf02ce9fee9e67875f4232b16d9acc206f9233ed163dafa801b3b2b78e48fe2fd20fc5425ad7ace1827ec683da849ce6077f76def021491cd999dba783e9f108beaada5bdb506df6e8fae5c7a7ed9de675d7cfafafa4c79ab7d50d9c7e4497bd433e8591f03fc221a1f0d49d12588ffe574d0438dc181d1dba377438a5cf42339b2ab579adb307bd209b5a8fca63ccfa60849186ddb611f447312471b94a22c2a367940be3310424b58ae7e82ca5754c431e87544da19b5fe7a010578f5186ed91e5e", 0xcd}], 0x7}}], 0x6, 0x4000000)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000680)=@gcm_256={{0x303}, "9ece3376a9e0ec06", "20542bcbc946e348326663ac490c5d4ce73ea892d11c48405880697137b60dd7", "d25b41be", "a380aa7088318f08"}, 0x38)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000100000085000000330000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000001000085000000060000009500000000000000a3e096fceed610c2a452de42241c31b409cbcd11b1"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0x10}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000)
socket$l2tp(0x2, 0x2, 0x73)
socket$igmp6(0xa, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940))
pipe(&(0x7f0000000440))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xc)

17.404421835s ago: executing program 1 (id=12477):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18)
socket$inet(0x2, 0x1, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='/\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0)

17.343878917s ago: executing program 1 (id=12478):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x37}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000)

17.335704474s ago: executing program 2 (id=12479):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x48850)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0xffff0000, 0x0, 0xff, 0xe, 0x3bda, 0x8000}, &(0x7f0000000080)=0x20)
socket$phonet(0x23, 0x2, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf25030000000c000200ffffffffffffff7f0c00020002000000000000000c00040000000000000000400800010000000000340007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c000180080001006a2e2adfcc95eb6e83971787539e55891729a3889d365c41c8c150e80bd77c275d202a1f781e540d882b88cb86090d28aca17325ce7ce37175a68c168e3c7f14bde4cfcf1c8802d63e215e59c5a6160c8a73f17f37dd6407149ca915a601c42f40115e3daf742829e7d213efc9377e683c79030ec4a0bb9b4a5d466f99067d52e789e8e131ac83419272f248d8fb2d3713e40000000000000000", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x240000c0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x23, 0x80805, 0x0)
listen(r6, 0x0)

17.274973151s ago: executing program 1 (id=12480):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x48850)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0xffff0000, 0x0, 0xff, 0xe, 0x3bda, 0x8000}, &(0x7f0000000080)=0x20)
socket$phonet(0x23, 0x2, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf25030000000c000200ffffffffffffff7f0c00020002000000000000000c00040000000000000000400800010000000000340007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c000180080001006a2e2adfcc95eb6e83971787539e55891729a3889d365c41c8c150e80bd77c275d202a1f781e540d882b88cb86090d28aca17325ce7ce37175a68c168e3c7f14bde4cfcf1c8802d63e215e59c5a6160c8a73f17f37dd6407149ca915a601c42f40115e3daf742829e7d213efc9377e683c79030ec4a0bb9b4a5d466f99067d52e789e8e131ac83419272f248d8fb2d3713e40000000000000000", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x240000c0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x23, 0x80805, 0x0)
listen(r6, 0x0)
connect$phonet_pipe(r6, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10)

15.350360988s ago: executing program 0 (id=12481):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000015c0)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe70f00000080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95355d4614b34c0dc0c4ea1938094ad5daef6f8513b038ce80303e1126fb1be047025e9d74cf1a269c62ce74c41fc1459fbbd97bccab98416ed0c8fd5388db30", 0x430}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c268", 0x1b}], 0x3, 0x0, 0x0, 0x10}, 0x0) (async)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000580), 0x4)
r2 = socket(0x2, 0x80805, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x52a91, 0x74a3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400c5}, 0xc31fe08473659cc) (async)
sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x2, 0x4000000) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x6}, 0x8) (async)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r5, 0x3}, 0x8)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000200)=0xf, 0x4)
r6 = socket(0xa, 0x5, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a00000000000061115400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async)
getsockopt$inet6_int(r6, 0x29, 0x13, 0x0, &(0x7f0000000040)) (async)
setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0xffffffcb, 0x4)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x3, 0x0, 0xa, 0x58fd, 0x7ab6, 0x7fffffff, 0x9f, 0x3f20, <r8=>r5}, &(0x7f0000000180)=0x20)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000002c0)={r8, 0xfffe, 0x2e, "d69720a5be0fe6edcc59fce9daebf0f8ce07b56dc063ff019f3d41986fc3b94893ee3f3b3046fc6387f22e61bd8b"}, 0x36) (async)
r9 = socket$netlink(0x10, 0x3, 0x4)
write(r9, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80820}, 0x80) (async)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5800000010001fff2dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000300fe8000000000000000000000000000aa050009002900000008000400000001"], 0x58}, 0x1, 0x0, 0x0, 0x48844}, 0x0)

15.154794009s ago: executing program 0 (id=12482):
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x400002, 0xb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004"], 0x4c}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r2, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}], 0x3}, 0xfffffffe}], 0x1, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x4c}}, 0x1020)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000010000006d05000005"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000001f80), 0xfffffffb, r4}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r8, @ANYBLOB="80007f0a0a00020091"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x4, 0x0, r4, 0xffffff26, '\x00', r8, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, r9, 0x0, '\x00', r8}, 0x50)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080)

2.118823346s ago: executing program 32 (id=12480):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x48850)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0xffff0000, 0x0, 0xff, 0xe, 0x3bda, 0x8000}, &(0x7f0000000080)=0x20)
socket$phonet(0x23, 0x2, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf25030000000c000200ffffffffffffff7f0c00020002000000000000000c00040000000000000000400800010000000000340007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c000180080001006a2e2adfcc95eb6e83971787539e55891729a3889d365c41c8c150e80bd77c275d202a1f781e540d882b88cb86090d28aca17325ce7ce37175a68c168e3c7f14bde4cfcf1c8802d63e215e59c5a6160c8a73f17f37dd6407149ca915a601c42f40115e3daf742829e7d213efc9377e683c79030ec4a0bb9b4a5d466f99067d52e789e8e131ac83419272f248d8fb2d3713e40000000000000000", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x240000c0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x23, 0x80805, 0x0)
listen(r6, 0x0)
connect$phonet_pipe(r6, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10)

2.074307427s ago: executing program 33 (id=12479):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x48850)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0xffff0000, 0x0, 0xff, 0xe, 0x3bda, 0x8000}, &(0x7f0000000080)=0x20)
socket$phonet(0x23, 0x2, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf25030000000c000200ffffffffffffff7f0c00020002000000000000000c00040000000000000000400800010000000000340007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c000180080001006a2e2adfcc95eb6e83971787539e55891729a3889d365c41c8c150e80bd77c275d202a1f781e540d882b88cb86090d28aca17325ce7ce37175a68c168e3c7f14bde4cfcf1c8802d63e215e59c5a6160c8a73f17f37dd6407149ca915a601c42f40115e3daf742829e7d213efc9377e683c79030ec4a0bb9b4a5d466f99067d52e789e8e131ac83419272f248d8fb2d3713e40000000000000000", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x240000c0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x23, 0x80805, 0x0)
listen(r6, 0x0)

0s ago: executing program 34 (id=12482):
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x400002, 0xb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004"], 0x4c}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r2, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}], 0x3}, 0xfffffffe}], 0x1, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x4c}}, 0x1020)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000010000006d05000005"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000001f80), 0xfffffffb, r4}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r8, @ANYBLOB="80007f0a0a00020091"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x4, 0x0, r4, 0xffffff26, '\x00', r8, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, r9, 0x0, '\x00', r8}, 0x50)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080)

kernel console output (not intermixed with test programs):

vxlan0: entered promiscuous mode
[  999.379287][T18083] vxlan0: entered allmulticast mode
[  999.382274][T18083] bridge2: entered promiscuous mode
[  999.384444][T18083] bridge2: entered allmulticast mode
[  999.388904][T18083] bond3: entered promiscuous mode
[  999.391122][T18083] bond3: entered allmulticast mode
[  999.393661][T18083] 8021q: adding VLAN 0 to HW filter on device bond3
[  999.398027][T18083] geneve2: entered promiscuous mode
[  999.400282][T18083] geneve2: entered allmulticast mode
[  999.402604][T18083] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  999.409496][T18080] team0: left promiscuous mode
[  999.411547][T18080] team0: left allmulticast mode
[  999.417983][T18080] tipc: Resetting bearer <eth:gre0>
[  999.471307][T18080] pimreg1: left allmulticast mode
[  999.474690][T18080] bond317: left promiscuous mode
[  999.476377][T18080] bond317: left allmulticast mode
[  999.482359][T18080] bond320: left promiscuous mode
[  999.484750][T18080] bond328: left promiscuous mode
[  999.491907][T18080] veth135: left allmulticast mode
[  999.503023][T18080] veth137: left allmulticast mode
[  999.509166][T18080] bond335: left promiscuous mode
[  999.510847][T18080] bond335: left allmulticast mode
[  999.513897][T18080] bond337: left promiscuous mode
[  999.538745][T18086] macvtap13: entered promiscuous mode
[  999.541044][T18086] vlan0: entered promiscuous mode
[  999.543124][T18086] bond266: entered promiscuous mode
[  999.549275][T18086] vlan0: left promiscuous mode
[  999.552850][T18086] bond266: left promiscuous mode
[  999.591583][   T24] xfrm0 speed is unknown, defaulting to 1000
[  999.593799][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  999.597098][   T24] syz0: Port: 1 Link ACTIVE
[  999.599324][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  999.606074][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  999.612425][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  999.619427][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  999.622825][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  999.634604][   T24] xfrm0 speed is unknown, defaulting to 1000
[  999.636721][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  999.644152][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  999.653376][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  999.659383][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  999.666132][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  999.675332][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  999.682923][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  999.687288][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  999.693112][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  999.699911][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  999.945888][T18112] validate_nla: 4 callbacks suppressed
[  999.945896][T18112] netlink: 'syz.2.11484': attribute type 49 has an invalid length.
[  999.991370][T18128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11486'.
[ 1000.005951][T18129] macvlan0: entered promiscuous mode
[ 1000.205193][T18155] netlink: 'syz.2.11494': attribute type 1 has an invalid length.
[ 1000.208727][T18155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11494'.
[ 1000.370995][T18176] netlink: 'syz.2.11497': attribute type 29 has an invalid length.
[ 1000.486391][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x227
[ 1001.230260][T18182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1001.317361][T18237] xt_ipcomp: unknown flags 1D
[ 1001.358846][T18244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11502'.
[ 1001.385286][T18246] 8021q: VLANs not supported on gre0
[ 1001.390958][T18246] netlink: 'syz.0.11503': attribute type 23 has an invalid length.
[ 1001.520254][T18263] netlink: 'syz.2.11507': attribute type 58 has an invalid length.
[ 1001.554046][T18262] bond269: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1001.562274][T18262] bond269 (unregistering): Released all slaves
[ 1001.700950][T18278] macvtap0: entered promiscuous mode
[ 1001.920013][T18298] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1001.947991][T18299] bond269: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[ 1001.960361][T18299] bond269 (unregistering): Released all slaves
[ 1002.004618][T18306] netlink: 'syz.1.11520': attribute type 1 has an invalid length.
[ 1002.065805][T18306] 8021q: adding VLAN 0 to HW filter on device bond338
[ 1002.075728][T18306] netlink: 'syz.1.11520': attribute type 83 has an invalid length.
[ 1002.087388][T18309] bond269: entered promiscuous mode
[ 1002.089714][T18309] 8021q: adding VLAN 0 to HW filter on device bond269
[ 1002.093399][T18306] tipc: Resetting bearer <eth:gre0>
[ 1002.230547][T18306] tipc: Resetting bearer <eth:syzkaller0>
[ 1002.314557][T18309] 8021q: adding VLAN 0 to HW filter on device bond269
[ 1002.317517][T18309] bond269: (slave ip6gre7): The slave device specified does not support setting the MAC address
[ 1002.322294][T18309] bond269: (slave ip6gre7): Error -95 calling set_mac_address
[ 1002.371831][T18327] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1002.461459][T18333] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1002.470935][T18333] syzkaller0: entered promiscuous mode
[ 1002.475921][T18333] syzkaller0: entered allmulticast mode
[ 1002.486029][T18333] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1002.531996][T18333] tipc: Resetting bearer <eth:syzkaller0>
[ 1002.539383][T18331] tipc: Resetting bearer <eth:syzkaller0>
[ 1002.558124][T18331] tipc: Disabling bearer <eth:syzkaller0>
[ 1002.594069][T18346] netlink: 'syz.1.11530': attribute type 1 has an invalid length.
[ 1002.630370][T18346] 8021q: adding VLAN 0 to HW filter on device bond339
[ 1002.648534][T18344] nbd0: detected capacity change from 0 to 281483566645375
[ 1002.662710][T18350] netlink: 'syz.2.11531': attribute type 30 has an invalid length.
[ 1002.687429][T18346] bond339: (slave veth139): Enslaving as an active interface with a down link
[ 1002.694943][   T55] block nbd0: Receive control failed (result -104)
[ 1002.758675][T18346] bond339: (slave veth141): Enslaving as an active interface with a down link
[ 1002.777981][T18346] bond339: entered allmulticast mode
[ 1002.843968][T18362] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1002.848285][T18362] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[ 1002.851224][T18362] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[ 1002.886234][T18362] syzkaller0: mtu less than device minimum
[ 1003.006472][T18369] openvswitch: netlink: Message has 512 unknown bytes.
[ 1003.161692][T18389] netlink: 'syz.0.11542': attribute type 1 has an invalid length.
[ 1003.205335][T18389] bond306: (slave team0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1003.218274][T18389] bond306: (slave team0): making interface the new active one
[ 1003.223227][T18389] bond306: (slave team0): Enslaving as an active interface with an up link
[ 1003.332604][T18404] bond306: (slave team0): Releasing active interface
[ 1003.335132][T18404] bond306: (slave team0): last VLAN challenged slave left bond - VLAN blocking is removed
[ 1003.461900][T18408] __nla_validate_parse: 13 callbacks suppressed
[ 1003.461911][T18408] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11547'.
[ 1003.553766][T18411] netlink: 67 bytes leftover after parsing attributes in process `syz.0.11548'.
[ 1003.557246][T18412] netlink: 67 bytes leftover after parsing attributes in process `syz.0.11548'.
[ 1003.561286][T18411] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11548'.
[ 1003.622235][T18419] netlink: 9 bytes leftover after parsing attributes in process `syz.0.11549'.
[ 1003.845892][T18449] workqueue: Failed to create a rescuer kthread for wq "bond307": -EINTR
[ 1003.865593][T18446] netlink: 9 bytes leftover after parsing attributes in process `syz.1.11557'.
[ 1003.871855][T18456] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[ 1003.995098][T18458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11561'.
[ 1003.998584][T18473] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11564'.
[ 1004.002902][T18473] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:256
[ 1004.042170][T18476] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[ 1004.044450][T18476] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[ 1004.054094][T18479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11567'.
[ 1004.132012][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11571'.
[ 1004.153988][T18492] 8021q: adding VLAN 0 to HW filter on device bond272
[ 1004.179331][T18492] vlan11: entered allmulticast mode
[ 1004.189458][T18492] bond272: entered allmulticast mode
[ 1004.212547][T18501] 8021q: adding VLAN 0 to HW filter on device bond340
[ 1004.224843][T18501] bond340: entered promiscuous mode
[ 1004.226625][T18501] bond340: entered allmulticast mode
[ 1004.612505][T18540] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode
[ 1004.614687][T18540] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode
[ 1004.617322][T18540] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1004.712914][T18551] x_tables: duplicate entry at hook 1
[ 1004.783252][T18558] bond273: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[ 1004.791928][T18558] bond273 (unregistering): Released all slaves
[ 1005.029972][T18570] bond273: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[ 1005.039341][T18570] bond273 (unregistering): Released all slaves
[ 1005.227189][T18586] rB speed is unknown, defaulting to 1000
[ 1005.230263][T18586] xfrm0 speed is unknown, defaulting to 1000
[ 1005.250464][T18589] validate_nla: 5 callbacks suppressed
[ 1005.250544][T18589] netlink: 'syz.1.11599': attribute type 1 has an invalid length.
[ 1005.289552][T18589] 8021q: adding VLAN 0 to HW filter on device bond341
[ 1005.347615][T18589] bond341: (slave veth143): Enslaving as an active interface with a down link
[ 1005.377608][T18589] 8021q: adding VLAN 0 to HW filter on device batadv10
[ 1005.390144][T18589] bond341: (slave batadv10): making interface the new active one
[ 1005.399448][T18589] batadv10: entered promiscuous mode
[ 1005.405514][T18589] bond341: (slave batadv10): Enslaving as an active interface with an up link
[ 1005.526083][T18601] x_tables: duplicate entry at hook 1
[ 1005.578774][T18601] netlink: 'syz.0.11602': attribute type 1 has an invalid length.
[ 1005.659459][T18605] netlink: 'syz.1.11604': attribute type 6 has an invalid length.
[ 1005.663322][T18605] netlink: 'syz.1.11604': attribute type 6 has an invalid length.
[ 1005.672616][T18605] netlink: 'syz.1.11604': attribute type 11 has an invalid length.
[ 1005.676339][T18605] netlink: 'syz.1.11604': attribute type 14 has an invalid length.
[ 1005.856154][T18619] netlink: 'syz.1.11608': attribute type 1 has an invalid length.
[ 1005.899223][T18619] 8021q: adding VLAN 0 to HW filter on device bond342
[ 1005.903330][T18624] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1006.031088][T18635] bond273: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1006.050289][T18635] bond273 (unregistering): Released all slaves
[ 1006.382804][T18668] netlink: 'syz.2.11619': attribute type 1 has an invalid length.
[ 1006.395533][T18668] 8021q: adding VLAN 0 to HW filter on device bond273
[ 1006.401379][T18668] openvswitch: netlink: Message has 1 unknown bytes.
[ 1006.403583][T18668] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1006.413996][T18668] bond273: (slave veth0_to_bond): making interface the new active one
[ 1006.418153][T18668] bond273: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1006.425937][T18665] netlink: 'syz.0.11617': attribute type 11 has an invalid length.
[ 1006.453951][T18672] netlink: 'syz.2.11620': attribute type 1 has an invalid length.
[ 1006.474812][T18672] macvtap9: entered allmulticast mode
[ 1006.487228][T18672] macvtap10: entered allmulticast mode
[ 1006.505636][T18672] bond274: (slave bridge112): making interface the new active one
[ 1006.510967][T18672] bond274: (slave bridge112): Enslaving as an active interface with an up link
[ 1006.573042][T18680] syzkaller0: entered promiscuous mode
[ 1006.575115][T18680] syzkaller0: entered allmulticast mode
[ 1006.582245][T18680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1006.589749][T18679] tipc: Resetting bearer <eth:syzkaller0>
[ 1006.608837][T18679] tipc: Disabling bearer <eth:syzkaller0>
[ 1006.736249][T18683] netlink: 'syz.0.11621': attribute type 4 has an invalid length.
[ 1007.508998][T18701] 8021q: VLANs not supported on gre0
[ 1007.519243][T18701] 8021q: VLANs not supported on gre0
[ 1007.528491][T18701] 8021q: VLANs not supported on gre0
[ 1007.600004][T18711] macvtap0: entered promiscuous mode
[ 1008.374949][T18705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1008.480808][T18729] __nla_validate_parse: 25 callbacks suppressed
[ 1008.480818][T18729] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11634'.
[ 1008.550562][T18732] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1008.556227][T18732] tipc: Resetting bearer <eth:syzkaller0>
[ 1008.567793][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11636'.
[ 1008.574671][T18736] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1008.580525][T18736] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.634604][T18736] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1008.642389][T18736] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.670041][T18743] IPVS: length: 24 != 36888
[ 1008.693423][T18736] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1008.697693][T18736] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.750537][T18736] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1008.753644][T18736] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.842514][ T5660] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1008.847250][ T5660] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.862722][ T5660] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1008.868886][ T5660] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.882938][ T5660] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1008.886469][ T5660] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.902431][ T6805] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1008.905858][ T6805] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.959569][T18747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11640'.
[ 1008.962566][T18747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11640'.
[ 1009.095797][T18754] atomic_op ffff8881996a0198 conn xmit_atomic 0000000000000000
[ 1009.130695][T18753] IPVS: dh: FWM 3 0x00000003 - no destination available
[ 1009.187742][T18757] bond343: entered promiscuous mode
[ 1009.189770][T18757] 8021q: adding VLAN 0 to HW filter on device bond343
[ 1009.200957][T18757] macvtap6: entered allmulticast mode
[ 1009.216439][T18757] bond343: (slave bridge152): making interface the new active one
[ 1009.219386][T18757] bridge152: entered promiscuous mode
[ 1009.222031][T18757] bond343: (slave bridge152): Enslaving as an active interface with an up link
[ 1009.359468][T18762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11645'.
[ 1009.390604][T18762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11645'.
[ 1009.511231][T18766] bond330: (slave veth0_to_bond): Releasing active interface
[ 1009.745527][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11651'.
[ 1010.069983][T18805] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11653'.
[ 1012.559278][T18777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1012.681400][T18824] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11656'.
[ 1012.711250][T18829] 8021q: VLANs not supported on gre0
[ 1012.720691][T18829] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1012.723756][T18829] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1012.751489][T18833] validate_nla: 3 callbacks suppressed
[ 1012.751498][T18833] netlink: 'syz.2.11657': attribute type 1 has an invalid length.
[ 1012.768563][T18829] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1012.778438][T18829] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1012.793848][T18835] netlink: 'syz.1.11660': attribute type 1 has an invalid length.
[ 1012.814828][T18829] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1012.819275][T18829] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1012.865107][T18829] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1012.870013][T18829] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1012.949081][T18845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11662'.
[ 1012.950725][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1012.955221][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1012.995819][ T6805] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1013.000629][ T6805] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1013.022475][ T6805] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1013.026732][ T6805] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1013.053355][ T5660] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1013.057665][ T5660] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1013.142411][T18858] netlink: 'syz.0.11666': attribute type 10 has an invalid length.
[ 1013.158496][T18860] netlink: 'syz.1.11667': attribute type 5 has an invalid length.
[ 1013.218819][T18865] bond307: option all_slaves_active: invalid value (127)
[ 1013.224632][T18865] bond307 (unregistering): Released all slaves
[ 1013.446632][T18881] IPVS: dh: FWM 3 0x00000003 - no destination available
[ 1013.575688][ T8831] rB speed is unknown, defaulting to 1000
[ 1013.578132][T18890] netlink: 'syz.2.11679': attribute type 13 has an invalid length.
[ 1013.578149][T18890] netlink: 'syz.2.11679': attribute type 17 has an invalid length.
[ 1013.615833][T18890] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1013.621078][T18890] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1013.624684][T18890] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1013.636372][T18890] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1013.645288][T18890] A link change request failed with some changes committed already. Interface vlan5 may have been left with an inconsistent configuration, please check.
[ 1013.671301][ T5672] rB speed is unknown, defaulting to 1000
[ 1013.918278][T18905] __nla_validate_parse: 7 callbacks suppressed
[ 1013.918288][T18905] netlink: 7 bytes leftover after parsing attributes in process `syz.2.11683'.
[ 1013.971193][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11683'.
[ 1014.375716][T18915] x_tables: duplicate entry at hook 2
[ 1014.598866][T18937] rB speed is unknown, defaulting to 1000
[ 1014.600561][T18939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11692'.
[ 1014.602199][T18937] xfrm0 speed is unknown, defaulting to 1000
[ 1014.626075][T18942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11693'.
[ 1015.574461][T18958] netlink: 'syz.1.11698': attribute type 2 has an invalid length.
[ 1015.651121][T18958] bond344: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1015.655823][T18958] bond344 (unregistering): Released all slaves
[ 1015.661124][T18961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11699'.
[ 1015.730557][T18961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11699'.
[ 1015.859146][T18977] 8021q: adding VLAN 0 to HW filter on device bond344
[ 1015.886566][T18979] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[ 1015.889149][T18979] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[ 1015.892675][T18979] netlink: 'syz.0.11705': attribute type 4 has an invalid length.
[ 1015.934389][T18982] syzkaller1: entered promiscuous mode
[ 1015.936195][T18982] syzkaller1: entered allmulticast mode
[ 1016.078851][T19001] netlink: 'syz.0.11711': attribute type 1 has an invalid length.
[ 1016.101161][T18998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11710'.
[ 1016.102544][T19001] bond307: entered promiscuous mode
[ 1016.106176][T19001] bond307: entered allmulticast mode
[ 1016.109349][T19001] 8021q: adding VLAN 0 to HW filter on device bond307
[ 1016.113712][T18998] netlink: 'syz.1.11710': attribute type 1 has an invalid length.
[ 1016.117737][T18998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11710'.
[ 1016.120572][T18998] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11710'.
[ 1016.186380][T19009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11713'.
[ 1016.220779][T19015] xt_TCPMSS: Only works on TCP SYN packets
[ 1016.456147][T19033] bond276 (unregistering): Released all slaves
[ 1016.487108][ T5660] batadv10: left promiscuous mode
[ 1016.497735][T19037] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1016.589320][T19042] bond276: entered promiscuous mode
[ 1016.591514][T19042] bond276: entered allmulticast mode
[ 1016.594407][T19042] 8021q: adding VLAN 0 to HW filter on device bond276
[ 1016.719718][T19046] bond308 (unregistering): Released all slaves
[ 1016.795879][T19047] bond308 (unregistering): Released all slaves
[ 1016.836087][T19055] rB speed is unknown, defaulting to 1000
[ 1016.840366][T19055] xfrm0 speed is unknown, defaulting to 1000
[ 1016.902020][T19060] bond0: entered promiscuous mode
[ 1016.904979][T19060] bond0: left promiscuous mode
[ 1016.969611][T19062] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1017.003139][T19064] pim6reg: entered allmulticast mode
[ 1017.005704][T19064] pim6reg: left allmulticast mode
[ 1017.208822][T19084] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1017.419232][T19099] bond308: option coupled_control: invalid value (255)
[ 1017.423257][T19099] bond308 (unregistering): Released all slaves
[ 1017.504354][T19092] IPVS: dh: FWM 3 0x00000003 - no destination available
[ 1017.653012][T19109] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1017.937987][T19134] 8021q: adding VLAN 0 to HW filter on device bond277
[ 1018.237561][T19163] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1018.402969][  T438] rB speed is unknown, defaulting to 1000
[ 1018.407022][  T438] syz1: Port: 1 Link DOWN
[ 1018.412031][T19179] dvmrp8: entered allmulticast mode
[ 1018.469458][T19197] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1018.492517][T19195] syzkaller1: entered promiscuous mode
[ 1018.494904][T19195] syzkaller1: entered allmulticast mode
[ 1018.608725][T19219] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1018.612078][T19219] validate_nla: 9 callbacks suppressed
[ 1018.612086][T19219] netlink: 'syz.1.11765': attribute type 21 has an invalid length.
[ 1018.623506][T19219] netlink: 'syz.1.11765': attribute type 11 has an invalid length.
[ 1018.784147][T19235] netlink: 'syz.1.11768': attribute type 1 has an invalid length.
[ 1018.915365][T19253] A link change request failed with some changes committed already. Interface vlan5 may have been left with an inconsistent configuration, please check.
[ 1018.921516][ T5672] rB speed is unknown, defaulting to 1000
[ 1018.923679][ T5672] syz1: Port: 1 Link ACTIVE
[ 1018.925814][T19257] 8021q: VLANs not supported on gre0
[ 1018.968033][T19263] netlink: 'syz.2.11775': attribute type 1 has an invalid length.
[ 1018.981059][T19263] 8021q: adding VLAN 0 to HW filter on device bond278
[ 1018.989441][T19262] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[ 1019.034137][T19273] __nla_validate_parse: 41 callbacks suppressed
[ 1019.034147][T19273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11776'.
[ 1019.047159][T19273] netlink: 'syz.2.11776': attribute type 1 has an invalid length.
[ 1019.050180][T19273] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11776'.
[ 1019.077907][T19275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11777'.
[ 1019.100933][T19275] 8021q: adding VLAN 0 to HW filter on device bond308
[ 1019.150141][T19278] 8021q: adding VLAN 0 to HW filter on device bond279
[ 1019.158463][T19278] netlink: 'syz.2.11778': attribute type 1 has an invalid length.
[ 1019.161259][T19278] bridge0: Device is already in use.
[ 1019.242742][T19291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11781'.
[ 1019.266387][T19293] macvlan1: MTU too low for tipc bearer
[ 1019.269008][T19293] tipc: Disabling bearer <eth:macvlan1>
[ 1019.352999][T19295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11783'.
[ 1019.395401][T19298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11784'.
[ 1019.524128][T19307] netlink: 'syz.0.11787': attribute type 7 has an invalid length.
[ 1019.526751][T19307] netlink: 'syz.0.11787': attribute type 7 has an invalid length.
[ 1019.596010][T19309] netlink: 'syz.0.11788': attribute type 9 has an invalid length.
[ 1019.781444][T19328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11793'.
[ 1019.781490][T19327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11793'.
[ 1019.860271][T19334] netlink: 'syz.1.11794': attribute type 1 has an invalid length.
[ 1019.890007][T19334] 8021q: adding VLAN 0 to HW filter on device bond345
[ 1019.926333][T19334] bond345: (slave veth145): Enslaving as an active interface with a down link
[ 1019.949917][T19334] 8021q: adding VLAN 0 to HW filter on device batadv11
[ 1019.953955][T19334] bond345: (slave batadv11): making interface the new active one
[ 1019.959214][T19334] batadv11: entered promiscuous mode
[ 1019.961377][T19334] bond345: (slave batadv11): Enslaving as an active interface with an up link
[ 1019.965159][T19325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11792'.
[ 1020.000430][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11795'.
[ 1020.056022][T19345] rB speed is unknown, defaulting to 1000
[ 1020.059144][T19345] xfrm0 speed is unknown, defaulting to 1000
[ 1020.604163][T19397] bond280: entered promiscuous mode
[ 1020.611548][T19397] 8021q: adding VLAN 0 to HW filter on device bond280
[ 1020.662487][T19397] bond280: (slave bridge115): making interface the new active one
[ 1020.672593][T19397] bridge115: entered promiscuous mode
[ 1020.675952][T19397] bond280: (slave bridge115): Enslaving as an active interface with an up link
[ 1020.712570][T19408] bond310: entered promiscuous mode
[ 1020.715102][T19408] 8021q: adding VLAN 0 to HW filter on device bond310
[ 1020.735234][T19397] bond280: (slave ipvlan10): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1020.742918][T19397] bond280: (slave ipvlan10): The slave device specified does not support setting the MAC address
[ 1020.917550][T19427] xfrm0: entered allmulticast mode
[ 1020.921270][T19427] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 1021.056002][T19443] openvswitch: netlink: Tunnel attr 68 out of range max 16
[ 1021.059060][T19444] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1021.061734][T19443] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1021.065165][T19444] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[ 1021.069398][T19444] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[ 1021.242865][T19459] 8021q: adding VLAN 0 to HW filter on device bond281
[ 1021.314320][T19459] macvlan9: entered promiscuous mode
[ 1021.316273][T19459] macvlan9: entered allmulticast mode
[ 1021.329458][T19474] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[ 1021.343209][T19474] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[ 1021.403978][T19484] 8021q: VLANs not supported on sit0
[ 1021.409147][T19485] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[ 1021.995679][T19529] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1022.000627][T19529] syzkaller1: linktype set to 24
[ 1022.163354][T19544] syzkaller1: entered promiscuous mode
[ 1022.165254][T19544] syzkaller1: entered allmulticast mode
[ 1022.441637][T19550] xt_hashlimit: size too large, truncated to 1048576
[ 1022.525662][T19553] bond311: option xmit_hash_policy: invalid value (10)
[ 1022.530294][T19553] bond311 (unregistering): Released all slaves
[ 1022.639370][T19562] pim6reg1: entered promiscuous mode
[ 1022.641354][T19562] pim6reg1: entered allmulticast mode
[ 1022.644075][T19559] IPVS: Unknown mcast interface: veth1_to_hsr
[ 1022.676676][T19559] rB speed is unknown, defaulting to 1000
[ 1022.679704][T19559] xfrm0 speed is unknown, defaulting to 1000
[ 1022.855194][T19576] rB speed is unknown, defaulting to 1000
[ 1022.863756][T19576] xfrm0 speed is unknown, defaulting to 1000
[ 1022.943024][T19580] can: request_module (can-proto-0) failed.
[ 1023.519805][T19609] bridge116: entered promiscuous mode
[ 1023.526413][T19609] bridge116: entered allmulticast mode
[ 1023.623350][T19623] veth78: entered promiscuous mode
[ 1023.627366][T19623] bond311: (slave veth78): Enslaving as a backup interface with a down link
[ 1023.631914][T19622] tipc: Resetting bearer <eth:gre0>
[ 1023.658694][T19622] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1023.665367][T19616] 8021q: adding VLAN 0 to HW filter on device bond311
[ 1023.714656][ T6805] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.723211][ T6805] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.734299][ T6805] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.739337][ T6805] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.937597][T19657] validate_nla: 14 callbacks suppressed
[ 1023.937608][T19657] netlink: 'syz.0.11879': attribute type 2 has an invalid length.
[ 1026.821545][T19645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1026.884286][T19661] bridge0: entered promiscuous mode
[ 1026.886544][T19661] bridge0: entered allmulticast mode
[ 1026.905329][T19661] __nla_validate_parse: 31 callbacks suppressed
[ 1026.905342][T19661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11882'.
[ 1026.919443][T19665] netlink: 'syz.2.11883': attribute type 2 has an invalid length.
[ 1026.923669][T19665] netlink: 248 bytes leftover after parsing attributes in process `syz.2.11883'.
[ 1026.985388][T19663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11881'.
[ 1027.158885][T19684] pimreg: entered allmulticast mode
[ 1027.165110][T19684] dvmrp0: left allmulticast mode
[ 1027.168894][T19684] dvmrp8: left allmulticast mode
[ 1027.190712][T19678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11885'.
[ 1027.224284][T19682] pimreg: left allmulticast mode
[ 1027.465208][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11890'.
[ 1028.190296][T19705] bond311: (slave veth78): Releasing backup interface
[ 1028.291810][T19706] bond312: option miimon: invalid value (18446744073709551607)
[ 1028.294968][T19706] bond312: option miimon: allowed values 0 - 2147483647
[ 1028.299427][T19706] bond312 (unregistering): Released all slaves
[ 1028.329815][T19708] xfrm0: left allmulticast mode
[ 1028.337972][ T5672] xfrm0 speed is unknown, defaulting to 1000
[ 1028.342980][ T5672] syz0: Port: 1 Link DOWN
[ 1028.344968][ T5672] xfrm0 speed is unknown, defaulting to 1000
[ 1030.257284][T19689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1030.413702][T19719] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11894'.
[ 1030.492075][T19724] netlink: 'syz.1.11896': attribute type 1 has an invalid length.
[ 1030.528401][T19724] 8021q: adding VLAN 0 to HW filter on device bond346
[ 1030.544363][T19724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11896'.
[ 1030.589338][T19729] A link change request failed with some changes committed already. Interface vlan5 may have been left with an inconsistent configuration, please check.
[ 1030.596037][T19733] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1030.599982][T19724] bond346: entered promiscuous mode
[ 1030.606340][T19724] bond346: entered allmulticast mode
[ 1030.615901][T19735] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11898'.
[ 1030.696329][T19741] openvswitch: netlink: Key type 31 is not supported
[ 1030.712377][T19738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11899'.
[ 1030.795781][T19753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11902'.
[ 1030.827131][T19750] block nbd2: server does not support multiple connections per device.
[ 1030.832547][T19750] block nbd2: shutting down sockets
[ 1030.845868][T19750] 8021q: adding VLAN 0 to HW filter on device macvlan12
[ 1030.955188][T19761] netlink: 'syz.0.11906': attribute type 11 has an invalid length.
[ 1030.958573][T19761] netlink: 'syz.0.11906': attribute type 11 has an invalid length.
[ 1031.022474][T19771] syzkaller1: entered promiscuous mode
[ 1031.025021][T19771] syzkaller1: entered allmulticast mode
[ 1031.138913][ T6805] batadv11: left promiscuous mode
[ 1031.345307][T19806] netlink: 'syz.2.11917': attribute type 1 has an invalid length.
[ 1031.365615][T19806] bond282: entered promiscuous mode
[ 1031.368256][T19806] 8021q: adding VLAN 0 to HW filter on device bond282
[ 1031.406028][T19806] bond282: (slave bridge118): making interface the new active one
[ 1031.414446][T19806] bridge118: entered promiscuous mode
[ 1031.419723][T19806] bond282: (slave bridge118): Enslaving as an active interface with an up link
[ 1031.522052][T19816] bond283: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1031.534606][T19816] bond283 (unregistering): Released all slaves
[ 1031.696400][T19816] netlink: 'syz.2.11919': attribute type 10 has an invalid length.
[ 1031.702849][T19816] netlink: 'syz.2.11919': attribute type 8 has an invalid length.
[ 1031.781799][T19834] syzkaller0: entered promiscuous mode
[ 1031.786754][T19834] syzkaller0: entered allmulticast mode
[ 1031.909873][T19839] netlink: 'syz.1.11925': attribute type 1 has an invalid length.
[ 1031.929451][T19839] 8021q: adding VLAN 0 to HW filter on device bond348
[ 1031.958693][T19839] bond348: (slave veth0_to_bond): making interface the new active one
[ 1031.963444][T19839] bond348: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1031.989953][T19839] bond348: entered promiscuous mode
[ 1031.997705][T19839] veth0_to_bond: entered promiscuous mode
[ 1032.000026][T19839] bond348: entered allmulticast mode
[ 1032.020015][T19839] __nla_validate_parse: 11 callbacks suppressed
[ 1032.020026][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11925'.
[ 1032.038447][T19839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11925'.
[ 1032.041567][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11925'.
[ 1032.045163][T19839] netlink: 'syz.1.11925': attribute type 5 has an invalid length.
[ 1032.080474][T19852] macvtap13: entered promiscuous mode
[ 1032.082285][T19852] vlan0: entered promiscuous mode
[ 1032.083866][T19852] bond266: entered promiscuous mode
[ 1032.090443][T19852] vlan0: left promiscuous mode
[ 1032.092431][T19852] bond266: left promiscuous mode
[ 1032.202732][T19859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11930'.
[ 1032.224016][T19859] vlan0: entered allmulticast mode
[ 1032.225898][T19859] bridge155: entered allmulticast mode
[ 1032.230655][T19859] bridge155: port 1(erspan0) entered blocking state
[ 1032.233017][T19859] bridge155: port 1(erspan0) entered disabled state
[ 1032.235298][T19859] erspan0: entered allmulticast mode
[ 1032.238418][T19859] erspan0: left allmulticast mode
[ 1032.291603][T19861] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11931'.
[ 1032.298133][T19861] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11931'.
[ 1032.351344][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11932'.
[ 1032.400432][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11934'.
[ 1032.401662][T19870] sctp: [Deprecated]: syz.2.11934 (pid 19870) Use of int in maxseg socket option.
[ 1032.401662][T19870] Use struct sctp_assoc_value instead
[ 1032.458231][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11935'.
[ 1032.594850][T19880] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11937'.
[ 1032.736518][T19886] netlink: 'syz.0.11938': attribute type 1 has an invalid length.
[ 1032.750048][   T98] block nbd0: Possible stuck request ffff888037e70800: control (read@0,4096B). Runtime 30 seconds
[ 1032.857177][T19889] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[ 1032.860357][T19889] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[ 1032.999951][T19891] bridge0: Device is already in use.
[ 1033.307967][T19900] netlink: 'syz.1.11942': attribute type 1 has an invalid length.
[ 1033.535842][T19915] xt_hashlimit: size too large, truncated to 1048576
[ 1033.775368][T19930] 8021q: adding VLAN 0 to HW filter on device bond312
[ 1034.530189][T19972] veth0: entered promiscuous mode
[ 1034.913728][T20003] 8021q: adding VLAN 0 to HW filter on device bond284
[ 1034.945351][T20006] 8021q: adding VLAN 0 to HW filter on device bond313
[ 1034.962404][T20003] vlan17: entered promiscuous mode
[ 1034.964722][T20003] bond284: entered promiscuous mode
[ 1034.967864][T20003] vlan17: entered allmulticast mode
[ 1034.970005][T20003] bond284: entered allmulticast mode
[ 1034.983100][T20006] macvlan12: entered promiscuous mode
[ 1034.985338][T20006] macvlan12: entered allmulticast mode
[ 1034.999101][T20003] syzkaller0: entered promiscuous mode
[ 1035.000971][T20003] syzkaller0: entered allmulticast mode
[ 1035.018227][T20003] bond284: (slave bridge119): making interface the new active one
[ 1035.021467][T20003] bridge119: entered promiscuous mode
[ 1035.023361][T20003] bridge119: entered allmulticast mode
[ 1035.026093][T20003] bond284: (slave bridge119): Enslaving as an active interface with an up link
[ 1035.114599][T20013] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1035.119220][T20013] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1035.194321][ T5600] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 1035.198452][ T5600] CPU: 1 UID: 0 PID: 5600 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1035.198465][ T5600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1035.198470][ T5600] Call Trace:
[ 1035.198473][ T5600]  <TASK>
[ 1035.198477][ T5600]  dump_stack_lvl+0xe8/0x150
[ 1035.198492][ T5600]  dump_header+0xd3/0x4b0
[ 1035.198505][ T5600]  oom_kill_process+0x3ab/0x970
[ 1035.198516][ T5600]  out_of_memory+0x1064/0x1480
[ 1035.198525][ T5600]  ? try_charge_memcg+0xbca/0x1590
[ 1035.198539][ T5600]  ? __pfx_out_of_memory+0x10/0x10
[ 1035.198547][ T5600]  ? do_raw_spin_unlock+0x4d/0x210
[ 1035.198562][ T5600]  try_charge_memcg+0xc74/0x1590
[ 1035.198604][ T5600]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1035.198613][ T5600]  ? percpu_ref_tryget+0x15/0x180
[ 1035.198629][ T5600]  ? charge_memcg+0x20/0x2b0
[ 1035.198638][ T5600]  charge_memcg+0x19c/0x2b0
[ 1035.198646][ T5600]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[ 1035.198654][ T5600]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[ 1035.198663][ T5600]  swap_cache_alloc_folio+0x4de/0x990
[ 1035.198678][ T5600]  swap_cache_read_folio+0x44/0x120
[ 1035.198690][ T5600]  swap_cluster_readahead+0x3a0/0x640
[ 1035.198702][ T5600]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1035.198717][ T5600]  ? get_vma_policy+0x27b/0x3c0
[ 1035.198727][ T5600]  swapin_readahead+0x19a/0xc10
[ 1035.198738][ T5600]  ? swap_table_get+0x1e/0x260
[ 1035.198748][ T5600]  ? swap_table_get+0x1e/0x260
[ 1035.198757][ T5600]  ? __pfx_swapin_readahead+0x10/0x10
[ 1035.198768][ T5600]  ? swap_table_get+0x1e/0x260
[ 1035.198778][ T5600]  ? swap_table_get+0x1e/0x260
[ 1035.198787][ T5600]  ? swap_table_get+0x1e/0x260
[ 1035.198796][ T5600]  ? swap_table_get+0x216/0x260
[ 1035.198806][ T5600]  ? swap_cache_get_folio+0x2e7/0x2f0
[ 1035.198818][ T5600]  do_swap_page+0x455/0x5060
[ 1035.198832][ T5600]  ? __pte_offset_map+0x29/0x240
[ 1035.198844][ T5600]  ? __lock_acquire+0x683/0x2cf0
[ 1035.198852][ T5600]  ? do_swap_page+0x124/0x5060
[ 1035.198860][ T5600]  ? __pfx_do_swap_page+0x10/0x10
[ 1035.198869][ T5600]  ? __pte_offset_map+0x1ae/0x240
[ 1035.198880][ T5600]  ? pte_offset_map_rw_nolock+0xea/0x160
[ 1035.198891][ T5600]  handle_mm_fault+0x124c/0x3080
[ 1035.198906][ T5600]  ? handle_mm_fault+0xec/0x3080
[ 1035.198919][ T5600]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1035.198927][ T5600]  ? lock_vma_under_rcu+0x45a/0x500
[ 1035.198948][ T5600]  do_user_addr_fault+0xa4d/0x1340
[ 1035.198961][ T5600]  ? trace_page_fault_user+0x84/0x1e0
[ 1035.198970][ T5600]  exc_page_fault+0x6a/0xc0
[ 1035.198981][ T5600]  asm_exc_page_fault+0x26/0x30
[ 1035.198988][ T5600] RIP: 0033:0x7fb0e686ae77
[ 1035.198997][ T5600] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 39 7c 24
[ 1035.199003][ T5600] RSP: 002b:00007ffd2585e880 EFLAGS: 00010202
[ 1035.199011][ T5600] RAX: 0000001b32a24000 RBX: 0000000000002e8b RCX: 00000000000fcaf8
[ 1035.199017][ T5600] RDX: 0000000000e4c16e RSI: 00007ffd2585e910 RDI: 000000000000001c
[ 1035.199022][ T5600] RBP: 00007ffd2585e8bc R08: 000000000368a222 R09: 3fffffffffffffff
[ 1035.199027][ T5600] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 1035.199032][ T5600] R13: 00000000000927c0 R14: 00000000000fc9a1 R15: 00007ffd2585e910
[ 1035.199044][ T5600]  </TASK>
[ 1035.199047][ T5600] memory: usage 307200kB, limit 307200kB, failcnt 3049
[ 1035.206123][T20013] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1035.209190][ T5600] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0
[ 1035.210121][T20013] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1035.211632][ T5600] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
[ 1035.319762][ T5600] Memory cgroup stats for /syz1:
[ 1035.319820][ T5600] cache 0
[ 1035.325205][ T5600] rss 4096
[ 1035.326438][ T5600] rss_huge 0
[ 1035.327609][ T5600] shmem 0
[ 1035.328522][ T5600] mapped_file 0
[ 1035.329632][ T5600] dirty 0
[ 1035.330603][ T5600] writeback 0
[ 1035.331680][ T5600] workingset_refault_anon 10
[ 1035.333163][ T5600] workingset_refault_file 0
[ 1035.334521][ T5600] swap 176128
[ 1035.335665][ T5600] swapcached 270336
[ 1035.337000][ T5600] pgpgin 630678
[ 1035.338123][ T5600] pgpgout 630669
[ 1035.339224][ T5600] pgfault 1005925
[ 1035.340448][ T5600] pgmajfault 7
[ 1035.341700][ T5600] inactive_anon 20480
[ 1035.343040][ T5600] active_anon 16384
[ 1035.344357][ T5600] inactive_file 0
[ 1035.345852][ T5600] active_file 0
[ 1035.347448][ T5600] unevictable 0
[ 1035.348914][ T5600] hierarchical_memory_limit 314572800
[ 1035.351065][ T5600] hierarchical_memsw_limit 9223372036854771712
[ 1035.353603][ T5600] total_cache 0
[ 1035.355028][ T5600] total_rss 4096
[ 1035.356508][ T5600] total_rss_huge 0
[ 1035.358197][ T5600] total_shmem 0
[ 1035.359631][ T5600] total_mapped_file 0
[ 1035.361213][ T5600] total_dirty 0
[ 1035.389618][T20013] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1035.394221][ T5600] total_writeback 0
[ 1035.395930][ T5600] total_workingset_refault_anon 10
[ 1035.398449][ T5600] total_workingset_refault_file 0
[ 1035.400492][T20013] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1035.404340][ T5600] total_swap 176128
[ 1035.405935][ T5600] total_swapcached 270336
[ 1035.407986][ T5600] total_pgpgin 630681
[ 1035.409799][ T5600] total_pgpgout 630672
[ 1035.411611][ T5600] total_pgfault 1005933
[ 1035.413434][ T5600] total_pgmajfault 7
[ 1035.415133][ T5600] total_inactive_anon 20480
[ 1035.418714][ T5600] total_active_anon 16384
[ 1035.423337][ T5600] total_inactive_file 0
[ 1035.425073][ T5600] total_active_file 0
[ 1035.432443][ T5600] total_unevictable 0
[ 1035.434089][ T5600] anon_cost 0
[ 1035.435435][ T5600] file_cost 0
[ 1035.437007][ T5600] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.11957,pid=19981,uid=0
[ 1035.443398][ T5600] Memory cgroup out of memory: Killed process 19981 (syz.1.11957) total-vm:102496kB, anon-rss:1244kB, file-rss:23264kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1035.444188][T20013] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1035.457352][T20013] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1035.590714][ T5660] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1035.597338][ T5660] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1035.628123][ T5660] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1035.631064][ T5660] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1035.683186][ T5660] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1035.689702][ T5660] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1035.705363][ T5660] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1035.715954][ T5660] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1035.839278][T20033] validate_nla: 4 callbacks suppressed
[ 1035.839292][T20033] netlink: 'syz.1.11969': attribute type 13 has an invalid length.
[ 1035.845132][T20033] netlink: 'syz.1.11969': attribute type 13 has an invalid length.
[ 1036.303575][T20060] netlink: 'syz.1.11976': attribute type 1 has an invalid length.
[ 1036.350208][T20060] 8021q: adding VLAN 0 to HW filter on device bond350
[ 1036.380663][T20060] bond350: (slave veth1): Enslaving as an active interface with a down link
[ 1036.420793][T20060] bond350 (unregistering): (slave veth1): Releasing active interface
[ 1036.431582][T20060] bond350 (unregistering): Released all slaves
[ 1036.654649][T20064] tipc: Resetting bearer <eth:gre0>
[ 1036.917285][T23115] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1036.926258][T23115] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1036.936773][T23115] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1036.941485][T23115] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1037.101235][T20082] __nla_validate_parse: 24 callbacks suppressed
[ 1037.101249][T20082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11981'.
[ 1037.170866][T20083] A link change request failed with some changes committed already. Interface vlan5 may have been left with an inconsistent configuration, please check.
[ 1037.186444][T20093] A link change request failed with some changes committed already. Interface vlan5 may have been left with an inconsistent configuration, please check.
[ 1037.261230][T20097] netlink: 'syz.2.11984': attribute type 1 has an invalid length.
[ 1037.282336][T20097] bond285 (unregistering): Released all slaves
[ 1037.413791][T20102] A link change request failed with some changes committed already. Interface vlan5 may have been left with an inconsistent configuration, please check.
[ 1037.605283][T20108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11988'.
[ 1037.608650][T20108] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11988'.
[ 1037.737159][T20123] bond273: (slave veth0_to_bond): Releasing active interface
[ 1037.783222][T20128] rB speed is unknown, defaulting to 1000
[ 1037.786643][T20128] xfrm0 speed is unknown, defaulting to 1000
[ 1037.809328][T20132] netlink: 'syz.2.11994': attribute type 13 has an invalid length.
[ 1037.874846][T20135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11994'.
[ 1038.111332][T20149] netlink: 165 bytes leftover after parsing attributes in process `syz.1.11996'.
[ 1038.189429][T20161] netlink: 'syz.1.11999': attribute type 1 has an invalid length.
[ 1038.224346][T20161] 8021q: adding VLAN 0 to HW filter on device bond350
[ 1038.331033][T20168] bond351: entered promiscuous mode
[ 1038.333102][T20168] 8021q: adding VLAN 0 to HW filter on device bond351
[ 1038.429694][T20177] netlink: 112 bytes leftover after parsing attributes in process `syz.1.12004'.
[ 1038.502540][T20181] xt_hashlimit: size too large, truncated to 1048576
[ 1038.522419][T20185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12007'.
[ 1038.601886][T20187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12009'.
[ 1038.877620][T20214] netlink: 320 bytes leftover after parsing attributes in process `syz.2.12014'.
[ 1038.929558][T20221] tipc: Resetting bearer <eth:gre0>
[ 1039.004378][T20230] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12020'.
[ 1039.090950][T20234] netlink: 'syz.0.12022': attribute type 2 has an invalid length.
[ 1039.105894][T20239] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[ 1039.112374][T20239] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[ 1039.280973][T20248] xfrm0: left allmulticast mode
[ 1039.339099][T20248] mac80211_hwsim hwsim25 wlan0: left promiscuous mode
[ 1039.341861][T20248] mac80211_hwsim hwsim25 wlan0: left allmulticast mode
[ 1039.345283][T20248] macvtap0: left promiscuous mode
[ 1039.353286][T20248] bond266: left promiscuous mode
[ 1039.355441][T20248] bridge109: left promiscuous mode
[ 1039.359313][T20258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1039.363144][T20248] ip6gre6: left allmulticast mode
[ 1039.365703][T20248] vlan11: left allmulticast mode
[ 1039.368463][T20248] bond272: left allmulticast mode
[ 1039.370849][T20248] macvtap9: left allmulticast mode
[ 1039.373204][T20248] macvtap10: left allmulticast mode
[ 1039.379536][T20248] bond276: left promiscuous mode
[ 1039.381684][T20248] bond276: left allmulticast mode
[ 1039.393211][T20248] bond280: left promiscuous mode
[ 1039.395412][T20248] bridge115: left promiscuous mode
[ 1039.404653][T20248] macvlan9: left promiscuous mode
[ 1039.407307][T20248] macvlan9: left allmulticast mode
[ 1039.411879][T20248] bond282: left promiscuous mode
[ 1039.413697][T20248] bridge118: left promiscuous mode
[ 1039.419831][T20248] vlan17: left promiscuous mode
[ 1039.421801][T20248] bond284: left promiscuous mode
[ 1039.423663][T20248] bridge119: left promiscuous mode
[ 1039.425898][T20248] vlan17: left allmulticast mode
[ 1039.428738][T20248] bond284: left allmulticast mode
[ 1039.430731][T20248] bridge119: left allmulticast mode
[ 1039.438800][ T8945] rB speed is unknown, defaulting to 1000
[ 1039.441736][ T8945] syz1: Port: 1 Link DOWN
[ 1039.443851][ T6805] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1039.448941][ T6805] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.454558][ T6805] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1039.461314][ T6805] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.465758][ T6805] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1039.475264][ T6805] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.478695][ T6805] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1039.481297][ T6805] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.573641][ T6805] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1039.587611][ T6805] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1039.591878][ T6805] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1039.598714][ T6805] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1039.793012][T20291] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[ 1039.795679][T20291] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[ 1039.842094][T20291] netlink: 'syz.1.12037': attribute type 1 has an invalid length.
[ 1039.845217][T20291] netlink: 'syz.1.12037': attribute type 2 has an invalid length.
[ 1040.781918][T20303] tipc: Resetting bearer <eth:syzkaller0>
[ 1040.905741][T20314] netlink: 'syz.1.12045': attribute type 1 has an invalid length.
[ 1040.986416][T20325] netlink: 'syz.0.12048': attribute type 1 has an invalid length.
[ 1041.058322][T20333] netlink: 'syz.2.12051': attribute type 2 has an invalid length.
[ 1041.111641][T20335] bond352: option ad_select: invalid value (34)
[ 1041.114755][T20335] bond352 (unregistering): Released all slaves
[ 1041.428064][T20366] netlink: 'syz.2.12058': attribute type 4 has an invalid length.
[ 1041.433422][T20366] netlink: 'syz.2.12058': attribute type 4 has an invalid length.
[ 1041.438303][  T438] rB speed is unknown, defaulting to 1000
[ 1041.440421][  T438] syz1: Port: 1 Link ACTIVE
[ 1044.225883][T20348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1044.332944][T20380] netlink: 'syz.2.12061': attribute type 1 has an invalid length.
[ 1044.368373][T20380] 8021q: adding VLAN 0 to HW filter on device bond285
[ 1044.410162][T20377] __nla_validate_parse: 13 callbacks suppressed
[ 1044.410172][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12060'.
[ 1044.582655][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12065'.
[ 1044.705500][T20420] rB speed is unknown, defaulting to 1000
[ 1044.710472][T20420] xfrm0 speed is unknown, defaulting to 1000
[ 1044.743555][T20416] bond327: (slave bridge0): Releasing active interface
[ 1044.807811][T20424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12070'.
[ 1044.811021][T20425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12070'.
[ 1044.951952][T20433] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12073'.
[ 1045.081606][T20444] netlink: 'syz.0.12076': attribute type 1 has an invalid length.
[ 1045.121768][T20444] 8021q: adding VLAN 0 to HW filter on device bond314
[ 1045.164961][T20444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12076'.
[ 1045.172112][T20444] bond314: entered promiscuous mode
[ 1045.174748][T20444] bond314: entered allmulticast mode
[ 1045.218161][T20454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12078'.
[ 1045.233688][T20458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12079'.
[ 1045.239927][T20458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12079'.
[ 1045.257657][T20454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12078'.
[ 1045.327451][T20460] netlink: 'syz.0.12080': attribute type 1 has an invalid length.
[ 1045.388692][T20460] 8021q: adding VLAN 0 to HW filter on device bond315
[ 1045.430878][T20460] veth0_to_bond: left promiscuous mode
[ 1045.446964][T20460] veth0_to_bond: left allmulticast mode
[ 1045.484095][T20460] bond315: (slave veth0_to_bond): making interface the new active one
[ 1045.494694][T20460] bond315: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1045.520760][T20461] macvlan12: entered promiscuous mode
[ 1045.524340][T20461] macvlan12: entered allmulticast mode
[ 1045.530174][T20461] bond315: entered promiscuous mode
[ 1045.537773][T20461] veth0_to_bond: entered promiscuous mode
[ 1045.541449][T20461] 8021q: adding VLAN 0 to HW filter on device macvlan12
[ 1045.544873][T20461] bond315: (slave macvlan12): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1045.551930][T20461] bond315: left promiscuous mode
[ 1045.554090][T20461] veth0_to_bond: left promiscuous mode
[ 1045.579781][T20471] macvlan12: entered promiscuous mode
[ 1045.587345][T20471] macvlan12: entered allmulticast mode
[ 1045.595796][T20471] bond315: entered promiscuous mode
[ 1045.598942][T20471] veth0_to_bond: entered promiscuous mode
[ 1045.602129][T20471] 8021q: adding VLAN 0 to HW filter on device macvlan12
[ 1045.605559][T20471] bond315: (slave macvlan12): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1045.612565][T20471] bond315: left promiscuous mode
[ 1045.614678][T20471] veth0_to_bond: left promiscuous mode
[ 1045.734293][T20473] tipc: Resetting bearer <eth:gre0>
[ 1045.736043][T20473] tipc: Resetting bearer <eth:gre0>
[ 1045.789947][T20473] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1045.803537][T20487] sctp: [Deprecated]: syz.0.12087 (pid 20487) Use of int in max_burst socket option.
[ 1045.803537][T20487] Use struct sctp_assoc_value instead
[ 1045.813654][T23115] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.818908][T23115] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.825055][T23115] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.830100][T23115] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.874297][T20494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1045.886157][T20491] pim6reg1: entered promiscuous mode
[ 1045.889671][T20491] pim6reg1: entered allmulticast mode
[ 1045.944706][T20500] 8021q: VLANs not supported on sit0
[ 1045.982187][T20505] netlink: 'syz.1.12093': attribute type 2 has an invalid length.
[ 1046.015238][T20514] syzkaller1: entered promiscuous mode
[ 1046.019565][T20514] syzkaller1: entered allmulticast mode
[ 1046.051978][T20516] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1046.055449][T20516] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.095961][T20522] netlink: 'syz.2.12098': attribute type 1 has an invalid length.
[ 1046.102999][T20522] ip6tnl17: entered promiscuous mode
[ 1046.116527][T20516] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1046.121010][T20516] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.190924][T20516] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1046.193985][T20516] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.243678][T20516] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1046.247987][T20516] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.344323][ T6805] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1046.347704][ T6805] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1046.356204][ T6805] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1046.359658][ T6805] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1046.373629][T23115] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1046.376313][T23115] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1046.386098][T23115] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1046.389629][T23115] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1046.427038][T20536] netlink: 'syz.1.12101': attribute type 1 has an invalid length.
[ 1046.444845][T20536] bond352: entered promiscuous mode
[ 1046.446750][T20536] 8021q: adding VLAN 0 to HW filter on device bond352
[ 1046.455348][T20536] IPVS: Unknown mcast interface: lo
[ 1046.521045][T20536] bond352: (slave bridge157): making interface the new active one
[ 1046.524289][T20536] bridge157: entered promiscuous mode
[ 1046.527218][T20536] bond352: (slave bridge157): Enslaving as an active interface with an up link
[ 1046.582482][T20549] bond0: entered promiscuous mode
[ 1046.585650][T20549] bond0: left promiscuous mode
[ 1046.641718][T20555] bond0: entered promiscuous mode
[ 1046.644906][T20555] bond0: left promiscuous mode
[ 1046.731985][T20561] netlink: 'syz.2.12107': attribute type 1 has an invalid length.
[ 1047.012849][T20587] netlink: 'syz.1.12111': attribute type 10 has an invalid length.
[ 1047.068254][T20589] rB speed is unknown, defaulting to 1000
[ 1047.072620][T20589] xfrm0 speed is unknown, defaulting to 1000
[ 1047.111737][T20598] rB speed is unknown, defaulting to 1000
[ 1047.196754][T20598] xfrm0 speed is unknown, defaulting to 1000
[ 1047.495094][T20612] netlink: 'syz.1.12118': attribute type 12 has an invalid length.
[ 1047.508508][T20612] netlink: 'syz.1.12118': attribute type 12 has an invalid length.
[ 1047.612942][T20617] bond353: option lacp_rate: invalid value (128)
[ 1047.620424][T20617] bond353 (unregistering): Released all slaves
[ 1047.762020][T20622] netlink: 'syz.1.12120': attribute type 1 has an invalid length.
[ 1048.029784][T20632] rB speed is unknown, defaulting to 1000
[ 1048.058270][T20632] xfrm0 speed is unknown, defaulting to 1000
[ 1048.341778][T20633] netlink: 'syz.1.12123': attribute type 4 has an invalid length.
[ 1048.386575][T20655] bond287: invalid ARP target 0.0.0.0 specified for addition
[ 1048.391283][T20655] bond287: option arp_ip_target: invalid value (0)
[ 1048.394800][T20655] bond287 (unregistering): Released all slaves
[ 1048.456321][T20659] netlink: 'syz.0.12130': attribute type 1 has an invalid length.
[ 1048.505213][T20659] 8021q: adding VLAN 0 to HW filter on device bond316
[ 1048.521685][T20659] bond315: (slave veth0_to_bond): Releasing active interface
[ 1048.534395][T20659] bond316: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1048.638660][T20669] x_tables: duplicate underflow at hook 1
[ 1048.842058][   T24] rB speed is unknown, defaulting to 1000
[ 1048.848679][   T24] rB speed is unknown, defaulting to 1000
[ 1048.894839][T20686] tipc: Resetting bearer <eth:gre0>
[ 1049.083209][T20686] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[ 1049.088764][T20686] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[ 1049.091978][T20686] bond339: left allmulticast mode
[ 1049.094124][T20686] bond340: left promiscuous mode
[ 1049.095815][T20686] bond340: left allmulticast mode
[ 1049.098656][T20686] bond343: left promiscuous mode
[ 1049.100375][T20686] bridge152: left promiscuous mode
[ 1049.102234][T20686] macvtap6: left allmulticast mode
[ 1049.104282][T20686] bond346: left promiscuous mode
[ 1049.105921][T20686] bond346: left allmulticast mode
[ 1049.107930][T20686] bond348: left promiscuous mode
[ 1049.109618][T20686] veth0_to_bond: left promiscuous mode
[ 1049.111469][T20686] bond348: left allmulticast mode
[ 1049.113173][T20686] vlan0: left allmulticast mode
[ 1049.114769][T20686] bridge155: left allmulticast mode
[ 1049.119533][T20686] bond351: left promiscuous mode
[ 1049.123718][T20686] bond352: left promiscuous mode
[ 1049.126985][T20686] bridge157: left promiscuous mode
[ 1049.137475][T20684] macvlan0: left promiscuous mode
[ 1049.151461][T20687] tipc: Resetting bearer <eth:gre0>
[ 1049.183412][T20687] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1049.199170][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1049.216128][T20689] bond317: entered promiscuous mode
[ 1049.219715][T20689] 8021q: adding VLAN 0 to HW filter on device bond317
[ 1049.223420][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1049.228642][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1049.232167][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1049.259744][T20689] 8021q: adding VLAN 0 to HW filter on device bond317
[ 1049.263049][T20689] bond317: (slave ip6gre12): The slave device specified does not support setting the MAC address
[ 1049.266456][T20689] bond317: (slave ip6gre12): Setting fail_over_mac to active for active-backup mode
[ 1049.273308][T20689] bond317: (slave ip6gre12): making interface the new active one
[ 1049.275736][T20689] ip6gre12: entered promiscuous mode
[ 1049.278584][T20689] bond317: (slave ip6gre12): Enslaving as an active interface with an up link
[ 1049.298945][T20692] pimreg: entered allmulticast mode
[ 1049.301941][T20692] dvmrp0: left allmulticast mode
[ 1049.304240][T20692] dvmrp8: left allmulticast mode
[ 1049.372470][T20691] pimreg: left allmulticast mode
[ 1049.703429][T20724] __nla_validate_parse: 25 callbacks suppressed
[ 1049.703445][T20724] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12149'.
[ 1049.750810][T20732] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12148'.
[ 1049.756474][T20720] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12148'.
[ 1049.801827][T20742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12151'.
[ 1049.829014][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12152'.
[ 1049.846696][T20746] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12153'.
[ 1049.886490][T20746] 8021q: adding VLAN 0 to HW filter on device bond318
[ 1049.894812][T20746] bond316: (slave veth0_to_bond): Releasing backup interface
[ 1049.904422][T20746] bond318: (slave veth0_to_bond): making interface the new active one
[ 1049.910040][T20746] bond318: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1049.962412][T20755] macvtap13: entered promiscuous mode
[ 1049.964211][T20755] vlan0: entered promiscuous mode
[ 1049.965820][T20755] bond266: entered promiscuous mode
[ 1049.973397][T20755] vlan0: left promiscuous mode
[ 1049.974985][T20755] bond266: left promiscuous mode
[ 1050.141451][T20774] tipc: Resetting bearer <eth:gre0>
[ 1050.145486][T20774] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1050.484783][T20802] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[ 1050.487443][T20802] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[ 1051.314003][T20810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12168'.
[ 1051.402495][T20820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1051.411449][T20820] veth0: entered promiscuous mode
[ 1051.413988][T20820] bond0: entered promiscuous mode
[ 1051.416323][T20820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12170'.
[ 1051.450603][T20819] bond0: left promiscuous mode
[ 1051.452263][T20819] veth0: left promiscuous mode
[ 1053.373673][T20796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1053.530070][ T5672] rB speed is unknown, defaulting to 1000
[ 1053.535106][ T5672] syz1: Port: 1 Link DOWN
[ 1053.618939][T20859] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001
[ 1053.657634][T20864] validate_nla: 9 callbacks suppressed
[ 1053.657644][T20864] netlink: 'syz.2.12177': attribute type 10 has an invalid length.
[ 1053.773656][T20870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12181'.
[ 1053.841476][T20880] bond319: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1053.845889][T20880] bond319 (unregistering): Released all slaves
[ 1053.895096][T20885] rB speed is unknown, defaulting to 1000
[ 1053.904006][T20885] xfrm0 speed is unknown, defaulting to 1000
[ 1054.206882][T20899] bridge159: entered promiscuous mode
[ 1054.208834][T20899] bridge159: entered allmulticast mode
[ 1054.318548][T20903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12190'.
[ 1054.410794][T20909] tipc: Resetting bearer <eth:gre0>
[ 1054.423587][T20909] bond348: (slave veth0_to_bond): Releasing active interface
[ 1054.451279][T20909] bond330: (slave veth135): Releasing active interface
[ 1054.458887][T20909] bond333: (slave bridge150): Releasing backup interface
[ 1054.464754][T20909] bond339: (slave veth139): Releasing active interface
[ 1054.467908][T20909] bond339: (slave veth139): the permanent HWaddr of slave - 3a:b7:a1:4c:8f:7a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1054.481546][T20909] bond339: (slave veth141): Releasing active interface
[ 1054.504779][T20909] bond341: (slave veth143): Releasing active interface
[ 1054.514296][T20909] bond341: (slave veth143): the permanent HWaddr of slave - 46:dd:0c:a2:bb:d7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1054.527983][T20909] batadv10: entered promiscuous mode
[ 1054.535255][T20909] bond341: (slave batadv10): Releasing active interface
[ 1054.539009][T20909] batadv10: left promiscuous mode
[ 1054.545604][T20909] bond343: (slave bridge152): Releasing backup interface
[ 1054.555507][T20909] bond345: (slave veth145): Releasing active interface
[ 1054.559361][T20909] bond345: (slave veth145): the permanent HWaddr of slave - 42:e3:71:e5:2c:80 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1054.566499][T20909] batadv11: entered promiscuous mode
[ 1054.578438][T20909] bond345: (slave batadv11): Releasing active interface
[ 1054.581445][T20909] batadv11: left promiscuous mode
[ 1054.598355][T20909] bond352: (slave bridge157): Releasing backup interface
[ 1054.742377][T20925] netlink: 'syz.1.12197': attribute type 1 has an invalid length.
[ 1054.767035][T20928] mac80211_hwsim hwsim25 : renamed from wlan0
[ 1054.777567][T20925] __nla_validate_parse: 1 callbacks suppressed
[ 1054.777577][T20925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12197'.
[ 1054.793650][T20925] 8021q: adding VLAN 0 to HW filter on device bond354
[ 1054.800302][T20925] tipc: Resetting bearer <eth:gre0>
[ 1054.802506][T20925] tipc: Resetting bearer <eth:gre0>
[ 1054.893624][T20925] tipc: Resetting bearer <eth:syzkaller0>
[ 1055.033956][T20943] netlink: 'syz.2.12201': attribute type 10 has an invalid length.
[ 1055.135801][T20949] netlink: 'syz.2.12204': attribute type 1 has an invalid length.
[ 1055.140203][T20949] netlink: 'syz.2.12204': attribute type 2 has an invalid length.
[ 1055.145594][T20949] netlink: 'syz.2.12204': attribute type 4 has an invalid length.
[ 1055.149561][T20949] netlink: 'syz.2.12204': attribute type 4 has an invalid length.
[ 1055.153365][ T8944] rB speed is unknown, defaulting to 1000
[ 1055.156290][ T8944] syz1: Port: 1 Link ACTIVE
[ 1055.184667][T20953] bond355: Unable to set up delay as MII monitoring is disabled
[ 1055.190537][T20953] bond355 (unregistering): Released all slaves
[ 1055.204582][T20949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12204'.
[ 1055.283067][T20961] netlink: 'syz.1.12207': attribute type 1 has an invalid length.
[ 1055.307810][T20961] bond355: (slave bridge159): making interface the new active one
[ 1055.310940][T20961] bond355: (slave bridge159): Enslaving as an active interface with an up link
[ 1055.316067][T20961] team0: entered promiscuous mode
[ 1055.318548][T20961] team0: entered allmulticast mode
[ 1055.322874][T20961] bond355: (slave team0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1055.350480][T20967] netlink: 'syz.1.12209': attribute type 1 has an invalid length.
[ 1055.375755][T20967] bond356: entered promiscuous mode
[ 1055.382592][T20967] 8021q: adding VLAN 0 to HW filter on device bond356
[ 1055.392472][T20970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12210'.
[ 1055.425689][T20967] ipvlan9: entered allmulticast mode
[ 1055.431051][T20967] bond356: entered allmulticast mode
[ 1055.444849][T20967] ipvlan13: entered allmulticast mode
[ 1055.461840][T20967] bond356: (slave bridge160): making interface the new active one
[ 1055.464467][T20967] bridge160: entered promiscuous mode
[ 1055.467357][T20967] bridge160: entered allmulticast mode
[ 1055.474722][T20967] bond356: (slave bridge160): Enslaving as an active interface with an up link
[ 1055.536473][T20977] netlink: 'syz.1.12212': attribute type 1 has an invalid length.
[ 1055.570752][T20977] 8021q: adding VLAN 0 to HW filter on device bond357
[ 1055.618327][T20977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12212'.
[ 1055.640001][T20982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12213'.
[ 1055.643971][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12213'.
[ 1055.648267][T20982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12213'.
[ 1055.653791][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12213'.
[ 1055.720142][T20982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12213'.
[ 1055.774902][T20992] pimreg9: entered allmulticast mode
[ 1055.782020][T20992] xt_hashlimit: max too large, truncated to 1048576
[ 1055.840970][T20997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12219'.
[ 1056.031394][T21014] nbd: nbd1 already in use
[ 1056.035743][T21014] block nbd1: NBD_DISCONNECT
[ 1056.042857][T21014] block nbd1: Send disconnect failed -32
[ 1056.045078][T21014] block nbd1: shutting down sockets
[ 1056.290032][T21040] macsec0: entered promiscuous mode
[ 1056.300074][T21039] macsec0: left promiscuous mode
[ 1056.442124][T21051] bond358: Setting coupled_control to off (0)
[ 1056.454063][T21051] tipc: Resetting bearer <eth:gre0>
[ 1056.546520][T21061] macvtap13: entered promiscuous mode
[ 1056.549593][T21061] vlan0: entered promiscuous mode
[ 1056.551841][T21061] bond266: entered promiscuous mode
[ 1056.557876][T21061] vlan0: left promiscuous mode
[ 1056.559593][T21061] bond266: left promiscuous mode
[ 1057.008217][T21102] rB speed is unknown, defaulting to 1000
[ 1057.012143][T21102] xfrm0 speed is unknown, defaulting to 1000
[ 1057.294535][T21116] bond319: option lacp_rate: invalid value (128)
[ 1057.301811][T21116] bond319 (unregistering): Released all slaves
[ 1057.416711][T21129] 8021q: adding VLAN 0 to HW filter on device bond319
[ 1057.425266][T21129] sctp: [Deprecated]: syz.0.12250 (pid 21129) Use of int in max_burst socket option.
[ 1057.425266][T21129] Use struct sctp_assoc_value instead
[ 1057.760423][T21153] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1058.591345][T21153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1058.716376][T21189] xt_NFQUEUE: number of total queues is 0
[ 1058.766062][T21189] bond287: option arp_all_targets: invalid value (3)
[ 1058.774673][T21189] bond287 (unregistering): Released all slaves
[ 1058.820737][T21186] team0: left promiscuous mode
[ 1058.822754][T21186] team0: left allmulticast mode
[ 1058.833225][T21186] tipc: Resetting bearer <eth:gre0>
[ 1059.084431][T21186] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[ 1059.086911][T21186] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[ 1059.118215][T21186] bond356: left promiscuous mode
[ 1059.122686][T21186] bridge160: left promiscuous mode
[ 1059.127337][T21186] ipvlan9: left allmulticast mode
[ 1059.131808][T21186] ipvlan13: left allmulticast mode
[ 1059.135352][T21186] bond356: left allmulticast mode
[ 1059.139003][T21186] bridge160: left allmulticast mode
[ 1059.152164][T21198] workqueue: Failed to create a rescuer kthread for wq "bond320": -EINTR
[ 1059.154920][T23115] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1059.173504][T23115] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1059.182833][T23115] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1059.189110][T23115] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1059.206055][T21203] rB speed is unknown, defaulting to 1000
[ 1059.212954][T21203] xfrm0 speed is unknown, defaulting to 1000
[ 1059.248038][T21213] validate_nla: 10 callbacks suppressed
[ 1059.248052][T21213] netlink: 'syz.1.12267': attribute type 1 has an invalid length.
[ 1059.261275][T21213] ip6tnl0: Master is either lo or non-ether device
[ 1059.381465][T21221] syzkaller1: entered promiscuous mode
[ 1059.383394][T21221] syzkaller1: entered allmulticast mode
[ 1059.410517][T21226] netlink: 'syz.1.12271': attribute type 13 has an invalid length.
[ 1059.463690][T21227] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1059.468309][T21227] IPVS: dh: FWM 3 0x00000003 - no destination available
[ 1059.735255][T21236] bond320: option ad_user_port_key: invalid value (65535)
[ 1059.737585][T21236] bond320: option ad_user_port_key: allowed values 0 - 1023
[ 1059.740628][T21236] bond320 (unregistering): Released all slaves
[ 1059.752312][T21232] netlink: 'syz.1.12272': attribute type 2 has an invalid length.
[ 1059.978353][T21246] __nla_validate_parse: 29 callbacks suppressed
[ 1059.978363][T21246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12275'.
[ 1060.209937][T21256] nft_compat: unsupported protocol 0
[ 1060.424385][T21281] syzkaller0: entered promiscuous mode
[ 1060.426185][T21281] syzkaller0: entered allmulticast mode
[ 1060.595325][T21324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12282'.
[ 1062.645156][T21344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12286'.
[ 1062.672169][T21344] sch_tbf: burst 88 is lower than device veth147 mtu (1514) !
[ 1062.725515][T21358] netlink: 'syz.0.12290': attribute type 1 has an invalid length.
[ 1062.735502][T21361] netlink: 'syz.1.12291': attribute type 11 has an invalid length.
[ 1062.760834][T21361] netlink: 'syz.1.12291': attribute type 11 has an invalid length.
[ 1062.766642][T21358] bond320: (slave bridge128): making interface the new active one
[ 1062.769954][T21358] bond320: (slave bridge128): Enslaving as an active interface with an up link
[ 1062.829029][   T98] block nbd0: Possible stuck request ffff888037e70800: control (read@0,4096B). Runtime 60 seconds
[ 1062.853704][   T54] block nbd1: Receive control failed (result -107)
[ 1062.880418][T21375] netlink: 'syz.1.12295': attribute type 1 has an invalid length.
[ 1062.885299][T21375] workqueue: Failed to create a rescuer kthread for wq "bond360": -EINTR
[ 1063.256493][T21395] netlink: 'syz.1.12300': attribute type 1 has an invalid length.
[ 1063.270015][T21395] bond360: entered promiscuous mode
[ 1063.272054][T21395] 8021q: adding VLAN 0 to HW filter on device bond360
[ 1063.278941][T21395] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[ 1063.438613][T21399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12301'.
[ 1063.441998][T21399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12301'.
[ 1063.501402][T21404] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check.
[ 1063.506776][ T8831] rB speed is unknown, defaulting to 1000
[ 1063.509886][ T8831] syz1: Port: 1 Link DOWN
[ 1063.592824][T21413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12304'.
[ 1063.595671][T21413] netlink: 'syz.2.12304': attribute type 30 has an invalid length.
[ 1063.603199][ T6500] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1063.606093][ T6500] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1063.609305][T21413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12304'.
[ 1063.612166][ T6500] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1063.614741][ T6500] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1063.617103][T21413] netlink: 'syz.2.12304': attribute type 30 has an invalid length.
[ 1063.686083][T21418] netlink: 'syz.0.12306': attribute type 1 has an invalid length.
[ 1063.704271][T21418] 8021q: adding VLAN 0 to HW filter on device bond321
[ 1063.716752][T21420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12307'.
[ 1063.723585][T21418] bond318: (slave veth0_to_bond): Releasing active interface
[ 1063.731134][T21418] bond321: (slave veth0_to_bond): making interface the new active one
[ 1063.735023][T21418] bond321: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1063.748640][T21418] macvlan12: entered promiscuous mode
[ 1063.750603][T21418] macvlan12: entered allmulticast mode
[ 1063.753117][T21418] bond321: entered promiscuous mode
[ 1063.754940][T21418] veth0_to_bond: entered promiscuous mode
[ 1063.758303][T21418] 8021q: adding VLAN 0 to HW filter on device macvlan12
[ 1063.760900][T21418] bond321: (slave macvlan12): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1063.766333][T21418] bond321: left promiscuous mode
[ 1063.768922][T21418] veth0_to_bond: left promiscuous mode
[ 1063.880233][T21432] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12310'.
[ 1063.886027][T21432] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[ 1063.888768][T21432] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12310'.
[ 1063.984435][T21440] netlink: 'syz.2.12313': attribute type 1 has an invalid length.
[ 1064.151018][T21453] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1064.162371][T21448] 8021q: VLANs not supported on team0
[ 1064.296718][T21457] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1064.376672][T21467] bond0: (slave ip6tnl0): refused to change device type
[ 1064.381227][T21465] rB speed is unknown, defaulting to 1000
[ 1064.385416][T21465] xfrm0 speed is unknown, defaulting to 1000
[ 1064.439707][T21473] validate_nla: 1 callbacks suppressed
[ 1064.439721][T21473] netlink: 'syz.0.12323': attribute type 4 has an invalid length.
[ 1064.455203][T21473] netlink: 'syz.0.12323': attribute type 4 has an invalid length.
[ 1064.481828][T21473] gre0: left promiscuous mode
[ 1064.485173][T21473] gre0: left allmulticast mode
[ 1064.521283][T21476] netlink: 'syz.1.12324': attribute type 10 has an invalid length.
[ 1064.532549][T21476] xfrm0: entered allmulticast mode
[ 1064.586747][T21479] syzkaller1: entered promiscuous mode
[ 1064.589978][T21479] syzkaller1: entered allmulticast mode
[ 1064.746524][T21490] rB speed is unknown, defaulting to 1000
[ 1064.753307][T21490] xfrm0 speed is unknown, defaulting to 1000
[ 1065.098508][T21501] __nla_validate_parse: 136 callbacks suppressed
[ 1065.098524][T21501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12329'.
[ 1065.104880][T21501] netlink: 'syz.2.12329': attribute type 10 has an invalid length.
[ 1065.109306][T21501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12329'.
[ 1065.152642][T21503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12330'.
[ 1065.157524][T21503] vlan0: entered promiscuous mode
[ 1065.166909][T21503] bridge0: entered promiscuous mode
[ 1065.618683][T21511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12333'.
[ 1065.624941][T21512] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12333'.
[ 1065.926685][T21547] 8021q: adding VLAN 0 to HW filter on device bond287
[ 1065.929894][T21547] bridge0: port 1(bond287) entered blocking state
[ 1065.932383][T21547] bridge0: port 1(bond287) entered disabled state
[ 1065.936962][T21547] bond287: entered allmulticast mode
[ 1065.940679][T21547] bond287: entered promiscuous mode
[ 1066.004118][T21569] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12345'.
[ 1066.023335][T21559] geneve0: entered promiscuous mode
[ 1066.140119][T21574] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check.
[ 1066.353544][T21592] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12351'.
[ 1066.363277][T21592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12351'.
[ 1066.409472][T21592] bond322: option lacp_rate: invalid value (128)
[ 1066.413607][T21592] bond322 (unregistering): Released all slaves
[ 1066.425255][T21596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12351'.
[ 1066.464245][T21595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12352'.
[ 1066.528392][T21599] netlink: 'syz.0.12353': attribute type 21 has an invalid length.
[ 1066.809989][T21620] rB speed is unknown, defaulting to 1000
[ 1066.813073][T21620] xfrm0 speed is unknown, defaulting to 1000
[ 1067.096264][T21629] macvlan0: entered promiscuous mode
[ 1067.100920][T21629] macvlan0: entered allmulticast mode
[ 1067.108920][T21629] macvlan0 (unregistering): left promiscuous mode
[ 1067.111091][T21629] macvlan0 (unregistering): left allmulticast mode
[ 1067.346775][T21634] bond361 (unregistering): Released all slaves
[ 1067.367631][T21643] syzkaller0: entered promiscuous mode
[ 1067.369918][T21643] syzkaller0: entered allmulticast mode
[ 1067.532220][T21646] bond288: option packets_per_slave: invalid value (1684632162)
[ 1067.534738][T21646] bond288: option packets_per_slave: allowed values 0 - 65535
[ 1067.542683][T21646] bond288 (unregistering): Released all slaves
[ 1067.581008][T21657] netlink: 'syz.1.12371': attribute type 29 has an invalid length.
[ 1068.031749][T21693] 8021q: adding VLAN 0 to HW filter on device bond323
[ 1068.047884][T21693] bond323 (unregistering): Released all slaves
[ 1068.073961][T21701] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[ 1068.076671][T21701] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[ 1068.138850][ T8441] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1068.143563][ T8441] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1068.146711][ T8441] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1068.152237][T21707] netlink: 'syz.0.12386': attribute type 10 has an invalid length.
[ 1068.157378][ T8441] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1068.347479][T21715] block nbd2: server does not support multiple connections per device.
[ 1068.351114][T21715] block nbd2: shutting down sockets
[ 1068.545017][T21732] syzkaller1: entered promiscuous mode
[ 1068.556138][T21732] syzkaller1: entered allmulticast mode
[ 1068.774776][T21763] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1068.777810][T21763] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1068.780379][T21763] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1068.785295][T21763] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[ 1068.790447][ T8831] rB speed is unknown, defaulting to 1000
[ 1068.804140][ T8831] syz1: Port: 1 Link ACTIVE
[ 1068.804151][ T5660] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.815438][ T5660] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.819595][ T5660] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.822218][ T5660] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.965822][T21782] bond362: option arp_interval: invalid value (18446744073709551615)
[ 1068.968888][T21782] bond362: option arp_interval: allowed values 0 - 2147483647
[ 1068.973392][T21782] bond362 (unregistering): Released all slaves
[ 1069.415616][T21813] netlink: 'syz.0.12418': attribute type 1 has an invalid length.
[ 1069.600452][T21818] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[ 1069.752972][T21826] syzkaller1: entered promiscuous mode
[ 1069.754825][T21826] syzkaller1: entered allmulticast mode
[ 1070.005116][T21834] 8021q: VLANs not supported on syzkaller1
[ 1070.172061][T21843] rB speed is unknown, defaulting to 1000
[ 1070.176348][T21843] xfrm0 speed is unknown, defaulting to 1000
[ 1070.358568][T21846] netlink: 'syz.0.12427': attribute type 1 has an invalid length.
[ 1070.377754][T21846] 8021q: adding VLAN 0 to HW filter on device bond323
[ 1070.399627][T21846] veth82: entered allmulticast mode
[ 1070.404821][T21846] bond323: (slave veth82): Enslaving as an active interface with a down link
[ 1070.414462][T21846] bond321: (slave veth0_to_bond): Releasing active interface
[ 1070.420200][T21846] bond323: (slave veth0_to_bond): making interface the new active one
[ 1070.423242][T21846] veth0_to_bond: entered promiscuous mode
[ 1070.425469][T21846] bond323: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1070.540050][T21850] bridge113: entered allmulticast mode
[ 1070.695499][T21852] netlink: 'syz.1.12428': attribute type 1 has an invalid length.
[ 1070.699766][T21852] workqueue: Failed to create a rescuer kthread for wq "bond362": -EINTR
[ 1070.955527][T21868] __nla_validate_parse: 25 callbacks suppressed
[ 1070.955544][T21868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12431'.
[ 1070.966018][T21868] openvswitch: netlink: Flow key attr not present in new flow.
[ 1071.184676][T21845] bridge113: left allmulticast mode
[ 1071.283482][T21866] syz.1.12431 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1071.293001][T21866] CPU: 0 UID: 0 PID: 21866 Comm: syz.1.12431 Not tainted syzkaller #0 PREEMPT(full) 
[ 1071.293014][T21866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1071.293020][T21866] Call Trace:
[ 1071.293023][T21866]  <TASK>
[ 1071.293027][T21866]  dump_stack_lvl+0xe8/0x150
[ 1071.293040][T21866]  dump_header+0xd3/0x4b0
[ 1071.293054][T21866]  oom_kill_process+0x3ab/0x970
[ 1071.293066][T21866]  out_of_memory+0x1064/0x1480
[ 1071.293075][T21866]  ? try_charge_memcg+0xbca/0x1590
[ 1071.293088][T21866]  ? __pfx_out_of_memory+0x10/0x10
[ 1071.293096][T21866]  ? do_raw_spin_unlock+0x4d/0x210
[ 1071.293111][T21866]  try_charge_memcg+0xc74/0x1590
[ 1071.293137][T21866]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1071.293153][T21866]  ? charge_memcg+0x20/0x2b0
[ 1071.293162][T21866]  charge_memcg+0x19c/0x2b0
[ 1071.293170][T21866]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[ 1071.293177][T21866]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[ 1071.293186][T21866]  swap_cache_alloc_folio+0x4de/0x990
[ 1071.293202][T21866]  swap_cluster_readahead+0x4d9/0x640
[ 1071.293215][T21866]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1071.293231][T21866]  ? get_vma_policy+0x27b/0x3c0
[ 1071.293241][T21866]  swapin_readahead+0x19a/0xc10
[ 1071.293252][T21866]  ? swap_table_get+0x1e/0x260
[ 1071.293261][T21866]  ? swap_table_get+0x1e/0x260
[ 1071.293271][T21866]  ? __pfx_swapin_readahead+0x10/0x10
[ 1071.293282][T21866]  ? swap_table_get+0x1e/0x260
[ 1071.293291][T21866]  ? swap_table_get+0x1e/0x260
[ 1071.293298][T21866]  ? swap_table_get+0x1e/0x260
[ 1071.293307][T21866]  ? swap_table_get+0x216/0x260
[ 1071.293317][T21866]  ? swap_cache_get_folio+0x2e7/0x2f0
[ 1071.293329][T21866]  do_swap_page+0x455/0x5060
[ 1071.293343][T21866]  ? __pte_offset_map+0x29/0x240
[ 1071.293356][T21866]  ? __lock_acquire+0x683/0x2cf0
[ 1071.293363][T21866]  ? do_swap_page+0x124/0x5060
[ 1071.293372][T21866]  ? __pfx_do_swap_page+0x10/0x10
[ 1071.293380][T21866]  ? __pte_offset_map+0x1ae/0x240
[ 1071.293391][T21866]  ? pte_offset_map_rw_nolock+0xea/0x160
[ 1071.293402][T21866]  handle_mm_fault+0x124c/0x3080
[ 1071.293417][T21866]  ? handle_mm_fault+0xec/0x3080
[ 1071.293430][T21866]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1071.293439][T21866]  ? lock_vma_under_rcu+0x45a/0x500
[ 1071.293460][T21866]  do_user_addr_fault+0xa4d/0x1340
[ 1071.293473][T21866]  ? trace_page_fault_user+0x84/0x1e0
[ 1071.293483][T21866]  exc_page_fault+0x6a/0xc0
[ 1071.293493][T21866]  asm_exc_page_fault+0x26/0x30
[ 1071.293500][T21866] RIP: 0033:0x7fb0e699d97f
[ 1071.293509][T21866] Code: e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 64 48 8b 04 25 28 00 00 00 <48> 89 44 24 18 8d 07 48 69 c0 83 de 1b 43 48 c1 e8 32 89 c1 69 c0
[ 1071.293515][T21866] RSP: 002b:00007ffd2585e650 EFLAGS: 00010246
[ 1071.293523][T21866] RAX: 4f209d61aa75aa00 RBX: 00007fb0e6c15fa0 RCX: 0000000000105798
[ 1071.293529][T21866] RDX: 0000000000000075 RSI: 0000000000000000 RDI: 00000000000003e8
[ 1071.293534][T21866] RBP: 00007fb0e6c17da0 R08: 0000000006fb3fef R09: 3fffffffffffffff
[ 1071.293539][T21866] R10: 4000000000000000 R11: 0000000000000246 R12: 00000000001059ff
[ 1071.293544][T21866] R13: 00007fb0e6c1618c R14: 000000000010576d R15: 00007fb0e6c16180
[ 1071.293557][T21866]  </TASK>
[ 1071.293560][T21866] memory: usage 307200kB, limit 307200kB, failcnt 3646
[ 1071.391378][T21866] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0
[ 1071.393776][T21866] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0
[ 1071.396049][T21866] Memory cgroup stats for /syz1:
[ 1071.396103][T21866] cache 0
[ 1071.398810][T21866] rss 0
[ 1071.399703][T21866] rss_huge 0
[ 1071.400778][T21866] shmem 0
[ 1071.401706][T21866] mapped_file 0
[ 1071.402793][T21866] dirty 0
[ 1071.403734][T21866] writeback 0
[ 1071.404909][T21866] workingset_refault_anon 45
[ 1071.406546][T21866] workingset_refault_file 210
[ 1071.408525][T21866] swap 176128
[ 1071.409546][T21866] swapcached 569344
[ 1071.410754][T21866] pgpgin 646370
[ 1071.411828][T21866] pgpgout 646359
[ 1071.412906][T21866] pgfault 1038433
[ 1071.414023][T21866] pgmajfault 35
[ 1071.415146][T21866] inactive_anon 32768
[ 1071.416449][T21866] active_anon 12288
[ 1071.417760][T21866] inactive_file 0
[ 1071.418883][T21866] active_file 0
[ 1071.419971][T21866] unevictable 0
[ 1071.421058][T21866] hierarchical_memory_limit 314572800
[ 1071.422701][T21866] hierarchical_memsw_limit 9223372036854771712
[ 1071.424645][T21866] total_cache 0
[ 1071.425786][T21866] total_rss 0
[ 1071.427163][T21866] total_rss_huge 0
[ 1071.428340][T21866] total_shmem 0
[ 1071.429523][T21866] total_mapped_file 0
[ 1071.430804][T21866] total_dirty 0
[ 1071.431931][T21866] total_writeback 0
[ 1071.433130][T21866] total_workingset_refault_anon 45
[ 1071.434780][T21866] total_workingset_refault_file 210
[ 1071.436495][T21866] total_swap 176128
[ 1071.437807][T21866] total_swapcached 569344
[ 1071.439134][T21866] total_pgpgin 646373
[ 1071.440353][T21866] total_pgpgout 646362
[ 1071.441605][T21866] total_pgfault 1038441
[ 1071.442864][T21866] total_pgmajfault 35
[ 1071.444094][T21866] total_inactive_anon 32768
[ 1071.445539][T21866] total_active_anon 12288
[ 1071.447247][T21866] total_inactive_file 0
[ 1071.448583][T21866] total_active_file 0
[ 1071.449850][T21866] total_unevictable 0
[ 1071.451060][T21866] anon_cost 0
[ 1071.452060][T21866] file_cost 0
[ 1071.453065][T21866] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.12431,pid=21866,uid=0
[ 1071.461133][T21866] Memory cgroup out of memory: Killed process 21866 (syz.1.12431) total-vm:102496kB, anon-rss:1244kB, file-rss:23012kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[ 1073.092602][T21839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1073.234199][T21874] pim6reg1: entered allmulticast mode
[ 1073.282798][   T33] audit: type=1800 audit(1783433177.448:14): pid=21876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12434" name="hugetlb.1GB.rsvd.usage_in_bytes" dev="tmpfs" ino=21173 res=0 errno=0
[ 1073.290854][T21877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12434'.
[ 1073.397213][T21888] macvtap13: entered promiscuous mode
[ 1073.406321][T21888] vlan0: entered promiscuous mode
[ 1073.408637][T21888] bond266: entered promiscuous mode
[ 1073.416043][T21888] vlan0: left promiscuous mode
[ 1073.424693][T21888] bond266: left promiscuous mode
[ 1073.707930][T21907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12441'.
[ 1073.711620][T21907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12441'.
[ 1073.744716][T21907] bond362: Removing last arp target with arp_interval on
[ 1073.832155][T21910] netlink: 'syz.1.12442': attribute type 32 has an invalid length.
[ 1073.835540][T21911] netlink: 'syz.1.12442': attribute type 32 has an invalid length.
[ 1073.838471][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12442'.
[ 1073.841372][T21910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12442'.
[ 1073.873676][T21911] bond363: Setting coupled_control to off (0)
[ 1073.894387][T21910] bond364: Setting coupled_control to off (0)
[ 1074.041186][T21916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12443'.
[ 1074.302853][T21936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12448'.
[ 1074.306364][T21936] netlink: 'syz.1.12448': attribute type 30 has an invalid length.
[ 1074.316031][T21936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12448'.
[ 1074.322406][T21936] netlink: 'syz.1.12448': attribute type 30 has an invalid length.
[ 1074.409682][T21939] bond324: Removing last ns target with arp_interval on
[ 1074.414975][T21939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12449'.
[ 1074.451284][T21947] netlink: 'syz.1.12451': attribute type 1 has an invalid length.
[ 1074.481717][T21947] 8021q: adding VLAN 0 to HW filter on device bond366
[ 1074.510333][T21952] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[ 1074.530727][T21954] bond367: option lacp_rate: invalid value (128)
[ 1074.533899][T21954] bond367 (unregistering): Released all slaves
[ 1074.607935][T21958] rB speed is unknown, defaulting to 1000
[ 1074.610657][T21958] xfrm0 speed is unknown, defaulting to 1000
[ 1074.700923][T21963] netlink: 'syz.0.12457': attribute type 1 has an invalid length.
[ 1074.734641][T21963] 8021q: adding VLAN 0 to HW filter on device bond325
[ 1074.743555][T21963] bond325: entered promiscuous mode
[ 1074.746185][T21963] bond325: entered allmulticast mode
[ 1075.314784][T21995] xt_TCPMSS: Only works on TCP SYN packets
[ 1075.441706][T22004] netlink: 'syz.2.12466': attribute type 3 has an invalid length.
[ 1075.570191][T22011] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1075.573182][T22011] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1075.647913][T22018] netlink: 'syz.1.12470': attribute type 10 has an invalid length.
[ 1075.690490][T22023] netlink: 'syz.1.12472': attribute type 1 has an invalid length.
[ 1075.707547][T22023] 8021q: adding VLAN 0 to HW filter on device bond367
[ 1075.733335][T22028] nbd: must specify an index to disconnect
[ 1075.735588][T22027] nbd: must specify an index to disconnect
[ 1075.795644][T22020] bond288 (unregistering): Released all slaves
[ 1075.849825][T22034] vlan21: entered promiscuous mode
[ 1075.964894][T22042] netlink: 'syz.1.12478': attribute type 1 has an invalid length.
[ 1075.986133][T22042] 8021q: adding VLAN 0 to HW filter on device bond368
[ 1078.143953][T22056] netlink: 'syz.0.12482': attribute type 1 has an invalid length.
[ 1078.146683][T22056] __nla_validate_parse: 12 callbacks suppressed
[ 1078.146692][T22056] netlink: 220 bytes leftover after parsing attributes in process `syz.0.12482'.
[ 1078.620767][ T5054] udevd[5054]: worker [13625] /devices/virtual/block/nbd0 is taking a long time
[ 1081.557462][ T6500] veth0_to_bond: left promiscuous mode
[ 1091.344859][T22073] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1091.364072][T22073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1091.364707][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1091.378744][T22073] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1091.384180][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1091.389416][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1091.390158][T22073] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1091.395978][T22073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1091.399609][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1091.400944][T22073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1091.609426][T22069] rB speed is unknown, defaulting to 1000
[ 1091.612398][T22069] xfrm0 speed is unknown, defaulting to 1000
[ 1091.650895][T22070] rB speed is unknown, defaulting to 1000
[ 1091.744884][T22070] xfrm0 speed is unknown, defaulting to 1000
[ 1092.148926][T22069] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1092.151892][T22069] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1092.154821][T22069] bridge_slave_0: entered allmulticast mode
[ 1092.158786][T22069] bridge_slave_0: entered promiscuous mode
[ 1092.181320][T22069] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1092.183626][T22069] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1092.186192][T22069] bridge_slave_1: entered allmulticast mode
[ 1092.189313][T22069] bridge_slave_1: entered promiscuous mode
[ 1092.231630][T22069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1092.240396][T22069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1092.278032][T22070] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1092.280606][T22070] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1092.282827][T22070] bridge_slave_0: entered allmulticast mode
[ 1092.285515][T22070] bridge_slave_0: entered promiscuous mode
[ 1092.289703][T22069] team0: Port device team_slave_0 added
[ 1092.291757][T22070] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1092.294068][T22070] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1092.296376][T22070] bridge_slave_1: entered allmulticast mode
[ 1092.299279][T22070] bridge_slave_1: entered promiscuous mode
[ 1092.303438][T22069] team0: Port device team_slave_1 added
[ 1092.335149][T22070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1092.339165][T22069] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1092.341798][T22069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1092.352073][T22069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1092.359758][T22070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1092.363067][T22069] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1092.365701][T22069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1092.375745][T22069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1092.403626][T22070] team0: Port device team_slave_0 added
[ 1092.408047][T22070] team0: Port device team_slave_1 added
[ 1092.450989][T22070] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1092.453926][T22070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1092.464265][T22070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1092.474437][T22069] hsr_slave_0: entered promiscuous mode
[ 1092.477865][T22069] hsr_slave_1: entered promiscuous mode
[ 1092.481601][T22070] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1092.484493][T22070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1092.495199][T22070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1092.571330][T22070] hsr_slave_0: entered promiscuous mode
[ 1092.574426][T22070] hsr_slave_1: entered promiscuous mode
[ 1092.577328][T22070] debugfs: 'hsr0' already exists in 'hsr'
[ 1092.579716][T22070] Cannot create hsr debugfs directory
[ 1092.908410][   T98] block nbd0: Possible stuck request ffff888037e70800: control (read@0,4096B). Runtime 90 seconds
[ 1093.420486][T11310] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1093.424637][T11310] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1093.431269][T11310] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1093.434981][T11310] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1093.440251][T11310] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1093.477140][T22073] Bluetooth: hci3: command tx timeout
[ 1093.477193][T11310] Bluetooth: hci4: command tx timeout
[ 1093.640327][T22107] rB speed is unknown, defaulting to 1000
[ 1093.643214][T22107] xfrm0 speed is unknown, defaulting to 1000
[ 1093.982264][T22107] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1093.985338][T22107] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1093.988453][T22107] bridge_slave_0: entered allmulticast mode
[ 1093.992351][T22107] bridge_slave_0: entered promiscuous mode
[ 1093.998408][T22107] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1094.001381][T22107] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1094.004566][T22107] bridge_slave_1: entered allmulticast mode
[ 1094.009091][T22107] bridge_slave_1: entered promiscuous mode
[ 1094.037813][T22107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1094.043913][T22107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1094.071037][T22107] team0: Port device team_slave_0 added
[ 1094.075559][T22107] team0: Port device team_slave_1 added
[ 1094.092987][T22107] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1094.095312][T22107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1094.103728][T22107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1094.110274][T22107] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1094.112418][T22107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1094.121394][T22107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1094.152873][T22107] hsr_slave_0: entered promiscuous mode
[ 1094.155193][T22107] hsr_slave_1: entered promiscuous mode
[ 1094.157589][T22107] debugfs: 'hsr0' already exists in 'hsr'
[ 1094.159450][T22107] Cannot create hsr debugfs directory
[ 1095.467285][T11310] Bluetooth: hci5: command tx timeout
[ 1095.547165][T11310] Bluetooth: hci3: command tx timeout
[ 1095.549128][T22073] Bluetooth: hci4: command tx timeout
[ 1097.557320][T22073] Bluetooth: hci5: command tx timeout
[ 1097.627043][T22073] Bluetooth: hci3: command tx timeout
[ 1097.637325][T22073] Bluetooth: hci4: command tx timeout
[ 1099.637351][T22073] Bluetooth: hci5: command tx timeout
[ 1099.707586][T22073] Bluetooth: hci4: command tx timeout
[ 1099.708660][T11310] Bluetooth: hci3: command tx timeout
[ 1101.707246][T11310] Bluetooth: hci5: command tx timeout
[ 1122.988894][   T98] block nbd0: Possible stuck request ffff888037e70800: control (read@0,4096B). Runtime 120 seconds
[ 1151.433884][T22073] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1151.438803][T22073] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1151.442251][T22073] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1151.460426][ T5605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1151.460602][T22073] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1151.467926][ T5605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1151.479593][T22073] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1151.486369][T22073] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1151.491180][T22073] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1151.504779][T22073] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1151.652866][T22131] rB speed is unknown, defaulting to 1000
[ 1151.655678][T22131] xfrm0 speed is unknown, defaulting to 1000
[ 1151.722770][T22129] rB speed is unknown, defaulting to 1000
[ 1151.745778][T22129] xfrm0 speed is unknown, defaulting to 1000
[ 1151.981449][T22131] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1151.983801][T22131] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1151.986067][T22131] bridge_slave_0: entered allmulticast mode
[ 1151.989979][T22131] bridge_slave_0: entered promiscuous mode
[ 1151.998057][T22131] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1152.000285][T22131] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1152.002576][T22131] bridge_slave_1: entered allmulticast mode
[ 1152.005051][T22131] bridge_slave_1: entered promiscuous mode
[ 1152.033905][T22131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1152.044537][T22131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1152.075562][T22131] team0: Port device team_slave_0 added
[ 1152.079776][T22131] team0: Port device team_slave_1 added
[ 1152.107764][T22131] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1152.110503][T22131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1152.119127][T22131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1152.126170][T22131] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1152.128902][T22131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1152.137019][T22131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1152.193219][T22131] hsr_slave_0: entered promiscuous mode
[ 1152.196245][T22131] hsr_slave_1: entered promiscuous mode
[ 1152.199975][T22131] debugfs: 'hsr0' already exists in 'hsr'
[ 1152.202330][T22131] Cannot create hsr debugfs directory
[ 1152.324859][T22129] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1152.327976][T22129] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1152.331193][T22129] bridge_slave_0: entered allmulticast mode
[ 1152.334120][T22129] bridge_slave_0: entered promiscuous mode
[ 1152.342170][T22129] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1152.344984][T22129] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1152.350997][T22129] bridge_slave_1: entered allmulticast mode
[ 1152.354443][T22129] bridge_slave_1: entered promiscuous mode
[ 1152.393276][T22129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1152.398400][T22129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1152.414806][T22129] team0: Port device team_slave_0 added
[ 1152.422092][T22129] team0: Port device team_slave_1 added
[ 1152.441398][T22129] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1152.443852][T22129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1152.451692][T22129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1152.463812][T22129] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1152.466022][T22129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1152.474234][T22129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1152.500525][T22129] hsr_slave_0: entered promiscuous mode
[ 1152.503688][T22129] hsr_slave_1: entered promiscuous mode
[ 1152.506131][T22129] debugfs: 'hsr0' already exists in 'hsr'
[ 1152.508490][T22129] Cannot create hsr debugfs directory
[ 1153.068926][   T98] block nbd0: Possible stuck request ffff888037e70800: control (read@0,4096B). Runtime 150 seconds
[ 1153.547225][ T4995] Bluetooth: hci7: command tx timeout
[ 1153.547273][ T5605] Bluetooth: hci6: command tx timeout
[ 1154.414187][ T4995] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1154.421328][ T4995] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1154.425165][ T4995] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1154.440731][ T4995] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1154.445725][ T4995] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1154.614366][T22164] rB speed is unknown, defaulting to 1000
[ 1154.622271][T22164] xfrm0 speed is unknown, defaulting to 1000
[ 1154.979039][T22164] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1154.981349][T22164] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1154.983556][T22164] bridge_slave_0: entered allmulticast mode
[ 1154.986074][T22164] bridge_slave_0: entered promiscuous mode
[ 1154.991583][T22164] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1154.993871][T22164] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1154.996030][T22164] bridge_slave_1: entered allmulticast mode
[ 1154.998889][T22164] bridge_slave_1: entered promiscuous mode
[ 1155.015275][T22164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1155.019909][T22164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1155.036006][T22164] team0: Port device team_slave_0 added
[ 1155.039204][T22164] team0: Port device team_slave_1 added
[ 1155.054235][T22164] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1155.056572][T22164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1155.066274][T22164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1155.071373][T22164] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1155.073752][T22164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1155.083384][T22164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1155.124483][T22164] hsr_slave_0: entered promiscuous mode
[ 1155.128118][T22164] hsr_slave_1: entered promiscuous mode
[ 1155.131159][T22164] debugfs: 'hsr0' already exists in 'hsr'
[ 1155.133379][T22164] Cannot create hsr debugfs directory
[ 1155.627255][ T4995] Bluetooth: hci6: command tx timeout
[ 1155.637255][ T4995] Bluetooth: hci7: command tx timeout
[ 1156.507552][ T4995] Bluetooth: hci8: command tx timeout
[ 1157.707202][ T4995] Bluetooth: hci7: command tx timeout
[ 1157.707343][ T5605] Bluetooth: hci6: command tx timeout
[ 1158.587068][ T4995] Bluetooth: hci8: command tx timeout
[ 1159.787079][ T4995] Bluetooth: hci7: command tx timeout
[ 1159.787631][ T5605] Bluetooth: hci6: command tx timeout
[ 1160.677030][ T5605] Bluetooth: hci8: command tx timeout
[ 1162.747315][ T5605] Bluetooth: hci8: command tx timeout
[ 1183.158624][   T98] block nbd0: Possible stuck request ffff888037e70800: control (read@0,4096B). Runtime 180 seconds
[ 1185.607152][ T5054] udevd[5054]: worker [13625] /devices/virtual/block/nbd0 timeout; kill it
[ 1185.610597][ T5054] udevd[5054]: seq 99078 '/devices/virtual/block/nbd0' killed
[ 1211.416658][ T4995] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1211.427810][ T4995] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1211.431187][ T4995] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1211.435435][ T4995] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1211.438293][ T4995] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1211.577703][T22186] rB speed is unknown, defaulting to 1000
[ 1211.580514][T22186] xfrm0 speed is unknown, defaulting to 1000
[ 1211.895634][T22186] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1211.899040][T22186] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1211.901856][T22186] bridge_slave_0: entered allmulticast mode
[ 1211.905240][T22186] bridge_slave_0: entered promiscuous mode
[ 1211.909839][T22186] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1211.912206][T22186] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1211.914747][T22186] bridge_slave_1: entered allmulticast mode
[ 1211.917914][T22186] bridge_slave_1: entered promiscuous mode
[ 1211.935218][T22186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1211.940465][T22186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1211.962147][T22186] team0: Port device team_slave_0 added
[ 1211.967419][T22186] team0: Port device team_slave_1 added
[ 1211.983091][T22186] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1211.985112][T22186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1211.993768][T22186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1211.998153][T22186] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1212.000532][T22186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1212.009138][T22186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1212.033988][T22186] hsr_slave_0: entered promiscuous mode
[ 1212.036651][T22186] hsr_slave_1: entered promiscuous mode
[ 1212.039009][T22186] debugfs: 'hsr0' already exists in 'hsr'
[ 1212.040824][T22186] Cannot create hsr debugfs directory
[ 1212.465121][ T5605] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1212.472299][ T5605] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1212.476705][ T5605] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1212.490693][ T5605] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1212.495423][ T5605] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1212.700027][T22204] rB speed is unknown, defaulting to 1000
[ 1212.702781][T22204] xfrm0 speed is unknown, defaulting to 1000
[ 1213.020052][T22204] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1213.022565][T22204] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1213.025283][T22204] bridge_slave_0: entered allmulticast mode
[ 1213.028726][T22204] bridge_slave_0: entered promiscuous mode
[ 1213.032163][T22204] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1213.034835][T22204] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1213.037340][T22204] bridge_slave_1: entered allmulticast mode
[ 1213.040154][T22204] bridge_slave_1: entered promiscuous mode
[ 1213.060410][T22204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1213.064975][T22204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1213.083868][T22204] team0: Port device team_slave_0 added
[ 1213.087387][T22204] team0: Port device team_slave_1 added
[ 1213.103574][T22204] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1213.106000][T22204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1213.114160][T22204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1213.118724][T22204] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1213.120975][T22204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1213.129395][T22204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1213.154878][T22204] hsr_slave_0: entered promiscuous mode
[ 1213.157659][T22204] hsr_slave_1: entered promiscuous mode
[ 1213.159874][T22204] debugfs: 'hsr0' already exists in 'hsr'
[ 1213.161632][T22204] Cannot create hsr debugfs directory
[ 1213.247198][   T98] block nbd0: Possible stuck request ffff888037e70800: control (read@0,4096B). Runtime 210 seconds
[ 1213.467737][ T4995] Bluetooth: hci9: command tx timeout
[ 1214.418011][T11310] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1214.429523][T11310] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1214.432625][T11310] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1214.435579][T11310] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1214.441282][T11310] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1214.587188][ T4995] Bluetooth: hci10: command tx timeout
[ 1214.593458][T22224] rB speed is unknown, defaulting to 1000
[ 1214.603457][T22224] xfrm0 speed is unknown, defaulting to 1000
[ 1214.907415][T22224] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1214.909644][T22224] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1214.911855][T22224] bridge_slave_0: entered allmulticast mode
[ 1214.914655][T22224] bridge_slave_0: entered promiscuous mode
[ 1214.918217][T22224] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1214.920566][T22224] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1214.922907][T22224] bridge_slave_1: entered allmulticast mode
[ 1214.925970][T22224] bridge_slave_1: entered promiscuous mode
[ 1214.945493][T22224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1214.950398][T22224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1214.966496][T22224] team0: Port device team_slave_0 added
[ 1214.969941][T22224] team0: Port device team_slave_1 added
[ 1214.983461][T22224] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1214.985608][T22224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1214.994100][T22224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1214.998698][T22224] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1215.000903][T22224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1215.008932][T22224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1215.031683][T22224] hsr_slave_0: entered promiscuous mode
[ 1215.034003][T22224] hsr_slave_1: entered promiscuous mode
[ 1215.036024][T22224] debugfs: 'hsr0' already exists in 'hsr'
[ 1215.038009][T22224] Cannot create hsr debugfs directory
[ 1215.312358][ T4995] Bluetooth: hci3: command 0x0406 tx timeout
[ 1215.312904][T11310] Bluetooth: hci4: command 0x0406 tx timeout
[ 1215.547110][T22073] Bluetooth: hci9: command tx timeout
[ 1216.507416][T22073] Bluetooth: hci11: command tx timeout
[ 1216.667410][T22073] Bluetooth: hci10: command tx timeout
[ 1217.627336][T22073] Bluetooth: hci9: command tx timeout
[ 1218.587006][ T5605] Bluetooth: hci11: command tx timeout
[ 1218.747143][ T5605] Bluetooth: hci10: command tx timeout
[ 1219.707394][ T5605] Bluetooth: hci9: command tx timeout
[ 1220.427304][ T5605] Bluetooth: hci5: command 0x0406 tx timeout
[ 1220.677121][T22073] Bluetooth: hci11: command tx timeout
[ 1220.827355][T22073] Bluetooth: hci10: command tx timeout
[ 1222.747296][T22073] Bluetooth: hci11: command tx timeout
[ 1236.917801][   T34] INFO: task syz.2.12479:22045 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1236.923587][   T34]       Not tainted syzkaller #0
[ 1236.925537][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1236.928783][   T34] task:syz.2.12479     state:D stack:26272 pid:22045 tgid:22044 ppid:5607   task_flags:0x480140 flags:0x00080002
[ 1236.932809][   T34] Call Trace:
[ 1236.933852][   T34]  <TASK>
[ 1236.934793][   T34]  __schedule+0x17d9/0x56c0
[ 1236.936217][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1236.938144][   T34]  ? __pfx___schedule+0x10/0x10
[ 1236.939729][   T34]  ? schedule+0x90/0x2b0
[ 1236.941042][   T34]  schedule+0x164/0x2b0
[ 1236.942337][   T34]  blk_mq_freeze_queue_wait+0x101/0x180
[ 1236.944048][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[ 1236.945898][   T34]  ? queue_limits_commit_update_frozen+0x55/0xd0
[ 1236.948391][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1236.950707][   T34]  queue_limits_commit_update_frozen+0x55/0xd0
[ 1236.952669][   T34]  nbd_set_size+0x454/0x680
[ 1236.954108][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[ 1236.955657][   T34]  ? nla_memcpy+0x5b/0xc0
[ 1236.957579][   T34]  nbd_genl_reconfigure+0x7e9/0x1e80
[ 1236.959468][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[ 1236.961330][   T34]  ? rcu_is_watching+0x15/0xb0
[ 1236.962794][   T34]  ? trace_kmalloc+0x2a/0xf0
[ 1236.964230][   T34]  ? __kmalloc_noprof+0x396/0x720
[ 1236.965768][   T34]  ? __nla_parse+0x40/0x60
[ 1236.967949][   T34]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1236.969944][   T34]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1236.972012][   T34]  genl_family_rcv_msg_doit+0x233/0x340
[ 1236.973726][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1236.975778][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1236.978116][   T34]  genl_rcv_msg+0x614/0x7a0
[ 1236.979996][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1236.981944][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[ 1236.983711][   T34]  netlink_rcv_skb+0x226/0x4a0
[ 1236.985205][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1236.987431][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1236.989468][   T34]  ? down_read+0x2be/0x330
[ 1236.991124][   T34]  genl_rcv+0x28/0x40
[ 1236.992331][   T34]  netlink_unicast+0x7bb/0x940
[ 1236.993799][   T34]  netlink_sendmsg+0x813/0xb40
[ 1236.995300][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1236.997316][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1236.999239][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1237.000941][   T34]  sock_sendmsg_nosec+0x13a/0x180
[ 1237.002503][   T34]  ____sys_sendmsg+0x54e/0x850
[ 1237.004010][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1237.005648][   T34]  ? import_iovec+0x73/0xa0
[ 1237.007511][   T34]  ___sys_sendmsg+0x2a5/0x360
[ 1237.009077][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.010610][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1237.012193][   T34]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1237.013754][   T34]  ? irqentry_exit+0x218/0x8f0
[ 1237.015204][   T34]  ? __fget_files+0x2a/0x420
[ 1237.016633][   T34]  ? __fget_files+0x3a2/0x420
[ 1237.018752][   T34]  __x64_sys_sendmsg+0x1b1/0x290
[ 1237.020503][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1237.022255][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.024074][   T34]  do_syscall_64+0x174/0x580
[ 1237.025456][   T34]  ? trace_irq_disable+0x3b/0x140
[ 1237.027462][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.029388][   T34] RIP: 0033:0x7fd11e39ce59
[ 1237.030787][   T34] RSP: 002b:00007fd11f339028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1237.033334][   T34] RAX: ffffffffffffffda RBX: 00007fd11e615fa0 RCX: 00007fd11e39ce59
[ 1237.035734][   T34] RDX: 00000000240000c0 RSI: 0000200000000380 RDI: 0000000000000006
[ 1237.038974][   T34] RBP: 00007fd11e432e6f R08: 0000000000000000 R09: 0000000000000000
[ 1237.041892][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1237.044334][   T34] R13: 00007fd11e616038 R14: 00007fd11e615fa0 R15: 00007ffeee622a48
[ 1237.047726][   T34]  </TASK>
[ 1237.049051][   T34] INFO: task syz.1.12480:22047 blocked for more than 143 seconds.
[ 1237.052011][   T34]       Not tainted syzkaller #0
[ 1237.053875][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1237.058059][   T34] task:syz.1.12480     state:D stack:27280 pid:22047 tgid:22046 ppid:5600   task_flags:0x400140 flags:0x00080002
[ 1237.062393][   T34] Call Trace:
[ 1237.063614][   T34]  <TASK>
[ 1237.064699][   T34]  __schedule+0x17d9/0x56c0
[ 1237.066384][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.069057][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.071069][   T34]  ? unwind_next_frame+0x8f/0x2550
[ 1237.072776][   T34]  ? __pfx___schedule+0x10/0x10
[ 1237.074348][   T34]  ? schedule+0x90/0x2b0
[ 1237.075854][   T34]  schedule+0x164/0x2b0
[ 1237.078228][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1237.080279][   T34]  __mutex_lock+0x7bf/0x1550
[ 1237.081782][   T34]  ? __mutex_lock+0x5d4/0x1550
[ 1237.083259][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[ 1237.084938][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1237.086490][   T34]  ? stack_trace_save+0xa9/0x100
[ 1237.089130][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.091046][   T34]  ? radix_tree_lookup+0x240/0x290
[ 1237.092701][   T34]  genl_rcv_msg+0x10b/0x7a0
[ 1237.094309][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1237.095988][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.097981][   T34]  netlink_rcv_skb+0x226/0x4a0
[ 1237.099445][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1237.100955][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1237.102658][   T34]  ? down_read+0x2be/0x330
[ 1237.104065][   T34]  genl_rcv+0x28/0x40
[ 1237.105294][   T34]  netlink_unicast+0x7bb/0x940
[ 1237.106756][   T34]  netlink_sendmsg+0x813/0xb40
[ 1237.113215][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1237.119460][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1237.125722][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1237.129481][   T34]  sock_sendmsg_nosec+0x13a/0x180
[ 1237.131099][   T34]  __sys_sendto+0x408/0x5a0
[ 1237.132594][   T34]  ? __pfx___sys_sendto+0x10/0x10
[ 1237.134127][   T34]  ? do_user_addr_fault+0xc4a/0x1340
[ 1237.135749][   T34]  __x64_sys_sendto+0xde/0x100
[ 1237.137467][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.139462][   T34]  do_syscall_64+0x174/0x580
[ 1237.140907][   T34]  ? trace_irq_disable+0x3b/0x140
[ 1237.142503][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.144519][   T34] RIP: 0033:0x7fb0e695d68e
[ 1237.145887][   T34] RSP: 002b:00007fb0e7901e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1237.148780][   T34] RAX: ffffffffffffffda RBX: 00007fb0e79036c0 RCX: 00007fb0e695d68e
[ 1237.151313][   T34] RDX: 000000000000001c RSI: 00007fb0e7902000 RDI: 0000000000000005
[ 1237.153759][   T34] RBP: 0000000000000000 R08: 00007fb0e7901f04 R09: 000000000000000c
[ 1237.156215][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 1237.159038][   T34] R13: 00007fb0e7901f58 R14: 00007fb0e7902000 R15: 0000000000000000
[ 1237.161476][   T34]  </TASK>
[ 1237.162415][   T34] INFO: task syz.0.12482:22056 blocked for more than 143 seconds.
[ 1237.164817][   T34]       Not tainted syzkaller #0
[ 1237.166322][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1237.169780][   T34] task:syz.0.12482     state:D stack:26312 pid:22056 tgid:22055 ppid:5603   task_flags:0x400140 flags:0x00080002
[ 1237.173417][   T34] Call Trace:
[ 1237.174438][   T34]  <TASK>
[ 1237.175353][   T34]  __schedule+0x17d9/0x56c0
[ 1237.176756][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.178685][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.180324][   T34]  ? __pfx___schedule+0x10/0x10
[ 1237.181816][   T34]  ? schedule+0x90/0x2b0
[ 1237.183167][   T34]  schedule+0x164/0x2b0
[ 1237.184444][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1237.186110][   T34]  __mutex_lock+0x7bf/0x1550
[ 1237.188089][   T34]  ? __mutex_lock+0x5d4/0x1550
[ 1237.190021][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[ 1237.191946][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1237.193702][   T34]  ? __dev_queue_xmit+0x29b/0x37f0
[ 1237.195306][   T34]  ? radix_tree_lookup+0x240/0x290
[ 1237.197093][   T34]  genl_rcv_msg+0x10b/0x7a0
[ 1237.198502][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1237.200075][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1237.201728][   T34]  netlink_rcv_skb+0x226/0x4a0
[ 1237.203315][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1237.204932][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1237.206525][   T34]  ? down_read+0x2be/0x330
[ 1237.208186][   T34]  genl_rcv+0x28/0x40
[ 1237.209595][   T34]  netlink_unicast+0x7bb/0x940
[ 1237.211200][   T34]  netlink_sendmsg+0x813/0xb40
[ 1237.212676][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1237.214295][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1237.215822][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1237.217613][   T34]  sock_sendmsg_nosec+0x13a/0x180
[ 1237.219310][   T34]  ____sys_sendmsg+0x54e/0x850
[ 1237.220808][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1237.222427][   T34]  ? import_iovec+0x73/0xa0
[ 1237.223825][   T34]  ___sys_sendmsg+0x2a5/0x360
[ 1237.225296][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.227415][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1237.229254][   T34]  ? futex_wait+0x2a2/0x390
[ 1237.230669][   T34]  ? __fget_files+0x2a/0x420
[ 1237.232085][   T34]  ? __fget_files+0x3a2/0x420
[ 1237.233526][   T34]  __x64_sys_sendmsg+0x1b1/0x290
[ 1237.235021][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1237.236694][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.238830][   T34]  do_syscall_64+0x174/0x580
[ 1237.240325][   T34]  ? trace_irq_disable+0x3b/0x140
[ 1237.241862][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.243671][   T34] RIP: 0033:0x7f2f5c99ce59
[ 1237.245053][   T34] RSP: 002b:00007f2f5d91f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1237.247906][   T34] RAX: ffffffffffffffda RBX: 00007f2f5cc15fa0 RCX: 00007f2f5c99ce59
[ 1237.250476][   T34] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[ 1237.252888][   T34] RBP: 00007f2f5ca32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1237.255299][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1237.258024][   T34] R13: 00007f2f5cc16038 R14: 00007f2f5cc15fa0 R15: 00007ffea73950d8
[ 1237.260591][   T34]  </TASK>
[ 1237.261566][   T34] INFO: task syz-executor:22069 blocked for more than 143 seconds.
[ 1237.263955][   T34]       Not tainted syzkaller #0
[ 1237.265462][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1237.268343][   T34] task:syz-executor    state:D stack:22568 pid:22069 tgid:22069 ppid:1      task_flags:0x400140 flags:0x00080002
[ 1237.272225][   T34] Call Trace:
[ 1237.273255][   T34]  <TASK>
[ 1237.274183][   T34]  __schedule+0x17d9/0x56c0
[ 1237.275581][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.277367][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.279070][   T34]  ? unwind_next_frame+0x8f/0x2550
[ 1237.280691][   T34]  ? __pfx___schedule+0x10/0x10
[ 1237.282197][   T34]  ? schedule+0x90/0x2b0
[ 1237.283520][   T34]  schedule+0x164/0x2b0
[ 1237.284803][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1237.286450][   T34]  __mutex_lock+0x7bf/0x1550
[ 1237.288184][   T34]  ? __mutex_lock+0x5d4/0x1550
[ 1237.289858][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[ 1237.291335][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1237.292858][   T34]  ? stack_trace_save+0xa9/0x100
[ 1237.294394][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.295864][   T34]  ? radix_tree_lookup+0x240/0x290
[ 1237.297821][   T34]  genl_rcv_msg+0x10b/0x7a0
[ 1237.299458][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1237.301104][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.302637][   T34]  netlink_rcv_skb+0x226/0x4a0
[ 1237.304115][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1237.305655][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1237.307590][   T34]  ? down_read+0x2be/0x330
[ 1237.309273][   T34]  genl_rcv+0x28/0x40
[ 1237.310614][   T34]  netlink_unicast+0x7bb/0x940
[ 1237.312121][   T34]  netlink_sendmsg+0x813/0xb40
[ 1237.313772][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1237.315728][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1237.318156][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1237.319892][   T34]  sock_sendmsg_nosec+0x13a/0x180
[ 1237.321466][   T34]  __sys_sendto+0x408/0x5a0
[ 1237.322892][   T34]  ? __pfx___sys_sendto+0x10/0x10
[ 1237.324530][   T34]  ? errseq_sample+0x40/0x70
[ 1237.325942][   T34]  ? fd_install+0x94/0x3d0
[ 1237.327774][   T34]  ? fd_install+0x306/0x3d0
[ 1237.329588][   T34]  __x64_sys_sendto+0xde/0x100
[ 1237.331179][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.333024][   T34]  do_syscall_64+0x174/0x580
[ 1237.334443][   T34]  ? trace_irq_disable+0x3b/0x140
[ 1237.335990][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.338362][   T34] RIP: 0033:0x7f84ad55d68e
[ 1237.339933][   T34] RSP: 002b:00007ffe13ed9b48 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1237.342466][   T34] RAX: ffffffffffffffda RBX: 000055555f97a500 RCX: 00007f84ad55d68e
[ 1237.345287][   T34] RDX: 0000000000000020 RSI: 00007f84ae344670 RDI: 0000000000000005
[ 1237.347952][   T34] RBP: 0000000000000001 R08: 00007ffe13ed9bc4 R09: 000000000000000c
[ 1237.350409][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 1237.352818][   T34] R13: 00007ffe13ed9c18 R14: 00007f84ae344670 R15: 0000000000000000
[ 1237.355242][   T34]  </TASK>
[ 1237.356229][   T34] INFO: task syz-executor:22070 blocked for more than 143 seconds.
[ 1237.359222][   T34]       Not tainted syzkaller #0
[ 1237.361083][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1237.364322][   T34] task:syz-executor    state:D stack:22352 pid:22070 tgid:22070 ppid:1      task_flags:0x400140 flags:0x00080002
[ 1237.368711][   T34] Call Trace:
[ 1237.370083][   T34]  <TASK>
[ 1237.371281][   T34]  __schedule+0x17d9/0x56c0
[ 1237.372935][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.374641][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.376161][   T34]  ? unwind_next_frame+0x8f/0x2550
[ 1237.377996][   T34]  ? __pfx___schedule+0x10/0x10
[ 1237.379524][   T34]  ? schedule+0x90/0x2b0
[ 1237.380838][   T34]  schedule+0x164/0x2b0
[ 1237.382349][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1237.384266][   T34]  __mutex_lock+0x7bf/0x1550
[ 1237.385794][   T34]  ? __mutex_lock+0x5d4/0x1550
[ 1237.387660][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[ 1237.389386][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1237.390870][   T34]  ? stack_trace_save+0xa9/0x100
[ 1237.392366][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.393860][   T34]  ? radix_tree_lookup+0x240/0x290
[ 1237.395360][   T34]  genl_rcv_msg+0x10b/0x7a0
[ 1237.396748][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1237.398722][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1237.400261][   T34]  netlink_rcv_skb+0x226/0x4a0
[ 1237.401655][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1237.403194][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1237.405026][   T34]  ? down_read+0x2be/0x330
[ 1237.406451][   T34]  genl_rcv+0x28/0x40
[ 1237.407989][   T34]  netlink_unicast+0x7bb/0x940
[ 1237.409589][   T34]  netlink_sendmsg+0x813/0xb40
[ 1237.411069][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1237.412701][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1237.414231][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1237.415832][   T34]  sock_sendmsg_nosec+0x13a/0x180
[ 1237.417865][   T34]  __sys_sendto+0x408/0x5a0
[ 1237.419353][   T34]  ? __pfx___sys_sendto+0x10/0x10
[ 1237.420924][   T34]  ? errseq_sample+0x40/0x70
[ 1237.422361][   T34]  ? fd_install+0x94/0x3d0
[ 1237.423720][   T34]  ? fd_install+0x306/0x3d0
[ 1237.425112][   T34]  __x64_sys_sendto+0xde/0x100
[ 1237.426579][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.428847][   T34]  do_syscall_64+0x174/0x580
[ 1237.430346][   T34]  ? trace_irq_disable+0x3b/0x140
[ 1237.431882][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.433723][   T34] RIP: 0033:0x7f4b0235d68e
[ 1237.435168][   T34] RSP: 002b:00007fffcee7b478 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1237.437956][   T34] RAX: ffffffffffffffda RBX: 0000555582bae500 RCX: 00007f4b0235d68e
[ 1237.440624][   T34] RDX: 0000000000000020 RSI: 00007f4b03144670 RDI: 0000000000000005
[ 1237.443184][   T34] RBP: 0000000000000001 R08: 00007fffcee7b4f4 R09: 000000000000000c
[ 1237.445603][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 1237.448325][   T34] R13: 00007fffcee7b548 R14: 00007f4b03144670 R15: 0000000000000000
[ 1237.450850][   T34]  </TASK>
[ 1237.451855][   T34] 
[ 1237.451855][   T34] Showing all locks held in the system:
[ 1237.454336][   T34] 1 lock held by khungtaskd/34:
[ 1237.456217][   T34]  #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1237.465110][   T34] 2 locks held by getty/5433:
[ 1237.470264][   T34]  #0: ffff88810c9b80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1237.475782][   T34]  #1: ffffc900034762e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[ 1237.480084][   T34] 1 lock held by udevd/13625:
[ 1237.481972][   T34]  #0: ffff88801d4e9350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[ 1237.485518][   T34] 6 locks held by syz.2.12479/22045:
[ 1237.487528][   T34]  #0: ffffffff8fe5d6e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1237.490506][   T34]  #1: ffffffff8fe5d520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1237.493680][   T34]  #2: ffff88803797ea60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80
[ 1237.497111][   T34]  #3: ffff88801d506d08 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[ 1237.500297][   T34]  #4: ffff88801d5066d0 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[ 1237.503851][   T34]  #5: ffff88801d506708 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[ 1237.507788][   T34] 2 locks held by syz.1.12480/22047:
[ 1237.509502][   T34]  #0: ffffffff8fe5d6e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1237.511992][   T34]  #1: ffffffff8fe5d520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1237.514693][   T34] 2 locks held by syz.0.12482/22056:
[ 1237.516321][   T34]  #0: ffffffff8fe5d6e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1237.519257][   T34]  #1: ffffffff8fe5d520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1237.522027][   T34] 2 locks held by syz-executor/22069:
[ 1237.523659][   T34]  #0: ffffffff8fe5d6e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1237.526144][   T34]  #1: ffffffff8fe5d520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1237.529299][   T34] 2 locks held by syz-executor/22070:
[ 1237.531081][   T34]  #0: ffffffff8fe5d6e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1237.533779][   T34]  #1: ffffffff8fe5d520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1237.536503][   T34] 2 locks held by syz-executor/22107:
[ 1237.538312][   T34]  #0: ffffffff8fe5d6e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1237.541184][   T34]  #1: ffffffff8fe5d520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1237.543984][   T34] 2 locks held by syz-executor/22129:
[ 1237.545629][   T34]  #0: ffffffff8fe5d6e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1237.548495][   T34]  #1: ffffffff8fe5d520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1237.551429][   T34] 2 locks held by syz-executor/22131:
[ 1237.553085][   T34]  #0: ffffffff8fe5d6e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1237.555549][   T34]  #1: ffffffff8fe5d520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1237.558179][   T34] 2 locks held by syz-executor/22164:
[ 1237.559924][   T34]  #0: ffffffff8fe5d6e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1237.562407][   T34]  #1: ffffffff8fe5d520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1237.565109][   T34] 2 locks held by syz-executor/22186:
[ 1237.566746][   T34]  #0: ffffffff8fe5d6e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1237.569663][   T34]  #1: ffffffff8fe5d520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1237.572468][   T34] 2 locks held by syz-executor/22204:
[ 1237.574138][   T34]  #0: ffffffff8fe5d6e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1237.576620][   T34]  #1: ffffffff8fe5d520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1237.579596][   T34] 2 locks held by syz-executor/22224:
[ 1237.581252][   T34]  #0: ffffffff8fe5d6e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1237.583719][   T34]  #1: ffffffff8fe5d520 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1237.586453][   T34] 
[ 1237.587519][   T34] =============================================
[ 1237.587519][   T34] 
[ 1237.590224][   T34] NMI backtrace for cpu 0
[ 1237.590232][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1237.590241][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1237.590245][   T34] Call Trace:
[ 1237.590249][   T34]  <TASK>
[ 1237.590253][   T34]  dump_stack_lvl+0xe8/0x150
[ 1237.590266][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[ 1237.590278][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1237.590288][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[ 1237.590300][   T34]  sys_info+0x135/0x170
[ 1237.590310][   T34]  watchdog+0xfd7/0x1030
[ 1237.590324][   T34]  ? watchdog+0x1c7/0x1030
[ 1237.590337][   T34]  kthread+0x388/0x470
[ 1237.590346][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1237.590355][   T34]  ? __pfx_kthread+0x10/0x10
[ 1237.590363][   T34]  ret_from_fork+0x514/0xb70
[ 1237.590373][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1237.590381][   T34]  ? __switch_to+0xc89/0x1420
[ 1237.590392][   T34]  ? __pfx_kthread+0x10/0x10
[ 1237.590400][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1237.590415][   T34]  </TASK>
[ 1237.590418][   T34] Sending NMI from CPU 0 to CPUs 1:
[ 1237.625252][    C1] NMI backtrace for cpu 1
[ 1237.625269][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1237.625282][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1237.625290][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1237.625309][    C1] Code: 7c 75 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 89 14 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1237.625320][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000202
[ 1237.625332][    C1] RAX: 000000000091400b RBX: ffffffff819aa370 RCX: 0000000080000001
[ 1237.625341][    C1] RDX: 0000000000000001 RSI: ffffffff8dfe37fc RDI: ffffffff8c2ab780
[ 1237.625349][    C1] RBP: ffffc90000197f10 R08: ffff88823c6338db R09: 1ffff110478c671b
[ 1237.625358][    C1] R10: dffffc0000000000 R11: ffffed10478c671c R12: 0000000000000000
[ 1237.625366][    C1] R13: 1ffff1102c097000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[ 1237.625375][    C1] FS:  0000000000000000(0000) GS:ffff8882a9225000(0000) knlGS:0000000000000000
[ 1237.625385][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1237.625393][    C1] CR2: 00007ff497ebe440 CR3: 0000000110810000 CR4: 00000000000006f0
[ 1237.625431][    C1] Call Trace:
[ 1237.625438][    C1]  <TASK>
[ 1237.625443][    C1]  default_idle+0x9/0x20
[ 1237.625459][    C1]  default_idle_call+0x72/0xb0
[ 1237.625474][    C1]  do_idle+0x2e0/0x540
[ 1237.625487][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1237.625503][    C1]  cpu_startup_entry+0x43/0x60
[ 1237.625514][    C1]  start_secondary+0x101/0x110
[ 1237.625528][    C1]  common_startup_64+0x13e/0x157
[ 1237.625550][    C1]  </TASK>
[ 1237.680058][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[ 1237.682243][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1237.685008][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1237.688090][   T34] Call Trace:
[ 1237.689235][   T34]  <TASK>
[ 1237.690161][   T34]  vpanic+0x56c/0xa60
[ 1237.691416][   T34]  ? __pfx___schedule+0x10/0x10
[ 1237.692919][   T34]  ? __pfx_vpanic+0x10/0x10
[ 1237.694322][   T34]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[ 1237.696332][   T34]  panic+0xc5/0xd0
[ 1237.697499][   T34]  ? __pfx_panic+0x10/0x10
[ 1237.698994][   T34]  ? preempt_schedule_common+0x82/0xd0
[ 1237.701006][   T34]  ? preempt_schedule_thunk+0x16/0x40
[ 1237.703127][   T34]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[ 1237.705040][   T34]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[ 1237.706886][   T34]  watchdog+0x1030/0x1030
[ 1237.708249][   T34]  ? watchdog+0x1c7/0x1030
[ 1237.709696][   T34]  kthread+0x388/0x470
[ 1237.710960][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1237.712591][   T34]  ? __pfx_kthread+0x10/0x10
[ 1237.714350][   T34]  ret_from_fork+0x514/0xb70
[ 1237.715784][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1237.717371][   T34]  ? __switch_to+0xc89/0x1420
[ 1237.719064][   T34]  ? __pfx_kthread+0x10/0x10
[ 1237.720536][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1237.722217][   T34]  </TASK>
[ 1237.723959][   T34] Kernel Offset: disabled
[ 1237.725330][   T34] Rebooting in 86400 seconds..
